$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/d1c2a17b-4c25-39cf-bedd-b7a56d735294.roa File: d1c2a17b-4c25-39cf-bedd-b7a56d735294.roa (raw, json) Hash identifier: 4OBEKw0NXyMGKF6kw6Zp6X4oVQU9/uOj0nwQkGnnU1U= Subject key identifier: 63:E4:8C:65:77:8E:E8:5F:F4:CB:18:38:02:31:76:F1:7B:49:6B:D6 Certificate issuer: /CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da Certificate serial: 010D0C9F4328584B4E770BD85A9B594B88A55B80 Authority key identifier: D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/d1c2a17b-4c25-39cf-bedd-b7a56d735294.roa Signing time: Thu 25 Sep 2025 01:00:33 +0000 ROA not before: Thu 25 Sep 2025 01:00:33 +0000 ROA not after: Wed 24 Dec 2025 02:00:33 +0000 asID: 16509 IP address blocks: 216.185.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:77:0b:d8:5a:9b:59:4b:88:a5:5b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da Validity Not Before: Sep 25 01:00:33 2025 GMT Not After : Dec 24 02:00:33 2025 GMT Subject: CN=67c260ed-1353-4217-b94b-791277db7ee0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:8b:a9:ed:a8:d9:26:f1:87:11:d5:31:5c:e8: 95:06:f9:a3:c2:dc:f5:9a:97:da:77:c3:0f:f9:53: 6f:67:26:ed:5d:7e:21:1c:5e:00:c3:6f:dc:ab:0a: 00:ab:29:55:cc:6b:fc:45:09:05:25:b2:aa:e9:63: 68:b0:f7:4d:c7:c5:81:9f:dd:9d:2f:46:b6:fd:fe: 85:53:df:27:7e:bd:cd:a0:d8:9a:0f:64:bb:d6:10: 35:50:1a:65:72:29:88:04:3d:00:9b:cb:9c:10:de: 91:56:df:e4:7f:8c:07:1d:d4:5f:55:5c:ff:84:5d: 90:31:ab:ae:df:23:92:0b:aa:a7:d1:29:45:3d:44: 39:10:7c:da:04:f1:33:a2:85:1c:ba:c6:fe:30:e8: a7:db:bc:65:b2:ad:64:1f:a3:21:ac:ed:6b:42:81: 08:61:52:69:d0:84:cd:83:1d:ec:1c:41:ef:23:7b: 15:7e:0f:a5:f6:40:ee:c4:b2:3e:03:de:ac:6f:e6: 77:dc:1d:28:d4:0f:0f:4a:38:65:04:3d:50:cd:3b: fe:ef:40:8d:f6:49:91:7f:80:ce:a6:ac:20:d2:8f: ba:da:ca:6a:4f:ef:13:47:11:78:71:33:f9:90:82: ae:1f:82:53:5e:d9:1d:4e:a7:24:01:ca:ac:ef:37: 8a:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:E4:8C:65:77:8E:E8:5F:F4:CB:18:38:02:31:76:F1:7B:49:6B:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/d1c2a17b-4c25-39cf-bedd-b7a56d735294.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.crl X509v3 Authority Key Identifier: keyid:D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer sbgp-ipAddrBlock: critical IPv4: 216.185.210.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c5:4c:f0:2a:12:28:b7:d3:55:68:73:e8:c4:7c:7a:8a:62:98: a1:ea:cf:49:01:04:0b:ca:85:18:36:93:2a:ea:0b:ad:eb:ae: 5b:88:ba:23:33:70:19:e3:7c:ec:b7:a4:19:97:5a:c9:d5:12: 8a:34:f3:ab:db:20:76:5c:c3:7f:a2:8d:65:26:29:e4:af:13: d2:1c:21:d2:13:7d:d7:21:8d:b2:35:5c:f4:1e:da:50:6a:aa: 1c:52:b2:7b:54:da:6d:2d:d8:98:6c:2a:f6:21:82:3f:e0:3b: 0e:c2:93:b3:e3:f0:77:f2:af:11:32:e2:34:99:31:27:ad:08: 5b:3a:ab:ed:11:f4:a9:99:dc:9f:71:82:6a:74:b2:6f:48:b9: b4:fa:d0:eb:1f:3f:3c:e9:cd:90:cb:2e:e6:08:16:51:b4:81: db:ee:b4:fd:1c:09:cb:e9:ce:11:b5:72:d3:ee:f8:96:89:a3: 61:76:1b:d6:0c:76:3b:04:1e:e3:cf:2d:1b:b2:6d:5b:77:c6: 3a:85:c2:fc:92:d0:f0:cc:26:bc:14:4e:d2:40:c4:d0:4b:bf: d3:ad:1f:59:d9:cf:c6:8a:c7:98:03:e4:5d:5c:03:42:52:79: ba:7a:bf:31:cc:ac:44:74:6a:39:29:ab:21:4a:4d:b3:11:ed: 41:b1:56:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtOdwvYWptZS4ilW4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWIxOGIyMDktN2VjYy00MzYxLWI4ZjYtZDg2YTVhNTUw NGRhMB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk NjdjMjYwZWQtMTM1My00MjE3LWI5NGItNzkxMjc3ZGI3ZWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYup7ajZJvGHEdUxXOiVBvmjwtz1mpfad8MP +VNvZybtXX4hHF4Aw2/cqwoAqylVzGv8RQkFJbKq6WNosPdNx8WBn92dL0a2/f6F U98nfr3NoNiaD2S71hA1UBplcimIBD0Am8ucEN6RVt/kf4wHHdRfVVz/hF2QMauu 3yOSC6qn0SlFPUQ5EHzaBPEzooUcusb+MOin27xlsq1kH6MhrO1rQoEIYVJp0ITN gx3sHEHvI3sVfg+l9kDuxLI+A96sb+Z33B0o1A8PSjhlBD1QzTv+70CN9kmRf4DO pqwg0o+62spqT+8TRxF4cTP5kIKuH4JTXtkdTqckAcqs7zeK+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGPkjGV3juhf9MsYOAIxdvF7SWvWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYjE4 YjIwOS03ZWNjLTQzNjEtYjhmNi1kODZhNWE1NTA0ZGEvZDFjMmExN2ItNGMyNS0z OWNmLWJlZGQtYjdhNTZkNzM1Mjk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWIxOGIyMDktN2VjYy00MzYxLWI4 ZjYtZDg2YTVhNTUwNGRhL2FiMThiMjA5LTdlY2MtNDM2MS1iOGY2LWQ4NmE1YTU1 MDRkYS5jcmwwHwYDVR0jBBgwFoAU0idx0DJJoJ2AHgnnZ2CCOTtp0mkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYjE4YjIwOS03ZWNjLTQzNjEtYjhmNi1kODZh NWE1NTA0ZGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2LnSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMVM8CoSKLfTVWhz6MR8eopimKHqz0kBBAvKhRg2kyrqC63rrluIuiMz cBnjfOy3pBmXWsnVEoo086vbIHZcw3+ijWUmKeSvE9IcIdITfdchjbI1XPQe2lBq qhxSsntU2m0t2JhsKvYhgj/gOw7Ck7Pj8HfyrxEy4jSZMSetCFs6q+0R9KmZ3J9x gmp0sm9IubT60OsfPzzpzZDLLuYIFlG0gdvutP0cCcvpzhG1ctPu+JaJo2F2G9YM djsEHuPPLRuybVt3xjqFwvyS0PDMJrwUTtJAxNBLv9OtH1nZz8aKx5gD5F1cA0JS ebp6vzHMrER0ajkpqyFKTbMR7UGxVqc= -----END CERTIFICATE-----Generated at Wed Nov 5 11:35:39 2025 by rpki-client