$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/039c392c-6474-32ab-91a4-0586eea4b399.roa File: 039c392c-6474-32ab-91a4-0586eea4b399.roa (raw, json) Hash identifier: na9f7GBO56Pcc0OcsqGa9Brtg63Qwlx6nXKea6FPJb4= Subject key identifier: 2D:B7:3A:DC:25:FC:F2:D5:3B:72:82:B2:43:F0:D5:1A:7B:69:53:4F Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584BB2F7EFFE75ABA5E695AE9E00 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/039c392c-6474-32ab-91a4-0586eea4b399.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 397215 IP address blocks: 209.173.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:ef:fe:75:ab:a5:e6:95:ae:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=4ac27a27-17eb-4874-a74f-c41e5444b8c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:67:a8:db:51:3b:e2:af:fe:39:98:2b:23:3e: 25:84:c8:dc:3c:ed:92:b2:0d:c6:32:92:f0:84:9b: ab:4a:b1:6b:2b:ef:2f:eb:65:1e:5d:19:a7:c5:1b: 90:b4:26:52:fa:37:7f:b2:b7:5f:42:c9:53:c3:1f: 24:89:6a:d2:62:0c:26:c5:55:c0:9e:3b:5a:2e:7c: 58:c8:2f:8d:33:48:31:54:da:11:8b:76:96:36:a1: 7d:fc:f6:17:fd:e3:f5:19:9c:f1:99:6a:e6:fb:d0: c2:3a:09:10:8b:e3:6c:21:a8:6c:83:47:6d:fe:cb: af:15:dc:24:46:15:a1:ff:44:dc:c2:8a:ad:d2:80: 58:d1:2b:6c:fe:bf:ca:06:c8:36:fe:93:b6:67:78: ba:8d:90:09:f2:cb:04:aa:32:66:ad:69:cd:94:c5: db:65:34:5e:af:48:82:cb:21:f2:46:b0:73:f9:8d: 5b:9d:7c:91:18:fe:b5:ef:ac:10:08:48:14:50:ae: ad:ae:e4:36:3d:38:a6:2d:1e:0a:6c:af:89:2d:42: 50:62:ec:4a:6b:20:3d:b0:d4:f1:7e:e7:0e:d6:57: 7a:3d:29:0f:05:40:62:e0:32:e8:ed:4e:e9:9e:c4: 31:f1:73:5c:7f:59:26:c8:58:83:b4:fe:01:75:c3: af:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:B7:3A:DC:25:FC:F2:D5:3B:72:82:B2:43:F0:D5:1A:7B:69:53:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/039c392c-6474-32ab-91a4-0586eea4b399.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 209.173.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:8c:d9:3b:9e:7a:b5:a1:44:48:60:44:1c:86:53:4f:46:28: b9:ab:54:9d:14:17:0a:a5:34:56:5d:0c:00:31:1e:9d:d1:59: 1c:fe:9e:e7:0e:b6:9b:5c:05:9b:0a:9c:17:64:85:47:87:a0: cd:1b:17:88:80:91:0a:74:7c:2d:4c:df:ff:24:92:40:4d:55: 70:c5:7c:5d:53:03:a2:2c:b6:81:f1:b1:5c:39:a0:c0:0c:af: 00:b2:12:f8:57:3a:76:d8:74:51:24:64:ac:3d:2d:94:95:2f: 30:d1:c7:08:50:d3:07:f3:61:18:c6:f4:99:70:b2:73:07:f8: 59:7d:da:0d:1c:11:fd:83:0f:34:91:9b:3d:b0:c1:e7:cf:9e: e8:f6:2e:b0:84:a8:49:7a:4f:df:6b:00:15:61:08:d1:25:15: 15:c0:c0:a9:90:dc:c9:6e:27:d5:cf:29:29:98:12:04:c5:c3: 0d:01:a7:72:f8:96:82:cb:53:1a:cb:95:42:5e:63:ad:04:cf: 19:f6:ef:29:6e:96:f7:fb:f6:fd:92:5f:7a:41:79:89:7b:63: 0a:f4:36:cf:3c:ef:a0:52:00:ef:17:6f:6e:ad:34:5f:4b:56: a3:87:0b:59:f4:b2:e4:f7:53:0d:ca:2a:c5:54:32:31:8c:99: 7e:90:85:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy9+/+daul5pWungAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk NGFjMjdhMjctMTdlYi00ODc0LWE3NGYtYzQxZTU0NDRiOGM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2eo21E74q/+OZgrIz4lhMjcPO2Ssg3GMpLw hJurSrFrK+8v62UeXRmnxRuQtCZS+jd/srdfQslTwx8kiWrSYgwmxVXAnjtaLnxY yC+NM0gxVNoRi3aWNqF9/PYX/eP1GZzxmWrm+9DCOgkQi+NsIahsg0dt/suvFdwk RhWh/0Tcwoqt0oBY0Sts/r/KBsg2/pO2Z3i6jZAJ8ssEqjJmrWnNlMXbZTRer0iC yyHyRrBz+Y1bnXyRGP6176wQCEgUUK6truQ2PTimLR4KbK+JLUJQYuxKayA9sNTx fucO1ld6PSkPBUBi4DLo7U7pnsQx8XNcf1kmyFiDtP4BdcOvRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC23Otwl/PLVO3KCskPw1Rp7aVNPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMDM5YzM5MmMtNjQ3NC0z MmFiLTkxYTQtMDU4NmVlYTRiMzk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0a06MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA+M2TueerWhREhgRByGU09GKLmrVJ0UFwqlNFZdDAAxHp3RWRz+nucO tptcBZsKnBdkhUeHoM0bF4iAkQp0fC1M3/8kkkBNVXDFfF1TA6IstoHxsVw5oMAM rwCyEvhXOnbYdFEkZKw9LZSVLzDRxwhQ0wfzYRjG9JlwsnMH+Fl92g0cEf2DDzSR mz2wwefPnuj2LrCEqEl6T99rABVhCNElFRXAwKmQ3MluJ9XPKSmYEgTFww0Bp3L4 loLLUxrLlUJeY60Ezxn27ylulvf79v2SX3pBeYl7Ywr0Ns8876BSAO8Xb26tNF9L VqOHC1n0suT3Uw3KKsVUMjGMmX6QhVE= -----END CERTIFICATE-----Generated at Tue Nov 4 22:05:44 2025 by rpki-client