$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/7f2bb030-6124-30be-b08b-a5654c3506c4.roa File: 7f2bb030-6124-30be-b08b-a5654c3506c4.roa (raw, json) Hash identifier: 9GCDbRb+jejbyDfUNO56auYgtd6S7NDOP+x5nJhd/aI= Subject key identifier: 36:7E:3A:E8:54:69:37:9B:01:7F:6F:71:B3:F5:21:25:D2:67:F9:60 Certificate issuer: /CN=487abf98-3073-43c6-b10e-a615e64ccc65 Certificate serial: 010D0C9F4328584E7634CD29856FFA77B44D8C80 Authority key identifier: 50:7A:E4:02:3C:D8:83:E7:AD:F6:A4:D4:16:E6:E7:15:3F:0A:05:0A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/7f2bb030-6124-30be-b08b-a5654c3506c4.roa Signing time: Sat 11 Jul 2026 09:00:12 +0000 ROA not before: Sat 11 Jul 2026 09:00:12 +0000 ROA not after: Fri 09 Oct 2026 09:00:12 +0000 asID: 16509 IP address blocks: 216.9.204.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/487abf98-3073-43c6-b10e-a615e64ccc65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/487abf98-3073-43c6-b10e-a615e64ccc65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:76:34:cd:29:85:6f:fa:77:b4:4d:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=487abf98-3073-43c6-b10e-a615e64ccc65 Validity Not Before: Jul 11 09:00:12 2026 GMT Not After : Oct 9 09:00:12 2026 GMT Subject: CN=eefc10fd-1dc9-43b0-9596-41f0b97a4044 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:50:c8:bc:32:46:ff:d4:d1:05:68:4b:e2:25: 60:e0:6a:19:40:16:9f:be:99:f0:e2:ac:ea:76:8e: 94:42:11:62:1c:71:b4:f0:59:0a:36:c1:77:2a:d3: b7:b7:8d:0b:c7:c8:14:23:53:96:e5:78:48:60:08: f8:66:ed:8d:e0:e5:ba:d7:ca:40:46:c7:6c:cd:b7: 65:7e:8f:d2:dc:42:58:7c:9d:14:9e:57:15:da:11: f5:a1:74:e9:8f:ad:80:c6:0a:77:cb:36:23:b5:09: e0:e7:14:be:99:37:a0:2b:fb:73:b7:ce:ef:38:89: 33:d2:43:b7:63:a4:65:97:fd:09:65:cc:38:b7:af: ce:e7:76:07:38:54:81:d8:4d:17:3a:74:f7:dd:6f: 53:34:0f:b1:4e:49:b9:a8:5d:c5:4c:74:0c:8d:c9: 00:fb:74:8c:d2:fb:c5:2e:b5:1c:8e:c7:41:71:38: ab:b8:60:f1:a6:06:7f:e2:0e:cf:00:f3:92:5d:96: 4e:0f:17:24:2e:73:ee:09:20:e8:73:79:3a:0f:32: f0:24:d9:f4:b4:34:a4:db:ba:72:46:e5:27:2d:bb: 7b:47:6c:de:f0:71:49:09:bc:e3:61:97:97:45:b3: 6e:ac:ad:5a:59:14:d5:ae:4d:fa:7e:90:ff:bc:c4: dc:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:7E:3A:E8:54:69:37:9B:01:7F:6F:71:B3:F5:21:25:D2:67:F9:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/7f2bb030-6124-30be-b08b-a5654c3506c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/487abf98-3073-43c6-b10e-a615e64ccc65.crl X509v3 Authority Key Identifier: keyid:50:7A:E4:02:3C:D8:83:E7:AD:F6:A4:D4:16:E6:E7:15:3F:0A:05:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65.cer sbgp-ipAddrBlock: critical IPv4: 216.9.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:f5:8c:ab:7f:fe:95:84:21:3a:8f:4b:60:71:b1:9c:e3:9f: e6:70:3a:aa:dd:93:38:5b:f4:0d:9e:ac:88:67:90:89:71:19: 0b:ac:27:d8:82:6e:47:03:78:35:87:e6:fe:17:26:2f:f7:cd: 03:81:97:51:40:df:36:af:cf:09:07:72:da:08:19:c2:30:12: af:7b:12:93:e9:a9:58:7c:d2:65:b6:ae:78:7c:10:ec:dd:92: db:ca:7c:b0:64:32:b8:4f:66:4c:8f:23:f4:a7:0a:56:47:d8: c1:c0:42:c3:f9:50:c7:1b:a2:7f:b4:d3:2a:ce:c7:9d:97:9e: 5f:8a:29:45:e9:5b:f0:47:a9:63:62:9f:b5:5e:e2:47:03:59: 9d:a4:9b:de:64:02:cc:10:8e:45:12:fb:b8:e1:a7:d6:b5:f9: 46:54:94:67:b9:ef:a1:5b:97:8e:33:b1:19:ba:45:ef:41:16: 65:23:61:91:59:62:6a:4c:49:72:a8:56:b3:bc:f3:53:cc:19: f2:fe:e1:2b:67:71:3e:2e:22:cb:8f:ba:a2:1d:74:3f:98:70: e5:95:4d:30:fe:71:c8:ef:ce:48:9b:2c:3b:d6:9e:bb:b7:d8: 61:ba:c1:f2:1c:55:b3:94:cf:4d:56:7b:c2:1e:7b:65:30:0d: eb:cb:7b:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE52NM0phW/6d7RNjIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDg3YWJmOTgtMzA3My00M2M2LWIxMGUtYTYxNWU2NGNj YzY1MB4XDTI2MDcxMTA5MDAxMloXDTI2MTAwOTA5MDAxMlowLzEtMCsGA1UEAxMk ZWVmYzEwZmQtMWRjOS00M2IwLTk1OTYtNDFmMGI5N2E0MDQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1DIvDJG/9TRBWhL4iVg4GoZQBafvpnw4qzq do6UQhFiHHG08FkKNsF3KtO3t40Lx8gUI1OW5XhIYAj4Zu2N4OW618pARsdszbdl fo/S3EJYfJ0UnlcV2hH1oXTpj62Axgp3yzYjtQng5xS+mTegK/tzt87vOIkz0kO3 Y6Rll/0JZcw4t6/O53YHOFSB2E0XOnT33W9TNA+xTkm5qF3FTHQMjckA+3SM0vvF LrUcjsdBcTiruGDxpgZ/4g7PAPOSXZZODxckLnPuCSDoc3k6DzLwJNn0tDSk27py RuUnLbt7R2ze8HFJCbzjYZeXRbNurK1aWRTVrk36fpD/vMTcWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDZ+OuhUaTebAX9vcbP1ISXSZ/lgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80ODdh YmY5OC0zMDczLTQzYzYtYjEwZS1hNjE1ZTY0Y2NjNjUvN2YyYmIwMzAtNjEyNC0z MGJlLWIwOGItYTU2NTRjMzUwNmM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDg3YWJmOTgtMzA3My00M2M2LWIx MGUtYTYxNWU2NGNjYzY1LzQ4N2FiZjk4LTMwNzMtNDNjNi1iMTBlLWE2MTVlNjRj Y2M2NS5jcmwwHwYDVR0jBBgwFoAUUHrkAjzYg+et9qTUFubnFT8KBQowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80ODdhYmY5OC0zMDczLTQzYzYtYjEwZS1hNjE1 ZTY0Y2NjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2AnMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL31jKt//pWEITqPS2BxsZzjn+ZwOqrdkzhb9A2erIhnkIlxGQusJ9iC bkcDeDWH5v4XJi/3zQOBl1FA3zavzwkHctoIGcIwEq97EpPpqVh80mW2rnh8EOzd ktvKfLBkMrhPZkyPI/SnClZH2MHAQsP5UMcbon+00yrOx52Xnl+KKUXpW/BHqWNi n7Ve4kcDWZ2km95kAswQjkUS+7jhp9a1+UZUlGe576Fbl44zsRm6Re9BFmUjYZFZ YmpMSXKoVrO881PMGfL+4StncT4uIsuPuqIddD+YcOWVTTD+ccjvzkibLDvWnru3 2GG6wfIcVbOUz01We8Iee2UwDevLe9c= -----END CERTIFICATE-----Generated at Fri Jul 24 15:50:44 2026 by rpki-client