$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/72eec912-ade1-390d-84e6-2a1081e27fb4.roa File: 72eec912-ade1-390d-84e6-2a1081e27fb4.roa (raw, json) Hash identifier: eB2rUo8s/BtdOhSbAaZzBCBTNWDuF1t9dk76THk5UO8= Subject key identifier: 95:A6:8D:6A:B2:FF:13:8E:AB:C0:EC:38:19:D9:09:96:17:72:31:10 Certificate issuer: /CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da Certificate serial: 010D0C9F4328584B4E770BF25F42D11AFED17680 Authority key identifier: D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/72eec912-ade1-390d-84e6-2a1081e27fb4.roa Signing time: Thu 25 Sep 2025 01:00:33 +0000 ROA not before: Thu 25 Sep 2025 01:00:33 +0000 ROA not after: Wed 24 Dec 2025 02:00:33 +0000 asID: 16509 IP address blocks: 216.185.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:77:0b:f2:5f:42:d1:1a:fe:d1:76:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da Validity Not Before: Sep 25 01:00:33 2025 GMT Not After : Dec 24 02:00:33 2025 GMT Subject: CN=6a151ffb-3692-4a90-a13e-86ca8c87b99a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:17:6e:5c:f0:4d:13:fa:b6:db:34:bd:b7:37: 16:c8:ab:d3:2b:ee:7f:ee:f5:02:73:35:fb:74:e9: 78:0b:1c:9e:ae:f1:33:dd:3a:b3:bb:47:18:90:da: 32:9b:3b:0b:0d:2f:c3:9c:c1:37:b0:53:1a:39:f9: f0:db:f7:4f:41:17:cf:3d:5b:61:a2:8a:88:6c:a6: 73:cb:68:c0:89:99:55:e7:cb:f2:30:1a:79:ac:31: 94:5b:e4:04:22:f2:84:2e:8c:4c:63:d5:d8:a3:ef: 93:9f:7e:71:62:ad:24:6a:3d:70:a5:72:73:67:86: c5:a7:94:b6:2b:dc:d1:fd:7c:e7:59:43:b9:15:63: ed:1e:99:11:49:07:2a:45:32:64:9a:10:29:9e:ce: fe:1e:1c:ad:87:98:3e:ee:4d:3c:d3:88:57:ad:8f: e4:e2:dd:cc:ab:7d:34:e8:cd:31:31:2a:12:35:89: 63:54:27:68:eb:bc:98:5b:52:34:86:04:78:2d:d1: 5c:9e:c3:9b:22:14:65:5a:16:7c:8c:65:0d:98:61: 91:2c:6e:73:30:4f:a6:5b:6d:01:a1:bc:38:8a:33: 78:15:a7:3f:a4:68:d6:3a:8f:df:43:ac:c7:a2:a3: f2:88:2c:b3:d5:ee:a1:8d:3e:31:bd:dc:3e:fe:25: c5:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:A6:8D:6A:B2:FF:13:8E:AB:C0:EC:38:19:D9:09:96:17:72:31:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/72eec912-ade1-390d-84e6-2a1081e27fb4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.crl X509v3 Authority Key Identifier: keyid:D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer sbgp-ipAddrBlock: critical IPv4: 216.185.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:8d:45:1a:c5:32:ef:19:b4:b8:a0:13:23:b8:a7:9f:40:39: d0:da:d2:d2:92:df:c2:29:8f:99:bf:c5:95:2e:20:37:a3:18: 1e:84:42:d6:dd:3d:bf:70:18:69:96:ab:14:61:e1:bb:2f:d5: 65:2d:7e:62:fa:e5:5d:aa:36:d5:6b:40:16:42:5a:2d:41:fe: 8d:52:25:9e:be:c2:96:54:e7:19:e2:ce:73:1e:7f:ae:a1:88: 5f:2a:b0:91:4d:bc:2e:2d:ac:80:d3:61:7d:26:55:29:17:22: 7f:9e:60:c1:5a:85:af:41:70:07:38:67:ce:82:b3:2b:eb:bc: 06:98:8b:dc:eb:c1:2c:58:23:05:1f:cd:55:40:1c:21:ca:52: 9f:57:34:1d:9d:5f:12:8d:2e:9a:58:74:42:2a:5e:25:43:66: c5:08:69:67:07:96:61:ff:00:07:44:37:b4:5b:ca:89:4d:5f: 67:1d:64:da:5a:64:0f:c0:00:a6:70:f1:c1:a5:bc:14:43:0a: 71:93:76:c4:d8:94:a4:23:a5:5c:e2:28:ee:9a:75:c6:3e:ec: c5:4e:14:1d:78:b7:a5:bf:f8:01:2f:8b:8b:fc:f9:43:10:49: 41:93:3f:86:80:16:8a:0a:77:12:20:a5:78:fd:6f:38:9a:18: ee:7b:55:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtOdwvyX0LRGv7RdoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWIxOGIyMDktN2VjYy00MzYxLWI4ZjYtZDg2YTVhNTUw NGRhMB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk NmExNTFmZmItMzY5Mi00YTkwLWExM2UtODZjYThjODdiOTlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBduXPBNE/q22zS9tzcWyKvTK+5/7vUCczX7 dOl4CxyervEz3Tqzu0cYkNoymzsLDS/DnME3sFMaOfnw2/dPQRfPPVthooqIbKZz y2jAiZlV58vyMBp5rDGUW+QEIvKELoxMY9XYo++Tn35xYq0kaj1wpXJzZ4bFp5S2 K9zR/XznWUO5FWPtHpkRSQcqRTJkmhApns7+Hhyth5g+7k0804hXrY/k4t3Mq300 6M0xMSoSNYljVCdo67yYW1I0hgR4LdFcnsObIhRlWhZ8jGUNmGGRLG5zME+mW20B obw4ijN4Fac/pGjWOo/fQ6zHoqPyiCyz1e6hjT4xvdw+/iXFTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJWmjWqy/xOOq8DsOBnZCZYXcjEQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYjE4 YjIwOS03ZWNjLTQzNjEtYjhmNi1kODZhNWE1NTA0ZGEvNzJlZWM5MTItYWRlMS0z OTBkLTg0ZTYtMmExMDgxZTI3ZmI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWIxOGIyMDktN2VjYy00MzYxLWI4 ZjYtZDg2YTVhNTUwNGRhL2FiMThiMjA5LTdlY2MtNDM2MS1iOGY2LWQ4NmE1YTU1 MDRkYS5jcmwwHwYDVR0jBBgwFoAU0idx0DJJoJ2AHgnnZ2CCOTtp0mkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYjE4YjIwOS03ZWNjLTQzNjEtYjhmNi1kODZh NWE1NTA0ZGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2LnTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHaNRRrFMu8ZtLigEyO4p59AOdDa0tKS38Ipj5m/xZUuIDejGB6EQtbd Pb9wGGmWqxRh4bsv1WUtfmL65V2qNtVrQBZCWi1B/o1SJZ6+wpZU5xniznMef66h iF8qsJFNvC4trIDTYX0mVSkXIn+eYMFaha9BcAc4Z86CsyvrvAaYi9zrwSxYIwUf zVVAHCHKUp9XNB2dXxKNLppYdEIqXiVDZsUIaWcHlmH/AAdEN7RbyolNX2cdZNpa ZA/AAKZw8cGlvBRDCnGTdsTYlKQjpVziKO6adcY+7MVOFB14t6W/+AEvi4v8+UMQ SUGTP4aAFooKdxIgpXj9bziaGO57VW0= -----END CERTIFICATE-----Generated at Mon Oct 20 16:13:53 2025 by rpki-client