$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/0bae7820-559d-38ce-bc60-e8ef8a792915.roa File: 0bae7820-559d-38ce-bc60-e8ef8a792915.roa (raw, json) Hash identifier: saAIn0VzcXOlbfWb1Bgk2r2iweuZKvOREqbBsxxdL6w= Subject key identifier: C5:5D:7F:60:0B:B5:21:D0:36:BB:6D:4E:77:1C:A0:06:E7:AE:4D:36 Certificate issuer: /CN=487abf98-3073-43c6-b10e-a615e64ccc65 Certificate serial: 010D0C9F4328584F189796EA24354B1873E62900 Authority key identifier: 50:7A:E4:02:3C:D8:83:E7:AD:F6:A4:D4:16:E6:E7:15:3F:0A:05:0A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/0bae7820-559d-38ce-bc60-e8ef8a792915.roa Signing time: Mon 07 Sep 2026 13:00:12 +0000 ROA not before: Mon 07 Sep 2026 13:00:12 +0000 ROA not after: Sun 06 Dec 2026 14:00:12 +0000 asID: 14618 IP address blocks: 216.9.204.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/487abf98-3073-43c6-b10e-a615e64ccc65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/487abf98-3073-43c6-b10e-a615e64ccc65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:18:97:96:ea:24:35:4b:18:73:e6:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=487abf98-3073-43c6-b10e-a615e64ccc65 Validity Not Before: Sep 7 13:00:12 2026 GMT Not After : Dec 6 14:00:12 2026 GMT Subject: CN=fe0d2804-4d6b-467a-9e34-8f44d5394ccc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:7b:76:50:c2:31:93:6d:6a:b2:79:da:d0:63: a8:06:7d:61:e0:90:3c:3d:04:90:db:c3:aa:97:1d: f4:74:de:4c:04:46:eb:5a:35:e2:37:80:c3:b3:f8: 30:c2:1c:02:1a:8c:f4:6a:10:f3:68:92:a8:90:47: de:2d:b5:90:08:96:2e:4c:67:29:1e:89:7d:f8:1c: 84:c6:d4:9f:1e:2f:cc:3f:df:01:90:e2:89:8d:30: 64:a3:91:dc:ec:71:d7:bc:8b:e0:84:c9:5e:76:b2: 3b:c3:09:1d:6b:85:f6:80:02:42:ef:5d:35:cb:cb: 9b:c7:fd:a0:05:22:49:bb:6b:73:00:ad:92:8d:8c: 43:d3:74:4c:1a:f2:1d:40:b3:6d:79:3a:a8:72:f2: e2:33:4d:06:2f:1a:a2:73:d8:ff:6e:e8:fa:ab:7b: 34:02:af:89:aa:1d:9c:66:2b:cd:ae:0e:e9:60:64: 8a:11:a6:73:1e:04:e2:07:e1:0f:6a:ed:38:e9:c2: 93:1e:b0:99:a1:3c:e7:b2:bb:96:07:9b:3e:69:94: 2b:eb:21:7f:b6:ab:38:bf:b8:99:7d:a6:ce:62:5e: 82:2a:f5:95:a3:37:2a:d6:62:4a:51:8f:90:df:02: ee:5f:51:89:e5:12:ad:9b:ac:b4:13:c3:56:4e:03: 36:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:5D:7F:60:0B:B5:21:D0:36:BB:6D:4E:77:1C:A0:06:E7:AE:4D:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/0bae7820-559d-38ce-bc60-e8ef8a792915.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/487abf98-3073-43c6-b10e-a615e64ccc65.crl X509v3 Authority Key Identifier: keyid:50:7A:E4:02:3C:D8:83:E7:AD:F6:A4:D4:16:E6:E7:15:3F:0A:05:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65.cer sbgp-ipAddrBlock: critical IPv4: 216.9.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:03:1a:71:56:1c:ef:e7:bf:93:6f:87:8a:b9:aa:c9:bf:4b: a8:4d:95:22:05:29:38:4d:6b:09:5b:33:87:44:b2:68:27:54: f7:6f:6c:a1:19:e0:5e:9d:75:4d:b9:25:14:41:ac:a7:db:6b: 0e:a9:d3:76:3e:07:71:b4:0d:ea:9d:64:66:b6:32:dd:e4:f7: 7d:ff:a0:9c:cb:76:6c:21:0d:73:13:b7:2e:b4:50:f3:af:1d: 65:b1:e5:93:fb:4d:80:d6:19:e1:ae:18:09:97:96:b2:2a:4d: ef:dd:49:ab:87:c8:90:d9:7c:92:a5:ef:9f:14:1e:cb:07:2a: be:02:b4:85:08:bc:e2:ff:88:9b:97:4a:a1:cf:8c:e9:ab:8c: 4f:31:0e:6c:a8:23:ce:37:4c:3f:b5:ed:f4:7b:f3:14:4a:f7: 92:ab:b3:64:f2:48:d5:37:bf:31:89:13:2e:61:17:91:35:01: a0:85:e7:f0:aa:fc:4f:a8:25:8e:c3:98:bf:99:c8:d2:90:8e: f4:c1:cd:fa:19:1c:7f:14:b0:66:ac:85:7a:1d:3b:d8:d5:f1: 94:ca:5a:81:51:bd:a7:06:04:d9:09:d7:45:ef:18:58:26:bb: 34:46:df:5b:4d:e4:60:9f:6b:af:f2:d3:ea:dd:bb:13:6b:fd: 60:6a:d2:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Yl5bqJDVLGHPmKQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDg3YWJmOTgtMzA3My00M2M2LWIxMGUtYTYxNWU2NGNj YzY1MB4XDTI2MDkwNzEzMDAxMloXDTI2MTIwNjE0MDAxMlowLzEtMCsGA1UEAxMk ZmUwZDI4MDQtNGQ2Yi00NjdhLTllMzQtOGY0NGQ1Mzk0Y2NjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnt2UMIxk21qsnna0GOoBn1h4JA8PQSQ28Oq lx30dN5MBEbrWjXiN4DDs/gwwhwCGoz0ahDzaJKokEfeLbWQCJYuTGcpHol9+ByE xtSfHi/MP98BkOKJjTBko5Hc7HHXvIvghMledrI7wwkda4X2gAJC7101y8ubx/2g BSJJu2tzAK2SjYxD03RMGvIdQLNteTqocvLiM00GLxqic9j/buj6q3s0Aq+Jqh2c ZivNrg7pYGSKEaZzHgTiB+EPau046cKTHrCZoTznsruWB5s+aZQr6yF/tqs4v7iZ fabOYl6CKvWVozcq1mJKUY+Q3wLuX1GJ5RKtm6y0E8NWTgM20wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMVdf2ALtSHQNrttTnccoAbnrk02MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80ODdh YmY5OC0zMDczLTQzYzYtYjEwZS1hNjE1ZTY0Y2NjNjUvMGJhZTc4MjAtNTU5ZC0z OGNlLWJjNjAtZThlZjhhNzkyOTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDg3YWJmOTgtMzA3My00M2M2LWIx MGUtYTYxNWU2NGNjYzY1LzQ4N2FiZjk4LTMwNzMtNDNjNi1iMTBlLWE2MTVlNjRj Y2M2NS5jcmwwHwYDVR0jBBgwFoAUUHrkAjzYg+et9qTUFubnFT8KBQowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80ODdhYmY5OC0zMDczLTQzYzYtYjEwZS1hNjE1 ZTY0Y2NjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2AnMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADYDGnFWHO/nv5Nvh4q5qsm/S6hNlSIFKThNawlbM4dEsmgnVPdvbKEZ 4F6ddU25JRRBrKfbaw6p03Y+B3G0DeqdZGa2Mt3k933/oJzLdmwhDXMTty60UPOv HWWx5ZP7TYDWGeGuGAmXlrIqTe/dSauHyJDZfJKl758UHssHKr4CtIUIvOL/iJuX SqHPjOmrjE8xDmyoI843TD+17fR78xRK95Krs2TySNU3vzGJEy5hF5E1AaCF5/Cq /E+oJY7DmL+ZyNKQjvTBzfoZHH8UsGashXodO9jV8ZTKWoFRvacGBNkJ10XvGFgm uzRG31tN5GCfa6/y0+rduxNr/WBq0v0= -----END CERTIFICATE-----Generated at Sun Sep 20 23:37:40 2026 by rpki-client