$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/0bae7820-559d-38ce-bc60-e8ef8a792915.roa File: 0bae7820-559d-38ce-bc60-e8ef8a792915.roa (raw, json) Hash identifier: 8XqEtpRk+CfiT4D3ij1OaWQICozHItmq6NG9wtXhdTo= Subject key identifier: 3D:51:F0:95:01:0C:55:C9:EE:15:AD:82:FA:63:A6:EB:D0:12:E5:3C Certificate issuer: /CN=487abf98-3073-43c6-b10e-a615e64ccc65 Certificate serial: 010D0C9F4328584CB551D5A5C8DBF509373E5C00 Authority key identifier: 50:7A:E4:02:3C:D8:83:E7:AD:F6:A4:D4:16:E6:E7:15:3F:0A:05:0A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/0bae7820-559d-38ce-bc60-e8ef8a792915.roa Signing time: Sat 31 Jan 2026 14:00:39 +0000 ROA not before: Sat 31 Jan 2026 14:00:39 +0000 ROA not after: Fri 01 May 2026 13:00:39 +0000 asID: 14618 IP address blocks: 216.9.204.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/487abf98-3073-43c6-b10e-a615e64ccc65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/487abf98-3073-43c6-b10e-a615e64ccc65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b5:51:d5:a5:c8:db:f5:09:37:3e:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=487abf98-3073-43c6-b10e-a615e64ccc65 Validity Not Before: Jan 31 14:00:39 2026 GMT Not After : May 1 13:00:39 2026 GMT Subject: CN=57a34c6e-4eae-4462-a4cf-89c28f1c491a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:db:35:7d:4e:bb:c4:4d:a9:df:1f:73:32:64: 98:e1:4b:6b:b3:03:c7:25:b4:9b:4c:c0:1d:19:d4: fc:98:d3:c7:56:2f:75:70:a7:f0:b9:87:df:eb:96: d9:09:da:ea:8e:5d:ed:f2:44:8e:69:a9:ba:c6:e8: ef:a1:c7:2c:a9:8e:e1:72:21:e5:b8:d0:32:f0:f7: 34:65:ef:ea:6e:82:db:1a:8c:d0:f6:22:ae:31:68: 1e:d5:23:52:9c:d4:b9:e5:e4:9b:fc:71:e0:11:ad: e4:eb:d8:cb:0b:b7:b7:81:bd:f2:ae:2b:88:e7:6e: 0b:23:18:8a:51:ad:8d:6e:ef:b4:b0:67:06:76:be: 42:1f:97:2a:02:f7:69:c2:3e:48:30:7c:da:1e:fe: f6:a7:11:a5:ba:bc:5e:b7:42:ad:66:56:d5:a3:2c: b3:2c:c6:2e:70:1d:2c:70:27:0a:4c:31:a6:59:bf: f7:ca:9d:fd:d5:d3:93:ec:c1:33:05:ae:6a:ff:21: 05:ee:21:09:5f:91:d1:0e:9c:f3:54:96:77:ce:d8: 19:49:2b:cd:59:7f:5e:2e:9c:60:bf:d5:7e:f8:80: c8:8e:80:7d:33:33:4f:79:8e:3d:3c:19:40:29:41: dd:34:a0:dc:cf:2e:8b:42:ba:46:61:0e:75:e9:88: 3a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:51:F0:95:01:0C:55:C9:EE:15:AD:82:FA:63:A6:EB:D0:12:E5:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/0bae7820-559d-38ce-bc60-e8ef8a792915.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/487abf98-3073-43c6-b10e-a615e64ccc65.crl X509v3 Authority Key Identifier: keyid:50:7A:E4:02:3C:D8:83:E7:AD:F6:A4:D4:16:E6:E7:15:3F:0A:05:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65.cer sbgp-ipAddrBlock: critical IPv4: 216.9.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cf:a9:0e:42:8a:74:eb:51:9f:bd:03:ae:56:26:1b:14:28:51: 28:f2:33:05:a6:5b:3f:36:31:27:9e:62:6b:2a:90:3c:24:89: f6:45:4e:93:ab:2e:ef:eb:e1:e2:92:75:6c:06:5e:59:ba:8c: 0d:93:cf:a2:f1:11:d6:9f:36:66:30:03:2d:dc:7f:b1:df:b5: 8b:61:49:cb:5b:19:89:65:0e:7f:bf:a0:d6:9c:d4:03:85:43: 15:95:4d:2c:ea:46:d1:1c:ee:62:56:8a:0b:e3:03:9a:5e:7a: a1:98:d2:85:1c:ca:fe:a6:5e:82:bb:c8:5d:eb:45:02:10:37: 93:96:a9:60:e1:a8:be:62:a8:0c:92:55:58:ca:2b:fc:f7:75: 25:12:d4:f4:60:86:3d:78:7c:30:ff:cd:2d:0d:d6:9b:6c:a6: 7b:8a:2d:7e:7e:7d:93:15:55:b1:d3:63:92:cd:34:91:4e:e9: c7:48:5c:eb:dc:ce:46:08:83:0f:a9:09:7f:40:7e:b3:f3:1b: 8e:69:b2:f7:e3:bd:b5:b1:a8:53:d6:a9:d3:5f:bf:0b:72:66: e6:ad:9e:c4:f5:bd:28:55:00:39:f6:f0:e0:81:18:3b:d4:fa: fd:e7:08:a4:f8:14:20:ab:26:56:e6:91:c2:79:ab:1e:92:20: c8:d7:1e:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy1UdWlyNv1CTc+XAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDg3YWJmOTgtMzA3My00M2M2LWIxMGUtYTYxNWU2NGNj YzY1MB4XDTI2MDEzMTE0MDAzOVoXDTI2MDUwMTEzMDAzOVowLzEtMCsGA1UEAxMk NTdhMzRjNmUtNGVhZS00NDYyLWE0Y2YtODljMjhmMWM0OTFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNs1fU67xE2p3x9zMmSY4UtrswPHJbSbTMAd GdT8mNPHVi91cKfwuYff65bZCdrqjl3t8kSOaam6xujvoccsqY7hciHluNAy8Pc0 Ze/qboLbGozQ9iKuMWge1SNSnNS55eSb/HHgEa3k69jLC7e3gb3yriuI524LIxiK Ua2Nbu+0sGcGdr5CH5cqAvdpwj5IMHzaHv72pxGlurxet0KtZlbVoyyzLMYucB0s cCcKTDGmWb/3yp391dOT7MEzBa5q/yEF7iEJX5HRDpzzVJZ3ztgZSSvNWX9eLpxg v9V++IDIjoB9MzNPeY49PBlAKUHdNKDczy6LQrpGYQ516Yg6LQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD1R8JUBDFXJ7hWtgvpjpuvQEuU8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80ODdh YmY5OC0zMDczLTQzYzYtYjEwZS1hNjE1ZTY0Y2NjNjUvMGJhZTc4MjAtNTU5ZC0z OGNlLWJjNjAtZThlZjhhNzkyOTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDg3YWJmOTgtMzA3My00M2M2LWIx MGUtYTYxNWU2NGNjYzY1LzQ4N2FiZjk4LTMwNzMtNDNjNi1iMTBlLWE2MTVlNjRj Y2M2NS5jcmwwHwYDVR0jBBgwFoAUUHrkAjzYg+et9qTUFubnFT8KBQowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80ODdhYmY5OC0zMDczLTQzYzYtYjEwZS1hNjE1 ZTY0Y2NjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2AnMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM+pDkKKdOtRn70DrlYmGxQoUSjyMwWmWz82MSeeYmsqkDwkifZFTpOr Lu/r4eKSdWwGXlm6jA2Tz6LxEdafNmYwAy3cf7HftYthSctbGYllDn+/oNac1AOF QxWVTSzqRtEc7mJWigvjA5peeqGY0oUcyv6mXoK7yF3rRQIQN5OWqWDhqL5iqAyS VVjKK/z3dSUS1PRghj14fDD/zS0N1ptspnuKLX5+fZMVVbHTY5LNNJFO6cdIXOvc zkYIgw+pCX9AfrPzG45psvfjvbWxqFPWqdNfvwtyZuatnsT1vShVADn28OCBGDvU +v3nCKT4FCCrJlbmkcJ5qx6SIMjXHoA= -----END CERTIFICATE-----Generated at Mon Mar 2 06:26:32 2026 by rpki-client