$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/b06a5bbf-be3a-3890-8546-2dc5a822c28e.roa File: b06a5bbf-be3a-3890-8546-2dc5a822c28e.roa (raw, json) Hash identifier: 2SsCE6G98SiYNbc/rOoalXkttW7FlaTBK7yeGMb1QvI= Subject key identifier: 6D:37:DF:48:46:FD:78:3A:B3:5E:8B:21:77:DD:CE:57:11:DE:38:3F Certificate issuer: /CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da Certificate serial: 010D0C9F4328584F4973D46E975182E3ADCB3AC0 Authority key identifier: D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/b06a5bbf-be3a-3890-8546-2dc5a822c28e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 14618 IP address blocks: 216.185.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:d4:6e:97:51:82:e3:ad:cb:3a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=6cbdb2c0-32ae-44bf-96ae-4fa98aab837f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:92:d5:8f:84:d8:9c:3f:53:6c:65:42:04:71: c5:5e:9a:7e:1e:77:bf:59:f1:7b:9c:69:1c:19:52: 9f:a7:0c:57:81:84:a6:82:fe:98:ff:8f:8a:5e:94: c4:d4:f3:a4:3b:03:dd:be:74:89:13:c6:ea:26:04: cf:3e:db:db:e1:34:5b:e5:ff:11:83:77:22:5a:d3: 48:08:16:27:69:2d:62:24:f5:7c:57:01:05:9f:00: e5:63:a5:21:d8:5f:99:36:53:9b:d5:db:51:18:82: 6c:02:a0:be:4e:81:84:6c:b1:80:e4:53:a3:d7:8c: 2b:45:45:b1:30:47:46:99:e7:18:4e:99:6e:c3:d8: 17:d1:9d:49:af:e1:c7:ac:bf:7c:0b:f0:df:31:fc: a2:80:fe:9e:4f:17:52:78:8e:16:27:1c:4b:d0:38: a1:26:74:b4:69:4e:a1:26:8a:16:cf:40:f9:5a:07: 2e:58:aa:14:ff:b9:11:a5:6c:ad:f0:08:9d:cd:c6: 5a:ab:d4:82:69:d1:01:1d:29:1f:7d:ce:65:9d:29: 6d:93:f7:04:47:28:8e:9e:62:4e:84:47:29:e9:6a: 03:e6:d3:2d:b8:e8:3d:3a:5d:7a:8d:2b:1d:a1:98: 60:ec:8d:15:5a:3d:d9:4f:ed:52:94:4e:7b:10:2f: 16:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:37:DF:48:46:FD:78:3A:B3:5E:8B:21:77:DD:CE:57:11:DE:38:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/b06a5bbf-be3a-3890-8546-2dc5a822c28e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.crl X509v3 Authority Key Identifier: keyid:D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer sbgp-ipAddrBlock: critical IPv4: 216.185.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:65:b4:be:95:3c:9a:c8:ea:2b:77:67:72:88:55:23:a5:b6: a1:a1:09:79:24:0a:1b:d2:04:42:b8:75:b6:3a:a6:a0:e5:9a: fd:94:0e:3b:cd:f2:af:4a:85:64:e4:80:fb:e7:12:e2:5f:ef: 73:9e:de:29:32:20:9b:6b:d4:71:c4:8b:89:9a:6e:04:cf:00: d7:4d:f0:54:3d:03:12:f0:62:c8:ae:15:bb:57:9e:62:33:90: f1:da:1f:2d:78:6e:2c:ca:74:59:c7:2b:85:e8:b5:23:03:26: 65:8d:bc:d7:ff:fd:ac:d5:59:79:09:0b:76:fb:36:44:2d:02: bd:89:59:7f:d4:76:92:81:03:06:b9:a0:d1:53:14:65:89:ed: cd:40:5b:29:f2:1b:2d:18:bb:5f:b8:ee:3d:6f:87:f4:32:2d: c0:1c:a5:ed:cc:03:e6:28:7b:2d:5f:31:01:f3:ef:c4:8e:3a: 9e:f4:87:72:e2:4c:bd:35:1d:fe:3b:6a:66:5a:d9:3e:f3:9a: 62:79:a9:a8:9a:6a:f6:4b:0e:14:cf:cc:b3:5f:bb:1c:4c:0a: 0d:6a:43:8c:9d:24:4d:51:25:33:0d:d7:77:e4:dd:a9:2a:c7: 23:e4:6c:08:db:ad:38:3a:81:0a:e1:00:59:67:56:07:7e:5a: 98:8a:4e:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc9Rul1GC463LOsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWIxOGIyMDktN2VjYy00MzYxLWI4ZjYtZDg2YTVhNTUw NGRhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NmNiZGIyYzAtMzJhZS00NGJmLTk2YWUtNGZhOThhYWI4MzdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpLVj4TYnD9TbGVCBHHFXpp+Hne/WfF7nGkc GVKfpwxXgYSmgv6Y/4+KXpTE1POkOwPdvnSJE8bqJgTPPtvb4TRb5f8Rg3ciWtNI CBYnaS1iJPV8VwEFnwDlY6Uh2F+ZNlOb1dtRGIJsAqC+ToGEbLGA5FOj14wrRUWx MEdGmecYTpluw9gX0Z1Jr+HHrL98C/DfMfyigP6eTxdSeI4WJxxL0DihJnS0aU6h JooWz0D5WgcuWKoU/7kRpWyt8AidzcZaq9SCadEBHSkffc5lnSltk/cERyiOnmJO hEcp6WoD5tMtuOg9Ol16jSsdoZhg7I0VWj3ZT+1SlE57EC8WewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG0330hG/Xg6s16LIXfdzlcR3jg/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYjE4 YjIwOS03ZWNjLTQzNjEtYjhmNi1kODZhNWE1NTA0ZGEvYjA2YTViYmYtYmUzYS0z ODkwLTg1NDYtMmRjNWE4MjJjMjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWIxOGIyMDktN2VjYy00MzYxLWI4 ZjYtZDg2YTVhNTUwNGRhL2FiMThiMjA5LTdlY2MtNDM2MS1iOGY2LWQ4NmE1YTU1 MDRkYS5jcmwwHwYDVR0jBBgwFoAU0idx0DJJoJ2AHgnnZ2CCOTtp0mkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYjE4YjIwOS03ZWNjLTQzNjEtYjhmNi1kODZh NWE1NTA0ZGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2LnRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGBltL6VPJrI6it3Z3KIVSOltqGhCXkkChvSBEK4dbY6pqDlmv2UDjvN 8q9KhWTkgPvnEuJf73Oe3ikyIJtr1HHEi4mabgTPANdN8FQ9AxLwYsiuFbtXnmIz kPHaHy14bizKdFnHK4XotSMDJmWNvNf//azVWXkJC3b7NkQtAr2JWX/UdpKBAwa5 oNFTFGWJ7c1AWynyGy0Yu1+47j1vh/QyLcAcpe3MA+Yoey1fMQHz78SOOp70h3Li TL01Hf47amZa2T7zmmJ5qaiaavZLDhTPzLNfuxxMCg1qQ4ydJE1RJTMN13fk3akq xyPkbAjbrTg6gQrhAFlnVgd+WpiKTkQ= -----END CERTIFICATE-----Generated at Sun Sep 27 11:50:33 2026 by rpki-client