$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4ea9d558-6d23-3707-a7c7-71a58f869bc1.roa File: 4ea9d558-6d23-3707-a7c7-71a58f869bc1.roa (raw, json) Hash identifier: KLGFIJkr4ThOXL8FWGOkj6LbEah3J61pJnAQHE+ymmw= Subject key identifier: 11:DF:90:6F:FC:0E:40:D6:47:DB:2D:94:15:62:3B:C4:82:FB:4F:B8 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584A68262C2E3DE5A50DAF30F200 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4ea9d558-6d23-3707-a7c7-71a58f869bc1.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 397238 IP address blocks: 204.74.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Jul 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:26:2c:2e:3d:e5:a5:0d:af:30:f2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=dfef2af2-4a96-4f30-bdec-e9bf6d5b478e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:1d:0c:e6:ff:a3:0e:9f:42:e6:7f:bc:47:0c: 33:93:91:ff:37:dc:10:cd:53:fd:a9:b1:99:bc:fb: 30:ec:61:b3:ef:ec:d9:1d:7d:2f:b1:37:55:32:9c: 1b:3f:3e:b2:91:e2:76:8c:46:e7:10:c5:f8:4d:ea: a2:64:fd:31:fb:89:f2:52:71:fd:42:53:86:e8:a6: c9:75:01:c3:6e:0f:1d:17:a0:5d:86:6c:35:05:4a: f5:b8:7a:47:a8:9f:15:46:97:d5:80:ad:b2:11:b1: 0f:44:27:9e:46:5f:fa:61:26:7b:f4:2b:c4:28:0b: f8:1f:0d:eb:0d:c3:25:54:b7:37:11:d7:73:96:18: bf:0b:a1:75:b8:cd:0c:e6:89:15:eb:f1:a3:82:81: 8f:fc:9a:24:86:6b:05:36:47:71:03:16:7e:aa:2b: 85:5c:04:d7:af:63:d1:5a:22:24:82:f6:23:97:4e: 7d:51:55:6e:85:b5:6c:29:13:30:c5:08:fa:5e:8d: 19:d8:87:ec:3e:f9:e7:2b:97:7d:e0:70:4d:a8:59: 85:b5:87:9a:90:6b:49:d6:5b:33:84:9a:d0:48:c5: 75:57:cf:87:99:38:3b:ee:62:19:a0:28:93:1b:5e: f9:a7:0c:e7:a9:a1:a7:0d:fb:24:2d:44:5a:40:71: d7:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:DF:90:6F:FC:0E:40:D6:47:DB:2D:94:15:62:3B:C4:82:FB:4F:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4ea9d558-6d23-3707-a7c7-71a58f869bc1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 204.74.103.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:d1:11:3f:75:be:cd:fe:0d:7f:19:05:53:79:82:ac:e0:fa: 14:9a:63:84:f3:83:1e:50:51:64:32:c6:03:66:6f:2f:53:a5: 70:0e:74:b2:22:a7:6c:14:b2:eb:b1:53:1b:2d:02:37:2b:91: a4:b4:39:a2:a3:59:28:3c:04:b8:b8:92:47:85:67:9c:67:7c: 5f:ff:97:48:49:aa:90:e8:2c:90:51:a3:44:52:42:15:ee:dc: 6a:1b:ac:40:3a:68:3b:b6:2a:03:a2:ef:af:1f:05:ab:2d:3e: f7:14:5e:38:1a:b9:00:91:9f:85:da:ab:46:42:7f:b9:82:d6: 0f:a7:7b:7e:5e:20:a4:47:6a:5a:67:0f:37:b3:bd:df:38:69: ba:f8:19:4e:8d:f1:04:ed:86:fc:73:d7:e2:5c:58:d0:b9:f7: a7:d1:e3:51:81:02:d7:ca:2a:a1:ee:7e:19:c6:fa:24:73:e6: 23:5e:2f:c5:82:5b:20:ec:0e:1a:74:c3:3b:57:88:75:9c:2f: 8d:2a:bf:f0:79:20:1a:63:44:48:38:d0:ba:d1:ea:66:b8:95: 89:66:0e:44:d9:52:33:a9:aa:01:09:86:99:d9:7d:c7:36:8c: 78:39:a2:a7:55:40:e4:6f:7b:dd:8e:6b:36:7e:d6:44:64:75: ce:13:2e:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpoJiwuPeWlDa8w8gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk ZGZlZjJhZjItNGE5Ni00ZjMwLWJkZWMtZTliZjZkNWI0NzhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvR0M5v+jDp9C5n+8Rwwzk5H/N9wQzVP9qbGZ vPsw7GGz7+zZHX0vsTdVMpwbPz6ykeJ2jEbnEMX4TeqiZP0x+4nyUnH9QlOG6KbJ dQHDbg8dF6Bdhmw1BUr1uHpHqJ8VRpfVgK2yEbEPRCeeRl/6YSZ79CvEKAv4Hw3r DcMlVLc3Eddzlhi/C6F1uM0M5okV6/GjgoGP/JokhmsFNkdxAxZ+qiuFXATXr2PR WiIkgvYjl059UVVuhbVsKRMwxQj6Xo0Z2IfsPvnnK5d94HBNqFmFtYeakGtJ1lsz hJrQSMV1V8+HmTg77mIZoCiTG175pwznqaGnDfskLURaQHHXBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBHfkG/8DkDWR9stlBViO8SC+0+4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNGVhOWQ1NTgtNmQyMy0z NzA3LWE3YzctNzFhNThmODY5YmMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzEpnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADjRET91vs3+DX8ZBVN5gqzg+hSaY4Tzgx5QUWQyxgNmby9TpXAOdLIi p2wUsuuxUxstAjcrkaS0OaKjWSg8BLi4kkeFZ5xnfF//l0hJqpDoLJBRo0RSQhXu 3GobrEA6aDu2KgOi768fBastPvcUXjgauQCRn4Xaq0ZCf7mC1g+ne35eIKRHalpn Dzezvd84abr4GU6N8QTthvxz1+JcWNC596fR41GBAtfKKqHufhnG+iRz5iNeL8WC WyDsDhp0wztXiHWcL40qv/B5IBpjREg40LrR6ma4lYlmDkTZUjOpqgEJhpnZfcc2 jHg5oqdVQORve92OazZ+1kRkdc4TLkc= -----END CERTIFICATE-----Generated at Sun Jul 27 11:22:47 2025 by rpki-client