$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a397ff6d-d5fd-37ea-be19-8fc92c1f55d1.roa File: a397ff6d-d5fd-37ea-be19-8fc92c1f55d1.roa (raw, json) Hash identifier: ojfP7p6fHkEldOICcTBmNq0H/SQ4Lmhea1HLG+hiIi0= Subject key identifier: B3:71:07:D8:C4:5C:58:0D:0E:70:98:05:77:81:A9:19:56:65:EA:13 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B1C3701B2C560ECF144B1CEC0 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a397ff6d-d5fd-37ea-be19-8fc92c1f55d1.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 397235 IP address blocks: 204.74.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:37:01:b2:c5:60:ec:f1:44:b1:ce:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=69ff1c69-ef14-469b-ba28-5d61a0b8a86e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:59:ad:22:a2:08:1c:54:ca:11:f9:71:f3:7d: a0:2c:1d:e0:f7:d8:66:02:0d:fd:7d:21:61:1d:01: ae:61:0f:30:57:eb:ec:47:3c:d4:ce:7e:d5:1b:d0: 1e:0b:af:62:25:96:ca:b2:f9:06:bc:12:50:d2:11: 98:6c:29:1e:b3:45:8d:7b:3e:ac:87:77:0b:d1:27: c8:e2:ad:21:d7:e2:ee:94:be:47:aa:94:e5:af:44: 1c:21:1b:31:01:ce:bf:2b:52:04:4d:34:03:29:07: c3:29:85:2f:28:80:6a:ae:9d:75:11:26:90:4e:e2: 2d:c8:ad:8c:e0:8c:65:cd:bd:e3:a3:45:d6:77:94: 88:cb:73:3c:18:d0:a1:c4:70:90:ae:4c:84:cd:f9: 42:b9:ee:3e:bd:d9:fc:8c:ad:38:74:18:3b:ec:3b: c1:bf:83:c0:71:f2:ab:c2:97:0b:70:bf:4b:34:fa: a6:85:a8:38:4f:3e:5b:c6:14:8a:99:aa:51:20:bd: b9:3e:b4:f1:7f:6c:16:37:bf:45:2c:e7:0c:79:30: 17:4c:46:8d:5d:74:05:50:67:23:60:80:bf:78:e7: 70:c7:6e:81:22:18:d1:0f:43:08:37:94:c9:06:b9: eb:aa:c0:87:f4:da:b7:91:40:6b:7e:8d:73:7a:36: 67:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:71:07:D8:C4:5C:58:0D:0E:70:98:05:77:81:A9:19:56:65:EA:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a397ff6d-d5fd-37ea-be19-8fc92c1f55d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 204.74.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:f8:6e:c5:7a:36:e3:8d:79:a1:4b:c2:29:90:97:8d:63:09: f0:84:51:54:5c:b1:86:2e:ab:ce:f7:b4:69:4d:a4:be:94:9f: 34:39:81:41:ed:bd:55:cd:f8:4c:87:77:ca:fe:d4:ef:59:40: 5f:c8:67:71:6e:05:cb:bc:06:11:be:cb:3c:dc:87:2e:61:22: 33:0b:3e:46:c2:23:e9:ba:ef:e7:94:1d:6f:aa:8b:fa:d7:10: 75:72:2d:90:04:ff:75:4d:88:14:25:4a:9a:18:3c:cb:95:96: ad:37:36:4d:0c:5a:a6:20:38:13:bb:8e:8c:e6:fc:e0:a5:87: 28:da:c5:7f:7a:5d:45:b1:35:ca:6e:1a:38:f8:dd:4c:e3:8e: fd:65:0c:6f:60:d2:94:2f:af:5b:fb:1c:b3:6a:07:60:52:48: cd:d6:eb:1c:74:e5:f2:6d:b2:a3:f4:6c:13:6c:fc:b2:5f:d2: 73:6e:a1:ed:58:32:b1:b5:c3:d1:42:0c:90:fd:a6:61:73:05: bf:6b:e8:2a:1c:40:32:a0:fd:ae:97:d5:eb:97:f9:c1:b9:06: ab:37:a1:db:8e:b7:ef:2c:8d:0e:75:dc:61:ad:de:dc:4e:b9: 77:6b:26:d3:78:bb:1c:24:0d:e4:a2:0b:f1:85:5d:3c:5c:ea: 34:34:51:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNwGyxWDs8USxzsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk NjlmZjFjNjktZWYxNC00NjliLWJhMjgtNWQ2MWEwYjhhODZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFmtIqIIHFTKEflx832gLB3g99hmAg39fSFh HQGuYQ8wV+vsRzzUzn7VG9AeC69iJZbKsvkGvBJQ0hGYbCkes0WNez6sh3cL0SfI 4q0h1+LulL5HqpTlr0QcIRsxAc6/K1IETTQDKQfDKYUvKIBqrp11ESaQTuItyK2M 4Ixlzb3jo0XWd5SIy3M8GNChxHCQrkyEzflCue4+vdn8jK04dBg77DvBv4PAcfKr wpcLcL9LNPqmhag4Tz5bxhSKmapRIL25PrTxf2wWN79FLOcMeTAXTEaNXXQFUGcj YIC/eOdwx26BIhjRD0MIN5TJBrnrqsCH9Nq3kUBrfo1zejZnowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLNxB9jEXFgNDnCYBXeBqRlWZeoTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYTM5N2ZmNmQtZDVmZC0z N2VhLWJlMTktOGZjOTJjMWY1NWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzEpwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEP4bsV6NuONeaFLwimQl41jCfCEUVRcsYYuq873tGlNpL6UnzQ5gUHt vVXN+EyHd8r+1O9ZQF/IZ3FuBcu8BhG+yzzchy5hIjMLPkbCI+m67+eUHW+qi/rX EHVyLZAE/3VNiBQlSpoYPMuVlq03Nk0MWqYgOBO7jozm/OClhyjaxX96XUWxNcpu Gjj43Uzjjv1lDG9g0pQvr1v7HLNqB2BSSM3W6xx05fJtsqP0bBNs/LJf0nNuoe1Y MrG1w9FCDJD9pmFzBb9r6CocQDKg/a6X1euX+cG5Bqs3oduOt+8sjQ513GGt3txO uXdrJtN4uxwkDeSiC/GFXTxc6jQ0UXw= -----END CERTIFICATE-----Generated at Mon Oct 20 06:34:45 2025 by rpki-client