$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3f25dc22-4324-3ff6-8187-5d46925cf83a.roa File: 3f25dc22-4324-3ff6-8187-5d46925cf83a.roa (raw, json) Hash identifier: tc3CnwAt/YwGa1rCktoBH3ygeZ85JZFcM8PoX4Co3hY= Subject key identifier: 84:AD:9A:59:8D:99:B1:A4:3C:9D:16:2E:1D:A3:17:A6:B0:86:77:DB Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584AD23BF362913775E564A9D240 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3f25dc22-4324-3ff6-8187-5d46925cf83a.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 397219 IP address blocks: 209.173.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:f3:62:91:37:75:e5:64:a9:d2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=47aaadb0-7d0b-43da-8ddf-a3604d3dfb84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:66:7d:6a:6c:8e:23:67:f9:ff:47:e7:98:89: 91:fc:ec:66:28:fc:97:33:d1:79:44:01:18:f4:2e: ff:9d:1c:a9:64:fc:69:8e:3c:97:ae:ea:fe:35:f1: 19:6b:cf:12:59:5e:60:22:9d:0d:2b:c7:bd:d7:0e: f7:c3:ac:5f:e2:a8:74:be:dd:1d:e5:9b:00:51:b6: bb:a0:db:5d:e1:aa:ac:1b:1f:02:08:d5:6e:e3:9d: 5e:20:4d:c8:79:b8:34:de:25:8c:f5:dd:63:f8:45: 42:a3:02:65:d6:f1:82:7b:3f:7f:3f:97:57:c9:e2: 3d:74:8c:6f:03:a3:bb:49:11:e9:1f:a6:67:70:cf: eb:d3:d8:36:51:18:48:32:3a:41:a2:9f:19:c9:09: 57:16:f3:88:d5:b5:57:50:e4:9f:ab:9f:93:ff:c4: 7d:92:02:54:59:2c:04:13:7a:96:f2:8e:46:db:07: 56:17:2e:20:bb:c5:31:31:20:e3:fb:78:a3:51:b0: 19:c9:fd:e9:b9:31:82:7b:59:95:60:b7:7e:82:af: f8:f5:8c:07:c4:75:65:be:50:5c:e1:0e:fb:97:8f: 20:eb:bf:1b:03:c5:91:92:d2:0b:38:79:bf:52:11: 0f:aa:fd:6d:36:4b:c5:94:93:40:d5:1d:2f:5c:41: 23:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:AD:9A:59:8D:99:B1:A4:3C:9D:16:2E:1D:A3:17:A6:B0:86:77:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3f25dc22-4324-3ff6-8187-5d46925cf83a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 209.173.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:df:c1:b9:2e:d6:46:90:50:88:a0:ae:54:13:4d:4b:39:de: 4d:5e:df:f9:04:c9:50:b9:b5:3f:3e:9a:4b:aa:1e:30:e0:73: df:38:d5:e1:02:4e:25:9b:6a:ab:af:37:39:cf:40:a1:32:1f: 0d:93:58:bf:19:2b:d4:91:ae:6b:30:57:f1:11:e9:cd:c8:19: ea:9c:e3:c6:eb:a4:17:1d:40:06:df:9a:f0:37:bd:d7:f4:ed: 2e:bd:29:d5:68:65:44:94:3d:c0:49:49:13:51:54:89:e5:24: 87:2a:4f:00:19:51:68:9c:04:7a:12:6a:ba:5f:48:96:27:4b: 24:3a:63:1d:15:ff:b9:72:4f:52:6d:16:7c:36:1a:53:97:dc: 19:d5:b6:7b:cb:93:95:c9:58:d6:fd:1d:39:70:04:70:dd:6d: 47:7f:c4:e8:01:15:ba:52:21:f8:9c:7f:54:1d:2b:7b:d3:80: b0:25:ea:4f:4d:c0:1f:3a:c2:83:f6:aa:46:67:39:97:c6:0d: 3f:a9:76:cd:d1:7e:99:d9:7b:ec:2b:6f:22:ff:73:ec:07:c0: d1:a1:c8:de:df:2e:1c:61:88:13:c8:c9:60:2d:a5:96:3e:26: 69:19:9a:dd:83:24:b2:fc:e4:10:ea:92:be:80:70:1a:81:aa: 31:5b:22:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO/NikTd15WSp0kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk NDdhYWFkYjAtN2QwYi00M2RhLThkZGYtYTM2MDRkM2RmYjg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWZ9amyOI2f5/0fnmImR/OxmKPyXM9F5RAEY 9C7/nRypZPxpjjyXrur+NfEZa88SWV5gIp0NK8e91w73w6xf4qh0vt0d5ZsAUba7 oNtd4aqsGx8CCNVu451eIE3Iebg03iWM9d1j+EVCowJl1vGCez9/P5dXyeI9dIxv A6O7SRHpH6ZncM/r09g2URhIMjpBop8ZyQlXFvOI1bVXUOSfq5+T/8R9kgJUWSwE E3qW8o5G2wdWFy4gu8UxMSDj+3ijUbAZyf3puTGCe1mVYLd+gq/49YwHxHVlvlBc 4Q77l48g678bA8WRktILOHm/UhEPqv1tNkvFlJNA1R0vXEEjjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIStmlmNmbGkPJ0WLh2jF6awhnfbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvM2YyNWRjMjItNDMyNC0z ZmY2LTgxODctNWQ0NjkyNWNmODNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0a06MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC3fwbku1kaQUIigrlQTTUs53k1e3/kEyVC5tT8+mkuqHjDgc9841eEC TiWbaquvNznPQKEyHw2TWL8ZK9SRrmswV/ER6c3IGeqc48brpBcdQAbfmvA3vdf0 7S69KdVoZUSUPcBJSRNRVInlJIcqTwAZUWicBHoSarpfSJYnSyQ6Yx0V/7lyT1Jt Fnw2GlOX3BnVtnvLk5XJWNb9HTlwBHDdbUd/xOgBFbpSIficf1QdK3vTgLAl6k9N wB86woP2qkZnOZfGDT+pds3RfpnZe+wrbyL/c+wHwNGhyN7fLhxhiBPIyWAtpZY+ JmkZmt2DJLL85BDqkr6AcBqBqjFbIlQ= -----END CERTIFICATE-----Generated at Sat Aug 23 14:15:50 2025 by rpki-client