$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/cf6647fc-9b24-399c-8771-2a6af1a4b386.roa File: cf6647fc-9b24-399c-8771-2a6af1a4b386.roa (raw, json) Hash identifier: CQfgmdO8xkBOapof7YN8+5xE1BaXHlsmVo44OKG4PvY= Subject key identifier: A9:16:27:03:BF:B1:71:29:87:8D:F4:59:A5:93:41:51:25:60:97:8E Certificate issuer: /CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8 Certificate serial: 010D0C9F4328584DDD2081D9A8C19CE1E51B4800 Authority key identifier: DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/cf6647fc-9b24-399c-8771-2a6af1a4b386.roa Signing time: Sun 17 May 2026 13:00:32 +0000 ROA not before: Sun 17 May 2026 13:00:32 +0000 ROA not after: Sat 15 Aug 2026 13:00:32 +0000 asID: 11377 IP address blocks: 216.20.116.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:dd:20:81:d9:a8:c1:9c:e1:e5:1b:48:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8 Validity Not Before: May 17 13:00:32 2026 GMT Not After : Aug 15 13:00:32 2026 GMT Subject: CN=3b43fda0-5bd1-4cfb-82f4-eff08eca4dea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:93:4b:30:8c:02:22:6e:b7:85:bd:ec:d2:da: 42:e5:80:d0:9b:32:f2:2a:db:79:aa:73:ad:93:42: 0b:1f:30:9f:12:bb:35:db:84:08:fe:c2:57:7a:db: 41:3c:b3:be:70:d6:63:2f:c0:84:44:a3:7a:1a:9c: 22:66:54:7e:62:74:23:8a:3b:c3:f4:90:8b:9a:98: f2:3b:6b:bf:41:98:a0:ff:90:5f:9f:36:5a:04:04: a3:d2:61:8d:bb:2b:45:64:45:b6:a4:23:f2:a6:22: 81:4b:a8:9e:e2:6e:21:bd:82:4e:15:7d:1d:f6:36: 85:b7:bf:9e:ae:9a:56:6c:c3:51:5b:8a:ad:c2:c4: 83:76:3a:e2:56:5d:dc:db:e7:7e:b6:53:28:65:51: bf:fd:2e:e9:59:32:fa:0e:b1:61:b0:71:de:ce:ee: 46:72:1c:7b:91:bf:6a:6e:e6:96:dc:52:75:5e:32: 20:c5:39:c8:bb:2f:67:e7:7a:bf:ad:bb:86:e9:87: 9a:6b:3b:61:82:d0:bc:1f:06:e7:12:7d:61:f7:62: c9:6e:d3:75:aa:3a:af:2f:70:2f:a8:1f:54:3c:60: 5e:3c:bb:94:f9:06:d3:13:9f:40:bb:8e:79:7a:bf: 73:b3:bd:6b:d1:b7:04:f5:9c:21:a9:86:70:96:bf: f6:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:16:27:03:BF:B1:71:29:87:8D:F4:59:A5:93:41:51:25:60:97:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/cf6647fc-9b24-399c-8771-2a6af1a4b386.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl X509v3 Authority Key Identifier: keyid:DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer sbgp-ipAddrBlock: critical IPv4: 216.20.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:6a:98:bd:b0:f0:ef:04:79:f3:8b:df:b4:54:d8:58:7d:05: 5c:47:b8:76:a6:65:5d:06:22:60:8a:1f:91:fb:a0:af:43:98: 77:fc:ef:70:04:ba:c7:48:66:a2:c6:92:97:d7:f1:fc:a5:c7: 62:3e:b0:f9:7a:f5:a5:75:1a:73:9d:d6:c5:11:72:ee:99:37: bb:ad:35:02:62:bd:9b:e1:33:86:03:df:bc:35:32:69:d8:5b: 6d:df:bd:c8:50:2e:e6:8f:32:04:8f:25:55:a9:a0:b2:75:0d: de:6c:e9:dd:4d:8c:bd:59:24:e5:d3:9b:c4:23:aa:64:97:6b: a8:fe:ad:a8:02:b6:58:70:ee:67:ff:71:60:bb:c4:c4:2c:3b: 6d:24:34:e8:b6:a8:bb:37:2b:20:82:f3:88:99:4a:56:dd:b3: 10:e0:da:04:95:b1:e3:68:ed:9d:df:e9:9f:11:c1:9b:5c:dd: ee:54:68:72:50:6f:e2:75:76:65:cc:8d:ac:c2:ce:f2:34:07: 85:92:88:be:10:76:92:fb:59:6a:49:49:a1:c1:e7:fd:7f:fd: d4:35:a3:28:f4:c9:e4:76:20:12:68:88:54:dd:42:a3:f7:88: 54:b2:d7:30:69:49:b6:74:43:1d:15:7c:09:c3:1d:6f:ad:39: ce:28:80:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3dIIHZqMGc4eUbSAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU1NGU1ZmMtNWYxYS00YzczLTkxMTQtODkyZWQ1ZDA1 MGI4MB4XDTI2MDUxNzEzMDAzMloXDTI2MDgxNTEzMDAzMlowLzEtMCsGA1UEAxMk M2I0M2ZkYTAtNWJkMS00Y2ZiLTgyZjQtZWZmMDhlY2E0ZGVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZNLMIwCIm63hb3s0tpC5YDQmzLyKtt5qnOt k0ILHzCfErs124QI/sJXettBPLO+cNZjL8CERKN6GpwiZlR+YnQjijvD9JCLmpjy O2u/QZig/5BfnzZaBASj0mGNuytFZEW2pCPypiKBS6ie4m4hvYJOFX0d9jaFt7+e rppWbMNRW4qtwsSDdjriVl3c2+d+tlMoZVG//S7pWTL6DrFhsHHezu5Gchx7kb9q buaW3FJ1XjIgxTnIuy9n53q/rbuG6YeaazthgtC8HwbnEn1h92LJbtN1qjqvL3Av qB9UPGBePLuU+QbTE59Au455er9zs71r0bcE9ZwhqYZwlr/2SwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKkWJwO/sXEph430WaWTQVElYJeOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80NTU0 ZTVmYy01ZjFhLTRjNzMtOTExNC04OTJlZDVkMDUwYjgvY2Y2NjQ3ZmMtOWIyNC0z OTljLTg3NzEtMmE2YWYxYTRiMzg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDU1NGU1ZmMtNWYxYS00YzczLTkx MTQtODkyZWQ1ZDA1MGI4LzQ1NTRlNWZjLTVmMWEtNGM3My05MTE0LTg5MmVkNWQw NTBiOC5jcmwwHwYDVR0jBBgwFoAU3+QEWiaDm8xXidGwF1BetYvaRmswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80NTU0ZTVmYy01ZjFhLTRjNzMtOTExNC04OTJl ZDVkMDUwYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2BR0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGNqmL2w8O8EefOL37RU2Fh9BVxHuHamZV0GImCKH5H7oK9DmHf873AE usdIZqLGkpfX8fylx2I+sPl69aV1GnOd1sURcu6ZN7utNQJivZvhM4YD37w1MmnY W23fvchQLuaPMgSPJVWpoLJ1Dd5s6d1NjL1ZJOXTm8QjqmSXa6j+ragCtlhw7mf/ cWC7xMQsO20kNOi2qLs3KyCC84iZSlbdsxDg2gSVseNo7Z3f6Z8RwZtc3e5UaHJQ b+J1dmXMjazCzvI0B4WSiL4QdpL7WWpJSaHB5/1//dQ1oyj0yeR2IBJoiFTdQqP3 iFSy1zBpSbZ0Qx0VfAnDHW+tOc4ogBw= -----END CERTIFICATE-----Generated at Sat Jun 13 23:34:10 2026 by rpki-client