$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/48cba452-7cfe-336c-bf74-04e2e919f22e.roa File: 48cba452-7cfe-336c-bf74-04e2e919f22e.roa (raw, json) Hash identifier: Id5eOt1/PMPy1whvCEjDbywleKpiHU3kx5LwRG11T/o= Subject key identifier: 4A:4C:41:79:36:1A:F1:85:CE:F8:D9:A8:E2:5A:B2:58:53:DF:FC:E6 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B48E1D84EFF9D1B63C36292E0 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/48cba452-7cfe-336c-bf74-04e2e919f22e.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 397230 IP address blocks: 204.74.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:d8:4e:ff:9d:1b:63:c3:62:92:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=d3f07203-b3ad-4bb1-bcc8-616d15a167b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:d7:d8:15:d1:92:68:ea:d4:7f:7d:0a:73:8e: 70:4d:d2:bf:cf:91:a8:9f:2c:fc:d9:96:00:56:90: e0:79:e7:72:49:81:be:99:46:45:16:17:40:3d:c0: 22:26:b1:6f:14:2f:af:94:f5:13:02:76:09:91:af: 4d:a1:20:4f:03:57:8b:35:f4:b1:bc:02:c4:cc:75: c1:32:99:2c:49:67:2f:4b:b3:e5:1c:04:bb:d6:23: a9:e3:81:6c:f0:9a:af:49:1e:c3:28:9c:52:73:7b: cd:d8:aa:80:fa:2b:b0:1f:61:da:49:0f:5f:d6:b9: 4b:1e:3b:13:f1:71:f1:e5:92:88:8c:c9:ed:e9:5d: 02:75:0b:6a:1c:f4:e2:7a:17:32:e2:41:f5:c3:c2: 1d:77:46:29:3a:cd:7a:b2:7b:18:83:b5:d1:06:06: ca:06:61:3f:2f:b5:65:43:cf:b0:b4:1f:76:1c:45: 90:65:6a:49:21:5b:5a:04:db:8c:b1:04:be:b3:4b: e6:b0:26:dd:46:b0:e4:d9:78:0a:ee:07:b9:b1:17: 91:6c:79:9e:5b:ce:bf:d8:66:a9:0b:13:43:ef:e3: b1:10:bd:73:7b:02:10:28:09:74:e3:f0:3f:87:48: 78:87:43:f9:09:9a:6f:92:54:16:2b:99:10:0a:8a: 03:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:4C:41:79:36:1A:F1:85:CE:F8:D9:A8:E2:5A:B2:58:53:DF:FC:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/48cba452-7cfe-336c-bf74-04e2e919f22e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 204.74.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:90:d5:8a:be:50:93:3e:11:b8:4d:3d:f8:f0:2c:c8:83:f6: cd:7a:3d:42:6e:42:6f:97:e8:3b:1d:de:c5:6c:67:ed:25:72: f9:4d:41:97:5c:e9:b9:78:66:cc:27:7a:2f:d0:e2:2a:77:32: 2a:43:e9:c8:4b:31:99:21:47:fa:2c:10:73:b7:0e:fc:2e:e9: 16:8e:76:16:d7:d9:73:35:3c:ce:40:ab:16:90:db:2a:95:2f: 4f:a5:b5:07:44:b8:8a:23:f8:80:17:ac:e1:b8:a6:7a:40:b1: c4:c2:aa:ab:0c:1a:04:3a:e3:23:07:73:20:c7:13:64:96:a5: 5f:82:ff:1c:2c:14:30:fa:02:86:14:bd:26:ce:47:e1:da:02: d5:11:67:f6:58:ab:d6:65:ff:ce:eb:db:30:4f:3c:af:4f:eb: 02:d6:81:24:11:7e:d0:dd:ab:0c:76:5d:7b:38:9a:d0:f0:1e: 34:b1:74:03:20:ea:10:77:31:73:8e:32:15:88:cc:50:2a:88: 57:cb:cc:2b:d2:5f:e7:b0:aa:74:9f:1b:82:bd:c6:a0:8a:bd: 94:a3:42:fa:79:8f:34:3e:72:08:89:bc:64:03:bd:3b:e8:65: 4d:cc:77:78:d4:a8:81:6d:d4:84:9e:3a:58:ce:00:e7:eb:2b: 49:fd:43:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4dhO/50bY8NikuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk ZDNmMDcyMDMtYjNhZC00YmIxLWJjYzgtNjE2ZDE1YTE2N2I1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA29fYFdGSaOrUf30Kc45wTdK/z5Gonyz82ZYA VpDgeedySYG+mUZFFhdAPcAiJrFvFC+vlPUTAnYJka9NoSBPA1eLNfSxvALEzHXB MpksSWcvS7PlHAS71iOp44Fs8JqvSR7DKJxSc3vN2KqA+iuwH2HaSQ9f1rlLHjsT 8XHx5ZKIjMnt6V0CdQtqHPTiehcy4kH1w8Idd0YpOs16snsYg7XRBgbKBmE/L7Vl Q8+wtB92HEWQZWpJIVtaBNuMsQS+s0vmsCbdRrDk2XgK7ge5sReRbHmeW86/2Gap CxND7+OxEL1zewIQKAl04/A/h0h4h0P5CZpvklQWK5kQCooDWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEpMQXk2GvGFzvjZqOJaslhT3/zmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNDhjYmE0NTItN2NmZS0z MzZjLWJmNzQtMDRlMmU5MTlmMjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzEpCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACqQ1Yq+UJM+EbhNPfjwLMiD9s16PUJuQm+X6Dsd3sVsZ+0lcvlNQZdc 6bl4Zswnei/Q4ip3MipD6chLMZkhR/osEHO3Dvwu6RaOdhbX2XM1PM5AqxaQ2yqV L0+ltQdEuIoj+IAXrOG4pnpAscTCqqsMGgQ64yMHcyDHE2SWpV+C/xwsFDD6AoYU vSbOR+HaAtURZ/ZYq9Zl/87r2zBPPK9P6wLWgSQRftDdqwx2XXs4mtDwHjSxdAMg 6hB3MXOOMhWIzFAqiFfLzCvSX+ewqnSfG4K9xqCKvZSjQvp5jzQ+cgiJvGQDvTvo ZU3Md3jUqIFt1ISeOljOAOfrK0n9Q0M= -----END CERTIFICATE-----Generated at Mon Oct 20 06:28:59 2025 by rpki-client