$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/487d0e32-0ca9-3533-b4e3-dfb4edc0154c.roa File: 487d0e32-0ca9-3533-b4e3-dfb4edc0154c.roa (raw, json) Hash identifier: t12BtXQCU3qXI6nPkI7EdekGvgiJV+nJlRSZKD/N6cQ= Subject key identifier: 53:33:F9:B1:56:5A:C2:87:4E:B9:F0:AB:FF:BB:58:7F:7C:11:D5:72 Certificate issuer: /CN=6ce95cb2-398f-4574-bae0-522b74e03f71 Certificate serial: 010D0C9F4328584D524347A8CCAD9A447AAFBD00 Authority key identifier: CC:A9:17:F8:E6:45:3A:31:6D:87:06:F6:D1:6E:36:3E:6C:84:7F:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/487d0e32-0ca9-3533-b4e3-dfb4edc0154c.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 6939 IP address blocks: 204.15.220.0/22 maxlen: 24 208.86.120.0/21 maxlen: 24 2606:3840::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/6ce95cb2-398f-4574-bae0-522b74e03f71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/6ce95cb2-398f-4574-bae0-522b74e03f71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:47:a8:cc:ad:9a:44:7a:af:bd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ce95cb2-398f-4574-bae0-522b74e03f71 Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=22b9b55b-dc95-45fc-bb43-e6d1b0ba0224 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:b8:15:bd:fc:ef:0b:d2:c2:33:e4:19:87:5f: f0:47:f4:cd:9c:a1:cc:67:2a:1b:9a:2a:eb:8d:68: eb:2d:a8:2a:ac:9c:4e:85:64:32:da:f1:9d:d4:50: e4:af:3d:85:63:df:55:1e:ba:98:02:f6:12:6a:a9: ad:65:ca:39:c7:76:0e:01:8f:6d:2e:1d:9f:dd:d6: 17:53:7c:0b:a4:40:e8:5b:fe:1f:e1:af:43:c2:e1: b2:7e:b5:00:e1:c0:91:a1:e2:fa:b3:3e:bc:5b:33: 66:1d:07:7e:73:c0:4a:3b:bd:3e:3b:da:2d:50:89: 97:59:43:58:5f:ca:f3:fe:49:1f:5f:fd:14:12:77: 08:cd:69:32:03:c1:83:6d:c3:05:a5:c0:48:e6:7f: d8:0b:1f:9b:de:88:d2:2f:9b:16:3c:ab:9c:d5:2a: 8f:e3:55:0b:17:ce:ac:82:43:26:0a:68:a4:2e:af: ec:02:2d:2f:ac:cc:49:13:84:73:7e:c9:ca:80:d4: da:a0:f5:2b:45:4d:78:3b:06:6f:6a:18:f5:09:c8: 8d:2d:de:f5:eb:f7:a5:5f:a4:ce:ff:98:d2:4a:dd: f8:e7:37:90:54:de:d1:5f:81:c8:42:b0:4c:18:c3: d4:9a:b2:4f:bc:70:a0:ed:af:ea:e3:1b:d7:cb:da: c2:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:33:F9:B1:56:5A:C2:87:4E:B9:F0:AB:FF:BB:58:7F:7C:11:D5:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/487d0e32-0ca9-3533-b4e3-dfb4edc0154c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/6ce95cb2-398f-4574-bae0-522b74e03f71.crl X509v3 Authority Key Identifier: keyid:CC:A9:17:F8:E6:45:3A:31:6D:87:06:F6:D1:6E:36:3E:6C:84:7F:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71.cer sbgp-ipAddrBlock: critical IPv4: 204.15.220.0/22 208.86.120.0/21 IPv6: 2606:3840::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:58:5b:77:5d:99:be:67:9f:92:16:2f:88:f4:54:a6:f5:fa: 4c:dd:df:10:47:0e:79:70:f5:38:fb:e1:9c:bc:15:16:6c:07: c4:f2:cd:30:99:57:27:52:7a:0b:fa:87:1e:17:4e:b9:f2:df: d1:8e:63:88:0b:41:04:42:42:1a:b0:55:ac:be:8b:9c:27:b6: ab:2c:f8:e6:29:c0:6d:a1:fb:49:7c:c2:dc:bc:d1:e7:8f:fe: f5:ad:51:40:f5:1b:9b:4f:35:25:5f:28:fb:b1:df:64:67:aa: be:6b:5a:50:17:33:40:28:9c:f8:88:e1:d9:c9:45:5a:44:f6: 7f:d9:2a:a6:e4:fa:09:a0:fc:b5:d8:1b:c5:b0:55:0a:e7:41: 96:bc:e4:1b:6b:30:b1:b9:eb:b6:7c:89:1f:28:ce:98:3e:00: 6d:eb:fe:57:8d:48:d4:29:f7:20:1a:bb:c2:23:ab:83:0c:6c: d2:ed:fb:62:8b:36:c5:84:e8:12:41:09:d6:f0:44:16:81:a6: d1:c5:8c:30:b1:8f:f0:73:1e:d5:93:47:77:99:72:10:29:68: a8:f3:d4:eb:b3:eb:dd:21:83:ec:1f:48:47:9b:d2:75:d6:56: 1a:62:d5:7b:60:c4:11:e3:51:71:f4:f0:c6:f7:0b:25:56:46: d0:a5:ca:60 -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWE1SQ0eozK2aRHqvvQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmNlOTVjYjItMzk4Zi00NTc0LWJhZTAtNTIyYjc0ZTAz ZjcxMB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk MjJiOWI1NWItZGM5NS00NWZjLWJiNDMtZTZkMWIwYmEwMjI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7gVvfzvC9LCM+QZh1/wR/TNnKHMZyobmirr jWjrLagqrJxOhWQy2vGd1FDkrz2FY99VHrqYAvYSaqmtZco5x3YOAY9tLh2f3dYX U3wLpEDoW/4f4a9DwuGyfrUA4cCRoeL6sz68WzNmHQd+c8BKO70+O9otUImXWUNY X8rz/kkfX/0UEncIzWkyA8GDbcMFpcBI5n/YCx+b3ojSL5sWPKuc1SqP41ULF86s gkMmCmikLq/sAi0vrMxJE4RzfsnKgNTaoPUrRU14OwZvahj1CciNLd716/elX6TO /5jSSt345zeQVN7RX4HIQrBMGMPUmrJPvHCg7a/q4xvXy9rCrQIDAQABo4IDajCC A2YwHQYDVR0OBBYEFFMz+bFWWsKHTrnwq/+7WH98EdVyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82Y2U5 NWNiMi0zOThmLTQ1NzQtYmFlMC01MjJiNzRlMDNmNzEvNDg3ZDBlMzItMGNhOS0z NTMzLWI0ZTMtZGZiNGVkYzAxNTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmNlOTVjYjItMzk4Zi00NTc0LWJh ZTAtNTIyYjc0ZTAzZjcxLzZjZTk1Y2IyLTM5OGYtNDU3NC1iYWUwLTUyMmI3NGUw M2Y3MS5jcmwwHwYDVR0jBBgwFoAUzKkX+OZFOjFthwb20W42PmyEf7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82Y2U5NWNiMi0zOThmLTQ1NzQtYmFlMC01MjJi NzRlMDNmNzEuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCzA/cAwQD 0FZ4MA0EAgACMAcDBQAmBjhAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADlYW3ddmb5nn5IWL4j0VKb1+kzd 3xBHDnlw9Tj74Zy8FRZsB8TyzTCZVydSegv6hx4XTrny39GOY4gLQQRCQhqwVay+ i5wntqss+OYpwG2h+0l8wty80eeP/vWtUUD1G5tPNSVfKPux32Rnqr5rWlAXM0Ao nPiI4dnJRVpE9n/ZKqbk+gmg/LXYG8WwVQrnQZa85BtrMLG567Z8iR8ozpg+AG3r /leNSNQp9yAau8Ijq4MMbNLt+2KLNsWE6BJBCdbwRBaBptHFjDCxj/BzHtWTR3eZ chApaKjz1Ouz690hg+wfSEeb0nXWVhpi1XtgxBHjUXH08Mb3CyVWRtClymA= -----END CERTIFICATE-----Generated at Mon Apr 13 09:30:54 2026 by rpki-client