$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/dae73a98-4bf3-3493-9cf8-d5807d84fadf.roa File: dae73a98-4bf3-3493-9cf8-d5807d84fadf.roa (raw, json) Hash identifier: 330sc3K3tGMTV8PePpQb/uUSMsLnhkEbYBW4E1g2Zrk= Subject key identifier: CF:88:23:AD:9A:61:08:33:47:3C:4D:92:F9:2C:D1:D7:26:5C:79:25 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B48E20081BA4214A152676880 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/dae73a98-4bf3-3493-9cf8-d5807d84fadf.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 397231 IP address blocks: 204.74.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e2:00:81:ba:42:14:a1:52:67:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=d656db9c-e801-4870-91a5-23a83d816369 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d5:f4:c7:91:fd:65:5f:df:12:fc:6f:d6:b1: 2c:0a:ac:79:a6:2f:65:48:d7:42:34:13:6e:aa:a9: 49:56:ea:8e:e1:6e:07:cd:a4:63:7b:f0:47:91:67: b0:ca:46:87:9f:88:b4:b8:83:b2:da:8a:94:e2:db: 0a:b5:80:66:2c:fd:00:de:ee:ed:90:8f:86:92:70: 39:ef:50:91:b7:2e:aa:f5:0f:0a:1b:1d:65:d0:b9: 33:e6:eb:e9:0c:fb:75:f6:6c:cf:6c:b7:12:29:41: 8f:20:ab:bf:27:04:46:44:34:9a:84:4d:f7:3d:b6: 08:10:94:63:7b:39:f4:21:e4:a9:b2:66:25:63:74: 1a:e5:c1:3d:7d:e4:61:53:9e:e6:55:ab:81:85:c5: af:8b:0c:c7:c4:7e:04:e8:ba:41:d5:70:08:ca:78: ae:8c:d2:72:d7:7c:05:76:e8:d8:69:5e:f5:cf:14: 82:6d:26:b3:dd:ca:7a:d3:71:4f:83:d8:64:c2:82: 2b:5c:fc:0f:3c:0d:0a:5a:4b:25:11:8c:0f:c3:ee: 9b:90:39:5e:ec:99:ee:1f:76:05:5e:cc:05:f6:44: 9e:dd:f4:1e:ae:0e:b9:5f:36:3a:ad:99:78:fa:fb: 7d:78:32:8d:37:6d:38:e5:7a:68:cf:1f:4e:3c:bc: 92:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:88:23:AD:9A:61:08:33:47:3C:4D:92:F9:2C:D1:D7:26:5C:79:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/dae73a98-4bf3-3493-9cf8-d5807d84fadf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 204.74.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:e0:3e:08:4f:b7:33:e2:60:6c:2d:c1:47:49:e7:94:f8:9b: 0a:77:e5:32:e5:e7:35:46:f6:dc:d2:93:5f:47:0d:da:50:e3: 53:81:54:da:e9:55:26:7b:94:2e:86:a1:21:b2:96:34:5f:4d: cf:74:e9:a3:0e:87:42:8a:21:19:9d:06:07:97:0e:e6:52:e8: d8:eb:91:96:92:ca:64:97:6e:75:ea:e3:55:bf:a6:af:b0:91: 3f:53:07:58:c7:64:91:0e:68:92:8f:f4:3e:2b:39:ed:66:18: 8f:46:d2:bf:0e:34:e1:ed:36:ea:21:de:4e:83:ef:eb:47:cd: fc:af:b6:10:a1:72:64:ce:7f:da:ee:96:da:89:9e:c6:51:b6: e1:b0:e2:60:e9:a3:4f:12:10:c6:be:f7:10:7b:86:8b:47:59: 21:ca:32:e6:ad:2b:b9:e1:2c:4a:bf:03:44:84:81:18:2f:41: ab:e5:73:d7:ee:9d:1d:11:82:df:18:ef:ed:c3:b1:60:9c:64: 07:2a:c1:44:b8:78:25:74:ea:b0:23:99:5e:e8:37:2e:af:76: b5:83:5a:2b:c5:04:62:0f:be:8a:03:c9:ae:6c:d4:79:11:1b: 4b:bf:88:c0:d1:b2:62:e5:fc:a8:fa:25:68:b0:10:45:9e:ed: e0:44:30:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4gCBukIUoVJnaIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk ZDY1NmRiOWMtZTgwMS00ODcwLTkxYTUtMjNhODNkODE2MzY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttX0x5H9ZV/fEvxv1rEsCqx5pi9lSNdCNBNu qqlJVuqO4W4HzaRje/BHkWewykaHn4i0uIOy2oqU4tsKtYBmLP0A3u7tkI+GknA5 71CRty6q9Q8KGx1l0Lkz5uvpDPt19mzPbLcSKUGPIKu/JwRGRDSahE33PbYIEJRj ezn0IeSpsmYlY3Qa5cE9feRhU57mVauBhcWviwzHxH4E6LpB1XAIyniujNJy13wF dujYaV71zxSCbSaz3cp603FPg9hkwoIrXPwPPA0KWkslEYwPw+6bkDle7JnuH3YF XswF9kSe3fQerg65XzY6rZl4+vt9eDKNN2045Xpozx9OPLySAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM+II62aYQgzRzxNkvks0dcmXHklMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZGFlNzNhOTgtNGJmMy0z NDkzLTljZjgtZDU4MDdkODRmYWRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzEpjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIXgPghPtzPiYGwtwUdJ55T4mwp35TLl5zVG9tzSk19HDdpQ41OBVNrp VSZ7lC6GoSGyljRfTc906aMOh0KKIRmdBgeXDuZS6NjrkZaSymSXbnXq41W/pq+w kT9TB1jHZJEOaJKP9D4rOe1mGI9G0r8ONOHtNuoh3k6D7+tHzfyvthChcmTOf9ru ltqJnsZRtuGw4mDpo08SEMa+9xB7hotHWSHKMuatK7nhLEq/A0SEgRgvQavlc9fu nR0Rgt8Y7+3DsWCcZAcqwUS4eCV06rAjmV7oNy6vdrWDWivFBGIPvooDya5s1HkR G0u/iMDRsmLl/Kj6JWiwEEWe7eBEMDI= -----END CERTIFICATE-----Generated at Mon Oct 20 15:13:49 2025 by rpki-client