$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/0ab997a0-9032-3aab-a0c8-de89d4870675.roa File: 0ab997a0-9032-3aab-a0c8-de89d4870675.roa (raw, json) Hash identifier: RRgTV74BnX8q5Fpo/9MZ2Rl/Ca5M5XqZsFXhahaNC6M= Subject key identifier: A9:26:88:05:DC:78:E5:A9:F6:53:DD:AC:4C:DE:B5:8E:2B:49:CD:07 Certificate issuer: /CN=487abf98-3073-43c6-b10e-a615e64ccc65 Certificate serial: 010D0C9F4328584C7D7C42BF1F26822E32764500 Authority key identifier: 50:7A:E4:02:3C:D8:83:E7:AD:F6:A4:D4:16:E6:E7:15:3F:0A:05:0A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/0ab997a0-9032-3aab-a0c8-de89d4870675.roa Signing time: Sun 11 Jan 2026 14:00:39 +0000 ROA not before: Sun 11 Jan 2026 14:00:39 +0000 ROA not after: Sat 11 Apr 2026 13:00:39 +0000 asID: 18726 IP address blocks: 206.55.100.0/22 maxlen: 24 208.89.40.0/21 maxlen: 24 2620:133:c000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/487abf98-3073-43c6-b10e-a615e64ccc65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/487abf98-3073-43c6-b10e-a615e64ccc65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:7d:7c:42:bf:1f:26:82:2e:32:76:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=487abf98-3073-43c6-b10e-a615e64ccc65 Validity Not Before: Jan 11 14:00:39 2026 GMT Not After : Apr 11 13:00:39 2026 GMT Subject: CN=402f4aba-c330-4ddd-a97e-eed7368d51d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:7f:79:6c:1b:cb:94:a5:91:de:12:8a:a9:54: 0b:e8:e3:fc:68:74:15:3a:5a:ef:7d:5d:0b:83:1e: 93:ff:f2:07:ef:be:9d:90:25:2c:e7:96:a5:c9:6d: 66:53:da:9f:39:72:38:72:ec:4d:43:c8:47:ba:9f: 8f:a6:4d:d8:4a:b8:cb:ae:48:57:db:18:83:d1:6d: d5:af:d5:e1:e7:28:c0:de:83:08:d1:b5:7e:24:b8: c4:9c:cd:5b:b6:37:b1:5c:ea:cb:08:89:63:6d:3f: 9d:8c:09:f6:25:8f:f2:e3:5e:e5:6f:a1:8e:c6:12: f3:32:8e:cf:4f:2f:85:e0:88:f5:44:60:ee:44:a1: 07:a3:1b:41:5c:bf:dd:4a:91:10:44:3e:bf:a8:24: 4b:99:fc:40:24:2f:ff:c1:8e:1e:68:de:9c:3e:3a: de:b4:cc:b8:40:c6:07:f5:96:27:02:4c:82:44:4b: 28:e0:d4:6c:94:02:0f:cb:f1:1f:48:e4:f6:84:d0: 94:80:aa:fd:22:a5:62:94:05:8c:39:72:72:c2:10: 59:0c:ee:ae:37:9a:b7:2f:62:45:32:e8:8c:45:7e: c8:ba:27:7b:fe:c0:56:49:78:db:d1:a5:af:4e:5c: 4b:fe:d1:6c:19:62:07:f3:73:b8:4c:d0:4e:49:bb: c9:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:26:88:05:DC:78:E5:A9:F6:53:DD:AC:4C:DE:B5:8E:2B:49:CD:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/0ab997a0-9032-3aab-a0c8-de89d4870675.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/487abf98-3073-43c6-b10e-a615e64ccc65.crl X509v3 Authority Key Identifier: keyid:50:7A:E4:02:3C:D8:83:E7:AD:F6:A4:D4:16:E6:E7:15:3F:0A:05:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65.cer sbgp-ipAddrBlock: critical IPv4: 206.55.100.0/22 208.89.40.0/21 IPv6: 2620:133:c000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:2b:a0:65:bb:b7:2d:55:d3:82:69:1f:88:85:88:0a:17:23: 4d:10:26:1c:b1:33:f2:8f:15:65:99:84:5d:9f:0e:a8:95:15: f3:91:87:cd:c9:66:af:e8:0c:89:fe:d8:82:d0:f2:cd:8a:14: 5e:c0:22:bd:9c:16:4d:f0:ff:94:2c:7a:76:57:09:e8:ff:55: 89:a6:44:92:2b:cb:46:e8:65:93:36:19:6e:72:be:bc:4b:81: 29:7b:21:9c:de:25:99:6a:b1:dd:85:e0:1c:75:e4:94:a2:e8: 3f:ae:50:e3:42:d1:b1:5f:80:da:fa:87:a4:e6:d5:0d:07:1f: 04:f7:b4:1a:7b:43:09:08:f2:5f:81:1e:cf:c1:e8:c4:5a:e5: 24:04:56:27:63:5c:29:18:c3:b2:d9:49:95:69:30:a0:56:45: b1:1e:b8:00:b3:60:a1:df:a8:3f:92:22:e5:1a:03:39:1f:dd: 11:45:7e:b3:56:6a:28:76:5a:89:b4:17:2b:d4:74:53:3b:dc: 32:50:d9:c3:5b:7f:14:73:90:9a:51:4f:95:25:02:08:95:a9: 2f:f9:2f:33:e0:39:b6:c2:a2:0b:c3:17:02:a1:9b:de:ba:9b: a0:ff:87:87:d4:1b:10:3c:de:e0:4a:a7:c1:bb:d9:04:75:bc: 2c:67:ba:5d -----BEGIN CERTIFICATE----- MIIGWjCCBUKgAwIBAgIUAQ0Mn0MoWEx9fEK/HyaCLjJ2RQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDg3YWJmOTgtMzA3My00M2M2LWIxMGUtYTYxNWU2NGNj YzY1MB4XDTI2MDExMTE0MDAzOVoXDTI2MDQxMTEzMDAzOVowLzEtMCsGA1UEAxMk NDAyZjRhYmEtYzMzMC00ZGRkLWE5N2UtZWVkNzM2OGQ1MWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn395bBvLlKWR3hKKqVQL6OP8aHQVOlrvfV0L gx6T//IH776dkCUs55alyW1mU9qfOXI4cuxNQ8hHup+Ppk3YSrjLrkhX2xiD0W3V r9Xh5yjA3oMI0bV+JLjEnM1btjexXOrLCIljbT+djAn2JY/y417lb6GOxhLzMo7P Ty+F4Ij1RGDuRKEHoxtBXL/dSpEQRD6/qCRLmfxAJC//wY4eaN6cPjretMy4QMYH 9ZYnAkyCREso4NRslAIPy/EfSOT2hNCUgKr9IqVilAWMOXJywhBZDO6uN5q3L2JF MuiMRX7Iuid7/sBWSXjb0aWvTlxL/tFsGWIH83O4TNBOSbvJjwIDAQABo4IDbDCC A2gwHQYDVR0OBBYEFKkmiAXceOWp9lPdrEzetY4rSc0HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80ODdh YmY5OC0zMDczLTQzYzYtYjEwZS1hNjE1ZTY0Y2NjNjUvMGFiOTk3YTAtOTAzMi0z YWFiLWEwYzgtZGU4OWQ0ODcwNjc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDg3YWJmOTgtMzA3My00M2M2LWIx MGUtYTYxNWU2NGNjYzY1LzQ4N2FiZjk4LTMwNzMtNDNjNi1iMTBlLWE2MTVlNjRj Y2M2NS5jcmwwHwYDVR0jBBgwFoAUUHrkAjzYg+et9qTUFubnFT8KBQowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80ODdhYmY5OC0zMDczLTQzYzYtYjEwZS1hNjE1 ZTY0Y2NjNjUuY2VyMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQCzjdkAwQD 0FkoMA8EAgACMAkDBwQmIAEzwAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAnCugZbu3LVXTgmkfiIWIChcj TRAmHLEz8o8VZZmEXZ8OqJUV85GHzclmr+gMif7YgtDyzYoUXsAivZwWTfD/lCx6 dlcJ6P9ViaZEkivLRuhlkzYZbnK+vEuBKXshnN4lmWqx3YXgHHXklKLoP65Q40LR sV+A2vqHpObVDQcfBPe0GntDCQjyX4Eez8HoxFrlJARWJ2NcKRjDstlJlWkwoFZF sR64ALNgod+oP5Ii5RoDOR/dEUV+s1ZqKHZaibQXK9R0UzvcMlDZw1t/FHOQmlFP lSUCCJWpL/kvM+A5tsKiC8MXAqGb3rqboP+Hh9QbEDze4EqnwbvZBHW8LGe6XQ== -----END CERTIFICATE-----Generated at Mon Mar 2 17:45:09 2026 by rpki-client