$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3f25dc22-4324-3ff6-8187-5d46925cf83a.roa File: 3f25dc22-4324-3ff6-8187-5d46925cf83a.roa (raw, json) Hash identifier: vo9o4S2N/Pld4qWL2bIv72CD9uRPQrOoA09P97aPGQs= Subject key identifier: EE:6A:AD:FB:DA:62:A8:08:6B:B0:07:A5:5B:8F:1C:3C:03:93:8C:DF Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584D746FF13D53AE2487F0EE0E00 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3f25dc22-4324-3ff6-8187-5d46925cf83a.roa Signing time: Fri 10 Apr 2026 01:00:24 +0000 ROA not before: Fri 10 Apr 2026 01:00:24 +0000 ROA not after: Thu 09 Jul 2026 01:00:24 +0000 asID: 397219 IP address blocks: 209.173.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:74:6f:f1:3d:53:ae:24:87:f0:ee:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Apr 10 01:00:24 2026 GMT Not After : Jul 9 01:00:24 2026 GMT Subject: CN=b9fe01a1-830f-4cc6-87e7-d9269cd92500 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:99:be:07:72:0d:f8:49:29:c7:e9:e7:8b:cd: c6:cb:19:91:b4:2b:ae:53:0d:a1:be:0a:3e:a9:86: fc:7b:ef:05:03:76:74:58:a0:cb:55:86:de:aa:d4: 89:9a:8c:a8:ff:15:3a:01:2a:9f:dd:64:2c:ab:02: 99:8d:7d:3d:e8:18:a4:53:7f:8f:fd:cb:dc:54:61: a9:07:19:86:ce:d0:1a:d9:3a:62:e9:ca:51:8f:9b: 52:ec:95:ce:92:41:6f:1a:a0:f6:b6:8a:17:62:77: 1f:6d:3a:e5:5a:2e:d8:5d:b0:9f:da:1f:dc:44:83: 3c:95:c8:61:03:09:ad:7d:d4:5d:9b:4e:05:c5:20: 38:d3:d0:a2:9a:22:c0:6d:9e:dc:6a:e3:b4:b7:12: 34:c4:5b:97:be:f3:40:29:4c:c7:fd:c9:3b:b6:ff: b1:13:65:f9:bb:18:4c:f3:15:a1:75:22:fc:26:48: 3f:1e:f8:a3:8c:f7:aa:82:27:cf:2f:9c:89:1e:02: cf:42:e0:a0:32:ae:46:3f:9d:c8:ad:ac:92:00:90: 51:52:4b:58:a0:6b:b9:dc:e9:d2:9d:15:17:f8:78: bb:36:9e:5b:52:51:13:68:e8:65:81:3f:3a:00:23: c0:11:e6:a4:45:c4:85:23:e8:5b:ba:e8:ba:fd:7f: 96:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:6A:AD:FB:DA:62:A8:08:6B:B0:07:A5:5B:8F:1C:3C:03:93:8C:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3f25dc22-4324-3ff6-8187-5d46925cf83a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 209.173.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:40:84:b1:98:23:f0:95:f7:49:4e:2f:1a:f7:75:72:ab:45: 6f:81:2b:f0:5f:31:cc:51:1c:a3:43:03:c7:67:bd:56:0f:7c: e2:d1:22:5c:ee:70:f5:4d:40:c5:19:5a:ea:b2:56:96:c0:50: b9:5b:45:b5:ee:db:2e:01:4b:3b:35:b0:bb:33:76:8b:53:5b: c3:c2:fd:59:d1:07:b6:17:fa:19:98:1c:84:5c:8c:d4:44:e4: 95:3d:03:de:23:27:fb:27:39:62:e2:81:00:5a:09:fe:71:5a: 1b:11:35:ae:38:1d:cf:35:25:c4:ee:9b:e0:f4:8a:13:04:d8: 89:17:56:91:cd:d9:74:9b:66:6f:e2:46:c7:e3:19:4d:ad:a4: 53:3f:a0:b3:ca:a6:69:dd:40:f7:4c:db:8a:3e:a3:79:56:10: be:b4:e5:33:43:98:6d:69:69:0b:48:6b:5f:4f:80:fa:63:ac: c5:61:fd:3d:fc:b4:80:6e:c9:8b:51:36:39:88:a1:a2:31:96: 6a:f7:70:7f:b0:85:3d:e2:7a:6b:36:5a:49:9a:04:44:6c:e7: 08:d2:96:b3:c9:d6:2e:8f:e1:27:df:2e:41:b3:ef:e1:1a:48: cc:20:7f:b9:ab:a1:52:f9:95:cb:66:ca:c4:8c:06:c6:fc:10: 28:11:5f:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE10b/E9U64kh/DuDgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk YjlmZTAxYTEtODMwZi00Y2M2LTg3ZTctZDkyNjljZDkyNTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5m+B3IN+Ekpx+nni83GyxmRtCuuUw2hvgo+ qYb8e+8FA3Z0WKDLVYbeqtSJmoyo/xU6ASqf3WQsqwKZjX096BikU3+P/cvcVGGp BxmGztAa2Tpi6cpRj5tS7JXOkkFvGqD2tooXYncfbTrlWi7YXbCf2h/cRIM8lchh AwmtfdRdm04FxSA409CimiLAbZ7cauO0txI0xFuXvvNAKUzH/ck7tv+xE2X5uxhM 8xWhdSL8Jkg/HvijjPeqgifPL5yJHgLPQuCgMq5GP53IraySAJBRUktYoGu53OnS nRUX+Hi7Np5bUlETaOhlgT86ACPAEeakRcSFI+hbuui6/X+WQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO5qrfvaYqgIa7AHpVuPHDwDk4zfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvM2YyNWRjMjItNDMyNC0z ZmY2LTgxODctNWQ0NjkyNWNmODNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0a06MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIBAhLGYI/CV90lOLxr3dXKrRW+BK/BfMcxRHKNDA8dnvVYPfOLRIlzu cPVNQMUZWuqyVpbAULlbRbXu2y4BSzs1sLszdotTW8PC/VnRB7YX+hmYHIRcjNRE 5JU9A94jJ/snOWLigQBaCf5xWhsRNa44Hc81JcTum+D0ihME2IkXVpHN2XSbZm/i RsfjGU2tpFM/oLPKpmndQPdM24o+o3lWEL605TNDmG1paQtIa19PgPpjrMVh/T38 tIBuyYtRNjmIoaIxlmr3cH+whT3iems2WkmaBERs5wjSlrPJ1i6P4SffLkGz7+Ea SMwgf7mroVL5lctmysSMBsb8ECgRXy0= -----END CERTIFICATE-----Generated at Sun Apr 12 08:11:53 2026 by rpki-client