$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/6a83bc96-c1d4-33ce-823e-0a9052613226.roa File: 6a83bc96-c1d4-33ce-823e-0a9052613226.roa (raw, json) Hash identifier: ZXVwxqsb1LjcGvblT206ZIqKaHlfDjzjI9vANhJDQb8= Subject key identifier: 8C:1E:CF:3B:1F:DE:61:45:D4:10:60:9E:F4:98:A7:AD:70:DD:72:6E Certificate issuer: /CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da Certificate serial: 010D0C9F4328584EA7947064A0A6E6E2BC4DA380 Authority key identifier: D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/6a83bc96-c1d4-33ce-823e-0a9052613226.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 16509 IP address blocks: 216.185.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:94:70:64:a0:a6:e6:e2:bc:4d:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=d43b4ae0-cf5e-4697-90ce-69a158bed7cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:2b:50:fc:dd:1e:ea:f1:c7:ea:7f:66:bd:1b: 7c:0c:c2:9b:7c:dd:91:bd:0a:5e:75:f5:c1:2e:3c: 43:7b:9f:e7:3b:8a:a6:31:8a:40:28:49:a0:b5:af: fc:31:d5:cb:32:e8:75:dd:29:b2:39:78:2d:27:54: 99:3c:0a:f1:ed:77:da:dc:69:bb:94:ad:fa:79:ba: 3c:54:19:cf:95:cb:30:a4:30:5a:ff:5c:59:6f:94: 7b:35:0c:40:81:5e:17:93:b8:4e:ae:53:62:f2:e0: af:2d:02:39:5a:0e:68:f1:3f:98:7d:cd:68:c9:78: 01:65:51:69:1d:68:6a:3e:04:64:66:d0:ab:59:32: 53:27:47:00:26:74:8c:f3:86:59:c5:f0:59:32:d3: 40:48:9b:6d:73:e6:9b:94:27:9e:e7:e3:d8:8c:dc: bb:2a:d8:27:0b:59:0c:33:76:37:68:37:9a:52:af: aa:54:6a:1e:be:ce:37:51:c5:26:08:58:2a:98:25: 6f:20:31:25:d9:ed:dd:1b:59:1f:cc:3f:3d:9b:a4: 59:65:0f:10:fd:de:83:55:54:40:f2:82:0c:2b:9f: 2c:05:2e:38:04:1c:eb:ff:4e:c6:cf:67:29:5f:34: 6c:4c:58:0b:35:a9:44:ed:af:7c:46:6b:16:72:1b: 85:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:1E:CF:3B:1F:DE:61:45:D4:10:60:9E:F4:98:A7:AD:70:DD:72:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/6a83bc96-c1d4-33ce-823e-0a9052613226.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.crl X509v3 Authority Key Identifier: keyid:D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer sbgp-ipAddrBlock: critical IPv4: 216.185.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:50:e4:c6:41:83:04:83:c7:af:1b:ca:97:04:7d:e3:0b:02: ab:32:eb:fc:23:1a:a7:34:0c:b5:b0:07:e2:46:a5:e4:2e:14: 59:c7:86:a7:e0:b9:05:77:8a:93:24:e6:db:26:44:9e:21:23: 00:58:98:c6:3b:dd:49:89:42:ef:23:db:28:a0:ee:c9:10:89: 77:cd:da:4a:ba:8a:31:b1:4c:a4:c8:41:d2:a6:ca:34:7a:10: d0:8b:c6:6a:5a:f6:0b:11:82:de:88:bd:bc:41:41:7e:b2:72: 36:07:cb:98:54:73:9b:b1:ed:27:b3:3a:06:3e:7c:57:38:12: a6:07:d9:29:0a:43:07:76:c5:a2:d9:ab:69:23:d1:84:c0:74: d3:bb:f5:3c:d4:59:f2:2c:b5:24:df:c1:d1:1f:c2:ca:81:15: 4a:23:6d:15:e0:ed:37:2c:3c:8a:cb:6c:a4:6a:15:94:b6:af: 28:9f:a4:9e:0e:b8:ad:02:7f:8b:b8:aa:75:ec:12:81:cb:31: 2f:da:74:d9:c9:a2:34:d5:48:75:11:15:20:9d:02:cd:75:bd: 22:0d:46:99:f4:06:e7:5f:04:9d:82:c3:9f:6c:ff:d5:a9:5c: c1:2c:64:47:c9:da:07:2a:d3:47:8e:94:eb:7a:30:43:cc:68: c0:72:7b:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlHBkoKbm4rxNo4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWIxOGIyMDktN2VjYy00MzYxLWI4ZjYtZDg2YTVhNTUw NGRhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZDQzYjRhZTAtY2Y1ZS00Njk3LTkwY2UtNjlhMTU4YmVkN2NjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgCtQ/N0e6vHH6n9mvRt8DMKbfN2RvQpedfXB LjxDe5/nO4qmMYpAKEmgta/8MdXLMuh13SmyOXgtJ1SZPArx7Xfa3Gm7lK36ebo8 VBnPlcswpDBa/1xZb5R7NQxAgV4Xk7hOrlNi8uCvLQI5Wg5o8T+Yfc1oyXgBZVFp HWhqPgRkZtCrWTJTJ0cAJnSM84ZZxfBZMtNASJttc+ablCee5+PYjNy7KtgnC1kM M3Y3aDeaUq+qVGoevs43UcUmCFgqmCVvIDEl2e3dG1kfzD89m6RZZQ8Q/d6DVVRA 8oIMK58sBS44BBzr/07Gz2cpXzRsTFgLNalE7a98RmsWchuFpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIwezzsf3mFF1BBgnvSYp61w3XJuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYjE4 YjIwOS03ZWNjLTQzNjEtYjhmNi1kODZhNWE1NTA0ZGEvNmE4M2JjOTYtYzFkNC0z M2NlLTgyM2UtMGE5MDUyNjEzMjI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWIxOGIyMDktN2VjYy00MzYxLWI4 ZjYtZDg2YTVhNTUwNGRhL2FiMThiMjA5LTdlY2MtNDM2MS1iOGY2LWQ4NmE1YTU1 MDRkYS5jcmwwHwYDVR0jBBgwFoAU0idx0DJJoJ2AHgnnZ2CCOTtp0mkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYjE4YjIwOS03ZWNjLTQzNjEtYjhmNi1kODZh NWE1NTA0ZGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2LnQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACBQ5MZBgwSDx68bypcEfeMLAqsy6/wjGqc0DLWwB+JGpeQuFFnHhqfg uQV3ipMk5tsmRJ4hIwBYmMY73UmJQu8j2yig7skQiXfN2kq6ijGxTKTIQdKmyjR6 ENCLxmpa9gsRgt6IvbxBQX6ycjYHy5hUc5ux7SezOgY+fFc4EqYH2SkKQwd2xaLZ q2kj0YTAdNO79TzUWfIstSTfwdEfwsqBFUojbRXg7TcsPIrLbKRqFZS2ryifpJ4O uK0Cf4u4qnXsEoHLMS/adNnJojTVSHURFSCdAs11vSINRpn0BudfBJ2Cw59s/9Wp XMEsZEfJ2gcq00eOlOt6MEPMaMByew8= -----END CERTIFICATE-----Generated at Wed Jul 29 07:22:16 2026 by rpki-client