$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0b3a666e-c3c1-3c19-9b66-471b73e67a4c.roa File: 0b3a666e-c3c1-3c19-9b66-471b73e67a4c.roa (raw, json) Hash identifier: j+AMV6tAaYOeTcyfyGj9RBHx0v3IyxXrcjaKvJ+XyC8= Subject key identifier: AF:61:32:68:A8:0C:BC:CC:F3:A6:5E:51:D1:61:89:31:C6:4C:5F:2A Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584A7BB0C819AF0526F86DA9E140 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0b3a666e-c3c1-3c19-9b66-471b73e67a4c.roa Signing time: Fri 11 Jul 2025 13:01:05 +0000 ROA not before: Fri 11 Jul 2025 13:01:05 +0000 ROA not after: Thu 09 Oct 2025 13:01:05 +0000 asID: 397222 IP address blocks: 204.74.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7b:b0:c8:19:af:05:26:f8:6d:a9:e1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jul 11 13:01:05 2025 GMT Not After : Oct 9 13:01:05 2025 GMT Subject: CN=97d927b8-30a5-4990-a838-42beed6a9c03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:a3:65:24:39:6c:0c:f5:f4:0b:f1:c1:59:2f: 27:e2:e8:ac:7a:d9:0f:25:80:c1:1c:84:fc:29:6c: 6f:c7:e3:a0:00:94:06:f3:58:fc:73:9a:80:f0:ab: 06:fa:fd:89:c8:1f:f0:ce:dc:df:57:c0:b2:ce:95: e4:48:b2:82:94:0b:51:50:7f:4c:aa:2c:0d:64:cf: c6:23:e8:d0:92:24:c9:14:20:14:e2:69:f3:70:d6: 86:d4:e3:d1:e1:9f:9e:dd:1c:b4:ed:2f:a3:d6:ea: bc:34:85:39:ce:15:b2:04:51:13:ea:f2:31:10:fd: 30:76:73:17:ce:4d:4d:9e:b5:b1:ee:c6:e7:17:8f: 5a:e9:63:46:91:d5:75:04:b9:2a:0c:4a:c1:77:48: 4e:7b:87:ca:0f:a0:cf:cb:2b:ca:e1:15:53:76:43: 7d:e3:e5:79:b1:67:fb:04:70:85:45:7b:7a:83:5a: be:59:23:48:fd:2c:2d:02:4b:4e:7d:9c:21:61:5d: 37:d0:b0:b8:46:11:02:89:0a:81:d8:18:f4:fb:af: 15:78:a5:a1:81:a7:d2:95:2d:23:b7:03:85:a5:1b: a1:82:bc:9d:ae:97:63:b0:9b:6d:d0:80:77:b9:21: fb:32:1d:f7:f6:93:33:fb:41:95:cb:a2:af:20:c5: cb:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:61:32:68:A8:0C:BC:CC:F3:A6:5E:51:D1:61:89:31:C6:4C:5F:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0b3a666e-c3c1-3c19-9b66-471b73e67a4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 204.74.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:db:8e:0f:90:03:3a:7f:82:d7:17:57:2a:2a:56:42:cf:f8: 04:6f:26:17:8e:87:b9:92:38:b6:80:0d:4d:de:42:cb:b3:56: fa:08:37:90:06:ce:a1:67:e5:c4:53:52:3d:6d:cf:e7:0f:0a: 1e:b4:2a:b7:d9:cf:ca:2b:42:6f:b1:17:27:5c:15:c7:88:87: be:c6:ce:22:8a:18:f4:08:52:68:4d:bb:b7:10:62:ac:f3:31: db:ce:9c:09:d3:93:4e:07:ed:e8:2a:e6:8e:8d:72:57:71:35: e8:7c:e3:97:23:2b:e4:20:49:00:b3:9e:8b:87:11:d9:0f:e0: e9:e3:f3:e7:9d:0b:eb:27:0c:70:97:37:a9:3c:7f:34:da:45: 45:ab:9d:ff:fe:ee:6b:28:38:56:d6:92:85:89:51:ec:c0:5c: e5:cd:ff:d3:12:17:ab:42:34:0b:1e:26:59:a9:7a:68:c0:da: 92:53:5a:9e:af:5b:76:ed:6d:df:c2:f6:a6:72:68:b7:02:69: d4:3e:15:95:48:00:c0:93:9c:1e:2c:e4:0a:b6:aa:45:06:0e: 05:06:97:e9:89:d8:67:dd:49:cb:db:d8:2a:e8:02:c2:97:ee: 28:aa:dc:4c:95:0e:06:c8:c2:bc:51:5d:f9:3b:a0:5e:32:18: 96:59:c0:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp7sMgZrwUm+G2p4UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDcxMTEzMDEwNVoXDTI1MTAwOTEzMDEwNVowLzEtMCsGA1UEAxMk OTdkOTI3YjgtMzBhNS00OTkwLWE4MzgtNDJiZWVkNmE5YzAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqNlJDlsDPX0C/HBWS8n4uisetkPJYDBHIT8 KWxvx+OgAJQG81j8c5qA8KsG+v2JyB/wztzfV8CyzpXkSLKClAtRUH9MqiwNZM/G I+jQkiTJFCAU4mnzcNaG1OPR4Z+e3Ry07S+j1uq8NIU5zhWyBFET6vIxEP0wdnMX zk1NnrWx7sbnF49a6WNGkdV1BLkqDErBd0hOe4fKD6DPyyvK4RVTdkN94+V5sWf7 BHCFRXt6g1q+WSNI/SwtAktOfZwhYV030LC4RhECiQqB2Bj0+68VeKWhgafSlS0j twOFpRuhgrydrpdjsJtt0IB3uSH7Mh339pMz+0GVy6KvIMXLwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK9hMmioDLzM86ZeUdFhiTHGTF8qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMGIzYTY2NmUtYzNjMS0z YzE5LTliNjYtNDcxYjczZTY3YTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzEptMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEPbjg+QAzp/gtcXVyoqVkLP+ARvJheOh7mSOLaADU3eQsuzVvoIN5AG zqFn5cRTUj1tz+cPCh60KrfZz8orQm+xFydcFceIh77GziKKGPQIUmhNu7cQYqzz MdvOnAnTk04H7egq5o6NcldxNeh845cjK+QgSQCznouHEdkP4Onj8+edC+snDHCX N6k8fzTaRUWrnf/+7msoOFbWkoWJUezAXOXN/9MSF6tCNAseJlmpemjA2pJTWp6v W3btbd/C9qZyaLcCadQ+FZVIAMCTnB4s5Aq2qkUGDgUGl+mJ2GfdScvb2CroAsKX 7iiq3EyVDgbIwrxRXfk7oF4yGJZZwIc= -----END CERTIFICATE-----Generated at Sun Jul 20 14:44:15 2025 by rpki-client