$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/2a1c57b7-2271-3e00-9e79-bd797210d5ee.roa File: 2a1c57b7-2271-3e00-9e79-bd797210d5ee.roa (raw, json) Hash identifier: WyufL8AYxO973cLH6y/h+bIMC2aWqv2OXDlZrAUBvf8= Subject key identifier: CB:07:6E:DE:76:D0:7B:42:AE:80:C7:41:00:93:44:C9:10:30:70:C5 Certificate issuer: /CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da Certificate serial: 010D0C9F4328584F549D63710D7AF8A7220F8A80 Authority key identifier: D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/2a1c57b7-2271-3e00-9e79-bd797210d5ee.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 11810 IP address blocks: 204.194.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:63:71:0d:7a:f8:a7:22:0f:8a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=70dceb3d-0f9b-4f88-bf84-6ff6d4f62b15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:33:9f:82:2b:5d:f6:38:d2:a4:e2:0c:f1:aa: 20:5b:19:6c:8c:dc:ad:0a:55:63:31:36:b0:00:07: 10:bb:f4:48:75:a8:1f:9d:65:32:2b:68:81:af:79: 66:0d:40:91:17:4e:c4:ea:1c:0a:2c:e3:e8:c1:5c: e0:3e:56:bc:5a:57:72:15:8c:b0:14:56:21:42:33: 71:8b:f5:75:50:8d:40:a9:c2:13:3b:01:9b:3c:b3: 16:da:ef:74:49:a5:0b:53:49:8d:4a:8c:d5:7c:30: fb:c7:f1:07:49:ca:b9:a7:35:1f:59:46:7e:75:de: ee:e0:6f:fa:a8:27:f3:05:9d:87:ba:7b:21:40:3f: f1:e6:2f:8c:c1:a3:b4:8b:59:55:57:3b:94:a7:dc: ee:78:fa:7e:ad:e4:e4:31:e5:9b:b2:48:d2:2b:f2: d8:5b:d9:c1:e1:75:10:84:1a:e2:c2:96:bd:47:6e: 71:12:da:c1:05:d4:65:7a:a2:53:7c:ef:de:98:51: 55:3a:9b:96:bd:d3:40:b0:01:e4:fe:0d:21:0e:e2: 90:0e:20:77:cc:18:58:24:e9:05:5f:90:3a:8e:98: 4a:89:09:e5:41:ea:d6:ee:70:72:98:80:e0:93:ac: 5b:11:d2:85:68:f9:39:19:40:45:db:b9:5d:35:74: b9:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:07:6E:DE:76:D0:7B:42:AE:80:C7:41:00:93:44:C9:10:30:70:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/2a1c57b7-2271-3e00-9e79-bd797210d5ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.crl X509v3 Authority Key Identifier: keyid:D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer sbgp-ipAddrBlock: critical IPv4: 204.194.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:4b:a5:f2:4b:32:c4:75:7d:48:67:22:49:dc:cb:db:60:72: fb:ea:40:23:76:7a:46:8d:3d:44:b2:50:9e:a8:e9:54:da:3a: ad:43:6f:f2:68:33:c4:af:b8:76:7e:b1:95:f6:77:4b:eb:00: 34:6d:6e:9b:21:69:d8:45:2b:b8:1c:e6:23:b6:33:d2:4f:2b: 86:2f:3d:bd:34:70:56:91:35:83:69:85:7f:5d:0d:c5:04:47: 6c:d9:c0:2c:6e:1e:8f:e0:fa:ff:bf:cd:59:c9:d4:69:b5:1b: 77:3d:dd:6d:9e:83:1b:24:92:84:7c:a4:7b:a8:26:48:52:37: eb:07:c3:75:14:94:ac:f9:5b:e1:f2:70:e6:f9:9b:09:1a:0d: 72:8a:60:11:b6:42:92:af:31:f5:f6:38:df:45:5e:c8:7d:77: 45:da:ad:78:c8:f3:97:c6:cf:26:bd:50:cc:06:dc:1d:8c:ff: 7e:2e:a5:a9:b1:81:ac:e2:1c:79:3c:ab:e2:e9:9c:bf:4a:02: 38:10:34:45:74:ba:05:5c:62:3a:4f:b6:07:ef:79:f3:c3:cc: 7a:b5:53:cf:e4:53:27:57:b6:0a:ec:29:65:6c:56:38:11:4e: 71:51:28:48:c2:72:8f:46:e1:d7:3f:c6:cc:87:8d:e1:4a:2b: 5a:a6:01:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnWNxDXr4pyIPioAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWIxOGIyMDktN2VjYy00MzYxLWI4ZjYtZDg2YTVhNTUw NGRhMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk NzBkY2ViM2QtMGY5Yi00Zjg4LWJmODQtNmZmNmQ0ZjYyYjE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4zOfgitd9jjSpOIM8aogWxlsjNytClVjMTaw AAcQu/RIdagfnWUyK2iBr3lmDUCRF07E6hwKLOPowVzgPla8WldyFYywFFYhQjNx i/V1UI1AqcITOwGbPLMW2u90SaULU0mNSozVfDD7x/EHScq5pzUfWUZ+dd7u4G/6 qCfzBZ2HunshQD/x5i+MwaO0i1lVVzuUp9zuePp+reTkMeWbskjSK/LYW9nB4XUQ hBriwpa9R25xEtrBBdRleqJTfO/emFFVOpuWvdNAsAHk/g0hDuKQDiB3zBhYJOkF X5A6jphKiQnlQerW7nBymIDgk6xbEdKFaPk5GUBF27ldNXS5dwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMsHbt520HtCroDHQQCTRMkQMHDFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYjE4 YjIwOS03ZWNjLTQzNjEtYjhmNi1kODZhNWE1NTA0ZGEvMmExYzU3YjctMjI3MS0z ZTAwLTllNzktYmQ3OTcyMTBkNWVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWIxOGIyMDktN2VjYy00MzYxLWI4 ZjYtZDg2YTVhNTUwNGRhL2FiMThiMjA5LTdlY2MtNDM2MS1iOGY2LWQ4NmE1YTU1 MDRkYS5jcmwwHwYDVR0jBBgwFoAU0idx0DJJoJ2AHgnnZ2CCOTtp0mkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYjE4YjIwOS03ZWNjLTQzNjEtYjhmNi1kODZh NWE1NTA0ZGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzMLfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHNLpfJLMsR1fUhnIkncy9tgcvvqQCN2ekaNPUSyUJ6o6VTaOq1Db/Jo M8SvuHZ+sZX2d0vrADRtbpshadhFK7gc5iO2M9JPK4YvPb00cFaRNYNphX9dDcUE R2zZwCxuHo/g+v+/zVnJ1Gm1G3c93W2egxskkoR8pHuoJkhSN+sHw3UUlKz5W+Hy cOb5mwkaDXKKYBG2QpKvMfX2ON9FXsh9d0XarXjI85fGzya9UMwG3B2M/34upamx gaziHHk8q+LpnL9KAjgQNEV0ugVcYjpPtgfvefPDzHq1U8/kUydXtgrsKWVsVjgR TnFRKEjCco9G4dc/xsyHjeFKK1qmAeg= -----END CERTIFICATE-----Generated at Wed Oct 7 02:40:57 2026 by rpki-client