$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3b6aa94a-de8f-33c3-a1f4-5a33a806e07a.roa File: 3b6aa94a-de8f-33c3-a1f4-5a33a806e07a.roa (raw, json) Hash identifier: TCXVGAayHOEjutPUVBD3DKAEAPbp0GpE7Zk1TZrefJ8= Subject key identifier: F2:16:D1:F3:21:69:01:16:0A:B7:B6:0D:B4:15:48:37:5F:8D:4C:BB Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584D746FF0F76930384462EC5080 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3b6aa94a-de8f-33c3-a1f4-5a33a806e07a.roa Signing time: Fri 10 Apr 2026 01:00:24 +0000 ROA not before: Fri 10 Apr 2026 01:00:24 +0000 ROA not after: Thu 09 Jul 2026 01:00:24 +0000 asID: 397213 IP address blocks: 209.173.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:74:6f:f0:f7:69:30:38:44:62:ec:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Apr 10 01:00:24 2026 GMT Not After : Jul 9 01:00:24 2026 GMT Subject: CN=94e8c277-959f-4536-9c4e-356e4a70967f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:72:66:45:41:1f:6d:aa:2e:b2:99:fa:c8:5c: b1:18:47:52:7c:bc:fe:ea:08:31:b6:40:69:a8:80: 5a:23:bc:e6:57:2e:74:8e:00:69:1a:7b:09:dd:ab: 70:7c:b8:ca:31:f7:98:f2:cd:58:93:5a:62:0c:01: 82:2c:41:cb:75:f5:da:fc:bc:f3:30:77:66:dd:b6: cf:b6:28:29:92:5f:b9:75:9c:d3:fd:49:db:15:70: 6b:db:0c:11:00:e8:f2:1f:43:ce:c9:a6:19:91:e6: d3:45:7c:f2:e4:e0:cf:53:d9:9a:fa:5e:eb:2f:e5: 88:b6:91:eb:b2:9c:99:ea:cf:c4:4a:b2:b4:4d:a2: 8e:f3:f7:9b:17:9f:79:e4:82:a1:e7:11:84:97:3a: 41:1b:dc:f4:fe:c1:a8:03:46:67:88:3f:07:8c:6c: b4:58:ae:b8:61:f5:45:a9:5e:73:18:f1:32:d8:20: 94:00:22:f6:6a:ef:03:2d:a9:4d:d5:ab:a0:93:2f: 20:52:6d:2f:11:d0:f0:a9:6d:0d:ed:93:f8:e6:d3: ab:e5:20:6a:b3:ea:cc:d2:74:b6:e2:2c:5b:62:ea: 84:74:19:80:14:63:3d:43:be:f2:3e:8b:a9:6f:21: a0:4f:e4:0f:bb:b8:a6:17:ab:be:33:57:ba:a5:f9: 1f:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:16:D1:F3:21:69:01:16:0A:B7:B6:0D:B4:15:48:37:5F:8D:4C:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3b6aa94a-de8f-33c3-a1f4-5a33a806e07a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 209.173.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:50:e4:46:81:a9:2e:14:57:3b:b7:83:c8:1d:20:d8:94:be: 20:6c:bc:bd:af:20:c5:91:f5:20:0c:93:1a:ba:ea:a2:41:24: 7c:e6:59:dc:56:d2:40:89:b8:58:e6:87:8e:4b:c3:ec:5b:3d: d4:6c:f8:2b:16:7b:7f:15:23:82:77:fc:80:03:66:6d:ce:f4: b6:b0:ef:da:54:2b:d3:2a:07:55:a9:b3:c4:b2:e3:4f:c6:b9: 36:62:e7:6a:be:24:4f:d9:e5:62:c6:92:21:d8:39:19:8a:1c: 10:7d:54:84:0e:e1:ae:70:ce:e1:f2:32:21:7c:f9:81:5f:c1: 06:23:a1:6e:f4:8d:87:07:dc:24:6e:62:d5:45:0d:a6:76:7c: 5f:57:c3:81:a0:dc:22:61:46:1b:27:68:2d:4e:b6:23:d8:9a: 36:24:f1:15:77:33:3e:b8:b5:ea:15:fc:1c:e2:0e:b1:f7:aa: 86:e3:d7:d1:9f:96:86:98:be:1b:8c:2e:8a:f6:30:24:19:06: b7:eb:16:46:7a:cf:a4:6e:20:40:dd:bf:91:68:1b:5b:56:e8: 59:3f:fa:5d:c1:68:b4:72:91:71:e9:78:2b:20:36:31:8b:63: 2a:0c:37:20:a8:db:9d:2a:64:3a:de:9f:05:6d:f0:b8:31:15: 06:5f:69:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE10b/D3aTA4RGLsUIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk OTRlOGMyNzctOTU5Zi00NTM2LTljNGUtMzU2ZTRhNzA5NjdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXJmRUEfbaouspn6yFyxGEdSfLz+6ggxtkBp qIBaI7zmVy50jgBpGnsJ3atwfLjKMfeY8s1Yk1piDAGCLEHLdfXa/LzzMHdm3bbP tigpkl+5dZzT/UnbFXBr2wwRAOjyH0POyaYZkebTRXzy5ODPU9ma+l7rL+WItpHr spyZ6s/ESrK0TaKO8/ebF5955IKh5xGElzpBG9z0/sGoA0ZniD8HjGy0WK64YfVF qV5zGPEy2CCUACL2au8DLalN1augky8gUm0vEdDwqW0N7ZP45tOr5SBqs+rM0nS2 4ixbYuqEdBmAFGM9Q77yPoupbyGgT+QPu7imF6u+M1e6pfkf2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPIW0fMhaQEWCre2DbQVSDdfjUy7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvM2I2YWE5NGEtZGU4Zi0z M2MzLWExZjQtNWEzM2E4MDZlMDdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0a06MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGlQ5EaBqS4UVzu3g8gdINiUviBsvL2vIMWR9SAMkxq66qJBJHzmWdxW 0kCJuFjmh45Lw+xbPdRs+CsWe38VI4J3/IADZm3O9Law79pUK9MqB1Wps8Sy40/G uTZi52q+JE/Z5WLGkiHYORmKHBB9VIQO4a5wzuHyMiF8+YFfwQYjoW70jYcH3CRu YtVFDaZ2fF9Xw4Gg3CJhRhsnaC1OtiPYmjYk8RV3Mz64teoV/BziDrH3qobj19Gf loaYvhuMLor2MCQZBrfrFkZ6z6RuIEDdv5FoG1tW6Fk/+l3BaLRykXHpeCsgNjGL YyoMNyCo250qZDrenwVt8LgxFQZfaZs= -----END CERTIFICATE-----Generated at Sun Apr 12 08:09:22 2026 by rpki-client