$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/7f2bb030-6124-30be-b08b-a5654c3506c4.roa File: 7f2bb030-6124-30be-b08b-a5654c3506c4.roa (raw, json) Hash identifier: QgNZzK8K3QY/0F+0UY7kRi3fQap9RxjIJjk4kNKwVtQ= Subject key identifier: 6A:5A:E0:F6:D1:51:28:B3:AE:0F:97:4D:C6:17:F5:11:2C:5A:4E:17 Certificate issuer: /CN=487abf98-3073-43c6-b10e-a615e64ccc65 Certificate serial: 010D0C9F4328584D95EFF350A495211143E95280 Authority key identifier: 50:7A:E4:02:3C:D8:83:E7:AD:F6:A4:D4:16:E6:E7:15:3F:0A:05:0A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/7f2bb030-6124-30be-b08b-a5654c3506c4.roa Signing time: Wed 22 Apr 2026 01:00:23 +0000 ROA not before: Wed 22 Apr 2026 01:00:23 +0000 ROA not after: Tue 21 Jul 2026 01:00:23 +0000 asID: 16509 IP address blocks: 216.9.204.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/487abf98-3073-43c6-b10e-a615e64ccc65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/487abf98-3073-43c6-b10e-a615e64ccc65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 04 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:95:ef:f3:50:a4:95:21:11:43:e9:52:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=487abf98-3073-43c6-b10e-a615e64ccc65 Validity Not Before: Apr 22 01:00:23 2026 GMT Not After : Jul 21 01:00:23 2026 GMT Subject: CN=746ae0a3-b2b8-4fc3-acf4-2273ce3f3bd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:df:73:bb:f3:8e:25:a3:0d:82:1a:a5:75:f2: c1:31:7e:af:51:e5:82:34:8a:54:95:56:8c:e9:2f: a3:78:9c:9a:cb:30:5a:55:79:f6:02:91:26:11:69: 84:6f:15:b4:c7:2c:ec:56:54:dc:5d:66:4c:08:4b: df:a7:60:80:77:a9:0d:da:fd:fe:12:b8:cd:cf:1f: 4e:d3:2a:3a:99:13:e8:08:fd:62:10:0a:69:12:9f: 60:88:40:b9:d1:a7:11:64:35:fa:b2:c7:7e:2d:cc: 47:7a:47:75:13:83:18:a9:5e:d7:21:a0:cc:11:75: 46:06:25:46:48:8a:5d:71:f0:f7:ea:be:a5:e4:68: bf:75:c0:d1:64:81:bd:a3:01:5c:ab:29:a9:47:cb: e4:f1:7f:e2:27:ab:7c:b0:97:12:b4:85:dc:1a:ac: 64:d0:75:4d:c6:53:f7:5d:d1:08:22:78:58:c4:a4: e4:cf:8f:15:48:d2:71:f2:86:e0:97:d8:85:f4:b0: 3b:1f:44:f1:dc:b7:9c:c7:68:05:e5:31:7b:59:fe: 17:d3:35:3c:a0:87:7a:e2:d1:82:04:2d:bb:d6:c8: 6f:cb:11:e6:93:2f:63:f9:4c:67:40:24:2a:31:ca: b2:f7:92:87:c7:2a:94:3f:87:2f:94:aa:ba:68:7b: 3b:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:5A:E0:F6:D1:51:28:B3:AE:0F:97:4D:C6:17:F5:11:2C:5A:4E:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/7f2bb030-6124-30be-b08b-a5654c3506c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/487abf98-3073-43c6-b10e-a615e64ccc65.crl X509v3 Authority Key Identifier: keyid:50:7A:E4:02:3C:D8:83:E7:AD:F6:A4:D4:16:E6:E7:15:3F:0A:05:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65.cer sbgp-ipAddrBlock: critical IPv4: 216.9.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:66:42:65:1b:75:24:b1:8c:f0:a9:7f:a7:d1:68:bc:55:41: 8a:fd:4f:5a:77:57:25:73:a2:3a:8b:46:04:84:57:9a:43:1a: 9b:04:43:ac:3b:59:c6:ea:3f:c1:20:69:05:d6:c4:87:de:3c: 04:0f:b6:30:a8:bb:ab:6d:92:48:a7:4f:89:d4:c6:16:4d:4c: ca:54:7a:26:fe:24:ec:02:f9:22:a7:ec:dd:ad:53:3f:24:9e: 94:b3:9f:11:86:76:d2:53:6c:30:36:32:c6:d1:2d:23:01:77: 41:43:fe:45:86:53:d3:b2:73:27:64:e6:63:29:60:53:37:7c: 5c:ac:3a:05:9d:89:e9:89:6b:16:5e:38:a2:73:06:43:f5:ed: 77:27:73:4c:10:78:93:ae:4c:98:3e:4d:60:0d:dd:cd:9b:35: 04:fa:7c:47:d6:63:e7:ed:d5:5a:f4:88:bb:7b:3b:6b:49:00: ff:2e:ea:4f:06:14:bc:ae:1b:8f:0f:73:f2:bc:12:ed:b8:87: 8b:d9:88:dd:c5:75:1d:36:aa:63:49:92:ae:a1:5d:f2:a0:2b: 64:62:a2:3f:26:5d:24:6d:83:63:4e:18:c2:1b:d0:1f:38:3f: 7c:cd:fb:49:6d:45:3e:79:cc:0f:73:ab:7e:3b:0f:eb:3a:2c: f6:45:90:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2V7/NQpJUhEUPpUoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDg3YWJmOTgtMzA3My00M2M2LWIxMGUtYTYxNWU2NGNj YzY1MB4XDTI2MDQyMjAxMDAyM1oXDTI2MDcyMTAxMDAyM1owLzEtMCsGA1UEAxMk NzQ2YWUwYTMtYjJiOC00ZmMzLWFjZjQtMjI3M2NlM2YzYmQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiN9zu/OOJaMNghqldfLBMX6vUeWCNIpUlVaM 6S+jeJyayzBaVXn2ApEmEWmEbxW0xyzsVlTcXWZMCEvfp2CAd6kN2v3+ErjNzx9O 0yo6mRPoCP1iEAppEp9giEC50acRZDX6ssd+LcxHekd1E4MYqV7XIaDMEXVGBiVG SIpdcfD36r6l5Gi/dcDRZIG9owFcqympR8vk8X/iJ6t8sJcStIXcGqxk0HVNxlP3 XdEIInhYxKTkz48VSNJx8obgl9iF9LA7H0Tx3Lecx2gF5TF7Wf4X0zU8oId64tGC BC271shvyxHmky9j+UxnQCQqMcqy95KHxyqUP4cvlKq6aHs76wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGpa4PbRUSizrg+XTcYX9REsWk4XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80ODdh YmY5OC0zMDczLTQzYzYtYjEwZS1hNjE1ZTY0Y2NjNjUvN2YyYmIwMzAtNjEyNC0z MGJlLWIwOGItYTU2NTRjMzUwNmM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDg3YWJmOTgtMzA3My00M2M2LWIx MGUtYTYxNWU2NGNjYzY1LzQ4N2FiZjk4LTMwNzMtNDNjNi1iMTBlLWE2MTVlNjRj Y2M2NS5jcmwwHwYDVR0jBBgwFoAUUHrkAjzYg+et9qTUFubnFT8KBQowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80ODdhYmY5OC0zMDczLTQzYzYtYjEwZS1hNjE1 ZTY0Y2NjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2AnMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFlmQmUbdSSxjPCpf6fRaLxVQYr9T1p3VyVzojqLRgSEV5pDGpsEQ6w7 WcbqP8EgaQXWxIfePAQPtjCou6ttkkinT4nUxhZNTMpUeib+JOwC+SKn7N2tUz8k npSznxGGdtJTbDA2MsbRLSMBd0FD/kWGU9Oycydk5mMpYFM3fFysOgWdiemJaxZe OKJzBkP17Xcnc0wQeJOuTJg+TWAN3c2bNQT6fEfWY+ft1Vr0iLt7O2tJAP8u6k8G FLyuG48Pc/K8Eu24h4vZiN3FdR02qmNJkq6hXfKgK2Rioj8mXSRtg2NOGMIb0B84 P3zN+0ltRT55zA9zq347D+s6LPZFkAo= -----END CERTIFICATE-----Generated at Sun May 3 16:16:47 2026 by rpki-client