$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2d9b3e8c-2f68-3d20-a575-24b08fe1e942.roa File: 2d9b3e8c-2f68-3d20-a575-24b08fe1e942.roa (raw, json) Hash identifier: eF2Es8PYQFmvpyk0jEf8n9yji6hVJMYfq8C6n7g9UsM= Subject key identifier: 41:E1:85:62:6B:20:48:2E:9C:D1:66:8E:E4:BB:D2:24:48:1B:3E:1D Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B48E2003182F6CEA2B56EDC80 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2d9b3e8c-2f68-3d20-a575-24b08fe1e942.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 397226 IP address blocks: 204.74.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e2:00:31:82:f6:ce:a2:b5:6e:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=2f9d8cf6-b754-4b75-95e3-72083ca2eff9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e4:05:a1:61:08:06:f5:ab:b2:08:15:2b:b1: 7c:88:48:96:23:06:1b:b6:fb:a8:c5:36:46:92:34: 1a:d6:2f:d7:7f:00:44:aa:f6:06:51:e5:9b:05:0e: 2b:99:79:52:f2:87:ac:6c:c0:14:6d:e3:58:6f:8c: f2:31:1c:38:b2:8d:a0:55:41:44:ad:91:72:a8:26: 7c:c1:c3:15:a9:5d:30:48:30:47:a9:e3:f4:51:53: 0f:b8:50:b7:96:cb:05:81:00:ee:e6:91:32:be:59: 06:94:df:9d:72:b3:4c:2e:fc:54:77:ab:9d:ff:76: 29:20:57:84:00:82:86:21:58:b2:9b:9e:83:21:60: 0b:be:d7:ad:9c:7b:2d:ba:12:1c:11:f5:2a:6a:8b: ac:fa:46:ea:ea:70:f5:75:9f:68:30:fe:d4:c0:c3: 0e:0c:14:d9:fe:f4:00:e3:05:85:ab:79:39:0d:ec: df:02:ba:57:b6:16:ca:ab:6e:87:a1:be:62:4c:d1: 2a:7e:6b:db:e1:13:a4:3b:36:e0:f8:d9:42:9f:e3: ef:d3:95:d0:68:41:d0:30:9d:42:d5:31:e2:e2:d6: 44:a0:ae:2e:a2:3a:40:4e:b8:46:8d:d5:2f:e1:f1: 44:3a:ad:ca:12:72:44:fb:17:90:19:18:03:1b:b3: 08:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:E1:85:62:6B:20:48:2E:9C:D1:66:8E:E4:BB:D2:24:48:1B:3E:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2d9b3e8c-2f68-3d20-a575-24b08fe1e942.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 204.74.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:18:81:bc:ed:a1:2d:5a:06:05:d8:6d:83:b3:b8:b6:d2:69: fc:e2:b8:77:19:b6:0e:5b:9c:68:97:fe:9d:d6:40:4e:66:0a: 5b:a3:23:51:54:bb:c2:14:f4:4e:c0:f7:ba:3a:2e:e9:ef:b3: 8e:a4:fc:b3:1b:85:cc:54:20:e8:c7:30:06:63:3c:57:40:db: 09:8d:fb:ce:ee:ad:a3:db:99:c0:9a:1f:29:d6:7d:4a:67:d0: a5:a2:a0:b7:85:c2:6c:7b:60:20:66:72:c1:4e:dd:01:18:ab: 9b:a8:25:61:df:17:1b:03:1c:b8:31:45:bb:10:11:e3:6e:b7: 12:36:69:82:c7:69:5b:5c:06:f3:15:ec:79:23:ad:1a:8c:4d: 2e:15:1b:1f:b2:41:36:e9:b1:61:a0:be:a9:99:01:67:a6:04: 78:45:e9:2b:77:91:ad:f2:77:f4:36:9d:39:16:1b:e8:f1:ea: 10:08:86:f7:fb:99:93:43:fd:5f:de:d6:62:4e:b0:46:1a:59: 03:5d:9d:00:3d:ad:6f:ed:73:a3:6f:78:b5:9f:a8:26:87:54: ac:7a:b7:84:a9:a5:30:33:3e:be:86:36:79:51:15:2d:4e:c5: e6:cc:67:74:b8:d2:42:89:be:72:e2:c4:24:9f:bf:31:9a:c8: 23:d1:cb:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4gAxgvbOorVu3IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk MmY5ZDhjZjYtYjc1NC00Yjc1LTk1ZTMtNzIwODNjYTJlZmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAteQFoWEIBvWrsggVK7F8iEiWIwYbtvuoxTZG kjQa1i/XfwBEqvYGUeWbBQ4rmXlS8oesbMAUbeNYb4zyMRw4so2gVUFErZFyqCZ8 wcMVqV0wSDBHqeP0UVMPuFC3lssFgQDu5pEyvlkGlN+dcrNMLvxUd6ud/3YpIFeE AIKGIViym56DIWALvtetnHstuhIcEfUqaous+kbq6nD1dZ9oMP7UwMMODBTZ/vQA 4wWFq3k5DezfArpXthbKq26Hob5iTNEqfmvb4ROkOzbg+NlCn+Pv05XQaEHQMJ1C 1THi4tZEoK4uojpATrhGjdUv4fFEOq3KEnJE+xeQGRgDG7MIjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEHhhWJrIEgunNFmjuS70iRIGz4dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMmQ5YjNlOGMtMmY2OC0z ZDIwLWE1NzUtMjRiMDhmZTFlOTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzEpjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABQYgbztoS1aBgXYbYOzuLbSafziuHcZtg5bnGiX/p3WQE5mClujI1FU u8IU9E7A97o6Lunvs46k/LMbhcxUIOjHMAZjPFdA2wmN+87uraPbmcCaHynWfUpn 0KWioLeFwmx7YCBmcsFO3QEYq5uoJWHfFxsDHLgxRbsQEeNutxI2aYLHaVtcBvMV 7HkjrRqMTS4VGx+yQTbpsWGgvqmZAWemBHhF6St3ka3yd/Q2nTkWG+jx6hAIhvf7 mZND/V/e1mJOsEYaWQNdnQA9rW/tc6NveLWfqCaHVKx6t4SppTAzPr6GNnlRFS1O xebMZ3S40kKJvnLixCSfvzGayCPRyxs= -----END CERTIFICATE-----Generated at Mon Oct 20 03:14:37 2025 by rpki-client