$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/17a200a6-269f-3a9a-9d3c-8356b5035310.roa File: 17a200a6-269f-3a9a-9d3c-8356b5035310.roa (raw, json) Hash identifier: IlSakCSCRnkEqVLNUOfCw2SMaCFmmIobF4RM7cULKsw= Subject key identifier: DE:58:7D:D2:2D:E0:99:74:D2:49:E8:6B:29:58:ED:BB:36:D9:1A:73 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584EF7178FEC0D70680226B756C0 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/17a200a6-269f-3a9a-9d3c-8356b5035310.roa Signing time: Wed 26 Aug 2026 13:00:12 +0000 ROA not before: Wed 26 Aug 2026 13:00:12 +0000 ROA not after: Tue 24 Nov 2026 14:00:12 +0000 asID: 397222 IP address blocks: 209.173.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f7:17:8f:ec:0d:70:68:02:26:b7:56:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Aug 26 13:00:12 2026 GMT Not After : Nov 24 14:00:12 2026 GMT Subject: CN=3d0893e0-78f5-44c7-9142-47d78ce18ff5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:af:5f:c6:8c:83:9a:42:0d:ba:3c:82:8a:fb: 0f:86:aa:81:e1:aa:05:27:78:b6:1c:b9:e8:5e:8e: ef:61:03:1f:0c:4e:e9:fc:1f:cb:84:59:c6:72:98: 16:c5:31:6a:ae:38:ad:f5:fc:a4:a4:39:01:78:47: 5e:42:be:99:e1:ad:5c:f3:04:d2:78:39:33:a7:65: d5:49:a2:f7:57:1f:4f:c8:18:d3:6b:87:62:45:4e: 30:d1:0c:90:a6:4a:98:4b:42:c7:dd:9b:5c:7b:df: 20:2a:5c:01:69:e9:8b:7e:50:87:bd:51:3d:4f:91: f4:b8:d5:c7:39:74:30:a3:4f:6a:fa:31:8b:e4:3c: d3:12:d9:a3:ef:07:25:cd:0e:2b:a0:75:f4:b0:d3: aa:48:eb:06:2d:35:7e:57:6f:53:b2:77:fc:87:ae: c2:e7:6f:26:69:f8:6a:35:28:c7:5b:25:bd:fe:f9: 68:95:1a:c9:74:7d:8f:3f:1a:3e:02:58:f3:18:64: ba:93:64:a3:e4:38:bf:14:98:6c:37:ac:7d:77:29: 65:ba:34:c6:96:70:1a:37:0c:aa:e9:c3:e7:78:0d: 98:04:11:33:e5:3c:f6:4e:af:db:de:01:2e:24:93: 29:8d:96:7f:b7:d1:e1:8f:b2:d5:be:45:ac:8e:bd: d8:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:58:7D:D2:2D:E0:99:74:D2:49:E8:6B:29:58:ED:BB:36:D9:1A:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/17a200a6-269f-3a9a-9d3c-8356b5035310.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 209.173.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:90:22:dc:c1:c5:88:48:ee:83:1d:7b:bb:51:e4:b0:50:e3: df:62:00:0e:16:f1:9d:36:c6:4f:73:31:21:85:1f:58:29:f4: e8:e4:b4:9d:0f:ab:9c:59:fe:5b:f8:80:67:a5:b6:b8:fd:33: 77:bd:26:8c:f0:94:0c:b0:d4:d4:7d:93:cf:55:31:35:10:a8: 0a:93:0f:51:bd:2b:a8:e7:ed:86:69:e0:30:dd:a3:91:16:3f: 89:59:11:8f:d7:a7:ec:a7:54:c7:a3:55:4f:cc:99:2c:74:47: a8:f7:4c:92:09:bd:02:87:a7:a6:66:96:43:cd:40:b2:60:4d: 31:55:a3:0b:0a:9f:f0:7a:31:4c:ff:b9:de:49:6f:3d:ad:10: ed:61:38:62:4b:61:7a:36:ea:be:e3:a9:c8:e6:5c:71:5a:6c: 24:bc:dd:6d:74:63:2f:f5:b8:09:b3:ff:8a:fe:0a:d8:ad:73: 67:4e:f7:13:0c:34:3e:ba:4a:03:06:ac:9f:f4:c9:b3:8f:cd: cf:4a:4d:5d:d3:54:6f:82:0e:d1:ac:fe:fb:5b:ee:0b:f7:60: c7:3a:01:41:c9:46:15:33:f0:2c:6f:b6:df:ae:d3:51:70:2b: 84:fb:b3:5e:a9:a6:7a:92:64:0f:9c:d1:0a:e8:b8:6d:ea:be: 5e:c2:ed:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE73F4/sDXBoAia3VsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk M2QwODkzZTAtNzhmNS00NGM3LTkxNDItNDdkNzhjZTE4ZmY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAta9fxoyDmkINujyCivsPhqqB4aoFJ3i2HLno Xo7vYQMfDE7p/B/LhFnGcpgWxTFqrjit9fykpDkBeEdeQr6Z4a1c8wTSeDkzp2XV SaL3Vx9PyBjTa4diRU4w0QyQpkqYS0LH3Ztce98gKlwBaemLflCHvVE9T5H0uNXH OXQwo09q+jGL5DzTEtmj7wclzQ4roHX0sNOqSOsGLTV+V29Tsnf8h67C528mafhq NSjHWyW9/vlolRrJdH2PPxo+AljzGGS6k2Sj5Di/FJhsN6x9dyllujTGlnAaNwyq 6cPneA2YBBEz5Tz2Tq/b3gEuJJMpjZZ/t9Hhj7LVvkWsjr3YFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN5YfdIt4Jl00knoaylY7bs22RpzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMTdhMjAwYTYtMjY5Zi0z YTlhLTlkM2MtODM1NmI1MDM1MzEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0a06MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADaQItzBxYhI7oMde7tR5LBQ499iAA4W8Z02xk9zMSGFH1gp9OjktJ0P q5xZ/lv4gGeltrj9M3e9JozwlAyw1NR9k89VMTUQqAqTD1G9K6jn7YZp4DDdo5EW P4lZEY/Xp+ynVMejVU/MmSx0R6j3TJIJvQKHp6ZmlkPNQLJgTTFVowsKn/B6MUz/ ud5Jbz2tEO1hOGJLYXo26r7jqcjmXHFabCS83W10Yy/1uAmz/4r+Ctitc2dO9xMM ND66SgMGrJ/0ybOPzc9KTV3TVG+CDtGs/vtb7gv3YMc6AUHJRhUz8Cxvtt+u01Fw K4T7s16ppnqSZA+c0QrouG3qvl7C7cA= -----END CERTIFICATE-----Generated at Sun Sep 27 09:02:42 2026 by rpki-client