$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/dd9a8b4e-36c5-311f-a916-f016013dcb08.roa File: dd9a8b4e-36c5-311f-a916-f016013dcb08.roa (raw, json) Hash identifier: wsJD3/pM/CNES6lLBsDcO9RaslY4IpwBdNOyblzbWt4= Subject key identifier: 4A:39:57:49:A4:C6:D4:80:C2:F1:E6:76:62:27:75:31:20:A2:7F:D9 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584D746FF1CFB438189BE4BAF480 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/dd9a8b4e-36c5-311f-a916-f016013dcb08.roa Signing time: Fri 10 Apr 2026 01:00:24 +0000 ROA not before: Fri 10 Apr 2026 01:00:24 +0000 ROA not after: Thu 09 Jul 2026 01:00:24 +0000 asID: 397231 IP address blocks: 209.173.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:74:6f:f1:cf:b4:38:18:9b:e4:ba:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Apr 10 01:00:24 2026 GMT Not After : Jul 9 01:00:24 2026 GMT Subject: CN=99c40876-6592-4ca8-bf18-a60fdb2deb0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:7a:a6:5a:5b:9b:0e:b4:f7:32:5a:21:22:b5: a3:06:3d:1e:26:e9:b9:b3:5b:dc:7f:79:93:0a:7d: 8c:00:1d:61:12:52:53:23:40:ee:9f:39:98:79:ba: aa:f8:58:6b:38:a4:df:bd:83:cf:6a:1b:29:00:b9: bb:a4:fd:2a:26:3d:07:7a:80:1b:9f:b5:cd:76:82: 50:18:ae:53:d3:74:4d:88:b2:74:c8:d6:c6:af:65: d3:4e:ac:41:78:07:48:52:e2:b8:72:07:ec:be:8e: 20:62:00:a6:22:00:9b:8a:bf:57:02:06:8b:b9:c3: d1:17:fe:07:42:f5:95:6d:37:75:f5:fd:ec:b6:c1: 5b:5a:c5:31:e8:84:e0:e3:ef:b7:f3:f9:e8:26:95: 46:71:d7:f0:31:27:70:8c:88:0a:06:aa:9d:86:44: 24:9f:7e:e0:ef:65:78:27:26:f4:c6:63:03:3e:86: 75:13:46:77:10:d4:46:1f:b9:3c:92:64:a0:b8:5a: c6:9b:61:69:0d:21:77:55:92:ed:e8:c4:0e:4c:31: 8c:6b:cf:62:ab:fb:6e:f5:8d:ad:e3:ba:c9:17:72: ab:6a:36:e3:2e:27:22:3f:f1:eb:35:b1:d1:bf:23: e4:9b:90:8e:5d:64:cd:38:a4:06:c5:39:86:a7:6f: 5b:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:39:57:49:A4:C6:D4:80:C2:F1:E6:76:62:27:75:31:20:A2:7F:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/dd9a8b4e-36c5-311f-a916-f016013dcb08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 209.173.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:79:78:32:69:13:21:b0:09:c9:34:d8:c5:75:4e:6d:e2:9a: a8:6c:68:f0:46:b5:fe:fc:9b:41:d1:cf:d9:e3:40:60:0c:4c: b3:64:6d:70:b1:ec:0a:1e:42:63:30:17:9d:0e:2a:5e:50:e5: f7:c2:77:46:e6:6f:b8:5d:d6:b3:41:02:f6:75:94:fc:4e:ff: b7:0c:ed:fc:60:64:f5:15:17:f8:22:18:e3:41:2d:de:08:bb: 28:a4:d5:f5:9e:d5:50:f8:24:b1:b8:99:01:e4:62:de:80:eb: 50:bd:9d:88:2d:4c:75:b6:32:5c:50:31:05:65:54:f0:a0:ad: 0e:95:8d:37:14:6f:bf:c8:db:42:0a:51:92:b0:8f:8f:68:17: 52:5d:81:30:69:a4:5e:26:fa:bb:31:5f:9c:b1:5d:30:6f:e9: 6d:f1:1b:a1:29:d6:e4:9f:93:94:2b:6c:6c:0a:ba:e6:ff:65: 85:18:c9:d4:ca:2d:4a:42:67:fc:ec:0f:96:8a:ab:12:0d:18: b0:f5:69:a4:67:98:06:9f:5c:b0:58:85:37:b5:99:ab:2a:13: 83:20:5c:49:04:7c:40:a8:96:95:b3:5d:e1:c4:36:e7:b9:b3: 3e:ff:49:c1:c0:11:23:6a:aa:49:4c:d7:3c:8d:fd:a3:91:7f: 5b:ce:ab:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE10b/HPtDgYm+S69IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk OTljNDA4NzYtNjU5Mi00Y2E4LWJmMTgtYTYwZmRiMmRlYjBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg3qmWlubDrT3MlohIrWjBj0eJum5s1vcf3mT Cn2MAB1hElJTI0DunzmYebqq+FhrOKTfvYPPahspALm7pP0qJj0HeoAbn7XNdoJQ GK5T03RNiLJ0yNbGr2XTTqxBeAdIUuK4cgfsvo4gYgCmIgCbir9XAgaLucPRF/4H QvWVbTd19f3stsFbWsUx6ITg4++38/noJpVGcdfwMSdwjIgKBqqdhkQkn37g72V4 Jyb0xmMDPoZ1E0Z3ENRGH7k8kmSguFrGm2FpDSF3VZLt6MQOTDGMa89iq/tu9Y2t 47rJF3KrajbjLiciP/HrNbHRvyPkm5COXWTNOKQGxTmGp29bKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEo5V0mkxtSAwvHmdmIndTEgon/ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZGQ5YThiNGUtMzZjNS0z MTFmLWE5MTYtZjAxNjAxM2RjYjA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0a06MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAN5eDJpEyGwCck02MV1Tm3imqhsaPBGtf78m0HRz9njQGAMTLNkbXCx 7AoeQmMwF50OKl5Q5ffCd0bmb7hd1rNBAvZ1lPxO/7cM7fxgZPUVF/giGONBLd4I uyik1fWe1VD4JLG4mQHkYt6A61C9nYgtTHW2MlxQMQVlVPCgrQ6VjTcUb7/I20IK UZKwj49oF1JdgTBppF4m+rsxX5yxXTBv6W3xG6Ep1uSfk5QrbGwKuub/ZYUYydTK LUpCZ/zsD5aKqxINGLD1aaRnmAafXLBYhTe1masqE4MgXEkEfEColpWzXeHENue5 sz7/ScHAESNqqklM1zyN/aORf1vOq5c= -----END CERTIFICATE-----Generated at Fri Apr 17 19:24:13 2026 by rpki-client