$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/43f772c5-0c09-3bfa-bf3c-9ff9d8e3b413.roa File: 43f772c5-0c09-3bfa-bf3c-9ff9d8e3b413.roa (raw, json) Hash identifier: NWgy2krsvpcrQiYFDzrXBsAwaa2P11Y2AIYGkY02LKI= Subject key identifier: 74:D0:BA:7A:2B:F1:1A:4E:64:94:C9:58:9F:5E:87:C5:02:E7:B7:55 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584DA11AC4DE4793C754305B5640 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/43f772c5-0c09-3bfa-bf3c-9ff9d8e3b413.roa Signing time: Sun 26 Apr 2026 01:00:25 +0000 ROA not before: Sun 26 Apr 2026 01:00:25 +0000 ROA not after: Sat 25 Jul 2026 01:00:25 +0000 asID: 399169 IP address blocks: 204.74.120.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a1:1a:c4:de:47:93:c7:54:30:5b:56:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Apr 26 01:00:25 2026 GMT Not After : Jul 25 01:00:25 2026 GMT Subject: CN=d8bc6c21-090d-4f68-b79f-eb9d72731574 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:8e:f7:09:41:81:4d:04:c3:04:55:6b:f4:ef: 83:25:9c:ef:34:b5:76:43:26:31:68:2f:f6:4a:52: 06:26:8d:38:ad:c7:bb:cc:c7:28:b9:ee:8f:81:6a: f2:8f:38:ae:e3:9f:a8:17:59:15:76:6a:70:2a:4f: 51:be:39:67:63:8b:06:59:76:2b:06:5f:57:a8:da: fa:70:2c:97:f5:01:33:40:98:4d:e0:28:4f:f7:ed: 90:eb:e7:08:02:c5:fd:6a:9e:48:96:a5:a0:bc:98: 24:38:18:8f:f6:f0:df:7a:43:84:24:43:49:42:83: 26:3a:3e:5a:67:fa:ee:3a:9c:5e:ba:f0:2e:c5:f3: 98:9b:37:94:24:a7:6f:61:bc:ae:f2:93:ac:3e:97: 73:96:9f:68:69:ea:8e:8d:c1:a6:ea:e0:bf:05:02: 0c:48:ad:f5:5e:91:89:cb:5e:40:ce:c6:f1:33:a2: 47:f1:9b:09:bf:7f:43:0a:84:45:6c:b8:b6:27:31: 80:ea:1c:65:f8:f9:d7:98:4a:02:6f:2c:32:d9:de: a7:2c:6b:bc:6f:a8:3a:ee:23:70:c1:a6:1b:df:73: e7:51:dc:74:5a:44:d7:1c:e4:37:e2:aa:2e:93:99: ac:f6:53:97:eb:ca:5e:11:36:47:e2:0e:8b:4d:cc: 31:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:D0:BA:7A:2B:F1:1A:4E:64:94:C9:58:9F:5E:87:C5:02:E7:B7:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/43f772c5-0c09-3bfa-bf3c-9ff9d8e3b413.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 204.74.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:68:e9:2d:eb:2a:ac:91:9f:1d:e9:e2:c7:6e:bb:3e:51:d7: 70:5e:25:4e:4d:c7:20:c9:a7:cd:44:bc:ba:04:c9:5a:f8:64: f6:51:e2:f5:a0:68:1b:64:a4:50:e6:72:bb:56:aa:e7:34:1a: 8a:50:aa:52:de:08:ec:6f:f4:a6:97:9f:35:26:2c:98:9e:4c: a5:45:ec:cc:ee:79:50:f5:0a:fe:75:46:8e:24:46:3a:4e:cf: 06:f2:76:7b:1b:c7:63:7c:d6:4b:34:23:4f:32:2c:b6:dc:a6: 6c:78:a8:dc:dd:c5:65:68:b0:e2:23:a5:59:47:0c:5a:2d:7d: 17:5d:dd:c2:db:9c:92:94:49:ef:cc:06:84:00:5f:e6:db:0c: 2a:ea:73:d0:ca:a5:7c:2e:83:a6:17:af:f0:02:a9:00:b6:dd: a5:e4:9f:91:79:af:7f:bf:ac:3b:9a:9d:cf:ff:38:06:52:24: 38:41:2a:2c:7f:b9:71:ba:fd:32:2a:99:69:92:e2:cf:65:de: 22:be:d6:6a:08:02:51:a2:71:52:5c:d6:a3:93:f8:e5:71:e9: f6:c5:b5:78:0d:20:a1:25:21:91:74:88:70:63:37:57:8e:25: 82:cd:2f:b9:6b:74:bb:25:af:1d:08:a5:2d:09:37:ae:fd:c9: 87:87:65:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2hGsTeR5PHVDBbVkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDQyNjAxMDAyNVoXDTI2MDcyNTAxMDAyNVowLzEtMCsGA1UEAxMk ZDhiYzZjMjEtMDkwZC00ZjY4LWI3OWYtZWI5ZDcyNzMxNTc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmY73CUGBTQTDBFVr9O+DJZzvNLV2QyYxaC/2 SlIGJo04rce7zMcoue6PgWryjziu45+oF1kVdmpwKk9RvjlnY4sGWXYrBl9XqNr6 cCyX9QEzQJhN4ChP9+2Q6+cIAsX9ap5IlqWgvJgkOBiP9vDfekOEJENJQoMmOj5a Z/ruOpxeuvAuxfOYmzeUJKdvYbyu8pOsPpdzlp9oaeqOjcGm6uC/BQIMSK31XpGJ y15AzsbxM6JH8ZsJv39DCoRFbLi2JzGA6hxl+PnXmEoCbywy2d6nLGu8b6g67iNw waYb33PnUdx0WkTXHOQ34qouk5ms9lOX68peETZH4g6LTcwxwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHTQunor8RpOZJTJWJ9eh8UC57dVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNDNmNzcyYzUtMGMwOS0z YmZhLWJmM2MtOWZmOWQ4ZTNiNDEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzEp4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIdo6S3rKqyRnx3p4sduuz5R13BeJU5NxyDJp81EvLoEyVr4ZPZR4vWg aBtkpFDmcrtWquc0GopQqlLeCOxv9KaXnzUmLJieTKVF7MzueVD1Cv51Ro4kRjpO zwbydnsbx2N81ks0I08yLLbcpmx4qNzdxWVosOIjpVlHDFotfRdd3cLbnJKUSe/M BoQAX+bbDCrqc9DKpXwug6YXr/ACqQC23aXkn5F5r3+/rDuanc//OAZSJDhBKix/ uXG6/TIqmWmS4s9l3iK+1moIAlGicVJc1qOT+OVx6fbFtXgNIKElIZF0iHBjN1eO JYLNL7lrdLslrx0IpS0JN679yYeHZWQ= -----END CERTIFICATE-----Generated at Wed May 13 10:19:54 2026 by rpki-client