$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/17fc3f96-ff5e-3589-864f-e6492e7b5200.roa File: 17fc3f96-ff5e-3589-864f-e6492e7b5200.roa (raw, json) Hash identifier: Jrpu6GDv23yIXBMFn664a5Ui7vh1nXmz0QwqI6NnbNQ= Subject key identifier: 84:DA:8C:37:0A:41:39:92:27:01:8B:4C:EE:D2:8A:0E:16:CB:F1:CB Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584AD23BF4D10F4FEB9EE4D78C00 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/17fc3f96-ff5e-3589-864f-e6492e7b5200.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 397240 IP address blocks: 209.173.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:f4:d1:0f:4f:eb:9e:e4:d7:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=cc0c4926-6d7c-43d2-b5f2-dcbe5980852d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:01:19:45:83:61:34:cb:61:c7:b1:88:eb:73: a3:1e:c3:e5:4c:f5:87:ed:95:cd:7c:d1:6f:44:07: c6:e1:6d:25:1b:dd:18:5f:a2:f3:5d:5a:f6:a1:cd: 82:c4:63:fa:37:39:0a:78:3c:3d:b4:df:09:24:0e: 0a:e4:37:98:9f:28:02:ab:df:ea:95:5b:0c:a7:13: 47:b3:b7:92:fd:da:0a:10:bf:d6:18:f3:57:12:4a: 01:8f:b7:31:27:7f:9f:0f:cb:f8:34:c8:25:52:73: ac:78:87:07:cc:e6:40:19:2f:36:ce:94:22:67:3d: d8:01:1a:ce:33:e1:fa:c4:ce:5e:e0:6f:43:41:ff: c5:76:a0:b9:59:cb:b1:2d:94:b1:f2:8f:24:62:30: 72:04:9c:63:c1:ce:9f:10:07:cb:39:3b:c0:b4:28: a3:04:01:18:6a:31:e4:4b:6b:14:29:73:37:e1:c9: d6:cf:53:31:6f:87:5c:59:f9:f1:8e:22:17:7c:e9: e4:3c:56:d0:df:92:36:33:5c:ef:0f:65:43:04:50: ab:40:9d:4b:5a:37:14:95:9d:4c:ae:5a:5b:6e:3c: c9:83:8c:68:25:b5:9d:fb:cf:12:59:ba:8d:b2:30: 0e:85:14:b7:20:30:3a:4e:63:a6:9b:f4:4a:76:98: e4:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:DA:8C:37:0A:41:39:92:27:01:8B:4C:EE:D2:8A:0E:16:CB:F1:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/17fc3f96-ff5e-3589-864f-e6492e7b5200.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 209.173.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:6f:28:59:f4:de:b7:d3:4c:d1:60:c3:51:bd:d9:f8:d5:4c: 3f:9b:84:34:fd:fe:c3:aa:4e:e2:10:98:cc:79:ad:c6:cc:fe: f3:7c:91:92:e7:31:75:21:68:be:d1:77:80:23:d1:0a:f0:62: 23:96:8a:38:3d:9b:39:6a:e4:43:e2:bf:ea:ed:13:29:9f:02: e7:2e:5a:37:fb:e1:b6:89:5a:99:01:b7:a5:a4:09:72:50:f3: 01:6c:54:ed:cb:55:e5:d0:65:39:4f:bf:c4:b2:de:47:f7:ed: 23:8e:34:08:6d:d3:83:e7:d8:5f:b8:f9:29:b1:e8:ef:85:94: ff:52:81:93:53:ea:c5:47:b1:bd:92:1e:b8:f1:1f:42:3b:04: b1:ff:53:a3:5c:a5:43:c1:e1:aa:d4:1b:27:aa:dd:40:06:4d: 59:88:b6:de:04:1a:6c:58:5f:99:ad:1c:63:12:18:d5:2a:bc: 1e:92:40:3c:5c:f2:fe:73:1d:cf:bf:88:8a:b6:32:79:dc:cd: 97:c4:7a:51:3e:96:24:c3:47:e0:56:3b:fd:c3:f5:72:f2:e9: 24:2c:ce:a7:3d:6c:b7:8f:4c:43:25:e0:71:c5:65:5e:02:6a: 4a:72:91:15:9e:32:f8:a0:ca:00:ec:af:00:91:c6:f8:c3:ff: b0:49:15:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO/TRD0/rnuTXjAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk Y2MwYzQ5MjYtNmQ3Yy00M2QyLWI1ZjItZGNiZTU5ODA4NTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQEZRYNhNMthx7GI63OjHsPlTPWH7ZXNfNFv RAfG4W0lG90YX6LzXVr2oc2CxGP6NzkKeDw9tN8JJA4K5DeYnygCq9/qlVsMpxNH s7eS/doKEL/WGPNXEkoBj7cxJ3+fD8v4NMglUnOseIcHzOZAGS82zpQiZz3YARrO M+H6xM5e4G9DQf/FdqC5WcuxLZSx8o8kYjByBJxjwc6fEAfLOTvAtCijBAEYajHk S2sUKXM34cnWz1Mxb4dcWfnxjiIXfOnkPFbQ35I2M1zvD2VDBFCrQJ1LWjcUlZ1M rlpbbjzJg4xoJbWd+88SWbqNsjAOhRS3IDA6TmOmm/RKdpjkCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFITajDcKQTmSJwGLTO7Sig4Wy/HLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMTdmYzNmOTYtZmY1ZS0z NTg5LTg2NGYtZTY0OTJlN2I1MjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0a06MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG9vKFn03rfTTNFgw1G92fjVTD+bhDT9/sOqTuIQmMx5rcbM/vN8kZLn MXUhaL7Rd4Aj0QrwYiOWijg9mzlq5EPiv+rtEymfAucuWjf74baJWpkBt6WkCXJQ 8wFsVO3LVeXQZTlPv8Sy3kf37SOONAht04Pn2F+4+Smx6O+FlP9SgZNT6sVHsb2S HrjxH0I7BLH/U6NcpUPB4arUGyeq3UAGTVmItt4EGmxYX5mtHGMSGNUqvB6SQDxc 8v5zHc+/iIq2MnnczZfEelE+liTDR+BWO/3D9XLy6SQszqc9bLePTEMl4HHFZV4C akpykRWeMvigygDsrwCRxvjD/7BJFTk= -----END CERTIFICATE-----Generated at Sat Aug 23 20:55:02 2025 by rpki-client