$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/039c392c-6474-32ab-91a4-0586eea4b399.roa File: 039c392c-6474-32ab-91a4-0586eea4b399.roa (raw, json) Hash identifier: T1W8ryHUge1gYFjmff2L7IWLGzqgXa3NisHjBSX1FX8= Subject key identifier: 62:C6:07:15:92:FD:48:BD:9E:87:C3:3A:F5:66:6A:F8:E3:F7:31:22 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584AD23BF31B97785F097576AE00 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/039c392c-6474-32ab-91a4-0586eea4b399.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 397215 IP address blocks: 209.173.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:f3:1b:97:78:5f:09:75:76:ae:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=022757ff-3b99-4723-a36c-53c73775eee9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:df:a1:02:ce:de:d0:70:d9:f8:df:83:39:16: 2f:df:51:3f:19:f3:7b:61:5d:20:08:e8:a9:dd:58: e4:4a:4b:02:8b:68:a7:c7:26:1a:76:5b:c3:89:2d: 4c:25:3e:b7:df:9b:32:06:af:a9:58:f1:fa:95:bb: fe:18:4c:c0:1c:f8:a4:4e:60:ca:14:b6:7a:bd:ff: 3f:9c:12:65:cd:ae:91:9d:17:1c:b1:56:d3:58:fe: 12:dc:9b:78:e6:fb:88:da:32:fc:cf:70:e1:85:d0: be:7f:b9:37:18:21:0b:96:8b:d0:a2:20:f1:16:6c: ae:d8:fe:37:a3:39:ed:4e:9b:dc:4f:58:62:1b:5f: 63:85:98:b9:c5:06:e5:9d:89:c6:4b:f2:61:c8:d4: 98:3f:4c:4e:aa:ff:91:e2:76:00:f8:3c:eb:7d:5c: f1:12:a0:dd:af:45:09:d7:05:4f:45:4a:5c:1e:49: b5:c2:2b:45:31:4f:ef:6b:92:c2:9f:ae:80:f9:28: be:90:a8:23:ad:32:c9:16:49:ce:5a:8e:65:18:5a: 1c:45:16:52:b1:b7:cd:78:9c:9c:39:43:29:0c:44: 23:48:8b:c6:08:57:0f:57:f2:a3:8f:51:ba:26:74: 50:45:4e:a3:cb:d4:ef:e7:c9:a9:35:12:26:27:7a: 3e:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:C6:07:15:92:FD:48:BD:9E:87:C3:3A:F5:66:6A:F8:E3:F7:31:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/039c392c-6474-32ab-91a4-0586eea4b399.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 209.173.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:14:44:f1:2b:fd:2b:38:1e:a2:73:6a:d4:dd:d0:04:26:4b: 28:54:d6:64:f3:a0:3a:15:6d:bd:5e:50:55:ce:33:50:5f:da: 36:5b:c7:9c:ca:2e:32:74:2f:64:81:ba:5f:53:2e:2d:c4:da: 8e:b9:0b:bd:bb:9b:4d:e4:03:bf:82:98:88:33:77:29:39:4b: 45:76:49:d7:2b:d4:24:51:72:af:8f:32:af:62:f2:61:05:f2: f0:bb:08:58:d7:bd:29:c5:42:75:68:67:f4:9a:40:e9:88:8b: e5:7c:37:cb:b5:4f:a0:ab:9a:2f:27:9a:92:47:f8:4e:a8:5e: 38:6e:5e:4e:ad:82:78:8b:59:d2:64:1e:10:06:93:3e:75:fe: 1a:b4:e2:78:5d:5b:9d:87:33:9a:dd:4f:4f:38:23:29:15:4d: 3d:38:73:3d:ef:73:89:3b:06:02:d6:dd:e5:37:88:be:a2:7e: 4e:5e:b9:da:0e:35:8d:21:81:16:af:28:fd:68:3a:8e:96:0f: 27:12:a0:14:7c:05:aa:a8:df:88:07:9a:6a:34:4b:a6:9c:85: 72:78:6b:f2:e3:09:90:c4:18:75:ff:b3:9a:d0:b1:ad:74:34: b0:b7:e9:09:85:b0:64:09:92:17:c3:9f:79:98:ca:49:02:a3: 4c:68:42:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO/Mbl3hfCXV2rgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk MDIyNzU3ZmYtM2I5OS00NzIzLWEzNmMtNTNjNzM3NzVlZWU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkd+hAs7e0HDZ+N+DORYv31E/GfN7YV0gCOip 3VjkSksCi2inxyYadlvDiS1MJT6335syBq+pWPH6lbv+GEzAHPikTmDKFLZ6vf8/ nBJlza6RnRccsVbTWP4S3Jt45vuI2jL8z3DhhdC+f7k3GCELlovQoiDxFmyu2P43 ozntTpvcT1hiG19jhZi5xQblnYnGS/JhyNSYP0xOqv+R4nYA+DzrfVzxEqDdr0UJ 1wVPRUpcHkm1witFMU/va5LCn66A+Si+kKgjrTLJFknOWo5lGFocRRZSsbfNeJyc OUMpDEQjSIvGCFcPV/Kjj1G6JnRQRU6jy9Tv58mpNRImJ3o+pQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGLGBxWS/Ui9nofDOvVmavjj9zEiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMDM5YzM5MmMtNjQ3NC0z MmFiLTkxYTQtMDU4NmVlYTRiMzk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0a06MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHgURPEr/Ss4HqJzatTd0AQmSyhU1mTzoDoVbb1eUFXOM1Bf2jZbx5zK LjJ0L2SBul9TLi3E2o65C727m03kA7+CmIgzdyk5S0V2Sdcr1CRRcq+PMq9i8mEF 8vC7CFjXvSnFQnVoZ/SaQOmIi+V8N8u1T6Crmi8nmpJH+E6oXjhuXk6tgniLWdJk HhAGkz51/hq04nhdW52HM5rdT084IykVTT04cz3vc4k7BgLW3eU3iL6ifk5eudoO NY0hgRavKP1oOo6WDycSoBR8Baqo34gHmmo0S6achXJ4a/LjCZDEGHX/s5rQsa10 NLC36QmFsGQJkhfDn3mYykkCo0xoQq0= -----END CERTIFICATE-----Generated at Sat Aug 23 13:15:53 2025 by rpki-client