$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f29aee4a-a1f3-32e5-a7be-2505ad7e2a9f.roa File: f29aee4a-a1f3-32e5-a7be-2505ad7e2a9f.roa (raw, json) Hash identifier: +1ilIOVZWMyjbhDujnx385aJNa1oik1964BmVkNx4WY= Subject key identifier: B5:EF:AE:BC:D8:AD:85:41:5A:4E:11:B5:DD:E5:84:7D:A1:51:05:ED Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584A7BB0C7FA4617E54B136FE680 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f29aee4a-a1f3-32e5-a7be-2505ad7e2a9f.roa Signing time: Fri 11 Jul 2025 13:01:05 +0000 ROA not before: Fri 11 Jul 2025 13:01:05 +0000 ROA not after: Thu 09 Oct 2025 13:01:05 +0000 asID: 397220 IP address blocks: 204.74.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Jul 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7b:b0:c7:fa:46:17:e5:4b:13:6f:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jul 11 13:01:05 2025 GMT Not After : Oct 9 13:01:05 2025 GMT Subject: CN=24aa3cb4-12ff-4ab8-ab2e-37fff87379f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:7c:ec:39:5a:f1:7f:a8:16:a0:05:62:bd:1b: 42:30:b0:c3:59:1b:05:2f:ab:7c:db:e9:c0:23:af: 30:9e:98:0f:4f:7d:5c:fb:cf:01:f5:77:38:95:ff: d2:a8:87:0f:b5:ec:60:83:1e:cf:46:b4:cc:e1:e7: 00:05:e6:d3:84:22:98:57:1d:67:85:e1:cd:7a:eb: ab:e7:48:34:4d:9f:c0:1d:9a:d4:bf:a8:58:40:e5: ba:7f:69:c6:97:d3:88:f7:8c:83:f1:c1:c0:56:b9: ae:23:2b:68:63:ba:4a:c9:6b:c1:dc:58:6e:91:6e: cd:ce:90:f3:d5:7a:d5:24:4f:9e:53:8d:12:53:40: 3e:ed:4a:e0:f4:af:ae:71:b4:93:56:d5:6b:17:e5: 21:20:f1:f3:07:f6:83:00:fd:55:5a:37:4f:5e:36: 28:3c:39:05:c0:f9:ec:18:a3:c6:14:03:29:95:80: 02:7e:25:b3:ce:cf:4a:cd:dc:62:c3:37:c6:1a:fc: 6b:15:57:19:b0:20:57:74:c5:dd:7f:1b:56:dc:d2: b2:bd:f0:a2:1a:5e:3d:a4:d9:84:bb:84:91:52:6c: ff:e2:b9:6c:b8:46:38:6c:17:cd:b1:4a:5e:37:fb: 68:a2:69:26:06:f3:7b:f7:00:ad:cc:0f:0c:7d:1b: 6e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:EF:AE:BC:D8:AD:85:41:5A:4E:11:B5:DD:E5:84:7D:A1:51:05:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f29aee4a-a1f3-32e5-a7be-2505ad7e2a9f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 204.74.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:24:11:87:90:12:ae:35:b2:a5:95:07:a5:53:a4:06:46:96: 99:60:b4:d5:31:95:e6:69:7b:ab:dd:12:05:e1:52:9f:22:06: 16:14:76:eb:b9:34:b2:c1:33:61:51:b7:e8:f3:f0:69:a1:54: 4a:74:2e:78:ed:e2:1e:55:0d:07:a5:86:d9:6e:1b:29:a8:49: d5:d2:43:4a:94:9f:b1:2e:5c:ad:ad:5e:42:38:e7:d3:ad:5d: ef:a3:b4:81:62:3e:8a:fd:b9:65:7e:08:e6:37:5b:dd:fe:ff: 60:f0:3f:d2:42:71:9b:8f:7f:41:92:c2:7c:bc:5e:ce:88:26: 18:72:7e:f5:da:f4:7e:56:89:d4:16:15:a6:a8:53:07:7d:bd: 1b:03:6a:68:be:84:b2:00:85:d1:2e:87:d6:2c:c3:69:fa:cf: 0a:e1:c2:bc:79:33:bb:69:7b:22:49:f3:28:a6:38:44:a7:97: 6c:23:24:99:8d:b1:cc:80:4d:08:62:61:98:8a:93:c1:1a:81: c4:31:c3:da:ff:c7:c1:14:63:69:31:94:61:77:db:d7:30:9f: 48:2b:ca:37:21:ef:55:d4:af:50:86:b0:5a:05:9f:58:01:eb: 7a:ef:e0:25:0f:b6:f0:d4:17:78:7f:0d:25:e9:c3:3f:75:d1: fd:ee:03:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp7sMf6RhflSxNv5oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDcxMTEzMDEwNVoXDTI1MTAwOTEzMDEwNVowLzEtMCsGA1UEAxMk MjRhYTNjYjQtMTJmZi00YWI4LWFiMmUtMzdmZmY4NzM3OWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXzsOVrxf6gWoAVivRtCMLDDWRsFL6t82+nA I68wnpgPT31c+88B9Xc4lf/SqIcPtexggx7PRrTM4ecABebThCKYVx1nheHNeuur 50g0TZ/AHZrUv6hYQOW6f2nGl9OI94yD8cHAVrmuIytoY7pKyWvB3FhukW7NzpDz 1XrVJE+eU40SU0A+7Urg9K+ucbSTVtVrF+UhIPHzB/aDAP1VWjdPXjYoPDkFwPns GKPGFAMplYACfiWzzs9KzdxiwzfGGvxrFVcZsCBXdMXdfxtW3NKyvfCiGl49pNmE u4SRUmz/4rlsuEY4bBfNsUpeN/toomkmBvN79wCtzA8MfRtu/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLXvrrzYrYVBWk4Rtd3lhH2hUQXtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZjI5YWVlNGEtYTFmMy0z MmU1LWE3YmUtMjUwNWFkN2UyYTlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzEptMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHAkEYeQEq41sqWVB6VTpAZGlplgtNUxleZpe6vdEgXhUp8iBhYUduu5 NLLBM2FRt+jz8GmhVEp0Lnjt4h5VDQelhtluGymoSdXSQ0qUn7EuXK2tXkI459Ot Xe+jtIFiPor9uWV+COY3W93+/2DwP9JCcZuPf0GSwny8Xs6IJhhyfvXa9H5WidQW FaaoUwd9vRsDami+hLIAhdEuh9Ysw2n6zwrhwrx5M7tpeyJJ8yimOESnl2wjJJmN scyATQhiYZiKk8EagcQxw9r/x8EUY2kxlGF329cwn0gryjch71XUr1CGsFoFn1gB 63rv4CUPtvDUF3h/DSXpwz910f3uA78= -----END CERTIFICATE-----Generated at Sun Jul 27 09:58:37 2025 by rpki-client