$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/7f2bb030-6124-30be-b08b-a5654c3506c4.roa File: 7f2bb030-6124-30be-b08b-a5654c3506c4.roa (raw, json) Hash identifier: qZG217Q3XF5mEpEaaHUALNqXNsgjpLNJGp5oiv8yrnU= Subject key identifier: 7A:D5:2D:83:A9:78:31:5D:1C:27:CA:12:F1:55:B2:72:36:3F:7A:37 Certificate issuer: /CN=487abf98-3073-43c6-b10e-a615e64ccc65 Certificate serial: 010D0C9F4328584CB551D5923FCBE5162C397F40 Authority key identifier: 50:7A:E4:02:3C:D8:83:E7:AD:F6:A4:D4:16:E6:E7:15:3F:0A:05:0A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/7f2bb030-6124-30be-b08b-a5654c3506c4.roa Signing time: Sat 31 Jan 2026 14:00:39 +0000 ROA not before: Sat 31 Jan 2026 14:00:39 +0000 ROA not after: Fri 01 May 2026 13:00:39 +0000 asID: 16509 IP address blocks: 216.9.204.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/487abf98-3073-43c6-b10e-a615e64ccc65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/487abf98-3073-43c6-b10e-a615e64ccc65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b5:51:d5:92:3f:cb:e5:16:2c:39:7f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=487abf98-3073-43c6-b10e-a615e64ccc65 Validity Not Before: Jan 31 14:00:39 2026 GMT Not After : May 1 13:00:39 2026 GMT Subject: CN=dd4c43cb-0203-4e03-a157-406a50539bea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:25:90:8a:4d:52:84:f0:bc:66:18:cb:79:ea: 12:ba:33:ad:33:1c:30:c5:bc:90:60:8e:43:1e:dc: f7:43:5f:5c:96:a2:a7:4d:9e:6d:99:8f:a0:d4:31: f4:15:9f:bd:6b:e1:2b:cb:fe:47:dd:61:86:0a:cd: be:93:d5:94:cc:cb:72:ed:4f:ae:69:61:cf:cf:f4: 4f:14:f4:f6:a5:77:b6:be:fa:96:2b:8a:d6:d6:58: b6:74:5e:02:63:09:e9:78:13:76:57:69:f0:02:5e: 29:94:5e:a1:7a:26:4a:67:02:75:a3:b5:1a:aa:37: 09:37:f6:0e:7e:d8:5b:c7:99:a3:e4:ab:52:04:1e: 39:cf:11:49:4b:a4:3c:14:33:e8:54:61:e5:02:b8: 5e:2d:24:63:9b:b1:b9:fd:8f:62:41:69:74:3b:01: 63:ae:5a:51:76:64:c7:01:8a:d2:77:d9:f4:21:53: 21:8c:60:3c:f6:2e:01:c0:95:3d:30:ce:9c:57:fc: 10:0d:69:2f:3c:cf:6c:48:0b:c8:93:3b:72:0a:0d: a8:14:55:e5:9c:c1:f3:6d:75:52:0a:5a:f9:5c:9f: be:4d:44:7b:1a:98:f3:d7:91:b4:5e:16:1d:32:96: 87:98:4a:9a:72:74:f6:ad:ac:f2:52:03:00:38:43: f9:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:D5:2D:83:A9:78:31:5D:1C:27:CA:12:F1:55:B2:72:36:3F:7A:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/7f2bb030-6124-30be-b08b-a5654c3506c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/487abf98-3073-43c6-b10e-a615e64ccc65.crl X509v3 Authority Key Identifier: keyid:50:7A:E4:02:3C:D8:83:E7:AD:F6:A4:D4:16:E6:E7:15:3F:0A:05:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65.cer sbgp-ipAddrBlock: critical IPv4: 216.9.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:f0:44:9c:f6:7d:fd:6d:bc:47:17:50:cb:6f:53:b1:53:c7: 08:81:16:76:f7:1f:ca:b6:3d:2d:a3:c6:7e:12:44:95:17:cd: 94:92:57:20:55:fe:8b:84:67:a0:d3:bb:28:e1:81:75:16:6d: 6f:3b:96:fb:77:44:03:48:50:f8:e7:8a:fb:00:57:7e:67:b3: 93:65:6c:8f:d4:6e:5b:48:b1:59:ee:83:94:79:19:31:2c:7e: 56:7e:df:11:44:5f:19:7a:7c:be:1c:96:59:15:c9:a4:ae:b8: b1:e9:bc:15:5e:1e:54:2a:35:1f:1e:72:d9:0d:1b:11:f4:30: 1a:ee:37:a3:8f:cd:02:0f:96:53:4a:e5:cf:bf:1e:b9:6c:62: 68:55:b3:29:38:75:55:e6:4f:9e:58:24:5a:f1:59:1a:a3:bf: 8b:48:da:38:26:2b:b1:28:f8:26:c4:77:e8:e4:be:d4:63:59: 65:27:0b:8b:81:ae:c2:4f:a0:a5:28:73:d4:b3:36:63:5a:e3: 4b:a3:b8:63:fe:81:0a:e2:4f:f4:4c:3e:90:4d:8c:56:9f:c3: 02:7b:c5:b3:86:52:90:bd:a5:55:7d:eb:88:c0:63:63:8e:51: a1:03:a4:cd:90:0b:18:14:c2:4a:bd:41:69:c0:b5:b6:74:23: ad:a4:f7:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy1UdWSP8vlFiw5f0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDg3YWJmOTgtMzA3My00M2M2LWIxMGUtYTYxNWU2NGNj YzY1MB4XDTI2MDEzMTE0MDAzOVoXDTI2MDUwMTEzMDAzOVowLzEtMCsGA1UEAxMk ZGQ0YzQzY2ItMDIwMy00ZTAzLWExNTctNDA2YTUwNTM5YmVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSWQik1ShPC8ZhjLeeoSujOtMxwwxbyQYI5D Htz3Q19clqKnTZ5tmY+g1DH0FZ+9a+Ery/5H3WGGCs2+k9WUzMty7U+uaWHPz/RP FPT2pXe2vvqWK4rW1li2dF4CYwnpeBN2V2nwAl4plF6heiZKZwJ1o7UaqjcJN/YO fthbx5mj5KtSBB45zxFJS6Q8FDPoVGHlArheLSRjm7G5/Y9iQWl0OwFjrlpRdmTH AYrSd9n0IVMhjGA89i4BwJU9MM6cV/wQDWkvPM9sSAvIkztyCg2oFFXlnMHzbXVS Clr5XJ++TUR7Gpjz15G0XhYdMpaHmEqacnT2razyUgMAOEP5TwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHrVLYOpeDFdHCfKEvFVsnI2P3o3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80ODdh YmY5OC0zMDczLTQzYzYtYjEwZS1hNjE1ZTY0Y2NjNjUvN2YyYmIwMzAtNjEyNC0z MGJlLWIwOGItYTU2NTRjMzUwNmM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDg3YWJmOTgtMzA3My00M2M2LWIx MGUtYTYxNWU2NGNjYzY1LzQ4N2FiZjk4LTMwNzMtNDNjNi1iMTBlLWE2MTVlNjRj Y2M2NS5jcmwwHwYDVR0jBBgwFoAUUHrkAjzYg+et9qTUFubnFT8KBQowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80ODdhYmY5OC0zMDczLTQzYzYtYjEwZS1hNjE1 ZTY0Y2NjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2AnMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI7wRJz2ff1tvEcXUMtvU7FTxwiBFnb3H8q2PS2jxn4SRJUXzZSSVyBV /ouEZ6DTuyjhgXUWbW87lvt3RANIUPjnivsAV35ns5NlbI/UbltIsVnug5R5GTEs flZ+3xFEXxl6fL4cllkVyaSuuLHpvBVeHlQqNR8ectkNGxH0MBruN6OPzQIPllNK 5c+/HrlsYmhVsyk4dVXmT55YJFrxWRqjv4tI2jgmK7Eo+CbEd+jkvtRjWWUnC4uB rsJPoKUoc9SzNmNa40ujuGP+gQriT/RMPpBNjFafwwJ7xbOGUpC9pVV964jAY2OO UaEDpM2QCxgUwkq9QWnAtbZ0I62k90g= -----END CERTIFICATE-----Generated at Mon Mar 2 15:54:22 2026 by rpki-client