$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/17fc3f96-ff5e-3589-864f-e6492e7b5200.roa File: 17fc3f96-ff5e-3589-864f-e6492e7b5200.roa (raw, json) Hash identifier: z3l0LT6jPUZYMT08gRISWT+oRxbjTydAnAWQDyXASzw= Subject key identifier: 62:FB:FE:A9:5F:C1:1C:3D:A4:84:D5:A6:83:04:D4:E2:57:5D:1E:3D Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584BB2F7F183B10283D869A82E80 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/17fc3f96-ff5e-3589-864f-e6492e7b5200.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 397240 IP address blocks: 209.173.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:f1:83:b1:02:83:d8:69:a8:2e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=034f5509-dda3-42f6-bc1b-8da293335184 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:0e:a0:20:24:a1:a2:aa:96:86:d5:80:47:b1: ab:cd:73:98:95:7b:3a:b0:48:6b:bc:8c:8a:92:63: 72:af:bc:d1:1c:09:91:8d:31:cf:4d:fc:de:c9:16: b2:20:d3:1e:e7:9f:ad:74:a6:b0:24:b1:22:dc:de: a8:17:ca:2e:47:07:9d:78:19:37:91:80:9a:12:e0: 5c:30:50:68:d5:54:0c:ac:25:00:34:40:49:96:e2: 94:d9:eb:6f:80:2d:b0:76:de:fd:6a:8f:1a:21:9c: f4:18:3a:cc:fc:d2:53:e5:73:45:9f:f2:8d:cb:35: 26:45:1a:a9:44:d2:f0:01:31:de:af:c0:c4:74:b5: b7:a2:c1:d0:38:50:c9:86:79:63:14:a8:f9:0e:dd: 54:b1:61:db:78:24:78:09:ea:27:6b:08:5b:78:bf: 3a:1e:11:dc:07:86:a3:31:92:fb:70:41:ae:4d:34: a8:33:d2:a9:b8:06:5e:91:7e:11:03:6c:5e:e8:ac: fe:fd:6c:a1:c7:1e:84:42:81:14:6c:18:75:63:6b: d1:67:9a:73:96:fc:2e:d5:73:17:93:e2:b6:b6:e8: 6e:53:3a:b0:07:82:cd:68:01:88:b4:1f:81:be:0a: 21:ed:98:50:ef:b9:26:c1:fd:71:42:82:5f:05:7f: 50:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:FB:FE:A9:5F:C1:1C:3D:A4:84:D5:A6:83:04:D4:E2:57:5D:1E:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/17fc3f96-ff5e-3589-864f-e6492e7b5200.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 209.173.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:69:e7:34:8b:25:75:ef:7d:41:ae:90:ab:84:50:98:a9:15: 1c:c1:3e:15:4d:d2:7b:e2:32:e7:fd:f0:53:89:13:3a:0c:f3: 85:5e:15:db:d1:ce:4d:6f:47:e4:48:a4:8c:6f:40:83:7d:c9: 75:f1:29:34:71:ca:cb:83:08:8d:89:8c:07:9d:62:9c:b5:32: a4:d8:dc:1e:44:26:9c:bc:e0:65:82:a3:96:77:8e:21:ec:54: 6a:b3:ca:e2:69:0f:8e:cc:f5:22:63:dc:81:8c:0e:64:db:17: 80:f0:5a:ad:86:ae:11:48:14:b3:30:24:3d:e2:eb:26:ba:b3: 35:01:37:f3:0d:45:d1:4e:bf:9f:97:da:4b:3e:8e:c5:d9:48: 41:6c:0a:ca:a6:b6:e8:f6:71:c6:2c:c0:5b:08:f7:f9:07:4c: e2:7a:d3:92:2b:60:f9:26:5a:a3:23:0d:24:f4:97:b0:d1:f8: 4b:18:77:ba:a0:f2:68:fb:a8:7a:01:b5:58:36:8d:cb:f8:b4: 3e:ae:f9:0c:5b:73:f0:2e:0e:89:88:bf:f9:4d:3c:f8:26:ad: 82:9c:4c:04:72:f3:62:ba:07:0e:b6:17:24:fc:0f:f1:4c:f8: 02:eb:f0:94:cc:22:2d:ce:b5:6a:6a:54:ab:d5:4d:a1:2e:f3: e5:86:df:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy9/GDsQKD2GmoLoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk MDM0ZjU1MDktZGRhMy00MmY2LWJjMWItOGRhMjkzMzM1MTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiw6gICShoqqWhtWAR7GrzXOYlXs6sEhrvIyK kmNyr7zRHAmRjTHPTfzeyRayINMe55+tdKawJLEi3N6oF8ouRwedeBk3kYCaEuBc MFBo1VQMrCUANEBJluKU2etvgC2wdt79ao8aIZz0GDrM/NJT5XNFn/KNyzUmRRqp RNLwATHer8DEdLW3osHQOFDJhnljFKj5Dt1UsWHbeCR4CeonawhbeL86HhHcB4aj MZL7cEGuTTSoM9KpuAZekX4RA2xe6Kz+/Wyhxx6EQoEUbBh1Y2vRZ5pzlvwu1XMX k+K2tuhuUzqwB4LNaAGItB+Bvgoh7ZhQ77kmwf1xQoJfBX9QjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGL7/qlfwRw9pITVpoME1OJXXR49MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMTdmYzNmOTYtZmY1ZS0z NTg5LTg2NGYtZTY0OTJlN2I1MjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0a06MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADNp5zSLJXXvfUGukKuEUJipFRzBPhVN0nviMuf98FOJEzoM84VeFdvR zk1vR+RIpIxvQIN9yXXxKTRxysuDCI2JjAedYpy1MqTY3B5EJpy84GWCo5Z3jiHs VGqzyuJpD47M9SJj3IGMDmTbF4DwWq2GrhFIFLMwJD3i6ya6szUBN/MNRdFOv5+X 2ks+jsXZSEFsCsqmtuj2ccYswFsI9/kHTOJ605IrYPkmWqMjDST0l7DR+EsYd7qg 8mj7qHoBtVg2jcv4tD6u+Qxbc/AuDomIv/lNPPgmrYKcTARy82K6Bw62FyT8D/FM +ALr8JTMIi3OtWpqVKvVTaEu8+WG334= -----END CERTIFICATE-----Generated at Tue Nov 4 22:03:12 2025 by rpki-client