$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/b06a5bbf-be3a-3890-8546-2dc5a822c28e.roa File: b06a5bbf-be3a-3890-8546-2dc5a822c28e.roa (raw, json) Hash identifier: eGRsb/yQtMddr7RerqOk0tVx4QpHc/nQ6KdjRjwP5KM= Subject key identifier: 66:D6:6A:FA:BB:FC:34:21:77:1A:FE:22:E6:8F:A2:F5:12:04:42:A5 Certificate issuer: /CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da Certificate serial: 010D0C9F4328584D0EA7B295EE2D5EA99D1949F0 Authority key identifier: D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/b06a5bbf-be3a-3890-8546-2dc5a822c28e.roa Signing time: Wed 04 Mar 2026 14:00:41 +0000 ROA not before: Wed 04 Mar 2026 14:00:41 +0000 ROA not after: Tue 02 Jun 2026 13:00:41 +0000 asID: 14618 IP address blocks: 216.185.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0e:a7:b2:95:ee:2d:5e:a9:9d:19:49:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da Validity Not Before: Mar 4 14:00:41 2026 GMT Not After : Jun 2 13:00:41 2026 GMT Subject: CN=722abfe4-fa86-44e3-b266-08a98c16e313 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:5a:d5:28:eb:3a:2f:0f:2e:d6:99:29:53:bc: 0c:21:7a:cf:0e:45:b6:71:39:3c:a4:6a:d4:2c:5f: b3:fd:0e:a2:94:04:95:e6:f8:00:cd:7a:c7:c5:36: 53:c8:7f:dd:20:51:81:9f:53:5e:72:ff:df:8d:e3: 02:f9:6d:71:a9:c6:7f:38:09:71:9c:27:5e:97:6f: a0:b0:e9:06:2f:34:7b:c6:48:56:11:c0:c4:e9:33: 44:63:9e:51:d0:54:6e:41:d8:cb:65:58:40:12:69: f7:44:a5:b8:92:93:2e:18:a3:c1:77:13:70:10:0d: ba:f9:0d:e9:dd:42:a8:39:42:23:95:d0:c8:f7:06: 77:bb:50:f5:f4:7b:bc:55:0c:09:8b:ac:57:ba:7b: 1c:c8:57:19:8b:7e:57:a3:1c:d4:0d:e0:99:78:5d: 11:89:64:fc:d1:10:7f:df:31:1d:f9:67:18:58:c7: a0:f8:1f:8d:92:6a:c0:d6:18:1a:6c:dd:a6:4b:19: 51:98:d6:bb:4a:8c:64:f9:03:6e:a2:14:63:34:7e: 81:55:c2:e4:2a:b7:4b:d2:89:12:9e:95:db:45:6a: 45:6f:17:c2:b3:00:19:98:66:51:2c:cb:bb:46:1d: 7b:f1:d1:ab:2d:ef:f4:65:2c:cd:68:1a:6e:6e:ab: 71:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:D6:6A:FA:BB:FC:34:21:77:1A:FE:22:E6:8F:A2:F5:12:04:42:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/b06a5bbf-be3a-3890-8546-2dc5a822c28e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.crl X509v3 Authority Key Identifier: keyid:D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer sbgp-ipAddrBlock: critical IPv4: 216.185.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:cc:cb:e1:eb:52:8d:46:b8:c7:ce:6c:26:3a:9c:1f:68:8d: da:d1:ee:d0:62:a2:6d:9f:53:ca:07:fd:1f:34:10:21:06:88: a3:fb:ec:2d:fa:38:95:17:d2:b0:2d:c3:09:bb:d1:61:1f:0a: 7b:ef:07:39:ed:ae:d9:3f:77:8d:35:eb:29:94:65:73:82:dd: e7:1c:32:96:ba:d8:a1:91:b9:c7:38:70:17:d8:13:aa:56:ee: 4a:bc:45:c9:8f:21:ab:d0:40:03:21:92:7f:6a:e5:db:09:6d: 2d:f3:70:bb:ea:55:d7:1b:ec:62:bd:32:d0:6e:17:8c:9e:41: 65:e2:b5:be:d5:3c:b7:8b:f9:da:c1:03:a3:6f:d5:fb:34:66: 40:30:df:1c:e8:86:a2:a3:02:53:a3:2e:7a:b8:70:c9:0b:0e: b2:53:bb:3a:35:74:e4:ad:96:0a:d8:16:8b:f7:13:dc:03:83: a6:ad:b0:01:e0:fc:35:4e:5e:64:00:92:33:65:08:b5:9e:56: e7:17:97:58:3f:6b:ca:9d:d5:67:6d:e5:23:e9:96:a0:20:e2: 8f:5e:b9:bd:29:ad:a9:62:0d:47:cc:60:2a:74:8b:af:cc:fb: 5e:0b:e5:e8:c1:b8:5b:e7:eb:84:0b:0f:4b:05:4f:72:2d:b0: 44:e2:0e:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Op7KV7i1eqZ0ZSfAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWIxOGIyMDktN2VjYy00MzYxLWI4ZjYtZDg2YTVhNTUw NGRhMB4XDTI2MDMwNDE0MDA0MVoXDTI2MDYwMjEzMDA0MVowLzEtMCsGA1UEAxMk NzIyYWJmZTQtZmE4Ni00NGUzLWIyNjYtMDhhOThjMTZlMzEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplrVKOs6Lw8u1pkpU7wMIXrPDkW2cTk8pGrU LF+z/Q6ilASV5vgAzXrHxTZTyH/dIFGBn1Necv/fjeMC+W1xqcZ/OAlxnCdel2+g sOkGLzR7xkhWEcDE6TNEY55R0FRuQdjLZVhAEmn3RKW4kpMuGKPBdxNwEA26+Q3p 3UKoOUIjldDI9wZ3u1D19Hu8VQwJi6xXunscyFcZi35XoxzUDeCZeF0RiWT80RB/ 3zEd+WcYWMeg+B+NkmrA1hgabN2mSxlRmNa7Soxk+QNuohRjNH6BVcLkKrdL0okS npXbRWpFbxfCswAZmGZRLMu7Rh178dGrLe/0ZSzNaBpubqtxJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGbWavq7/DQhdxr+IuaPovUSBEKlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYjE4 YjIwOS03ZWNjLTQzNjEtYjhmNi1kODZhNWE1NTA0ZGEvYjA2YTViYmYtYmUzYS0z ODkwLTg1NDYtMmRjNWE4MjJjMjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWIxOGIyMDktN2VjYy00MzYxLWI4 ZjYtZDg2YTVhNTUwNGRhL2FiMThiMjA5LTdlY2MtNDM2MS1iOGY2LWQ4NmE1YTU1 MDRkYS5jcmwwHwYDVR0jBBgwFoAU0idx0DJJoJ2AHgnnZ2CCOTtp0mkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYjE4YjIwOS03ZWNjLTQzNjEtYjhmNi1kODZh NWE1NTA0ZGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2LnRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACDMy+HrUo1GuMfObCY6nB9ojdrR7tBiom2fU8oH/R80ECEGiKP77C36 OJUX0rAtwwm70WEfCnvvBzntrtk/d4016ymUZXOC3eccMpa62KGRucc4cBfYE6pW 7kq8RcmPIavQQAMhkn9q5dsJbS3zcLvqVdcb7GK9MtBuF4yeQWXitb7VPLeL+drB A6Nv1fs0ZkAw3xzohqKjAlOjLnq4cMkLDrJTuzo1dOStlgrYFov3E9wDg6atsAHg /DVOXmQAkjNlCLWeVucXl1g/a8qd1Wdt5SPplqAg4o9eub0praliDUfMYCp0i6/M +14L5ejBuFvn64QLD0sFT3ItsETiDuY= -----END CERTIFICATE-----Generated at Thu Mar 26 02:03:09 2026 by rpki-client