$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/436e63f2-09f9-3cb0-ad35-8d3074e02710.roa File: 436e63f2-09f9-3cb0-ad35-8d3074e02710.roa (raw, json) Hash identifier: +0UWJnrDau3zdabXPhCRlpR116lNax4IpeDhVaL7oTA= Subject key identifier: 85:02:F4:AC:13:5F:D7:0C:BC:F9:1C:62:73:A4:5A:7E:B1:93:4E:1F Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584A68262094A0730BB8B9B39C80 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/436e63f2-09f9-3cb0-ad35-8d3074e02710.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 12008 IP address blocks: 204.74.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:26:20:94:a0:73:0b:b8:b9:b3:9c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=1dcef8e0-c26a-4107-9444-3624fe4e3565 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:2c:c2:71:5c:9c:85:15:39:21:f0:4c:02:52: eb:7c:55:b5:55:60:a1:eb:93:82:c7:d9:15:75:67: c8:8a:c2:00:fd:c0:cd:03:06:c4:29:af:d1:47:56: 96:0a:90:7f:8e:71:4f:f4:b9:6d:89:7d:e7:92:04: c2:89:92:3d:3c:57:ef:67:b5:c2:8e:0f:a8:e1:01: 18:41:20:9b:28:a3:fd:2e:7e:0b:b4:5e:59:b6:18: 99:8c:02:c0:f0:70:86:54:0f:e9:df:91:bc:a5:ae: b5:2d:03:04:20:16:e4:e0:1e:62:fb:76:87:2d:62: 5f:a7:de:f9:8f:02:81:c9:02:4f:79:f8:64:84:b5: 52:5d:d2:a5:23:2b:b6:fb:b1:38:81:91:dd:be:7b: 83:74:5f:08:54:ba:45:a6:9c:de:6b:2e:08:06:ec: 7e:1c:63:e2:fd:f4:3f:a8:d7:06:7c:67:43:f4:42: 6b:29:88:5a:8b:58:65:b2:d1:87:22:f8:89:61:29: 32:ea:af:e6:c5:37:33:57:37:4b:e2:9e:f4:71:83: 38:cf:79:fe:fc:26:21:0a:1e:e2:ff:5f:c8:4b:d9: 43:8a:38:87:dc:c0:52:3a:25:d7:53:f7:ee:cf:77: ba:b8:79:28:2a:f1:fa:01:04:23:37:b4:c0:fb:d1: a5:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:02:F4:AC:13:5F:D7:0C:BC:F9:1C:62:73:A4:5A:7E:B1:93:4E:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/436e63f2-09f9-3cb0-ad35-8d3074e02710.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 204.74.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:9c:05:03:4c:44:a0:d2:da:61:9c:99:76:4c:f9:65:c8:f4: 52:b6:75:4b:ce:0a:5d:0c:7f:b5:cd:92:4c:68:f3:57:f3:f7: 18:db:67:53:85:08:2f:2d:6e:c7:1a:66:5a:5a:d7:d5:21:f1: 61:66:81:da:71:52:60:b1:f8:1e:a0:be:61:24:51:9e:6f:5f: 68:f4:fc:d7:dd:98:7c:d8:fb:39:fd:3d:ed:7e:53:05:6e:f3: 6d:69:27:8f:e4:98:d4:3d:bb:56:e1:9e:5f:9b:f0:86:3b:07: c1:5e:40:57:1a:11:e7:db:16:e5:d3:a3:9b:47:20:af:64:56: e5:6d:f5:14:dd:31:a5:c4:b8:11:5b:0c:bb:bf:19:a7:98:bf: 2e:35:0a:67:8e:c2:45:d9:8e:96:2a:27:a9:9c:2d:1f:a9:13: e6:96:a5:d8:01:67:a3:eb:9d:ca:17:26:9f:c1:e0:f0:e6:17: 4b:13:df:bd:12:36:1e:96:fe:11:a6:50:0d:59:0d:e0:aa:e1: 1d:eb:65:57:c7:c9:b3:5f:dd:48:14:08:33:00:e8:60:29:2f: 45:3b:15:19:c9:a1:91:05:e3:f3:9e:3d:80:c2:a9:44:f7:6d: 31:6b:f9:cc:7d:fb:9a:29:02:fd:c9:34:da:69:03:7f:2f:5e: e4:c6:de:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpoJiCUoHMLuLmznIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk MWRjZWY4ZTAtYzI2YS00MTA3LTk0NDQtMzYyNGZlNGUzNTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSzCcVychRU5IfBMAlLrfFW1VWCh65OCx9kV dWfIisIA/cDNAwbEKa/RR1aWCpB/jnFP9LltiX3nkgTCiZI9PFfvZ7XCjg+o4QEY QSCbKKP9Ln4LtF5ZthiZjALA8HCGVA/p35G8pa61LQMEIBbk4B5i+3aHLWJfp975 jwKByQJPefhkhLVSXdKlIyu2+7E4gZHdvnuDdF8IVLpFppzeay4IBux+HGPi/fQ/ qNcGfGdD9EJrKYhai1hlstGHIviJYSky6q/mxTczVzdL4p70cYM4z3n+/CYhCh7i /1/IS9lDijiH3MBSOiXXU/fuz3e6uHkoKvH6AQQjN7TA+9Gl2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIUC9KwTX9cMvPkcYnOkWn6xk04fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNDM2ZTYzZjItMDlmOS0z Y2IwLWFkMzUtOGQzMDc0ZTAyNzEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzEpyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADqcBQNMRKDS2mGcmXZM+WXI9FK2dUvOCl0Mf7XNkkxo81fz9xjbZ1OF CC8tbscaZlpa19Uh8WFmgdpxUmCx+B6gvmEkUZ5vX2j0/NfdmHzY+zn9Pe1+UwVu 821pJ4/kmNQ9u1bhnl+b8IY7B8FeQFcaEefbFuXTo5tHIK9kVuVt9RTdMaXEuBFb DLu/GaeYvy41CmeOwkXZjpYqJ6mcLR+pE+aWpdgBZ6PrncoXJp/B4PDmF0sT370S Nh6W/hGmUA1ZDeCq4R3rZVfHybNf3UgUCDMA6GApL0U7FRnJoZEF4/OePYDCqUT3 bTFr+cx9+5opAv3JNNppA38vXuTG3mE= -----END CERTIFICATE-----Generated at Sun Jul 20 14:12:08 2025 by rpki-client