$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0f0589de-8f1f-3604-a0f5-7106aec386e9.roa File: 0f0589de-8f1f-3604-a0f5-7106aec386e9.roa (raw, json) Hash identifier: HMx9KwnVCpTNINjVivcIbDWsbDikVHdfedmk/tLlz2o= Subject key identifier: B5:DF:06:72:B0:1A:5D:12:01:04:C4:E8:02:2F:64:A3:9A:32:F9:91 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B5C6C92BE2A23077506D54300 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0f0589de-8f1f-3604-a0f5-7106aec386e9.roa Signing time: Tue 30 Sep 2025 01:00:31 +0000 ROA not before: Tue 30 Sep 2025 01:00:31 +0000 ROA not after: Mon 29 Dec 2025 02:00:31 +0000 asID: 397222 IP address blocks: 204.74.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5c:6c:92:be:2a:23:07:75:06:d5:43:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 30 01:00:31 2025 GMT Not After : Dec 29 02:00:31 2025 GMT Subject: CN=11996b3f-be8b-4347-b97c-da1842957ff6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:21:93:01:cc:40:2c:e4:40:e5:ec:a3:08:c1: e7:5e:0b:8a:72:e0:ec:65:1a:7a:a8:e1:40:1e:a8: 8d:2e:ff:eb:da:41:9a:12:f5:b6:23:31:bc:0c:43: 15:19:a3:77:56:cb:50:bd:23:5f:f7:40:ff:2f:e0: 55:e3:89:d4:2f:92:74:4d:3f:36:02:fc:10:f2:18: 75:06:50:9d:58:43:b3:d9:33:23:2f:b3:96:48:04: fc:a0:06:76:47:94:51:a6:cc:16:19:9d:bf:07:21: d2:52:b1:ca:9e:a8:b4:8f:56:d4:de:3a:ee:e3:22: e8:0c:05:5e:f0:ca:8c:46:3d:9b:39:e6:53:50:43: 5f:85:8e:a9:41:3f:8c:f7:52:86:71:37:c1:d9:57: 2d:88:c0:e2:cd:93:58:bf:b9:97:c5:77:e6:f3:f2: 12:26:b5:c4:9e:ce:85:9f:92:19:8a:62:7d:40:09: 06:c5:61:e0:63:17:1b:8b:8a:cb:7c:6a:b1:13:56: b9:ca:27:b3:ec:fb:34:87:a2:ac:f0:25:23:eb:2f: cc:46:4f:ab:a3:01:b4:2b:02:cf:2f:98:28:61:5a: 0b:86:ed:b1:88:55:17:22:d8:33:b2:c2:b4:4a:14: 88:09:0d:9a:b9:7d:85:7b:9f:6b:a0:7c:69:a1:16: 9a:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:DF:06:72:B0:1A:5D:12:01:04:C4:E8:02:2F:64:A3:9A:32:F9:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0f0589de-8f1f-3604-a0f5-7106aec386e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 204.74.115.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:66:90:c8:18:13:1d:d6:76:3c:3d:a2:88:a8:22:38:07:6a: 42:48:fa:3a:d0:cd:3f:4b:17:20:2a:c1:01:50:4c:f1:27:b0: 09:fa:ec:ea:1b:c9:7a:7b:8e:14:f8:7e:48:c3:0d:e3:18:a1: 20:4b:9c:e6:56:c0:24:47:eb:9e:5b:13:36:52:2c:43:1e:cc: 5a:38:d2:6e:00:64:ae:b4:0a:84:39:0b:47:29:3d:b6:30:e3: 5d:31:36:0c:76:46:dc:3c:13:ea:9f:38:0d:47:4e:79:6c:3d: 3c:ea:b7:9a:cd:6d:22:06:8c:48:09:22:6a:9d:aa:89:67:76: 03:ef:bb:38:ab:98:3c:87:24:14:16:e4:94:d8:11:b5:6c:28: a7:8b:e8:13:f3:3d:42:d3:26:f3:62:dd:21:4c:d0:18:94:a7: 5c:8f:d0:9a:d1:d6:77:9d:7a:51:ce:68:0c:bf:5a:2f:f2:b2: aa:2f:63:6e:f8:1d:a9:b8:27:05:45:0f:b7:43:14:52:ba:9b: 1b:14:bc:87:bb:7a:d1:02:30:3a:e6:01:b5:5a:50:13:c8:58: aa:46:15:72:dd:b3:ce:ae:94:81:13:4c:da:b0:64:0f:cb:46: 28:3d:64:53:04:8d:38:8d:8e:d9:82:88:d0:33:7b:bd:48:fb: e3:e7:6d:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtcbJK+KiMHdQbVQwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkzMDAxMDAzMVoXDTI1MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk MTE5OTZiM2YtYmU4Yi00MzQ3LWI5N2MtZGExODQyOTU3ZmY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgyGTAcxALORA5eyjCMHnXguKcuDsZRp6qOFA HqiNLv/r2kGaEvW2IzG8DEMVGaN3VstQvSNf90D/L+BV44nUL5J0TT82AvwQ8hh1 BlCdWEOz2TMjL7OWSAT8oAZ2R5RRpswWGZ2/ByHSUrHKnqi0j1bU3jru4yLoDAVe 8MqMRj2bOeZTUENfhY6pQT+M91KGcTfB2VctiMDizZNYv7mXxXfm8/ISJrXEns6F n5IZimJ9QAkGxWHgYxcbi4rLfGqxE1a5yiez7Ps0h6Ks8CUj6y/MRk+rowG0KwLP L5goYVoLhu2xiFUXItgzssK0ShSICQ2auX2Fe59roHxpoRaaBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLXfBnKwGl0SAQTE6AIvZKOaMvmRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMGYwNTg5ZGUtOGYxZi0z NjA0LWEwZjUtNzEwNmFlYzM4NmU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzEpzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGRmkMgYEx3Wdjw9ooioIjgHakJI+jrQzT9LFyAqwQFQTPEnsAn67Oob yXp7jhT4fkjDDeMYoSBLnOZWwCRH655bEzZSLEMezFo40m4AZK60CoQ5C0cpPbYw 410xNgx2Rtw8E+qfOA1HTnlsPTzqt5rNbSIGjEgJImqdqolndgPvuzirmDyHJBQW 5JTYEbVsKKeL6BPzPULTJvNi3SFM0BiUp1yP0JrR1nedelHOaAy/Wi/ysqovY274 Ham4JwVFD7dDFFK6mxsUvIe7etECMDrmAbVaUBPIWKpGFXLds86ulIETTNqwZA/L Rig9ZFMEjTiNjtmCiNAze71I++PnbcE= -----END CERTIFICATE-----Generated at Tue Nov 4 22:04:12 2025 by rpki-client