$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/aebc0af9-fce4-3853-b927-d2a3b161afd1.roa File: aebc0af9-fce4-3853-b927-d2a3b161afd1.roa (raw, json) Hash identifier: p2h+QZjc7MaVZru7ZMeRlR5ELp4CB1e0dMPbHsrJiSc= Subject key identifier: 48:A1:5B:19:0C:90:F7:D2:64:CD:31:04:F4:02:31:92:34:2B:BD:E4 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584EF7178FA1C35C0AE024319780 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/aebc0af9-fce4-3853-b927-d2a3b161afd1.roa Signing time: Wed 26 Aug 2026 13:00:12 +0000 ROA not before: Wed 26 Aug 2026 13:00:12 +0000 ROA not after: Tue 24 Nov 2026 14:00:12 +0000 asID: 397216 IP address blocks: 209.173.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f7:17:8f:a1:c3:5c:0a:e0:24:31:97:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Aug 26 13:00:12 2026 GMT Not After : Nov 24 14:00:12 2026 GMT Subject: CN=526d884a-1f4b-4352-8905-b0e26b5b721e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:4a:84:78:39:6a:4b:92:76:ed:84:37:d9:ba: 89:ed:29:8d:84:8e:da:8e:13:69:97:b2:ee:8b:04: 38:81:3c:2a:3e:2d:68:ce:6e:f4:ce:96:53:42:b4: 0a:b4:5f:74:09:fd:23:26:ad:e2:46:a7:6d:e2:03: d0:2f:9a:52:50:52:82:a0:66:05:c1:8e:f2:0f:b5: 50:87:ac:39:65:3b:2d:7f:41:1f:c3:c0:b2:c2:ce: 83:a0:fa:50:c0:f3:d9:d5:65:df:95:f6:c3:43:37: 03:3f:9a:d9:e5:a2:44:64:0b:9f:49:fd:d1:b9:f7: 1d:f7:05:da:c2:a9:cb:28:88:c9:7a:47:a9:4c:8e: 42:46:0d:74:e1:93:37:c1:d3:69:fe:16:2d:71:e6: b5:e4:da:79:16:4b:c0:cd:4e:90:d7:88:cd:4a:95: f5:e5:63:97:15:2f:df:4d:dc:7d:68:b8:da:32:16: b8:b6:66:62:b1:8b:80:06:22:ad:2c:b8:92:35:34: f0:27:ed:73:fb:50:af:ea:16:b4:72:f2:b6:f1:64: a4:a9:d1:d2:7e:b3:7c:8f:94:85:c5:b9:18:39:5b: 7e:ca:b2:f7:f6:16:5d:83:36:3a:30:96:1c:5e:60: b4:9f:1c:33:b7:c0:39:ec:7c:38:c1:42:14:31:70: 3b:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:A1:5B:19:0C:90:F7:D2:64:CD:31:04:F4:02:31:92:34:2B:BD:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/aebc0af9-fce4-3853-b927-d2a3b161afd1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 209.173.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:b1:c9:0f:de:04:bd:ac:2c:78:13:48:65:f2:1a:27:8e:17: 7e:b1:79:7c:75:13:c2:7b:d6:44:af:80:f6:c9:fc:eb:89:3b: b1:58:3a:9a:07:da:0e:36:5c:90:d5:de:dc:ac:77:39:95:1d: 34:78:c1:e9:a8:87:cb:01:63:a7:b1:66:16:f3:87:e8:04:9c: 72:b8:3e:13:76:ed:79:20:4c:0a:99:95:81:df:46:a7:1a:f0: a7:7e:b3:55:7c:85:7d:0a:54:cd:3b:19:ed:06:67:b5:d5:34: c4:b1:69:0e:c4:e3:ec:ec:ee:ee:94:85:5b:8e:6c:28:02:5b: 0c:d6:04:ac:60:df:3f:a0:e8:fa:14:74:e0:3a:3c:40:cd:96: d7:e2:91:37:9a:fa:64:59:9b:ec:7e:c5:fa:1d:fe:a2:f5:7f: de:8f:f6:69:7f:3f:6a:6a:ad:18:37:e3:7f:13:2a:63:d9:4f: ab:9f:9d:9e:e7:20:5e:fa:45:b2:02:4c:73:51:84:13:9b:75: c2:78:67:bf:3d:3c:11:eb:ae:f7:90:02:b8:88:ed:ad:8a:c3: db:54:64:b6:11:19:3d:b7:28:a6:39:37:7d:5c:1a:55:e9:53: f0:e8:d7:69:d9:94:96:6b:07:05:69:58:30:ba:8b:92:45:52: 00:a4:45:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE73F4+hw1wK4CQxl4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk NTI2ZDg4NGEtMWY0Yi00MzUyLTg5MDUtYjBlMjZiNWI3MjFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0qEeDlqS5J27YQ32bqJ7SmNhI7ajhNpl7Lu iwQ4gTwqPi1ozm70zpZTQrQKtF90Cf0jJq3iRqdt4gPQL5pSUFKCoGYFwY7yD7VQ h6w5ZTstf0Efw8Cyws6DoPpQwPPZ1WXflfbDQzcDP5rZ5aJEZAufSf3Rufcd9wXa wqnLKIjJekepTI5CRg104ZM3wdNp/hYtcea15Np5FkvAzU6Q14jNSpX15WOXFS/f Tdx9aLjaMha4tmZisYuABiKtLLiSNTTwJ+1z+1Cv6ha0cvK28WSkqdHSfrN8j5SF xbkYOVt+yrL39hZdgzY6MJYcXmC0nxwzt8A57Hw4wUIUMXA7QwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEihWxkMkPfSZM0xBPQCMZI0K73kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYWViYzBhZjktZmNlNC0z ODUzLWI5MjctZDJhM2IxNjFhZmQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0a06MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAWxyQ/eBL2sLHgTSGXyGieOF36xeXx1E8J71kSvgPbJ/OuJO7FYOpoH 2g42XJDV3tysdzmVHTR4wemoh8sBY6exZhbzh+gEnHK4PhN27XkgTAqZlYHfRqca 8Kd+s1V8hX0KVM07Ge0GZ7XVNMSxaQ7E4+zs7u6UhVuObCgCWwzWBKxg3z+g6PoU dOA6PEDNltfikTea+mRZm+x+xfod/qL1f96P9ml/P2pqrRg3438TKmPZT6ufnZ7n IF76RbICTHNRhBObdcJ4Z789PBHrrveQAriI7a2Kw9tUZLYRGT23KKY5N31cGlXp U/Do12nZlJZrBwVpWDC6i5JFUgCkRUk= -----END CERTIFICATE-----Generated at Tue Sep 29 15:08:03 2026 by rpki-client