$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/70de61d1-d13e-3a13-9a79-1284e1b9db84.roa File: 70de61d1-d13e-3a13-9a79-1284e1b9db84.roa (raw, json) Hash identifier: J6SaWLCGy0ZraDpau5D/O1nX+vEp0lWKenoNBqiQaUY= Subject key identifier: 90:1C:02:51:96:32:D0:7D:C0:DD:11:0C:45:3F:E9:EF:B7:82:02:51 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584EA792AFF128686A1DA4059F40 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/70de61d1-d13e-3a13-9a79-1284e1b9db84.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 397241 IP address blocks: 204.74.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:92:af:f1:28:68:6a:1d:a4:05:9f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=b0c5faa5-bc71-42be-9408-3ed9076121c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:9c:b2:bd:3a:33:45:f3:71:cd:7a:56:d3:fb: 8e:bf:de:1e:f2:8f:7e:9e:73:49:66:0c:a4:62:c0: 4a:9c:c5:ba:2e:81:8e:3e:ce:6e:13:2f:25:90:55: 98:dc:a1:3d:f0:48:f5:96:c5:d4:08:69:32:ea:a8: cc:25:45:9f:d7:8c:68:39:d5:8c:19:c4:7f:0f:7f: 74:97:72:f1:26:99:5f:92:fc:4c:fe:02:22:c2:94: 52:62:63:19:33:ed:98:ab:27:a4:49:4d:de:d5:78: c4:da:5d:d7:9c:4b:5c:d3:b5:24:6d:24:4e:01:ae: 91:19:8d:17:da:eb:79:9f:6e:ed:ca:00:0e:ef:0d: ec:4b:93:4b:36:4b:89:a9:67:be:94:f1:83:05:a6: 33:56:56:3e:40:39:f2:f0:82:30:49:88:61:fe:c4: e8:62:2d:55:58:1c:b7:13:dc:29:df:c8:2f:45:d4: 0d:a3:81:cb:52:58:a6:8a:aa:da:20:a0:8c:ab:e5: 87:a5:a1:8e:c8:d1:b0:a8:c2:3e:da:b0:00:a4:bf: b9:f1:f8:d9:84:7a:3e:8d:f3:43:ea:c1:70:d1:bf: 1c:7e:d2:a9:8e:fd:a7:a4:f6:90:bb:c1:02:43:fb: e9:f5:b5:5a:09:56:54:88:fd:ba:a6:c3:46:28:52: 54:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:1C:02:51:96:32:D0:7D:C0:DD:11:0C:45:3F:E9:EF:B7:82:02:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/70de61d1-d13e-3a13-9a79-1284e1b9db84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 204.74.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:ca:c2:3c:aa:1c:33:80:93:21:90:4d:3c:f4:f4:64:30:22: 52:cd:bd:aa:b0:43:f2:70:b0:71:65:64:f1:3a:e8:d8:02:6e: f8:51:8e:1d:2b:b8:3d:15:df:4a:b8:98:29:da:2b:51:18:60: 40:e3:65:1e:5d:a4:1b:d7:57:d1:f2:4a:d3:48:a7:45:53:e1: b0:d2:b0:8b:3d:59:b3:de:4b:fd:2a:5a:39:59:fb:20:ae:b5: 77:e5:04:54:f1:c4:7d:13:8d:26:ff:af:2c:6c:bb:43:ba:8d: 03:b1:57:86:b5:7c:84:1c:53:dc:94:89:af:13:83:8c:fc:d7: e9:a4:87:d8:b3:94:a6:82:3b:b0:69:66:5f:44:ae:13:78:33: cd:1b:d6:19:40:1c:73:de:48:d4:07:33:42:15:18:21:04:24: 6e:80:10:fe:82:3a:de:9e:9e:5b:31:e9:2c:37:82:2e:44:89: 89:58:93:e2:7e:93:7b:cc:ef:14:cf:aa:c2:e2:04:ba:fc:46: 37:6c:de:fa:27:17:b7:f6:27:17:db:a9:24:66:79:be:af:ea: 44:eb:b4:79:b1:89:a5:6c:e7:cc:17:fa:f8:f7:95:22:a0:0b: 93:67:33:42:51:ab:bd:61:48:bc:7e:fd:e6:37:93:fa:c0:08: 40:e2:22:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkq/xKGhqHaQFn0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YjBjNWZhYTUtYmM3MS00MmJlLTk0MDgtM2VkOTA3NjEyMWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZyyvTozRfNxzXpW0/uOv94e8o9+nnNJZgyk YsBKnMW6LoGOPs5uEy8lkFWY3KE98Ej1lsXUCGky6qjMJUWf14xoOdWMGcR/D390 l3LxJplfkvxM/gIiwpRSYmMZM+2YqyekSU3e1XjE2l3XnEtc07UkbSROAa6RGY0X 2ut5n27tygAO7w3sS5NLNkuJqWe+lPGDBaYzVlY+QDny8IIwSYhh/sToYi1VWBy3 E9wp38gvRdQNo4HLUlimiqraIKCMq+WHpaGOyNGwqMI+2rAApL+58fjZhHo+jfND 6sFw0b8cftKpjv2npPaQu8ECQ/vp9bVaCVZUiP26psNGKFJU7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJAcAlGWMtB9wN0RDEU/6e+3ggJRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNzBkZTYxZDEtZDEzZS0z YTEzLTlhNzktMTI4NGUxYjlkYjg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzEpDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABnKwjyqHDOAkyGQTTz09GQwIlLNvaqwQ/JwsHFlZPE66NgCbvhRjh0r uD0V30q4mCnaK1EYYEDjZR5dpBvXV9HyStNIp0VT4bDSsIs9WbPeS/0qWjlZ+yCu tXflBFTxxH0TjSb/ryxsu0O6jQOxV4a1fIQcU9yUia8Tg4z81+mkh9izlKaCO7Bp Zl9ErhN4M80b1hlAHHPeSNQHM0IVGCEEJG6AEP6COt6enlsx6Sw3gi5EiYlYk+J+ k3vM7xTPqsLiBLr8Rjds3vonF7f2JxfbqSRmeb6v6kTrtHmxiaVs58wX+vj3lSKg C5NnM0JRq71hSLx+/eY3k/rACEDiIm8= -----END CERTIFICATE-----Generated at Wed Jul 29 09:27:44 2026 by rpki-client