$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/dd9a8b4e-36c5-311f-a916-f016013dcb08.roa File: dd9a8b4e-36c5-311f-a916-f016013dcb08.roa (raw, json) Hash identifier: +4u99PhMzIoCHEC3ZGikm1Zpq2ZSiN5kMB1NWfrzFkQ= Subject key identifier: 46:91:7E:EF:4A:38:5C:77:F4:33:10:D7:75:DB:CA:BE:CD:CA:21:8D Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584AD23BF43601360730E0F18E00 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/dd9a8b4e-36c5-311f-a916-f016013dcb08.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 397231 IP address blocks: 209.173.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:f4:36:01:36:07:30:e0:f1:8e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=08327046-2cdb-49a7-bd0a-f08cec8c0767 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d7:9d:8b:eb:07:67:7c:40:b8:14:da:39:b1: c2:36:59:e4:32:12:6d:b5:6f:55:78:90:a0:d4:e6: 42:22:77:7e:13:46:8d:a3:69:83:07:8a:8d:b3:8b: a8:9d:b6:dc:a4:43:29:25:0a:dc:bc:1b:47:72:f4: 13:3b:90:b1:a3:41:ad:6a:d7:56:cf:08:56:1f:34: 64:96:89:6b:93:a1:de:75:64:ce:5b:48:ec:c4:8b: 35:5d:ca:5f:ec:dc:4c:f7:2c:50:1a:fc:df:37:90: 67:66:09:c2:72:08:54:27:5c:b3:06:97:48:35:a9: 05:36:c7:2f:92:20:6b:e9:f0:91:66:9f:fd:91:cd: 5e:a6:f0:d2:80:79:1f:51:36:75:87:e3:15:0f:ea: f5:fd:dd:f1:52:b0:90:5b:89:a2:d9:41:26:55:76: 73:0c:28:3b:c9:cb:0c:bb:81:4d:ea:48:54:ca:a2: b5:9f:be:fa:6a:39:0b:48:8f:43:b9:93:3b:4a:83: f1:38:37:fd:08:ac:30:5a:a4:d2:f2:0f:b0:ed:a8: ae:4f:58:d5:95:f6:27:a3:34:0e:9d:b1:f7:1c:0e: f0:e4:cf:08:7d:58:d1:58:17:7e:bc:4d:e9:43:9e: 74:7b:1e:1f:72:1f:db:db:c1:ba:20:2e:de:51:02: bf:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:91:7E:EF:4A:38:5C:77:F4:33:10:D7:75:DB:CA:BE:CD:CA:21:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/dd9a8b4e-36c5-311f-a916-f016013dcb08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 209.173.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:05:b3:96:d7:f8:61:05:e6:d8:9c:cf:2e:63:f3:c7:65:c1: 4d:4f:2a:39:26:6d:56:c7:ea:77:7c:d7:12:9e:7a:3d:f7:77: 9a:20:e6:d3:f6:62:ca:ed:48:62:47:c2:39:82:29:03:f9:ea: d8:22:dc:67:f1:ce:79:78:95:1d:5a:05:22:6d:01:c7:d7:c2: 67:5a:d5:29:79:df:88:f9:62:51:a4:07:be:41:4e:c3:bc:23: 85:b1:ab:1e:af:82:77:26:12:51:70:21:42:5c:ae:db:2f:57: 67:c5:82:4d:e4:9c:da:6d:dd:ae:ea:9f:41:e8:b8:11:76:2a: 34:d8:20:83:f8:1c:4a:7f:90:54:10:99:7c:be:d3:30:72:6b: 41:a0:96:42:8c:a6:37:84:46:2b:a3:e2:ac:6f:1c:ac:df:cd: c5:ce:42:d1:09:58:5a:8a:6b:72:bf:ee:9d:69:ff:7f:2e:ed: 04:f5:0e:2c:8b:e8:bc:5a:62:25:b4:32:da:1a:4f:e1:aa:d1: 03:5a:b3:33:13:28:82:43:17:31:a8:48:d7:9a:81:6b:c9:b8: 49:9c:86:5f:3d:8b:73:e2:46:22:80:35:16:5d:f4:c7:67:c9: 72:ed:90:81:7f:cf:6d:69:62:fd:ac:bc:ad:8e:31:54:9b:08: 6f:b3:d0:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO/Q2ATYHMODxjgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk MDgzMjcwNDYtMmNkYi00OWE3LWJkMGEtZjA4Y2VjOGMwNzY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0tedi+sHZ3xAuBTaObHCNlnkMhJttW9VeJCg 1OZCInd+E0aNo2mDB4qNs4uonbbcpEMpJQrcvBtHcvQTO5Cxo0GtatdWzwhWHzRk lolrk6HedWTOW0jsxIs1Xcpf7NxM9yxQGvzfN5BnZgnCcghUJ1yzBpdINakFNscv kiBr6fCRZp/9kc1epvDSgHkfUTZ1h+MVD+r1/d3xUrCQW4mi2UEmVXZzDCg7ycsM u4FN6khUyqK1n776ajkLSI9DuZM7SoPxODf9CKwwWqTS8g+w7aiuT1jVlfYnozQO nbH3HA7w5M8IfVjRWBd+vE3pQ550ex4fch/b28G6IC7eUQK/IwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEaRfu9KOFx39DMQ13Xbyr7NyiGNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZGQ5YThiNGUtMzZjNS0z MTFmLWE5MTYtZjAxNjAxM2RjYjA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0a06MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACMFs5bX+GEF5ticzy5j88dlwU1PKjkmbVbH6nd81xKeej33d5og5tP2 YsrtSGJHwjmCKQP56tgi3Gfxznl4lR1aBSJtAcfXwmda1Sl534j5YlGkB75BTsO8 I4Wxqx6vgncmElFwIUJcrtsvV2fFgk3knNpt3a7qn0HouBF2KjTYIIP4HEp/kFQQ mXy+0zBya0GglkKMpjeERiuj4qxvHKzfzcXOQtEJWFqKa3K/7p1p/38u7QT1DiyL 6LxaYiW0MtoaT+Gq0QNaszMTKIJDFzGoSNeagWvJuEmchl89i3PiRiKANRZd9Mdn yXLtkIF/z21pYv2svK2OMVSbCG+z0Eo= -----END CERTIFICATE-----Generated at Mon Oct 27 08:17:21 2025 by rpki-client