$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/8dcd33ad-82e8-3499-9d0a-fe0fe1a08668.roa File: 8dcd33ad-82e8-3499-9d0a-fe0fe1a08668.roa (raw, json) Hash identifier: oqie6RlA1YP2QvkbnVcSSFTZ1a/X17lYL5OvwIom87M= Subject key identifier: 11:B2:00:2C:F1:1B:27:48:CB:CB:CD:43:CA:58:4E:50:95:25:D1:7F Certificate issuer: /CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da Certificate serial: 010D0C9F4328584F4973D463CA379E792AFF9380 Authority key identifier: D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/8dcd33ad-82e8-3499-9d0a-fe0fe1a08668.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 14618 IP address blocks: 216.185.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:d4:63:ca:37:9e:79:2a:ff:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a00f3b86-81e4-4520-946c-d3b7681eead3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:52:d5:47:59:1b:a4:d4:54:25:5c:56:b7:62: 7c:be:91:2c:65:99:ae:c7:82:09:50:71:16:01:f1: b3:98:33:20:88:7e:8d:35:6e:21:76:25:c2:70:12: d2:90:ab:39:16:50:90:e2:30:f2:30:64:62:5b:51: 21:57:11:dc:f4:e2:b5:97:b6:53:a8:0f:c6:ec:b9: 63:6d:09:a9:cd:72:64:63:9b:4d:bc:4f:df:3d:39: 89:71:be:8d:27:c9:d1:03:c5:83:36:51:18:a1:6e: 7e:25:f3:01:7d:12:fd:dc:21:89:85:f0:d1:f8:dc: 75:0c:78:49:81:b8:38:d6:b2:56:53:9b:79:8f:36: 16:b7:3b:77:c5:47:ab:88:31:8b:31:40:6e:e2:6f: a4:15:46:7d:45:a2:c6:6e:80:01:53:99:1a:25:81: 43:2c:d5:b8:1d:9f:ac:42:d1:60:6f:a4:31:a9:ce: 8d:55:e3:96:4d:80:71:95:29:0a:22:6b:46:5c:44: 93:f7:1d:23:b3:05:92:77:94:76:cc:59:5e:0d:6f: d2:a5:04:8f:07:2a:f0:f0:08:26:43:66:62:bd:48: c1:b6:e1:b4:e8:e7:9d:51:14:d6:1b:dc:78:c0:d6: 65:fc:90:5c:e6:a1:85:b1:92:43:f8:e8:6f:f1:f3: 27:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:B2:00:2C:F1:1B:27:48:CB:CB:CD:43:CA:58:4E:50:95:25:D1:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/8dcd33ad-82e8-3499-9d0a-fe0fe1a08668.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.crl X509v3 Authority Key Identifier: keyid:D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer sbgp-ipAddrBlock: critical IPv4: 216.185.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:96:eb:78:8f:f6:eb:d1:67:a0:81:7f:d5:e0:de:e1:c3:c8: d9:a6:16:32:b4:2b:38:df:f3:b4:2a:18:ce:eb:59:b0:61:9e: 9d:e3:21:a9:72:4b:f7:f8:71:b8:3a:d8:38:38:e3:23:bc:46: 5c:fc:96:a9:ec:04:17:8e:1c:d0:64:d4:ea:f3:63:3f:f8:1f: 99:37:5a:a4:5d:a3:c1:1b:36:9f:e5:f6:21:4a:a7:9c:84:6c: 8e:0e:11:e0:ba:43:8b:ed:2c:ec:1e:65:3a:ee:ce:8a:14:3a: 09:30:22:84:e9:90:1a:df:76:46:a7:40:cc:15:4a:69:95:20: 87:3b:09:d7:3a:ed:db:94:ca:cc:bb:ae:ae:8c:19:36:c1:2f: f6:6c:e7:e2:50:38:0a:a9:1f:50:c9:20:f5:ec:78:7f:e8:80: 10:1f:e8:57:26:92:b4:43:97:64:8d:38:ab:e8:e3:59:67:f3: 28:b0:5b:ab:87:fc:a9:a4:08:d1:27:65:13:8f:91:df:88:77: 7c:a6:5a:f0:0d:63:55:a5:67:31:63:68:f7:df:5d:aa:de:12: 52:6b:20:45:31:7d:60:7e:dd:d5:05:50:e1:29:e5:81:82:0f: f2:56:41:6e:5d:3b:58:e6:7e:ba:fa:62:82:ae:bd:4f:2b:fa: 94:da:d5:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc9RjyjeeeSr/k4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWIxOGIyMDktN2VjYy00MzYxLWI4ZjYtZDg2YTVhNTUw NGRhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YTAwZjNiODYtODFlNC00NTIwLTk0NmMtZDNiNzY4MWVlYWQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVLVR1kbpNRUJVxWt2J8vpEsZZmux4IJUHEW AfGzmDMgiH6NNW4hdiXCcBLSkKs5FlCQ4jDyMGRiW1EhVxHc9OK1l7ZTqA/G7Llj bQmpzXJkY5tNvE/fPTmJcb6NJ8nRA8WDNlEYoW5+JfMBfRL93CGJhfDR+Nx1DHhJ gbg41rJWU5t5jzYWtzt3xUeriDGLMUBu4m+kFUZ9RaLGboABU5kaJYFDLNW4HZ+s QtFgb6Qxqc6NVeOWTYBxlSkKImtGXEST9x0jswWSd5R2zFleDW/SpQSPByrw8Agm Q2ZivUjBtuG06OedURTWG9x4wNZl/JBc5qGFsZJD+Ohv8fMnEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBGyACzxGydIy8vNQ8pYTlCVJdF/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYjE4 YjIwOS03ZWNjLTQzNjEtYjhmNi1kODZhNWE1NTA0ZGEvOGRjZDMzYWQtODJlOC0z NDk5LTlkMGEtZmUwZmUxYTA4NjY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWIxOGIyMDktN2VjYy00MzYxLWI4 ZjYtZDg2YTVhNTUwNGRhL2FiMThiMjA5LTdlY2MtNDM2MS1iOGY2LWQ4NmE1YTU1 MDRkYS5jcmwwHwYDVR0jBBgwFoAU0idx0DJJoJ2AHgnnZ2CCOTtp0mkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYjE4YjIwOS03ZWNjLTQzNjEtYjhmNi1kODZh NWE1NTA0ZGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2LnQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAICW63iP9uvRZ6CBf9Xg3uHDyNmmFjK0Kzjf87QqGM7rWbBhnp3jIaly S/f4cbg62Dg44yO8Rlz8lqnsBBeOHNBk1OrzYz/4H5k3WqRdo8EbNp/l9iFKp5yE bI4OEeC6Q4vtLOweZTruzooUOgkwIoTpkBrfdkanQMwVSmmVIIc7Cdc67duUysy7 rq6MGTbBL/Zs5+JQOAqpH1DJIPXseH/ogBAf6FcmkrRDl2SNOKvo41ln8yiwW6uH /KmkCNEnZROPkd+Id3ymWvANY1WlZzFjaPffXareElJrIEUxfWB+3dUFUOEp5YGC D/JWQW5dO1jmfrr6YoKuvU8r+pTa1Yw= -----END CERTIFICATE-----Generated at Sun Sep 27 23:34:38 2026 by rpki-client