$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7a349c53-5327-33ec-9fd4-33d7a7907cfe.roa File: 7a349c53-5327-33ec-9fd4-33d7a7907cfe.roa (raw, json) Hash identifier: nGQ0QBwCKKK3o1wLla8m4P6w5nXfVgRpDOYl+RtBzmI= Subject key identifier: 0B:A8:04:44:1F:0E:9B:7B:E1:91:64:48:A6:37:F0:28:4D:5D:84:BD Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584EF7178F88D763049695298700 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7a349c53-5327-33ec-9fd4-33d7a7907cfe.roa Signing time: Wed 26 Aug 2026 13:00:12 +0000 ROA not before: Wed 26 Aug 2026 13:00:12 +0000 ROA not after: Tue 24 Nov 2026 14:00:12 +0000 asID: 397214 IP address blocks: 209.173.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f7:17:8f:88:d7:63:04:96:95:29:87:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Aug 26 13:00:12 2026 GMT Not After : Nov 24 14:00:12 2026 GMT Subject: CN=1dc6bd4e-a517-47f6-9d5a-f2a3887e189b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:9f:46:0b:44:9d:23:6c:82:2d:61:1b:aa:6f: 2a:f2:ea:20:22:7d:4c:11:ce:85:cd:18:2f:2b:4a: 09:21:9a:94:1f:a8:fa:fd:16:88:cc:a6:28:08:32: 07:63:7b:e9:4f:2e:c5:45:64:31:35:29:92:38:f0: 66:0d:1c:38:dd:3b:25:dd:21:06:a9:ca:4d:35:71: e4:90:de:f8:c9:1e:a4:44:19:b3:db:cb:6e:05:f8: 38:22:92:b6:30:b4:6e:16:17:96:07:7b:43:08:58: 5c:67:c9:07:b4:94:bb:28:2c:78:b7:8e:cc:b6:30: 68:63:1b:95:5b:88:36:f7:63:92:f4:89:57:92:f5: 65:86:c5:c6:5c:cc:a9:d3:65:de:a0:59:c3:d5:fa: b1:84:47:1e:e9:87:27:d9:df:20:a8:41:cc:3d:cc: a2:ca:de:4f:6a:89:4a:3f:8f:45:01:11:6d:0c:fc: 74:bc:ce:f5:a9:34:4f:9f:09:36:73:5e:14:03:f5: 4b:fa:41:10:aa:05:f2:46:bd:e9:db:b0:85:0f:00: 16:a0:53:c5:5c:47:bf:c7:f4:b9:80:19:ac:16:c3: 2c:ab:84:5d:58:0a:07:40:3b:f9:1f:9a:2d:02:e1: 17:4e:3a:1d:3e:f1:d9:d4:82:00:22:f4:9d:c7:c4: 72:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:A8:04:44:1F:0E:9B:7B:E1:91:64:48:A6:37:F0:28:4D:5D:84:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7a349c53-5327-33ec-9fd4-33d7a7907cfe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 209.173.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:2a:81:ab:f2:f1:f7:55:e8:ae:4d:d2:d8:e5:96:d0:e7:3f: e6:01:be:f7:a0:c8:2a:a4:3e:da:6e:67:0c:34:07:44:e5:75: 3e:f7:3d:4e:c4:37:e4:27:bb:cd:86:c1:2d:81:d7:28:da:30: 14:f2:bc:70:44:37:b3:bb:39:5e:05:56:9d:36:97:a2:0a:2b: 6a:ad:92:d1:0c:1c:27:98:c9:db:1e:c0:6c:e2:e1:3d:9f:67: 53:5a:62:1c:87:18:5a:b7:2e:fb:0a:50:05:51:76:1a:0c:8c: 9e:f7:0f:0c:ab:2e:26:7b:ac:c1:d7:c3:60:e8:6c:9d:83:ee: 62:d8:16:b9:fd:07:28:0f:8a:64:1e:67:ff:62:a2:7a:0a:4f: 7a:e0:c7:7b:da:02:da:09:65:a9:03:95:3e:f2:8e:1a:15:13: 45:f2:ba:2a:dd:08:76:05:6b:02:6e:70:32:77:ac:d4:0d:8e: b4:16:a8:48:bb:73:7d:a3:3a:73:15:ef:32:0a:18:52:45:09: 09:15:04:53:24:0a:a0:28:10:60:d9:47:56:1f:3f:a7:8e:a9: a5:6f:5e:aa:56:49:27:84:88:5d:0b:9a:9c:b3:76:f3:d5:d8: 5c:6e:a3:96:1b:0e:d2:7d:61:ec:62:f1:06:32:b3:65:e6:26: b4:f3:a2:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE73F4+I12MElpUphwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk MWRjNmJkNGUtYTUxNy00N2Y2LTlkNWEtZjJhMzg4N2UxODliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZ9GC0SdI2yCLWEbqm8q8uogIn1MEc6FzRgv K0oJIZqUH6j6/RaIzKYoCDIHY3vpTy7FRWQxNSmSOPBmDRw43Tsl3SEGqcpNNXHk kN74yR6kRBmz28tuBfg4IpK2MLRuFheWB3tDCFhcZ8kHtJS7KCx4t47MtjBoYxuV W4g292OS9IlXkvVlhsXGXMyp02XeoFnD1fqxhEce6Ycn2d8gqEHMPcyiyt5PaolK P49FARFtDPx0vM71qTRPnwk2c14UA/VL+kEQqgXyRr3p27CFDwAWoFPFXEe/x/S5 gBmsFsMsq4RdWAoHQDv5H5otAuEXTjodPvHZ1IIAIvSdx8Ry/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAuoBEQfDpt74ZFkSKY38ChNXYS9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvN2EzNDljNTMtNTMyNy0z M2VjLTlmZDQtMzNkN2E3OTA3Y2ZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0a06MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIcqgavy8fdV6K5N0tjlltDnP+YBvvegyCqkPtpuZww0B0TldT73PU7E N+Qnu82GwS2B1yjaMBTyvHBEN7O7OV4FVp02l6IKK2qtktEMHCeYydsewGzi4T2f Z1NaYhyHGFq3LvsKUAVRdhoMjJ73DwyrLiZ7rMHXw2DobJ2D7mLYFrn9BygPimQe Z/9ionoKT3rgx3vaAtoJZakDlT7yjhoVE0XyuirdCHYFawJucDJ3rNQNjrQWqEi7 c32jOnMV7zIKGFJFCQkVBFMkCqAoEGDZR1YfP6eOqaVvXqpWSSeEiF0LmpyzdvPV 2Fxuo5YbDtJ9Yexi8QYys2XmJrTzomE= -----END CERTIFICATE-----Generated at Mon Sep 28 19:49:19 2026 by rpki-client