$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bdb11f5b-1b73-33ef-ae70-e3383df12340.roa File: bdb11f5b-1b73-33ef-ae70-e3383df12340.roa (raw, json) Hash identifier: iWtLwYEs0APPWiIFdAlJPO+H81OBP+Stz1xzStfz0BM= Subject key identifier: 85:4E:3C:C1:1B:D7:D5:50:C5:E8:57:73:44:69:19:F0:45:44:DE:12 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584BB2F7F1A3AFBB5F10BE152D80 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bdb11f5b-1b73-33ef-ae70-e3383df12340.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 397242 IP address blocks: 209.173.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:f1:a3:af:bb:5f:10:be:15:2d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=015fb267-c391-4c00-8c7e-07327841d48d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:8b:31:d4:63:01:74:df:16:b9:b0:4b:4d:c3: 65:bf:ed:6d:f8:bc:e5:91:9a:ff:44:c8:3a:7e:10: ad:36:3a:4a:c3:e0:3b:dc:5a:01:15:96:1e:9d:92: 84:fb:11:c7:06:ea:e7:e6:f3:d7:99:b8:ea:f9:1f: 3a:67:f9:52:f9:5a:59:8e:3d:41:44:da:88:c6:68: 8f:97:fe:4d:f0:04:6d:61:61:44:93:d6:28:c7:47: c6:e4:63:04:ea:1c:6e:c9:52:2a:0d:28:65:c8:29: 7e:25:9f:99:24:b1:87:64:90:b5:8b:a4:43:c7:89: 40:cd:0f:59:2d:5c:b1:35:34:27:b9:43:1b:4b:25: d6:c5:03:f7:a1:32:2d:85:ca:86:ee:8b:35:83:8f: 21:43:4a:d8:21:92:28:21:82:bc:cc:a2:d5:6a:f8: 05:1e:3e:86:66:d6:5b:67:6c:4f:d2:83:3b:31:e7: 72:05:b6:b7:78:74:98:1a:f6:8d:35:b5:f3:34:8b: 9d:9f:0c:fb:38:f2:9d:6e:16:ff:57:1c:cf:e1:53: 71:a7:a5:6f:93:73:bb:5a:2f:73:f5:b7:94:70:22: 77:ed:f0:cc:cd:ca:8e:f2:df:e9:a2:8e:5d:31:ca: 8a:23:e7:2f:71:59:f1:a8:6c:e9:4b:11:45:c6:e1: 84:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:4E:3C:C1:1B:D7:D5:50:C5:E8:57:73:44:69:19:F0:45:44:DE:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bdb11f5b-1b73-33ef-ae70-e3383df12340.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 209.173.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:25:80:ed:3c:e8:e8:4e:67:c2:f9:74:93:8a:9c:15:31:c2: 6f:62:9e:22:11:f5:7a:4d:fd:10:9b:df:ff:a8:c5:77:68:e2: ea:72:ce:ab:27:43:bb:8f:29:f6:64:e4:b0:eb:96:69:9e:5f: 2f:b1:23:aa:6f:90:88:ae:56:4f:96:c2:f5:f6:58:ab:d2:d6: 61:1d:07:a3:19:f5:34:fc:f7:56:54:e6:a3:99:8b:f3:4b:92: 81:9b:49:dc:1a:86:eb:f6:a4:9e:1e:97:ed:ab:ec:a5:72:5a: 38:a3:b0:84:39:f0:ba:59:59:d1:b3:bb:c2:c9:8a:f2:f2:db: ac:31:79:75:a7:51:f3:ad:22:9b:b4:4d:45:13:68:be:3c:fe: 3b:98:b1:c7:cf:d4:6c:56:cf:25:31:60:5b:a9:02:27:2d:65: 78:42:f2:9b:34:42:d5:58:8c:0f:a6:48:cf:54:9f:ef:12:0c: 65:4f:a0:7a:6b:22:d3:9d:2e:4f:59:52:21:75:d9:c7:f7:06: 05:ca:9b:33:b8:bc:c1:3c:3a:e5:0d:6d:5d:60:be:b3:0e:83: f1:27:51:51:e7:c8:6d:00:46:0e:3a:90:ad:da:c2:de:38:4a: 46:68:a9:48:0f:f7:6d:28:ad:2d:42:45:64:10:51:50:5e:19: 4b:32:81:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy9/Gjr7tfEL4VLYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk MDE1ZmIyNjctYzM5MS00YzAwLThjN2UtMDczMjc4NDFkNDhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiosx1GMBdN8WubBLTcNlv+1t+LzlkZr/RMg6 fhCtNjpKw+A73FoBFZYenZKE+xHHBurn5vPXmbjq+R86Z/lS+VpZjj1BRNqIxmiP l/5N8ARtYWFEk9Yox0fG5GME6hxuyVIqDShlyCl+JZ+ZJLGHZJC1i6RDx4lAzQ9Z LVyxNTQnuUMbSyXWxQP3oTIthcqG7os1g48hQ0rYIZIoIYK8zKLVavgFHj6GZtZb Z2xP0oM7MedyBba3eHSYGvaNNbXzNIudnwz7OPKdbhb/VxzP4VNxp6Vvk3O7Wi9z 9beUcCJ37fDMzcqO8t/poo5dMcqKI+cvcVnxqGzpSxFFxuGEQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIVOPMEb19VQxehXc0RpGfBFRN4SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYmRiMTFmNWItMWI3My0z M2VmLWFlNzAtZTMzODNkZjEyMzQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0a06MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC0lgO086OhOZ8L5dJOKnBUxwm9iniIR9XpN/RCb3/+oxXdo4upyzqsn Q7uPKfZk5LDrlmmeXy+xI6pvkIiuVk+WwvX2WKvS1mEdB6MZ9TT891ZU5qOZi/NL koGbSdwahuv2pJ4el+2r7KVyWjijsIQ58LpZWdGzu8LJivLy26wxeXWnUfOtIpu0 TUUTaL48/juYscfP1GxWzyUxYFupAictZXhC8ps0QtVYjA+mSM9Un+8SDGVPoHpr ItOdLk9ZUiF12cf3BgXKmzO4vME8OuUNbV1gvrMOg/EnUVHnyG0ARg46kK3awt44 SkZoqUgP920orS1CRWQQUVBeGUsygS0= -----END CERTIFICATE-----Generated at Mon Nov 3 03:16:12 2025 by rpki-client