$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/df9b55a7-fb1a-3cd0-b9e3-dd178cb24eec.roa File: df9b55a7-fb1a-3cd0-b9e3-dd178cb24eec.roa (raw, json) Hash identifier: nAhy9Ga6ZMjIu/fA8N37TU6zJTD5BjfqCePzLYymOs8= Subject key identifier: AF:FC:BC:86:97:85:EF:9D:AB:0E:33:D4:5F:18:FD:B7:3F:2B:C3:1D Certificate issuer: /CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da Certificate serial: 010D0C9F4328584B4E770B92F39DE7AF1DF79A80 Authority key identifier: D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/df9b55a7-fb1a-3cd0-b9e3-dd178cb24eec.roa Signing time: Thu 25 Sep 2025 01:00:33 +0000 ROA not before: Thu 25 Sep 2025 01:00:33 +0000 ROA not after: Wed 24 Dec 2025 02:00:33 +0000 asID: 16509 IP address blocks: 216.185.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:77:0b:92:f3:9d:e7:af:1d:f7:9a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da Validity Not Before: Sep 25 01:00:33 2025 GMT Not After : Dec 24 02:00:33 2025 GMT Subject: CN=8f39d152-a186-487d-b8b0-c96bda9b291d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:84:04:db:04:ca:8f:a3:47:18:37:53:2f:b6: 47:a0:4a:09:85:44:de:50:9a:c9:92:f1:9b:89:41: 9d:91:a1:b6:03:09:11:88:91:ae:5c:9d:63:c7:2d: f0:45:da:5e:9c:20:9b:78:41:1f:8c:ae:1b:af:0e: ba:02:86:08:bb:8d:75:b8:d6:1c:96:41:9d:ec:65: 40:86:56:b8:91:fe:b4:58:51:77:cb:a8:12:d9:24: 1b:c4:cd:46:92:e2:5b:37:e7:36:71:d5:40:7e:02: 53:08:9a:3a:b3:57:37:8d:1e:55:69:12:82:ec:44: 8a:07:40:8a:96:c3:98:8d:b3:db:25:1c:74:77:12: ba:34:25:2b:ba:65:ed:d9:3b:4a:95:48:58:3a:bb: 82:13:a7:1a:00:9d:1a:72:a2:fa:68:a8:3b:ef:11: ea:13:c0:e7:19:bd:ef:f9:9d:58:40:92:c4:c4:8c: 41:ae:bd:86:a5:72:32:28:fc:87:f3:d7:8f:d0:ef: 46:b8:4f:a3:d0:8b:ca:c5:38:ed:e0:be:b7:23:14: 25:31:d1:6b:41:d5:2b:6f:85:1e:93:93:80:5f:1b: b1:59:fe:2e:57:d1:ff:ef:1b:70:55:53:60:e0:d1: c5:0a:48:3a:99:fe:03:cb:f4:ad:cc:7f:40:dd:b7: 4a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:FC:BC:86:97:85:EF:9D:AB:0E:33:D4:5F:18:FD:B7:3F:2B:C3:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/df9b55a7-fb1a-3cd0-b9e3-dd178cb24eec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.crl X509v3 Authority Key Identifier: keyid:D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer sbgp-ipAddrBlock: critical IPv4: 216.185.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:28:9b:5a:a3:23:ae:73:4d:f0:be:0d:e7:a7:f8:3e:b7:f9: 5d:ea:9d:b2:ca:7d:ec:b5:39:10:a0:2d:26:5b:29:e9:e2:d6: a1:aa:cd:53:5f:7b:3c:85:1b:e3:66:1b:aa:66:86:69:bf:21: 54:f7:9e:11:5b:b6:8c:f6:54:a8:f2:25:81:ed:c7:5d:d1:e6: dc:90:83:c9:20:54:67:b5:8d:75:88:58:d8:63:34:44:63:71: 3e:4b:c8:e4:ea:ff:b5:68:97:7b:d0:86:26:2e:b2:09:58:7d: b5:c8:be:8d:9f:19:b5:aa:7e:26:db:3d:ce:77:f2:99:f0:41: 1f:3b:eb:0a:55:7d:c7:5f:d5:6c:9a:de:df:56:e2:e8:b1:24: 73:f3:de:38:17:c3:9a:b8:a5:2f:b2:fb:25:e9:a9:69:a1:ef: 82:30:8e:22:1a:c0:6e:fa:ca:aa:0c:e9:2f:f2:5d:2c:ae:4b: cd:fa:69:83:72:1c:8c:f5:16:d6:36:50:99:79:d6:51:b7:f7: 69:b4:38:f4:e8:f2:33:c9:a9:62:37:ce:41:55:f0:ac:e6:f2: 8b:1f:06:f8:97:73:c4:93:8e:39:b9:4b:0d:72:c2:9c:90:7f: 33:42:3c:0e:56:4f:ce:81:30:0a:19:b5:60:1c:79:db:e1:9a: f9:64:b7:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtOdwuS853nrx33moAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWIxOGIyMDktN2VjYy00MzYxLWI4ZjYtZDg2YTVhNTUw NGRhMB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk OGYzOWQxNTItYTE4Ni00ODdkLWI4YjAtYzk2YmRhOWIyOTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIQE2wTKj6NHGDdTL7ZHoEoJhUTeUJrJkvGb iUGdkaG2AwkRiJGuXJ1jxy3wRdpenCCbeEEfjK4brw66AoYIu411uNYclkGd7GVA hla4kf60WFF3y6gS2SQbxM1GkuJbN+c2cdVAfgJTCJo6s1c3jR5VaRKC7ESKB0CK lsOYjbPbJRx0dxK6NCUrumXt2TtKlUhYOruCE6caAJ0acqL6aKg77xHqE8DnGb3v +Z1YQJLExIxBrr2GpXIyKPyH89eP0O9GuE+j0IvKxTjt4L63IxQlMdFrQdUrb4Ue k5OAXxuxWf4uV9H/7xtwVVNg4NHFCkg6mf4Dy/StzH9A3bdKyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK/8vIaXhe+dqw4z1F8Y/bc/K8MdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYjE4 YjIwOS03ZWNjLTQzNjEtYjhmNi1kODZhNWE1NTA0ZGEvZGY5YjU1YTctZmIxYS0z Y2QwLWI5ZTMtZGQxNzhjYjI0ZWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWIxOGIyMDktN2VjYy00MzYxLWI4 ZjYtZDg2YTVhNTUwNGRhL2FiMThiMjA5LTdlY2MtNDM2MS1iOGY2LWQ4NmE1YTU1 MDRkYS5jcmwwHwYDVR0jBBgwFoAU0idx0DJJoJ2AHgnnZ2CCOTtp0mkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYjE4YjIwOS03ZWNjLTQzNjEtYjhmNi1kODZh NWE1NTA0ZGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2LnRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAQom1qjI65zTfC+Deen+D63+V3qnbLKfey1ORCgLSZbKeni1qGqzVNf ezyFG+NmG6pmhmm/IVT3nhFbtoz2VKjyJYHtx13R5tyQg8kgVGe1jXWIWNhjNERj cT5LyOTq/7Vol3vQhiYusglYfbXIvo2fGbWqfibbPc538pnwQR876wpVfcdf1Wya 3t9W4uixJHPz3jgXw5q4pS+y+yXpqWmh74IwjiIawG76yqoM6S/yXSyuS836aYNy HIz1FtY2UJl51lG392m0OPTo8jPJqWI3zkFV8Kzm8osfBviXc8STjjm5Sw1ywpyQ fzNCPA5WT86BMAoZtWAcedvhmvlkt2U= -----END CERTIFICATE-----Generated at Mon Oct 20 13:53:23 2025 by rpki-client