$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7b327db6-666b-3c42-a6c5-e0a43a0f66ed.roa File: 7b327db6-666b-3c42-a6c5-e0a43a0f66ed.roa (raw, json) Hash identifier: r2O9HzvhA917h6zN5lllBe0ZFZIc7La5qZwI6oEra1A= Subject key identifier: 76:6B:4C:0A:09:3C:A1:A1:60:B7:06:A7:34:D2:F6:0D:6D:46:AC:24 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584AD23BF3DC02D118DD5C1C0E40 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7b327db6-666b-3c42-a6c5-e0a43a0f66ed.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 397226 IP address blocks: 209.173.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:f3:dc:02:d1:18:dd:5c:1c:0e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=3cb5b55a-acd0-42da-9d64-b4039bb78178 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:40:c2:be:0d:d8:0e:7c:48:19:49:1f:ee:e7: 6f:cb:39:90:d5:7b:e9:f1:c9:a0:62:66:9f:7e:35: 58:0d:0e:a4:11:78:c8:57:13:da:98:ef:3a:0e:35: ea:43:56:90:15:9e:59:f7:fa:19:7a:34:6c:4e:a5: ef:e4:6a:87:a5:b0:f7:19:05:f1:5f:3b:d8:1b:9c: 37:05:38:ed:f1:f1:6b:3b:d4:ef:79:24:4b:5e:bc: 4d:83:53:44:61:f2:45:59:59:a8:cc:a3:f3:09:b1: f8:26:f5:54:31:71:67:b6:54:02:35:a4:ca:a0:13: a9:25:1f:9a:67:a1:a9:34:7e:c8:92:28:aa:a6:96: 1d:85:b1:98:68:41:62:cb:c0:2f:22:c0:1a:c8:4e: b3:ed:74:00:bf:b6:dd:28:92:65:a4:7a:8f:5e:7e: 4c:2a:b5:27:90:71:77:01:b7:b6:89:3f:54:89:62: 5c:7e:ad:e6:5d:fb:28:63:3e:ad:70:d4:b5:0a:b2: fe:27:6a:01:c4:31:db:fc:19:a9:3e:77:48:9b:36: 1f:e2:c9:6a:c9:e8:06:34:72:12:27:67:a4:97:bf: 61:34:4b:0b:35:4f:f2:82:65:7d:b2:10:69:ea:83: 64:3f:18:14:71:f6:a9:2e:aa:60:6f:49:a2:68:8b: b4:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:6B:4C:0A:09:3C:A1:A1:60:B7:06:A7:34:D2:F6:0D:6D:46:AC:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7b327db6-666b-3c42-a6c5-e0a43a0f66ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 209.173.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:fc:a9:cc:0d:a9:32:8e:40:5a:fd:3d:2d:c2:52:f1:f6:7c: 11:3e:fd:2b:9b:c2:a2:89:1c:ae:60:18:eb:b8:86:ac:12:5b: 5d:6c:a5:c9:af:8b:88:3c:9a:ec:4a:01:65:58:f3:f2:92:de: c0:29:6f:ef:9e:28:76:b1:64:b7:8a:93:51:42:24:44:d2:07: 8f:4a:b2:53:75:25:62:79:8e:2f:c7:e4:3a:45:d0:32:b1:5d: 43:db:bf:63:01:73:77:59:2f:8d:91:ba:aa:c6:0b:a5:99:eb: f0:23:e8:25:7e:72:92:e2:48:60:d4:22:53:c6:02:8b:c3:9b: e9:c7:02:13:c4:8d:9d:1e:e3:11:cf:55:08:6b:65:64:ba:05: ba:bd:9a:24:3c:d8:3f:d1:9c:6e:17:0a:2e:2c:32:49:27:b6: 75:7d:3a:16:36:ad:66:da:7f:42:80:2f:5d:88:c8:3a:f3:04: e3:36:f9:df:14:ba:fc:10:46:47:a0:0c:2d:39:8d:f2:70:db: 4a:bd:16:7f:02:6d:82:12:ff:c9:2b:a6:56:2f:ab:1d:42:3b: 6d:e7:fa:87:56:29:5c:d7:33:8e:d0:50:cd:a7:b4:c4:3c:43: a1:8c:fc:20:fa:80:ea:89:12:3f:e1:34:0a:e5:42:6e:10:8b: be:4f:1d:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO/PcAtEY3VwcDkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk M2NiNWI1NWEtYWNkMC00MmRhLTlkNjQtYjQwMzliYjc4MTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA10DCvg3YDnxIGUkf7udvyzmQ1Xvp8cmgYmaf fjVYDQ6kEXjIVxPamO86DjXqQ1aQFZ5Z9/oZejRsTqXv5GqHpbD3GQXxXzvYG5w3 BTjt8fFrO9TveSRLXrxNg1NEYfJFWVmozKPzCbH4JvVUMXFntlQCNaTKoBOpJR+a Z6GpNH7IkiiqppYdhbGYaEFiy8AvIsAayE6z7XQAv7bdKJJlpHqPXn5MKrUnkHF3 Abe2iT9UiWJcfq3mXfsoYz6tcNS1CrL+J2oBxDHb/BmpPndImzYf4slqyegGNHIS J2ekl79hNEsLNU/ygmV9shBp6oNkPxgUcfapLqpgb0miaIu0pwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHZrTAoJPKGhYLcGpzTS9g1tRqwkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvN2IzMjdkYjYtNjY2Yi0z YzQyLWE2YzUtZTBhNDNhMGY2NmVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0a06MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEf8qcwNqTKOQFr9PS3CUvH2fBE+/SubwqKJHK5gGOu4hqwSW11spcmv i4g8muxKAWVY8/KS3sApb++eKHaxZLeKk1FCJETSB49KslN1JWJ5ji/H5DpF0DKx XUPbv2MBc3dZL42RuqrGC6WZ6/Aj6CV+cpLiSGDUIlPGAovDm+nHAhPEjZ0e4xHP VQhrZWS6Bbq9miQ82D/RnG4XCi4sMkkntnV9OhY2rWbaf0KAL12IyDrzBOM2+d8U uvwQRkegDC05jfJw20q9Fn8CbYIS/8krplYvqx1CO23n+odWKVzXM47QUM2ntMQ8 Q6GM/CD6gOqJEj/hNArlQm4Qi75PHY0= -----END CERTIFICATE-----Generated at Sat Aug 23 13:02:53 2025 by rpki-client