$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/aa41f1c2-25ee-3387-ac27-09fc37cef934.roa File: aa41f1c2-25ee-3387-ac27-09fc37cef934.roa (raw, json) Hash identifier: OnidmP23DsXXGHIoExs8HyaDeXdYGprph+A3xOob/KY= Subject key identifier: CE:3C:9C:F2:27:F0:45:A4:A9:58:69:10:A3:3B:56:8B:5F:5A:8B:94 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584DA11AC41DDB883075FD7F8800 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/aa41f1c2-25ee-3387-ac27-09fc37cef934.roa Signing time: Sun 26 Apr 2026 01:00:25 +0000 ROA not before: Sun 26 Apr 2026 01:00:25 +0000 ROA not after: Sat 25 Jul 2026 01:00:25 +0000 asID: 399153 IP address blocks: 204.74.120.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a1:1a:c4:1d:db:88:30:75:fd:7f:88:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Apr 26 01:00:25 2026 GMT Not After : Jul 25 01:00:25 2026 GMT Subject: CN=313a17a8-d63e-43d7-8a21-9958c6434ad1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:0a:63:a6:b6:72:76:fb:ba:43:5a:ee:45:69: 0a:d8:6d:1e:7d:29:46:08:1e:d0:07:e0:ac:37:4c: e6:c4:c4:0d:d0:a1:51:16:10:46:33:33:92:30:97: 84:88:5f:ea:a7:a5:94:1d:b0:95:aa:9b:f9:40:2e: 04:96:97:ab:6d:0a:e2:1f:07:1a:68:a5:41:6d:0a: c7:b9:6e:61:18:31:d6:b5:8e:5f:3e:4e:48:d9:b3: 13:04:b2:f3:a6:54:8c:3a:32:a6:24:f9:24:98:99: d8:df:6b:56:76:f5:87:4d:89:5a:7f:64:0f:fb:f4: 31:c8:ef:5a:d8:2d:f5:3a:00:4a:94:24:1f:6e:44: c0:a5:98:63:15:5f:7b:8a:83:5a:13:43:7a:ad:b4: 1e:07:28:8f:73:2d:f5:da:68:93:fd:08:d2:a4:3b: 2f:17:61:35:cf:f1:16:4c:56:d8:7b:18:41:b8:e4: b3:4b:94:9e:75:ec:35:3a:19:5c:c5:1d:5e:a5:27: 45:ca:1d:f1:9b:43:9b:45:ed:3e:73:9f:35:1d:bb: 49:72:e3:10:98:47:f8:87:93:a9:5e:ca:e0:db:ff: b6:af:54:9e:25:98:ed:42:33:50:05:de:44:5c:10: 5f:3b:08:fb:43:96:cd:e3:0d:6b:00:2e:be:b3:15: 2b:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:3C:9C:F2:27:F0:45:A4:A9:58:69:10:A3:3B:56:8B:5F:5A:8B:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/aa41f1c2-25ee-3387-ac27-09fc37cef934.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 204.74.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:66:09:e2:43:df:c7:5e:25:5b:62:a5:b5:f8:d2:bb:70:98: 14:32:bb:13:aa:54:5d:eb:68:eb:6d:74:0c:1e:a7:e0:4d:35: e3:52:57:15:40:7c:d8:12:70:3b:84:1c:55:2b:54:91:03:7f: c3:45:83:1e:70:44:6e:14:fb:61:bc:d7:58:fe:be:40:f8:6e: db:94:49:d6:47:eb:b3:22:de:38:40:87:18:6b:04:bf:0a:28: 26:59:b3:7f:93:d1:b6:12:13:29:ee:16:d7:c3:df:0a:f5:58: 63:a1:1e:2e:d8:92:10:bc:f9:eb:aa:97:ff:74:50:86:36:63: bc:31:b2:2a:15:4b:c6:e7:4c:47:c1:d9:63:2d:ce:f8:70:1f: e7:02:5e:2a:f6:12:9f:71:a6:4b:2a:5a:1d:99:1a:33:8e:00: 67:7f:a1:01:d6:e9:06:46:36:8a:11:e3:ad:98:8b:91:71:f6: 23:bc:be:f1:dd:39:5b:68:00:18:1f:d5:75:df:3a:bb:04:b2: 15:b2:06:95:4f:3b:cf:e7:67:b8:fa:73:d0:e4:dd:66:b3:80: f6:26:17:d9:ce:82:07:35:d7:83:00:de:84:dc:2e:2b:35:bc: 16:d6:68:9a:b5:e6:c1:1a:12:20:37:34:fe:d2:62:9c:66:9b: 79:06:10:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2hGsQd24gwdf1/iAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDQyNjAxMDAyNVoXDTI2MDcyNTAxMDAyNVowLzEtMCsGA1UEAxMk MzEzYTE3YTgtZDYzZS00M2Q3LThhMjEtOTk1OGM2NDM0YWQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwpjprZydvu6Q1ruRWkK2G0efSlGCB7QB+Cs N0zmxMQN0KFRFhBGMzOSMJeEiF/qp6WUHbCVqpv5QC4ElperbQriHwcaaKVBbQrH uW5hGDHWtY5fPk5I2bMTBLLzplSMOjKmJPkkmJnY32tWdvWHTYlaf2QP+/QxyO9a 2C31OgBKlCQfbkTApZhjFV97ioNaE0N6rbQeByiPcy312miT/QjSpDsvF2E1z/EW TFbYexhBuOSzS5Sedew1OhlcxR1epSdFyh3xm0ObRe0+c581HbtJcuMQmEf4h5Op Xsrg2/+2r1SeJZjtQjNQBd5EXBBfOwj7Q5bN4w1rAC6+sxUrtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM48nPIn8EWkqVhpEKM7VotfWouUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYWE0MWYxYzItMjVlZS0z Mzg3LWFjMjctMDlmYzM3Y2VmOTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzEp4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHxmCeJD38deJVtipbX40rtwmBQyuxOqVF3raOttdAwep+BNNeNSVxVA fNgScDuEHFUrVJEDf8NFgx5wRG4U+2G811j+vkD4btuUSdZH67Mi3jhAhxhrBL8K KCZZs3+T0bYSEynuFtfD3wr1WGOhHi7YkhC8+euql/90UIY2Y7wxsioVS8bnTEfB 2WMtzvhwH+cCXir2Ep9xpksqWh2ZGjOOAGd/oQHW6QZGNooR462Yi5Fx9iO8vvHd OVtoABgf1XXfOrsEshWyBpVPO8/nZ7j6c9Dk3WazgPYmF9nOggc114MA3oTcLis1 vBbWaJq15sEaEiA3NP7SYpxmm3kGEIw= -----END CERTIFICATE-----Generated at Wed May 13 10:28:23 2026 by rpki-client