$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c336a6df-4302-3302-b64d-c6f8f6329341.roa File: c336a6df-4302-3302-b64d-c6f8f6329341.roa (raw, json) Hash identifier: WCjNsmUHFJ6t0oEiOq9cehJlg29JRhjHSLIlqBT+J/g= Subject key identifier: 91:D9:58:6F:6F:A3:F4:D3:1D:11:8E:35:E9:38:50:91:6D:3C:A7:45 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584EF7178FE01BC3A6C9BFD84560 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c336a6df-4302-3302-b64d-c6f8f6329341.roa Signing time: Wed 26 Aug 2026 13:00:12 +0000 ROA not before: Wed 26 Aug 2026 13:00:12 +0000 ROA not after: Tue 24 Nov 2026 14:00:12 +0000 asID: 397221 IP address blocks: 209.173.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f7:17:8f:e0:1b:c3:a6:c9:bf:d8:45:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Aug 26 13:00:12 2026 GMT Not After : Nov 24 14:00:12 2026 GMT Subject: CN=d5f49fb7-39a1-4eb1-a8db-106f07ae83bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:b8:66:4f:bd:2c:82:ab:4e:ce:22:c6:14:69: ce:07:cd:58:f0:d7:04:c3:69:b3:b9:d6:03:6c:b0: c5:84:b3:47:ff:41:4e:12:cc:d4:c2:45:e5:b0:bc: 16:75:c9:72:c3:4c:12:04:e7:83:0e:6a:c7:5c:55: af:cd:f9:07:eb:f0:1a:46:fd:f1:62:95:c0:b7:6d: e9:23:47:57:44:d9:ca:98:b4:a2:90:b9:27:bf:6e: 2c:c9:db:96:fc:33:55:15:e3:f5:39:37:69:00:44: 4f:e3:5f:84:ac:11:b2:74:98:df:1b:02:dd:4c:7f: 17:57:3b:f9:92:9f:dc:d6:c2:54:d1:43:56:6c:3a: 20:a5:07:32:21:89:5a:e9:36:fc:2a:6f:c9:1c:07: 55:26:b5:12:ea:24:db:3e:a4:3c:e3:a2:25:e1:79: be:1d:71:08:d7:e1:57:ea:ad:2a:c5:be:a2:8e:19: 0d:85:69:c5:57:10:6c:28:bd:36:20:1e:25:a1:78: af:33:0a:65:62:52:e7:83:b8:81:d8:7e:6f:05:31: 99:a7:ac:5e:c8:dd:80:24:45:d5:b2:6c:34:a9:2d: 1f:b6:8a:c9:a9:8f:05:a3:d0:c6:fd:9e:d5:a4:2a: 10:ac:aa:88:06:a1:62:71:8a:88:1e:4e:80:26:4b: db:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:D9:58:6F:6F:A3:F4:D3:1D:11:8E:35:E9:38:50:91:6D:3C:A7:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c336a6df-4302-3302-b64d-c6f8f6329341.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 209.173.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:ad:fa:78:ca:76:6d:cd:31:c6:30:3e:f4:8e:f5:13:07:02: ab:e7:1b:56:11:da:eb:55:a8:31:12:05:fc:ed:2e:dd:f5:7c: 5d:05:b5:86:c6:d8:04:75:39:c8:6e:53:5b:7c:8c:b3:b4:83: 3f:8f:6d:29:5b:c3:8b:5f:63:e3:eb:43:d9:54:db:bf:1c:66: 88:91:9d:31:d0:e4:7c:46:74:87:f7:d5:6e:20:1b:d5:ce:dd: 3e:cd:0d:7a:5d:bd:e5:60:06:b2:70:b0:30:6f:d0:db:95:5a: ae:57:c1:7d:bd:0a:40:22:5a:62:30:38:e8:39:15:c2:1e:5c: 87:89:77:07:71:50:5c:bd:c2:75:03:48:9f:0e:14:5e:86:dc: 35:98:4d:05:2d:c7:a2:a7:1d:7b:d0:3c:ed:a0:98:06:f8:af: fe:6f:9c:b8:81:10:af:9a:6b:1f:d5:64:23:a6:00:fa:53:a5: 0b:5c:5d:18:f3:8a:0d:c7:98:3d:eb:66:4f:b0:7f:33:7c:ab: 63:ca:97:f5:d7:be:5b:aa:52:eb:b9:4e:3c:e7:55:7f:24:b1: 7c:24:eb:c2:bc:54:21:fa:d2:36:9e:01:d8:4b:ea:3a:16:4d: 2f:a1:25:4e:7e:18:34:3b:b8:31:57:ba:84:e2:58:f7:dc:2b: 55:0a:76:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE73F4/gG8Omyb/YRWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk ZDVmNDlmYjctMzlhMS00ZWIxLWE4ZGItMTA2ZjA3YWU4M2JkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbhmT70sgqtOziLGFGnOB81Y8NcEw2mzudYD bLDFhLNH/0FOEszUwkXlsLwWdclyw0wSBOeDDmrHXFWvzfkH6/AaRv3xYpXAt23p I0dXRNnKmLSikLknv24syduW/DNVFeP1OTdpAERP41+ErBGydJjfGwLdTH8XVzv5 kp/c1sJU0UNWbDogpQcyIYla6Tb8Km/JHAdVJrUS6iTbPqQ846Il4Xm+HXEI1+FX 6q0qxb6ijhkNhWnFVxBsKL02IB4loXivMwplYlLng7iB2H5vBTGZp6xeyN2AJEXV smw0qS0ftorJqY8Fo9DG/Z7VpCoQrKqIBqFicYqIHk6AJkvbCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJHZWG9vo/TTHRGONek4UJFtPKdFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYzMzNmE2ZGYtNDMwMi0z MzAyLWI2NGQtYzZmOGY2MzI5MzQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0a06MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADKt+njKdm3NMcYwPvSO9RMHAqvnG1YR2utVqDESBfztLt31fF0FtYbG 2AR1OchuU1t8jLO0gz+PbSlbw4tfY+PrQ9lU278cZoiRnTHQ5HxGdIf31W4gG9XO 3T7NDXpdveVgBrJwsDBv0NuVWq5XwX29CkAiWmIwOOg5FcIeXIeJdwdxUFy9wnUD SJ8OFF6G3DWYTQUtx6KnHXvQPO2gmAb4r/5vnLiBEK+aax/VZCOmAPpTpQtcXRjz ig3HmD3rZk+wfzN8q2PKl/XXvluqUuu5TjznVX8ksXwk68K8VCH60jaeAdhL6joW TS+hJU5+GDQ7uDFXuoTiWPfcK1UKdsQ= -----END CERTIFICATE-----Generated at Mon Sep 28 19:44:44 2026 by rpki-client