$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc11e5dd-c2b3-493c-8534-431fa4878aa9/909ee406-9578-315b-b7e6-279b162a81ab.roa File: 909ee406-9578-315b-b7e6-279b162a81ab.roa (raw, json) Hash identifier: BHWDAXfaGn6suxg+CQkaNPL3Ha09r6eZ8g+ASy+I4j8= Subject key identifier: 20:45:05:87:B0:48:CB:C2:69:34:94:C4:50:04:65:17:5E:82:66:45 Certificate issuer: /CN=cc11e5dd-c2b3-493c-8534-431fa4878aa9 Certificate serial: 010D0C9F4328584CACF1CBF8BF7CE0BF0EBF3A40 Authority key identifier: 96:B0:88:5C:AB:50:1F:7A:A1:77:AD:ED:76:FF:91:57:89:9E:F5:C6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc11e5dd-c2b3-493c-8534-431fa4878aa9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc11e5dd-c2b3-493c-8534-431fa4878aa9/909ee406-9578-315b-b7e6-279b162a81ab.roa Signing time: Wed 28 Jan 2026 14:00:36 +0000 ROA not before: Wed 28 Jan 2026 14:00:36 +0000 ROA not after: Tue 28 Apr 2026 13:00:36 +0000 asID: 400072 IP address blocks: 204.10.80.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc11e5dd-c2b3-493c-8534-431fa4878aa9/cc11e5dd-c2b3-493c-8534-431fa4878aa9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc11e5dd-c2b3-493c-8534-431fa4878aa9/cc11e5dd-c2b3-493c-8534-431fa4878aa9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc11e5dd-c2b3-493c-8534-431fa4878aa9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ac:f1:cb:f8:bf:7c:e0:bf:0e:bf:3a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc11e5dd-c2b3-493c-8534-431fa4878aa9 Validity Not Before: Jan 28 14:00:36 2026 GMT Not After : Apr 28 13:00:36 2026 GMT Subject: CN=8fd65a7e-e3a7-42b0-841b-42d312c3f7ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ca:71:48:60:ed:75:5a:be:6e:8f:26:5d:f3: e1:95:8f:77:6b:cc:c1:0a:48:73:a7:98:21:d6:83: 59:4e:05:08:19:1c:a1:4d:6e:dc:1f:aa:12:c0:c0: d9:bd:89:20:c7:85:15:a8:d7:eb:3b:24:76:3d:43: 07:6b:77:63:a1:a4:81:e7:2f:22:22:ac:ee:17:11: 9d:cf:7f:c9:b5:48:2b:3e:be:01:06:34:c1:f5:fa: dc:a4:4b:ad:fe:64:0b:ce:34:c9:7d:de:d3:c2:af: 0e:14:e2:45:94:f9:53:06:80:ab:11:4f:9a:34:8b: a2:1a:5e:c2:ca:8c:cb:df:86:68:79:1b:13:6b:b5: 65:29:de:df:8d:8b:9d:8d:0c:c2:f5:e8:eb:a1:15: ea:c5:8a:71:1f:68:57:26:6c:07:42:08:f5:ff:09: 57:1f:af:a8:a2:73:69:74:45:c9:1f:db:0c:aa:fe: 48:68:35:1b:c2:15:87:b6:e9:31:49:3a:e2:c2:72: 34:b3:68:c4:6c:79:90:92:7b:99:c1:e0:3d:e7:43: a2:53:f0:2b:ed:64:0e:20:fb:a1:90:0c:39:db:55: aa:a3:78:02:f8:b1:35:38:b5:74:47:b5:70:44:b8: 70:52:bc:8c:8a:f4:ae:50:21:18:6a:72:cf:ac:4c: 8b:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:45:05:87:B0:48:CB:C2:69:34:94:C4:50:04:65:17:5E:82:66:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc11e5dd-c2b3-493c-8534-431fa4878aa9/909ee406-9578-315b-b7e6-279b162a81ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc11e5dd-c2b3-493c-8534-431fa4878aa9/cc11e5dd-c2b3-493c-8534-431fa4878aa9.crl X509v3 Authority Key Identifier: keyid:96:B0:88:5C:AB:50:1F:7A:A1:77:AD:ED:76:FF:91:57:89:9E:F5:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc11e5dd-c2b3-493c-8534-431fa4878aa9.cer sbgp-ipAddrBlock: critical IPv4: 204.10.80.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:90:ef:7e:c8:76:b7:9d:4c:c1:d1:cd:a0:72:d0:76:75:1e: 08:f7:46:a9:16:17:33:8b:44:ef:d8:f4:26:12:80:16:d2:47: 8e:5f:0d:91:67:18:95:da:a5:9d:dd:47:7f:64:f4:7f:26:94: d9:52:46:62:a2:c3:97:7b:01:7a:5f:4f:7c:c4:4a:b8:98:50: 66:83:44:6e:3c:d2:a3:87:81:6f:fa:73:35:47:07:2f:3a:69: 1d:a2:0d:68:80:d8:67:f2:8a:28:a8:35:26:dc:3b:c2:2b:32: 71:0f:ae:42:94:ab:f3:f4:6a:15:ae:a7:15:7a:c6:2c:0b:f1: 1f:bb:66:75:e9:54:21:76:d3:ec:25:f2:bb:fa:40:02:1f:26: 9b:60:54:3f:33:b0:c1:90:86:e8:d7:72:60:25:50:ae:70:23: a0:1c:2c:d2:f5:53:fa:6c:a6:02:6d:c3:64:64:37:2d:67:2f: 4b:5e:2e:47:5a:6f:b0:38:1b:86:00:c1:8b:c7:7f:d2:b3:27: 6e:48:61:fe:0a:a4:59:ca:5b:77:0f:fc:cc:94:79:04:86:14: 8f:d9:e3:ea:dd:6a:ae:ab:7a:8a:38:99:0e:6e:ab:0f:26:bd: 06:8b:28:b3:ae:91:27:10:c3:0d:f1:2c:da:f1:c4:d8:b2:e8: e1:df:8a:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEys8cv4v3zgvw6/OkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2MxMWU1ZGQtYzJiMy00OTNjLTg1MzQtNDMxZmE0ODc4 YWE5MB4XDTI2MDEyODE0MDAzNloXDTI2MDQyODEzMDAzNlowLzEtMCsGA1UEAxMk OGZkNjVhN2UtZTNhNy00MmIwLTg0MWItNDJkMzEyYzNmN2ZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8pxSGDtdVq+bo8mXfPhlY93a8zBCkhzp5gh 1oNZTgUIGRyhTW7cH6oSwMDZvYkgx4UVqNfrOyR2PUMHa3djoaSB5y8iIqzuFxGd z3/JtUgrPr4BBjTB9frcpEut/mQLzjTJfd7Twq8OFOJFlPlTBoCrEU+aNIuiGl7C yozL34ZoeRsTa7VlKd7fjYudjQzC9ejroRXqxYpxH2hXJmwHQgj1/wlXH6+oonNp dEXJH9sMqv5IaDUbwhWHtukxSTriwnI0s2jEbHmQknuZweA950OiU/Ar7WQOIPuh kAw521Wqo3gC+LE1OLV0R7VwRLhwUryMivSuUCEYanLPrEyLwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCBFBYewSMvCaTSUxFAEZRdegmZFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzEx ZTVkZC1jMmIzLTQ5M2MtODUzNC00MzFmYTQ4NzhhYTkvOTA5ZWU0MDYtOTU3OC0z MTViLWI3ZTYtMjc5YjE2MmE4MWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvY2MxMWU1ZGQtYzJiMy00OTNjLTg1 MzQtNDMxZmE0ODc4YWE5L2NjMTFlNWRkLWMyYjMtNDkzYy04NTM0LTQzMWZhNDg3 OGFhOS5jcmwwHwYDVR0jBBgwFoAUlrCIXKtQH3qhd63tdv+RV4me9cYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzExZTVkZC1jMmIzLTQ5M2MtODUzNC00MzFm YTQ4NzhhYTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzApQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAWQ737IdredTMHRzaBy0HZ1Hgj3RqkWFzOLRO/Y9CYSgBbSR45fDZFn GJXapZ3dR39k9H8mlNlSRmKiw5d7AXpfT3zESriYUGaDRG480qOHgW/6czVHBy86 aR2iDWiA2GfyiiioNSbcO8IrMnEPrkKUq/P0ahWupxV6xiwL8R+7ZnXpVCF20+wl 8rv6QAIfJptgVD8zsMGQhujXcmAlUK5wI6AcLNL1U/pspgJtw2RkNy1nL0teLkda b7A4G4YAwYvHf9KzJ25IYf4KpFnKW3cP/MyUeQSGFI/Z4+rdaq6reoo4mQ5uqw8m vQaLKLOukScQww3xLNrxxNiy6OHfiu4= -----END CERTIFICATE-----Generated at Mon Mar 2 21:11:41 2026 by rpki-client