$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f29aee4a-a1f3-32e5-a7be-2505ad7e2a9f.roa File: f29aee4a-a1f3-32e5-a7be-2505ad7e2a9f.roa (raw, json) Hash identifier: l+9vJW3Tvf+U/Q2rDGWLgp8A6twHPm5FqlBMG7oruys= Subject key identifier: 39:49:49:6B:64:CD:31:A4:68:97:27:2C:DF:31:4E:6E:27:7E:5B:99 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B5C6C8DE0F5D3A7295078EC80 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f29aee4a-a1f3-32e5-a7be-2505ad7e2a9f.roa Signing time: Tue 30 Sep 2025 01:00:31 +0000 ROA not before: Tue 30 Sep 2025 01:00:31 +0000 ROA not after: Mon 29 Dec 2025 02:00:31 +0000 asID: 397220 IP address blocks: 204.74.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5c:6c:8d:e0:f5:d3:a7:29:50:78:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 30 01:00:31 2025 GMT Not After : Dec 29 02:00:31 2025 GMT Subject: CN=2062187d-90de-4a13-933c-01677309412f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:ed:23:1a:b0:36:87:ca:8d:bc:d3:c7:52:f6: a3:e6:62:a7:97:56:18:ce:34:99:79:2f:27:e4:59: 7c:3a:b5:a0:f6:e1:54:41:2d:06:46:b2:15:87:43: c8:91:da:9d:bb:20:8c:b3:f6:58:77:2c:0e:da:91: 39:1f:a0:d0:b6:d1:dd:d4:f4:4e:ed:71:c9:2f:51: 17:08:aa:22:16:7f:24:25:96:b2:88:b2:28:03:c6: 22:45:8d:00:ff:a9:cd:32:54:76:78:56:f0:a8:46: 16:0e:d7:d1:a4:05:64:a6:1c:ff:cd:dd:58:53:ee: de:70:59:88:cb:2a:32:9a:52:bb:5c:bb:cb:37:b9: 93:92:bd:82:df:fe:61:a1:b4:e6:c4:f5:2d:07:a3: 5e:81:e4:6d:48:5e:10:9b:a1:09:fd:dc:dc:95:61: 4f:aa:f4:ca:ec:72:2f:fc:dc:02:0a:35:f8:13:ff: c7:88:8c:32:5c:34:49:e9:01:d0:87:b7:40:a2:c3: e9:4e:16:3d:e5:ee:99:35:1c:43:42:7e:4e:2b:0b: 8a:d4:cb:6a:c7:6b:3a:e6:56:33:b8:a6:f9:e6:7f: a3:ee:43:62:4f:7f:9d:df:cf:a8:1d:36:eb:14:0f: fe:9d:46:e6:cc:d2:5b:23:8e:79:2a:f1:8b:d5:9a: d2:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:49:49:6B:64:CD:31:A4:68:97:27:2C:DF:31:4E:6E:27:7E:5B:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f29aee4a-a1f3-32e5-a7be-2505ad7e2a9f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 204.74.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:e9:1b:45:d3:29:6c:e4:93:ee:31:f2:3e:c5:38:c5:bc:8c: dc:46:ed:1d:28:d3:77:c6:37:16:17:d4:5b:da:63:40:f7:2b: b2:5f:ed:2c:d9:30:a1:50:e7:50:db:76:99:3d:dc:ce:fd:64: 49:a1:a8:22:b8:02:8a:dc:48:0f:c0:0c:3a:2a:1a:f4:4d:3d: 3a:a5:03:5c:9a:13:4b:53:50:05:f4:04:f3:af:49:84:f4:7e: c6:56:b0:0a:ff:a7:80:6b:af:05:90:d4:0e:d8:45:2b:96:19: 2d:b1:62:f7:09:74:01:79:9d:85:fb:58:31:54:52:dc:09:18: 43:b2:3f:87:43:2d:ac:60:7d:5e:c3:77:5f:d6:7b:2d:6c:37: 87:f8:5e:07:16:44:cf:fc:10:36:47:66:ff:4a:a2:c4:0d:61: 70:44:fb:91:7b:4a:ad:47:41:4f:07:8b:83:91:fb:6a:71:97: b5:1b:52:fc:51:28:0c:4d:ad:a7:f6:42:02:df:04:98:a7:ab: 6b:9d:be:a0:bb:02:75:4f:c8:51:9c:21:61:7b:2f:74:67:d0: 11:7b:22:36:df:47:7c:2e:f0:8e:ce:b9:99:2c:53:3a:88:25: c6:99:21:d7:cf:2b:16:59:7b:68:f2:ef:23:d0:44:6c:70:6f: f7:b7:d3:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtcbI3g9dOnKVB47IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkzMDAxMDAzMVoXDTI1MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk MjA2MjE4N2QtOTBkZS00YTEzLTkzM2MtMDE2NzczMDk0MTJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAke0jGrA2h8qNvNPHUvaj5mKnl1YYzjSZeS8n 5Fl8OrWg9uFUQS0GRrIVh0PIkdqduyCMs/ZYdywO2pE5H6DQttHd1PRO7XHJL1EX CKoiFn8kJZayiLIoA8YiRY0A/6nNMlR2eFbwqEYWDtfRpAVkphz/zd1YU+7ecFmI yyoymlK7XLvLN7mTkr2C3/5hobTmxPUtB6NegeRtSF4Qm6EJ/dzclWFPqvTK7HIv /NwCCjX4E//HiIwyXDRJ6QHQh7dAosPpThY95e6ZNRxDQn5OKwuK1Mtqx2s65lYz uKb55n+j7kNiT3+d38+oHTbrFA/+nUbmzNJbI455KvGL1ZrStQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDlJSWtkzTGkaJcnLN8xTm4nfluZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZjI5YWVlNGEtYTFmMy0z MmU1LWE3YmUtMjUwNWFkN2UyYTlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzEptMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH7pG0XTKWzkk+4x8j7FOMW8jNxG7R0o03fGNxYX1FvaY0D3K7Jf7SzZ MKFQ51Dbdpk93M79ZEmhqCK4AorcSA/ADDoqGvRNPTqlA1yaE0tTUAX0BPOvSYT0 fsZWsAr/p4BrrwWQ1A7YRSuWGS2xYvcJdAF5nYX7WDFUUtwJGEOyP4dDLaxgfV7D d1/Wey1sN4f4XgcWRM/8EDZHZv9KosQNYXBE+5F7Sq1HQU8Hi4OR+2pxl7UbUvxR KAxNraf2QgLfBJinq2udvqC7AnVPyFGcIWF7L3Rn0BF7IjbfR3wu8I7OuZksUzqI JcaZIdfPKxZZe2jy7yPQRGxwb/e309A= -----END CERTIFICATE-----Generated at Mon Oct 20 06:20:20 2025 by rpki-client