$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/df9b55a7-fb1a-3cd0-b9e3-dd178cb24eec.roa File: df9b55a7-fb1a-3cd0-b9e3-dd178cb24eec.roa (raw, json) Hash identifier: qg3WoYB+X4ju5eFpEeTf/f1a4SfRnmD0fcifUcJkSUw= Subject key identifier: B1:7F:D6:05:D5:A4:5D:58:81:AE:A6:FB:B9:CC:E4:25:F5:90:26:C4 Certificate issuer: /CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da Certificate serial: 010D0C9F4328584DEF45DAAA52A302885F9DD8C0 Authority key identifier: D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/df9b55a7-fb1a-3cd0-b9e3-dd178cb24eec.roa Signing time: Sun 24 May 2026 01:00:27 +0000 ROA not before: Sun 24 May 2026 01:00:27 +0000 ROA not after: Sat 22 Aug 2026 01:00:27 +0000 asID: 16509 IP address blocks: 216.185.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ef:45:da:aa:52:a3:02:88:5f:9d:d8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da Validity Not Before: May 24 01:00:27 2026 GMT Not After : Aug 22 01:00:27 2026 GMT Subject: CN=b2f2c574-c638-4b5f-b30d-31c91545a161 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ad:e8:79:e7:bc:4a:4f:a8:80:0d:9c:85:26: 26:fd:16:e0:2e:ee:92:1f:1c:39:3b:98:55:25:fa: a4:13:eb:1d:ef:a4:17:c6:69:38:63:65:d7:f8:ce: 92:c2:97:da:e8:a7:b0:71:4d:2a:15:3e:f4:c5:a5: 1f:87:bc:60:9e:4b:90:e7:c1:b6:c4:ec:c3:57:82: a0:b3:03:cc:38:1b:c4:62:bb:f1:6c:a8:ee:13:6a: b6:a6:11:64:df:bc:b0:82:2a:66:e2:33:bf:36:73: c4:ba:01:b0:21:64:3c:3b:e6:48:c1:38:b7:80:20: 17:24:c6:62:ec:2b:de:82:fb:42:cf:53:3d:da:a2: b7:7d:c3:b8:10:6d:f6:77:77:63:d8:da:28:de:fa: bf:6e:11:9b:f7:e0:62:33:d2:4e:dd:df:0f:b0:64: 92:b4:dd:77:8d:b4:95:b5:dc:13:5d:3f:1e:d0:0b: 68:8a:18:b5:3f:88:fd:3d:d2:a6:f0:db:d9:6c:b1: cf:3d:29:66:74:a2:cd:5a:9a:90:3b:ad:b2:c5:2f: 2a:bc:8e:30:02:19:20:1b:65:81:77:24:94:82:ea: 2f:e6:f6:02:b4:18:72:56:c6:da:b5:20:9e:25:2f: 66:0b:23:22:38:6e:60:95:c6:1e:a4:1b:e5:af:60: 14:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:7F:D6:05:D5:A4:5D:58:81:AE:A6:FB:B9:CC:E4:25:F5:90:26:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/df9b55a7-fb1a-3cd0-b9e3-dd178cb24eec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.crl X509v3 Authority Key Identifier: keyid:D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer sbgp-ipAddrBlock: critical IPv4: 216.185.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:fd:9c:9a:18:15:b3:6b:5f:d5:ff:41:a6:72:fb:5e:0d:b2: df:4d:a8:b4:4c:6b:46:1e:d3:21:76:34:12:97:0e:e4:d1:02: 75:ca:35:49:14:36:67:8e:7a:66:65:51:39:55:b0:95:ef:ae: 4e:61:b1:d5:b9:22:28:f7:de:a8:bf:52:a8:0d:18:7b:86:cb: e3:7a:43:2a:ec:37:8b:b4:67:cd:bd:4b:62:52:f3:02:46:26: bb:88:b2:43:68:d6:d0:32:28:b7:e3:36:fc:71:9b:50:65:7e: f8:be:d0:84:39:58:68:36:80:fa:85:6d:fe:b2:85:94:a4:c1: 60:6b:40:cf:bf:6f:b5:d4:47:5d:f2:1f:d5:82:80:0a:b3:db: f3:c0:3b:de:e3:0f:b4:be:12:e9:ce:94:72:80:0d:a5:c3:39: 47:0f:7e:34:d3:69:0d:09:74:5c:18:5f:b9:8a:0a:87:a3:74: 80:5e:eb:67:cf:a2:88:7f:55:d1:fe:50:62:eb:68:c0:0e:33: 22:27:e1:15:75:f6:5e:1c:40:fb:91:8a:12:a6:fc:f2:47:35: 87:6a:f9:b8:7c:1a:6c:f0:71:98:3b:f7:cd:3c:bd:d3:80:0d: 68:69:9b:06:4d:a7:e3:10:01:ce:38:6b:63:bd:ab:e7:db:42: 5d:02:f3:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3vRdqqUqMCiF+d2MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWIxOGIyMDktN2VjYy00MzYxLWI4ZjYtZDg2YTVhNTUw NGRhMB4XDTI2MDUyNDAxMDAyN1oXDTI2MDgyMjAxMDAyN1owLzEtMCsGA1UEAxMk YjJmMmM1NzQtYzYzOC00YjVmLWIzMGQtMzFjOTE1NDVhMTYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn63oeee8Sk+ogA2chSYm/RbgLu6SHxw5O5hV JfqkE+sd76QXxmk4Y2XX+M6Swpfa6KewcU0qFT70xaUfh7xgnkuQ58G2xOzDV4Kg swPMOBvEYrvxbKjuE2q2phFk37ywgipm4jO/NnPEugGwIWQ8O+ZIwTi3gCAXJMZi 7CvegvtCz1M92qK3fcO4EG32d3dj2Noo3vq/bhGb9+BiM9JO3d8PsGSStN13jbSV tdwTXT8e0Atoihi1P4j9PdKm8NvZbLHPPSlmdKLNWpqQO62yxS8qvI4wAhkgG2WB dySUguov5vYCtBhyVsbatSCeJS9mCyMiOG5glcYepBvlr2AUBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLF/1gXVpF1Yga6m+7nM5CX1kCbEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYjE4 YjIwOS03ZWNjLTQzNjEtYjhmNi1kODZhNWE1NTA0ZGEvZGY5YjU1YTctZmIxYS0z Y2QwLWI5ZTMtZGQxNzhjYjI0ZWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWIxOGIyMDktN2VjYy00MzYxLWI4 ZjYtZDg2YTVhNTUwNGRhL2FiMThiMjA5LTdlY2MtNDM2MS1iOGY2LWQ4NmE1YTU1 MDRkYS5jcmwwHwYDVR0jBBgwFoAU0idx0DJJoJ2AHgnnZ2CCOTtp0mkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYjE4YjIwOS03ZWNjLTQzNjEtYjhmNi1kODZh NWE1NTA0ZGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2LnRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI79nJoYFbNrX9X/QaZy+14Nst9NqLRMa0Ye0yF2NBKXDuTRAnXKNUkU NmeOemZlUTlVsJXvrk5hsdW5Iij33qi/UqgNGHuGy+N6QyrsN4u0Z829S2JS8wJG JruIskNo1tAyKLfjNvxxm1Blfvi+0IQ5WGg2gPqFbf6yhZSkwWBrQM+/b7XUR13y H9WCgAqz2/PAO97jD7S+EunOlHKADaXDOUcPfjTTaQ0JdFwYX7mKCoejdIBe62fP ooh/VdH+UGLraMAOMyIn4RV19l4cQPuRihKm/PJHNYdq+bh8GmzwcZg79808vdOA DWhpmwZNp+MQAc44a2O9q+fbQl0C8/0= -----END CERTIFICATE-----Generated at Sun Jun 14 02:29:46 2026 by rpki-client