$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/20379d1a-1de9-3848-be45-0a7a0a3d251c.roa File: 20379d1a-1de9-3848-be45-0a7a0a3d251c.roa (raw, json) Hash identifier: de+RBGVN5qhLavAbtwHJIbFyhAZfSyARVA0aLYdp+ZY= Subject key identifier: CC:10:C9:70:3C:6A:03:68:23:58:37:C3:96:64:94:9C:21:BD:0D:DE Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584F3FAD61C9476E3DE2C81156C0 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/20379d1a-1de9-3848-be45-0a7a0a3d251c.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 397224 IP address blocks: 204.74.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:61:c9:47:6e:3d:e2:c8:11:56:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=742f8a41-7954-472a-9acb-782f73c9ef49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:3e:36:4d:c3:5b:c7:53:71:47:38:fa:02:85: b6:34:4a:3d:65:67:bd:c3:3c:e3:21:d3:e7:90:43: dc:fd:83:42:0d:42:ef:99:ce:81:05:cd:cf:07:e7: 68:6a:ff:d7:68:88:ef:5e:43:48:43:d4:3a:42:ba: 0a:82:05:50:38:b0:53:90:89:7e:a1:e9:c1:d3:8c: 56:01:88:54:c7:c1:aa:49:f8:ea:f3:86:c2:3b:c0: 12:70:2f:c9:fa:a9:62:86:59:15:56:1f:19:51:c5: 51:0f:98:bb:a1:31:5d:07:40:15:fc:29:cf:78:b0: 61:21:78:c1:7c:a4:e4:fe:97:19:57:6e:b8:1e:87: 44:10:1d:92:00:d0:12:32:fe:85:93:88:6e:25:0d: 15:7a:51:f7:d6:06:17:e0:1e:69:cc:61:74:9d:26: 4c:2c:c0:08:90:61:c5:77:d5:15:8f:d9:62:3f:5b: cf:bd:51:fd:6a:4b:3b:ef:92:be:63:d6:6a:e8:b9: b4:e8:65:7a:69:28:4f:11:c1:fb:50:99:99:cf:7c: 41:ca:90:a1:52:62:9f:73:c7:80:37:f7:e8:88:a6: f8:ea:6c:db:7a:76:04:e6:b5:f9:be:b4:77:17:b0: d1:bf:31:09:b4:4a:70:77:78:57:b8:a4:d3:5d:e0: 35:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:10:C9:70:3C:6A:03:68:23:58:37:C3:96:64:94:9C:21:BD:0D:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/20379d1a-1de9-3848-be45-0a7a0a3d251c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 204.74.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:63:db:96:68:fb:4a:dc:32:d2:76:ea:54:65:d1:a4:2c:21: 27:45:b0:54:08:dc:2e:0b:8c:62:a9:72:95:94:28:b7:cc:16: be:1b:9a:ca:e5:aa:7f:6a:11:a9:13:ea:5f:93:dd:aa:24:a7: 3c:18:e6:d1:f0:eb:c9:6b:a9:1a:ed:60:80:69:0e:98:ae:79: 5f:7f:55:bf:8f:d2:23:a6:4e:2c:49:d0:05:2f:99:0c:38:af: 35:82:36:ce:d1:01:bb:33:9f:a0:33:2f:cc:d9:b0:91:e1:72: 50:a5:67:15:dc:0f:af:07:b4:17:8f:4c:53:89:5c:73:0f:7b: 6c:5b:da:54:dd:84:f1:e4:79:12:8a:3f:8e:8f:a4:30:b8:4f: 8b:b7:45:89:fa:c3:76:50:01:cf:a2:d7:ac:1f:f1:9f:7d:54: 1e:05:6b:54:c7:f0:a0:4b:d9:f5:03:98:e4:18:af:f6:d6:6a: f1:bf:d0:0d:63:9b:2f:ef:5e:86:4a:40:77:f6:5f:14:63:68: 37:b3:73:4e:cb:98:1a:36:a8:b8:fa:18:5c:4f:e9:a0:70:d9: bd:e7:f7:7a:fc:a8:c9:df:60:43:7f:d2:a1:3a:6e:26:ea:70: 69:51:89:ac:d2:7a:1c:6d:8c:c0:0e:64:78:ca:23:59:77:73: 93:7a:ed:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rWHJR2494sgRVsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk NzQyZjhhNDEtNzk1NC00NzJhLTlhY2ItNzgyZjczYzllZjQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlD42TcNbx1NxRzj6AoW2NEo9ZWe9wzzjIdPn kEPc/YNCDULvmc6BBc3PB+doav/XaIjvXkNIQ9Q6QroKggVQOLBTkIl+oenB04xW AYhUx8GqSfjq84bCO8AScC/J+qlihlkVVh8ZUcVRD5i7oTFdB0AV/CnPeLBhIXjB fKTk/pcZV264HodEEB2SANASMv6Fk4huJQ0VelH31gYX4B5pzGF0nSZMLMAIkGHF d9UVj9liP1vPvVH9aks775K+Y9Zq6Lm06GV6aShPEcH7UJmZz3xBypChUmKfc8eA N/foiKb46mzbenYE5rX5vrR3F7DRvzEJtEpwd3hXuKTTXeA19QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMwQyXA8agNoI1g3w5ZklJwhvQ3eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMjAzNzlkMWEtMWRlOS0z ODQ4LWJlNDUtMGE3YTBhM2QyNTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzEpwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEFj25Zo+0rcMtJ26lRl0aQsISdFsFQI3C4LjGKpcpWUKLfMFr4bmsrl qn9qEakT6l+T3aokpzwY5tHw68lrqRrtYIBpDpiueV9/Vb+P0iOmTixJ0AUvmQw4 rzWCNs7RAbszn6AzL8zZsJHhclClZxXcD68HtBePTFOJXHMPe2xb2lTdhPHkeRKK P46PpDC4T4u3RYn6w3ZQAc+i16wf8Z99VB4Fa1TH8KBL2fUDmOQYr/bWavG/0A1j my/vXoZKQHf2XxRjaDezc07LmBo2qLj6GFxP6aBw2b3n93r8qMnfYEN/0qE6bibq cGlRiazSehxtjMAOZHjKI1l3c5N67c4= -----END CERTIFICATE-----Generated at Sun Oct 4 21:41:49 2026 by rpki-client