$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cf4bf470-7dad-3543-8127-08725b4f60bc.roa File: cf4bf470-7dad-3543-8127-08725b4f60bc.roa (raw, json) Hash identifier: bbLVGHWdSLYaoFy29aqwRiQcCObke9YutGbccMwV0Ls= Subject key identifier: 40:5D:27:4B:15:DD:81:14:03:80:C5:D8:EB:C0:C9:0A:BC:6F:AF:90 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584A7BB0C3FE8F1A3DC4FE8C0400 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cf4bf470-7dad-3543-8127-08725b4f60bc.roa Signing time: Fri 11 Jul 2025 13:01:05 +0000 ROA not before: Fri 11 Jul 2025 13:01:05 +0000 ROA not after: Thu 09 Oct 2025 13:01:05 +0000 asID: 397220 IP address blocks: 204.74.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Jul 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7b:b0:c3:fe:8f:1a:3d:c4:fe:8c:04:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jul 11 13:01:05 2025 GMT Not After : Oct 9 13:01:05 2025 GMT Subject: CN=c59e6a10-3dfa-4cdc-a0dc-267a571f7d94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:7c:78:06:6a:ff:20:e6:7e:0c:25:e0:91:41: fc:63:9d:86:ba:98:c8:cf:2d:53:f9:37:0f:2c:23: 0d:2a:4c:39:03:c2:a9:02:ab:be:d2:c6:32:b2:f4: fb:32:31:fc:a4:a3:b4:69:76:1d:e8:f5:ac:f5:4f: 60:39:3b:8a:1a:0b:47:d3:86:04:f5:c0:a8:8a:af: 5a:57:cb:10:d1:35:85:0b:26:7d:2b:78:79:b0:6a: 54:d3:23:04:62:39:42:01:9c:df:58:69:6b:2d:ec: d8:1c:5a:9a:6b:ac:44:4a:43:db:8f:0c:21:69:77: 5d:c1:25:63:bc:55:bf:89:12:fa:1c:9e:da:43:99: 6f:71:1d:60:ba:13:72:fb:12:87:19:28:71:49:b6: 48:98:15:d0:ef:b2:25:18:44:f6:6d:87:46:25:f1: 0b:3f:de:63:a6:a2:cf:55:61:a0:0f:15:36:07:65: 8e:8b:eb:70:b9:5a:88:61:37:70:7d:d3:9d:b8:2a: 86:e8:b6:68:c6:c3:2e:5c:61:d6:26:8c:d8:7f:fb: 9b:fb:18:c1:9b:9d:3d:d9:ab:19:66:3a:e6:88:92: 32:36:79:52:d8:37:13:90:78:22:3c:f7:8a:0c:57: 1c:1c:67:fe:26:65:ab:82:5b:42:8b:83:a6:36:38: b5:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:5D:27:4B:15:DD:81:14:03:80:C5:D8:EB:C0:C9:0A:BC:6F:AF:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cf4bf470-7dad-3543-8127-08725b4f60bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 204.74.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:e5:73:e7:6a:e3:96:48:e9:ee:72:d1:be:13:a4:b8:6c:3a: be:5f:0a:e6:5d:d1:c9:db:05:02:e8:70:1d:da:d1:4b:cc:2e: 84:95:5b:70:4b:b2:d3:53:0e:a3:cc:46:21:2b:6a:f1:1c:c9: a4:c1:e3:ed:d9:e7:c2:b8:25:af:d5:31:b2:dd:dd:79:61:8f: 71:fc:d0:7e:49:6e:86:47:40:e0:73:36:d8:e6:b9:2b:7d:1b: ab:3d:a6:78:a7:01:a2:25:31:6e:b8:09:e2:cc:b2:8e:76:3f: 07:99:f9:80:26:b6:91:46:e5:27:f3:6b:06:df:f9:79:c5:a6: 4b:42:6b:76:00:13:ea:01:ad:f1:64:55:34:d0:2e:9d:aa:6e: 5e:22:0e:8a:8a:3a:7e:a7:bd:84:41:13:fd:e9:4e:31:5d:ce: c2:32:67:bb:10:68:63:24:34:ba:21:50:87:52:03:7c:80:78: 44:af:a6:9d:29:3f:14:1c:11:a1:1c:74:08:db:d3:d4:6a:a7: 96:a5:1a:d3:ab:3b:e7:c1:c1:be:42:5b:d6:d5:89:d6:1b:e1: 04:5a:e5:67:0d:9d:8a:69:96:23:78:c5:9e:12:ad:04:f0:df: 35:2c:57:35:71:56:92:8b:a6:ce:31:84:64:75:4a:a0:71:e4: e3:b1:11:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp7sMP+jxo9xP6MBAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDcxMTEzMDEwNVoXDTI1MTAwOTEzMDEwNVowLzEtMCsGA1UEAxMk YzU5ZTZhMTAtM2RmYS00Y2RjLWEwZGMtMjY3YTU3MWY3ZDk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHx4Bmr/IOZ+DCXgkUH8Y52GupjIzy1T+TcP LCMNKkw5A8KpAqu+0sYysvT7MjH8pKO0aXYd6PWs9U9gOTuKGgtH04YE9cCoiq9a V8sQ0TWFCyZ9K3h5sGpU0yMEYjlCAZzfWGlrLezYHFqaa6xESkPbjwwhaXddwSVj vFW/iRL6HJ7aQ5lvcR1guhNy+xKHGShxSbZImBXQ77IlGET2bYdGJfELP95jpqLP VWGgDxU2B2WOi+twuVqIYTdwfdOduCqG6LZoxsMuXGHWJozYf/ub+xjBm5092asZ ZjrmiJIyNnlS2DcTkHgiPPeKDFccHGf+JmWrgltCi4OmNji1lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEBdJ0sV3YEUA4DF2OvAyQq8b6+QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvY2Y0YmY0NzAtN2RhZC0z NTQzLTgxMjctMDg3MjViNGY2MGJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzEpvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHDlc+dq45ZI6e5y0b4TpLhsOr5fCuZd0cnbBQLocB3a0UvMLoSVW3BL stNTDqPMRiEravEcyaTB4+3Z58K4Ja/VMbLd3Xlhj3H80H5JboZHQOBzNtjmuSt9 G6s9pninAaIlMW64CeLMso52PweZ+YAmtpFG5Sfzawbf+XnFpktCa3YAE+oBrfFk VTTQLp2qbl4iDoqKOn6nvYRBE/3pTjFdzsIyZ7sQaGMkNLohUIdSA3yAeESvpp0p PxQcEaEcdAjb09Rqp5alGtOrO+fBwb5CW9bVidYb4QRa5WcNnYppliN4xZ4SrQTw 3zUsVzVxVpKLps4xhGR1SqBx5OOxEas= -----END CERTIFICATE-----Generated at Sun Jul 27 10:05:55 2025 by rpki-client