$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/b2708acf-f59c-3b4f-9f11-01baaa6b4999.roa File: b2708acf-f59c-3b4f-9f11-01baaa6b4999.roa (raw, json) Hash identifier: E4HH5saBJJjWd9YZMThQYWtmFM52GUkKB/aua2xEwOM= Subject key identifier: B4:BD:98:E9:5D:76:C3:9C:AA:4E:D5:21:91:B4:A0:E9:82:7A:E5:08 Certificate issuer: /CN=fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8 Certificate serial: 010D0C9F4328584DB4A57AF8D2D745B5BCEA9F40 Authority key identifier: 6C:AB:4A:B2:F5:58:3B:F4:55:04:FD:C5:F1:8B:9E:DE:6E:49:01:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/b2708acf-f59c-3b4f-9f11-01baaa6b4999.roa Signing time: Sun 03 May 2026 01:00:23 +0000 ROA not before: Sun 03 May 2026 01:00:23 +0000 ROA not after: Sat 01 Aug 2026 01:00:23 +0000 asID: 20055 IP address blocks: 204.11.64.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b4:a5:7a:f8:d2:d7:45:b5:bc:ea:9f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8 Validity Not Before: May 3 01:00:23 2026 GMT Not After : Aug 1 01:00:23 2026 GMT Subject: CN=b9fac3a8-e4a3-48b6-a453-54196952ecfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:be:f9:c8:c9:01:f8:39:25:cf:23:29:8f:b1: 81:82:e4:28:2c:13:4a:7c:ea:e3:bb:37:58:7c:0b: 42:01:d8:e8:9c:2a:c0:25:8f:19:f1:04:ba:f4:5b: c0:5e:09:a6:f9:1a:cd:c3:52:56:b9:23:64:9c:b5: 93:be:a7:9f:89:90:31:c3:96:b7:ca:81:3b:4f:3c: 01:e5:fc:5a:29:d4:2f:ff:14:dd:d5:26:d6:0d:a4: d9:01:75:a8:9b:e8:20:b2:3d:43:c0:96:02:c7:ad: 5d:99:cb:e2:0e:7b:58:1d:76:cd:50:94:d1:07:ff: 85:56:a3:05:d1:06:0b:dd:30:e1:3e:c7:e1:9c:95: 92:49:42:b1:34:9a:7f:41:76:98:ea:64:2f:eb:c4: da:80:81:cd:5d:b5:38:76:98:4e:83:50:8c:cd:b0: c3:99:6b:d7:5c:b0:d6:bb:30:0a:3f:e6:19:32:11: 43:ef:3d:44:87:84:e8:40:5c:17:b3:12:16:4f:69: bd:ce:4b:98:95:96:68:02:df:49:a0:e1:0a:0b:00: 1a:90:f2:58:bf:21:8b:fd:24:44:8f:88:fb:d5:05: 6f:3b:f6:71:42:57:b5:ba:74:0e:39:76:2f:88:ea: 58:bb:b7:30:3a:5d:7e:71:c2:92:ea:6b:3e:22:19: 0d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:BD:98:E9:5D:76:C3:9C:AA:4E:D5:21:91:B4:A0:E9:82:7A:E5:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/b2708acf-f59c-3b4f-9f11-01baaa6b4999.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.crl X509v3 Authority Key Identifier: keyid:6C:AB:4A:B2:F5:58:3B:F4:55:04:FD:C5:F1:8B:9E:DE:6E:49:01:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer sbgp-ipAddrBlock: critical IPv4: 204.11.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:70:4e:26:d0:b8:51:bf:7f:00:bb:f6:c8:f9:5d:7d:9c:1a: c8:09:3d:bb:03:9d:70:8c:bd:9a:c5:f6:90:4f:4b:c8:fa:65: f1:29:1b:65:1b:9c:1a:2e:e3:80:3a:1b:b6:32:2f:ab:82:90: 03:de:ff:e1:35:54:99:d0:53:c0:22:69:83:fe:7c:2a:70:00: 02:d4:eb:7e:d9:d7:17:ac:6a:39:ca:7c:52:8c:f6:ff:aa:69: fb:a2:b9:66:f3:9f:96:b8:f2:da:8f:f0:99:e2:bd:89:eb:23: 7b:d3:f6:05:e3:0d:7c:35:2c:53:f5:90:e7:0b:58:22:b3:c6: 8b:d9:0d:02:96:e3:56:62:54:67:dc:13:8a:d1:22:5d:34:dc: 87:c1:9c:ec:bc:80:62:40:54:90:6a:a2:7e:27:01:b4:42:df: 85:07:88:0e:ee:4b:0d:0d:c8:04:21:16:e5:b0:a4:21:f4:a2: db:2a:11:df:7a:7b:7a:46:5e:75:8a:73:c5:8b:d5:c1:9d:03: 4c:6e:ff:3c:b4:f4:a5:38:a1:69:a4:64:fe:d4:14:55:e4:55: 40:90:c8:8f:10:f3:d5:9c:5d:e4:1b:eb:75:3c:42:2d:8d:90: 0b:0d:54:46:d7:b3:3c:93:88:fd:46:80:3d:1c:4d:b8:ec:6c: 97:27:8c:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE20pXr40tdFtbzqn0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmMxZmJkOGItNGVkOS00ZjVkLWE4ZjAtNzU1OWQ5MWJm M2M4MB4XDTI2MDUwMzAxMDAyM1oXDTI2MDgwMTAxMDAyM1owLzEtMCsGA1UEAxMk YjlmYWMzYTgtZTRhMy00OGI2LWE0NTMtNTQxOTY5NTJlY2ZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxL75yMkB+DklzyMpj7GBguQoLBNKfOrjuzdY fAtCAdjonCrAJY8Z8QS69FvAXgmm+RrNw1JWuSNknLWTvqefiZAxw5a3yoE7TzwB 5fxaKdQv/xTd1SbWDaTZAXWom+ggsj1DwJYCx61dmcviDntYHXbNUJTRB/+FVqMF 0QYL3TDhPsfhnJWSSUKxNJp/QXaY6mQv68TagIHNXbU4dphOg1CMzbDDmWvXXLDW uzAKP+YZMhFD7z1Eh4ToQFwXsxIWT2m9zkuYlZZoAt9JoOEKCwAakPJYvyGL/SRE j4j71QVvO/ZxQle1unQOOXYviOpYu7cwOl1+ccKS6ms+IhkNzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLS9mOlddsOcqk7VIZG0oOmCeuUIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mYzFm YmQ4Yi00ZWQ5LTRmNWQtYThmMC03NTU5ZDkxYmYzYzgvYjI3MDhhY2YtZjU5Yy0z YjRmLTlmMTEtMDFiYWFhNmI0OTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZmMxZmJkOGItNGVkOS00ZjVkLWE4 ZjAtNzU1OWQ5MWJmM2M4L2ZjMWZiZDhiLTRlZDktNGY1ZC1hOGYwLTc1NTlkOTFi ZjNjOC5jcmwwHwYDVR0jBBgwFoAUbKtKsvVYO/RVBP3F8Yue3m5JAT0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mYzFmYmQ4Yi00ZWQ5LTRmNWQtYThmMC03NTU5 ZDkxYmYzYzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzAtAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJJwTibQuFG/fwC79sj5XX2cGsgJPbsDnXCMvZrF9pBPS8j6ZfEpG2Ub nBou44A6G7YyL6uCkAPe/+E1VJnQU8AiaYP+fCpwAALU637Z1xesajnKfFKM9v+q afuiuWbzn5a48tqP8JnivYnrI3vT9gXjDXw1LFP1kOcLWCKzxovZDQKW41ZiVGfc E4rRIl003IfBnOy8gGJAVJBqon4nAbRC34UHiA7uSw0NyAQhFuWwpCH0otsqEd96 e3pGXnWKc8WL1cGdA0xu/zy09KU4oWmkZP7UFFXkVUCQyI8Q89WcXeQb63U8Qi2N kAsNVEbXszyTiP1GgD0cTbjsbJcnjE4= -----END CERTIFICATE-----Generated at Wed May 13 11:42:46 2026 by rpki-client