$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/861d3a4e-94b3-3b8a-b9e4-bdd35d4d607a.roa File: 861d3a4e-94b3-3b8a-b9e4-bdd35d4d607a.roa (raw, json) Hash identifier: hBirMi7As6ojmIm4dAMezlFoCo8q1FEFyXi72L5CLUc= Subject key identifier: 3A:9B:E2:A2:D1:B7:16:9D:D5:7A:85:4B:70:2C:B4:DA:A0:A4:68:55 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584AD23BF4ADCFC07CC274F3FE80 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/861d3a4e-94b3-3b8a-b9e4-bdd35d4d607a.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 397238 IP address blocks: 209.173.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 01 Nov 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:f4:ad:cf:c0:7c:c2:74:f3:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=3ea7d845-d753-4d38-a1b1-31d1438fe768 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:b4:d1:dd:32:a1:a4:ee:d8:59:85:33:56:da: e7:14:bf:6f:2b:bb:12:a2:ec:4c:cb:eb:32:e6:23: e9:fe:73:bd:68:a6:e7:a4:74:0d:60:00:33:2c:78: cf:04:ec:b6:2b:d2:1a:f2:e1:30:8c:06:50:bb:45: 95:62:73:24:e8:55:50:49:9c:6a:25:b9:47:95:b0: 31:2d:2b:98:4d:40:ef:07:43:01:82:d5:2e:48:9f: 8a:f0:54:34:c5:aa:b6:e3:7d:14:2e:dd:a6:a2:82: 46:fa:a0:f6:9d:d6:87:4d:00:34:a5:4c:cb:1c:43: 25:d1:ed:69:9a:bc:15:39:bf:37:92:ad:1e:cd:ce: b2:8f:63:da:2c:10:57:96:97:2d:48:1b:21:8c:36: c1:87:fe:69:46:72:d3:7a:e5:d9:20:0e:e4:72:d0: f9:73:44:d5:f3:89:12:98:0f:71:6f:7e:89:17:c5: cf:a0:ab:fc:a8:b1:21:19:f0:6f:9a:8d:d4:0b:b0: 07:78:a6:e4:8f:10:d8:91:76:45:97:78:e8:cb:b0: 6f:8b:09:86:16:63:65:4b:e3:3f:fe:b1:a2:0f:1c: 2b:01:16:54:92:15:bb:c6:13:48:e5:73:a5:2b:08: 38:e7:04:82:0b:76:e0:43:11:3a:e1:f7:17:a5:09: 5d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:9B:E2:A2:D1:B7:16:9D:D5:7A:85:4B:70:2C:B4:DA:A0:A4:68:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/861d3a4e-94b3-3b8a-b9e4-bdd35d4d607a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 209.173.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:4d:c5:a5:fc:7f:93:5a:37:a1:db:11:32:12:d9:c2:c7:e2: 3d:f3:9d:5f:21:b2:c6:60:59:10:ac:e0:b6:b8:3d:53:46:14: cf:23:4a:ec:26:42:4b:8c:db:54:7d:c7:34:1a:89:18:1f:b5: c1:68:23:bb:c9:9d:a8:7e:84:c0:7a:f5:9c:0d:6b:be:5f:eb: 19:6a:e6:b0:1b:56:bb:66:2a:aa:12:d8:57:1d:ce:d5:0d:c9: 11:a8:f2:7e:5b:62:19:fc:ca:3c:0f:52:c9:66:36:18:3f:1e: c1:cb:1d:14:98:e5:9d:16:22:ca:f8:d0:e4:41:9b:3c:19:ba: c4:25:7e:48:8c:07:3a:bf:34:ab:db:55:99:34:71:70:4b:a3: 3e:35:35:a7:5c:c6:4c:4e:47:8d:64:8c:e4:34:6f:73:19:1d: 9a:1b:37:14:34:3e:66:63:3e:2c:e5:78:fc:13:fc:f2:da:f2: 22:43:62:50:c6:58:a5:b2:94:08:69:34:2d:6a:8a:51:d3:45: c6:25:8e:34:1b:ae:88:6a:86:0a:6b:18:f5:02:e1:08:f2:ca: f0:4e:f6:24:a2:de:8d:7f:e8:e2:5e:03:0f:79:75:3b:73:1c: 70:d1:db:56:08:65:34:89:de:14:3d:be:ce:26:3c:7c:8b:5d: 67:14:45:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO/Stz8B8wnTz/oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk M2VhN2Q4NDUtZDc1My00ZDM4LWExYjEtMzFkMTQzOGZlNzY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLTR3TKhpO7YWYUzVtrnFL9vK7sSouxMy+sy 5iPp/nO9aKbnpHQNYAAzLHjPBOy2K9Ia8uEwjAZQu0WVYnMk6FVQSZxqJblHlbAx LSuYTUDvB0MBgtUuSJ+K8FQ0xaq2430ULt2mooJG+qD2ndaHTQA0pUzLHEMl0e1p mrwVOb83kq0ezc6yj2PaLBBXlpctSBshjDbBh/5pRnLTeuXZIA7kctD5c0TV84kS mA9xb36JF8XPoKv8qLEhGfBvmo3UC7AHeKbkjxDYkXZFl3joy7BviwmGFmNlS+M/ /rGiDxwrARZUkhW7xhNI5XOlKwg45wSCC3bgQxE64fcXpQldSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDqb4qLRtxad1XqFS3AstNqgpGhVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvODYxZDNhNGUtOTRiMy0z YjhhLWI5ZTQtYmRkMzVkNGQ2MDdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0a06MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACtNxaX8f5NaN6HbETIS2cLH4j3znV8hssZgWRCs4La4PVNGFM8jSuwm QkuM21R9xzQaiRgftcFoI7vJnah+hMB69ZwNa75f6xlq5rAbVrtmKqoS2FcdztUN yRGo8n5bYhn8yjwPUslmNhg/HsHLHRSY5Z0WIsr40ORBmzwZusQlfkiMBzq/NKvb VZk0cXBLoz41NadcxkxOR41kjOQ0b3MZHZobNxQ0PmZjPizlePwT/PLa8iJDYlDG WKWylAhpNC1qilHTRcYljjQbrohqhgprGPUC4QjyyvBO9iSi3o1/6OJeAw95dTtz HHDR21YIZTSJ3hQ9vs4mPHyLXWcURYw= -----END CERTIFICATE-----Generated at Thu Oct 30 15:30:19 2025 by rpki-client