$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/ab987732-ac4f-3665-9f2b-faa0922171b9.roa File: ab987732-ac4f-3665-9f2b-faa0922171b9.roa (raw, json) Hash identifier: OQ44yHK3RNYBBQUTOW8lvJvg3VfM/6PJWT+jAc3W23g= Subject key identifier: 4D:AB:AF:AF:2C:55:9A:68:25:EB:F3:45:1A:BE:B2:8E:AB:55:ED:6B Certificate issuer: /CN=209f0328-0af3-4de3-a043-8072346acdf7 Certificate serial: 010D0C9F4328584F71ED8D34E31EEE427D412600 Authority key identifier: B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/ab987732-ac4f-3665-9f2b-faa0922171b9.roa Signing time: Fri 09 Oct 2026 13:00:13 +0000 ROA not before: Fri 09 Oct 2026 13:00:13 +0000 ROA not after: Thu 07 Jan 2027 14:00:13 +0000 asID: 7782 IP address blocks: 216.67.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:71:ed:8d:34:e3:1e:ee:42:7d:41:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=209f0328-0af3-4de3-a043-8072346acdf7 Validity Not Before: Oct 9 13:00:13 2026 GMT Not After : Jan 7 14:00:13 2027 GMT Subject: CN=70e2c906-fbb5-4b22-b9b8-bd887ca683d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:d1:2d:06:22:f2:37:b7:d0:58:00:a0:9a:59: 5d:10:ba:26:0d:ab:51:13:40:29:49:06:40:73:a6: 3c:ef:3b:82:1e:42:87:77:44:34:ab:78:3f:6f:63: 96:e0:b2:ae:fe:2c:d2:ab:b2:c7:25:c9:3f:71:47: 29:e6:e8:a5:79:23:aa:37:ea:87:bd:12:c0:2e:33: 8a:6c:af:2e:12:fa:08:64:54:fc:cf:16:28:42:26: 24:1a:bf:81:18:fc:d8:40:4a:5f:67:87:89:f5:1a: 1b:94:40:5d:0a:e8:f6:32:db:b5:ca:71:f0:af:87: ac:46:ef:af:dc:af:dd:eb:28:92:68:c4:6b:9a:a1: 7a:d6:ae:8a:c5:b5:f5:c8:f0:8a:81:45:4a:20:9a: be:cb:97:2d:02:4d:fa:f5:38:5e:12:4c:e3:54:05: 89:b9:78:59:b6:88:6d:f9:a1:e5:5c:43:78:70:f1: 89:70:86:9e:bb:0e:dd:3f:19:b9:0c:89:51:e4:df: 76:5e:9a:b3:54:44:cf:ab:7e:87:fa:eb:11:5a:eb: 50:b9:e7:64:ed:2a:37:8b:68:44:de:0d:a8:b5:8c: b3:50:4b:a3:3d:12:ec:44:b5:13:fc:c4:c8:05:24: 53:af:a5:8a:d7:58:a1:ef:8c:9f:63:51:d1:3a:74: 4b:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:AB:AF:AF:2C:55:9A:68:25:EB:F3:45:1A:BE:B2:8E:AB:55:ED:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/ab987732-ac4f-3665-9f2b-faa0922171b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl X509v3 Authority Key Identifier: keyid:B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer sbgp-ipAddrBlock: critical IPv4: 216.67.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:e2:20:85:38:07:3d:7d:63:e4:47:59:c7:e3:96:4b:41:e8: c9:f7:43:d1:ee:5b:8b:70:da:eb:97:13:f5:1f:29:bc:6e:9a: 82:52:67:5f:79:91:a8:43:2a:a0:7e:e9:13:e6:40:be:f2:d0: dc:a7:aa:8f:e4:08:0c:83:1c:33:ef:f5:68:4d:91:73:45:06: 18:9c:7e:de:bd:8a:5c:a2:ef:7a:9a:17:28:95:3a:5b:69:79: ca:e1:87:6a:c2:fc:cb:3c:13:26:35:d6:38:53:86:d0:2a:8d: c7:cf:6e:04:a8:a6:84:8e:04:84:b9:27:46:c5:cf:95:76:af: c4:ec:32:2a:ee:7c:0f:ba:a5:71:d7:df:d9:20:e2:df:4a:67: e2:a1:e1:4e:2e:0f:70:3b:bb:22:68:dd:8d:6b:04:17:e1:8d: 89:f9:08:fa:1a:02:df:8c:1c:5d:8f:06:9e:28:cd:c3:bd:0c: c9:ba:42:02:10:73:15:ea:18:73:45:e8:9e:b6:2a:84:9a:aa: 00:5b:35:f6:7c:7d:7c:43:3c:64:7d:00:2f:30:39:18:19:ec: f5:00:85:d4:20:7a:e7:57:45:55:9f:ae:82:a1:c3:c4:59:ec: 56:83:9f:64:1b:ad:38:0e:22:47:ad:fc:ff:6e:74:f5:55:3b: 42:9f:a9:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9x7Y004x7uQn1BJgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjA5ZjAzMjgtMGFmMy00ZGUzLWEwNDMtODA3MjM0NmFj ZGY3MB4XDTI2MTAwOTEzMDAxM1oXDTI3MDEwNzE0MDAxM1owLzEtMCsGA1UEAxMk NzBlMmM5MDYtZmJiNS00YjIyLWI5YjgtYmQ4ODdjYTY4M2Q1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6NEtBiLyN7fQWACgmlldELomDatRE0ApSQZA c6Y87zuCHkKHd0Q0q3g/b2OW4LKu/izSq7LHJck/cUcp5uileSOqN+qHvRLALjOK bK8uEvoIZFT8zxYoQiYkGr+BGPzYQEpfZ4eJ9RoblEBdCuj2Mtu1ynHwr4esRu+v 3K/d6yiSaMRrmqF61q6KxbX1yPCKgUVKIJq+y5ctAk369TheEkzjVAWJuXhZtoht +aHlXEN4cPGJcIaeuw7dPxm5DIlR5N92XpqzVETPq36H+usRWutQuedk7So3i2hE 3g2otYyzUEujPRLsRLUT/MTIBSRTr6WK11ih74yfY1HROnRLRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE2rr68sVZpoJevzRRq+so6rVe1rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yMDlm MDMyOC0wYWYzLTRkZTMtYTA0My04MDcyMzQ2YWNkZjcvYWI5ODc3MzItYWM0Zi0z NjY1LTlmMmItZmFhMDkyMjE3MWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjA5ZjAzMjgtMGFmMy00ZGUzLWEw NDMtODA3MjM0NmFjZGY3LzIwOWYwMzI4LTBhZjMtNGRlMy1hMDQzLTgwNzIzNDZh Y2RmNy5jcmwwHwYDVR0jBBgwFoAUsoIq0bI2KU20SE/OQcx6IpRLZAcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yMDlmMDMyOC0wYWYzLTRkZTMtYTA0My04MDcy MzQ2YWNkZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQH2EMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAniIIU4Bz19Y+RHWcfjlktB6Mn3Q9HuW4tw2uuXE/UfKbxumoJSZ195 kahDKqB+6RPmQL7y0Nynqo/kCAyDHDPv9WhNkXNFBhicft69ilyi73qaFyiVOltp ecrhh2rC/Ms8EyY11jhThtAqjcfPbgSopoSOBIS5J0bFz5V2r8TsMirufA+6pXHX 39kg4t9KZ+Kh4U4uD3A7uyJo3Y1rBBfhjYn5CPoaAt+MHF2PBp4ozcO9DMm6QgIQ cxXqGHNF6J62KoSaqgBbNfZ8fXxDPGR9AC8wORgZ7PUAhdQgeudXRVWfroKhw8RZ 7FaDn2QbrTgOIket/P9udPVVO0KfqVw= -----END CERTIFICATE-----Generated at Sun Oct 11 23:29:18 2026 by rpki-client