$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/d508a1f5-3140-32b0-b64e-df158da10677.roa File: d508a1f5-3140-32b0-b64e-df158da10677.roa (raw, json) Hash identifier: vAhYZHVW1PrznmkEk30ti23TtA8r4HulVjuKk2IktpM= Subject key identifier: 89:D0:86:CD:E6:13:EA:78:94:AC:8A:DE:EF:E0:BA:60:92:4D:67:75 Certificate issuer: /CN=81fb7701-7454-4b9b-810d-3d604f504467 Certificate serial: 010D0C9F4328584CAA270F7962C280619EFFB100 Authority key identifier: 46:DA:10:10:BB:03:C2:50:43:1B:D3:31:D6:D6:A6:9A:5C:15:0A:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/d508a1f5-3140-32b0-b64e-df158da10677.roa Signing time: Tue 27 Jan 2026 14:00:36 +0000 ROA not before: Tue 27 Jan 2026 14:00:36 +0000 ROA not after: Mon 27 Apr 2026 13:00:36 +0000 asID: 16509 IP address blocks: 199.65.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/81fb7701-7454-4b9b-810d-3d604f504467.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/81fb7701-7454-4b9b-810d-3d604f504467.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:aa:27:0f:79:62:c2:80:61:9e:ff:b1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81fb7701-7454-4b9b-810d-3d604f504467 Validity Not Before: Jan 27 14:00:36 2026 GMT Not After : Apr 27 13:00:36 2026 GMT Subject: CN=4d6550ec-b6aa-4613-94ef-238d10f731a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:80:fc:d9:f4:28:4a:ae:2a:9f:ad:9e:f1:23: 7a:3e:6a:19:7c:fb:bf:30:cc:ad:d9:ba:1f:4c:f6: 09:a1:5e:c4:35:5a:33:cd:db:b5:73:ab:b1:f6:d4: f5:21:c0:d8:b1:21:1f:f0:f8:18:b2:a0:d4:ed:32: e3:5f:f4:a1:45:2c:8a:ec:87:2a:b7:65:e4:46:aa: a0:cd:58:36:3f:eb:db:88:7b:e5:46:4a:0e:a8:09: e7:cd:a1:94:41:e8:4b:9b:73:68:2f:59:22:26:d0: 77:6e:73:d6:ca:31:81:45:12:c3:21:d9:59:98:07: eb:23:96:06:96:6d:cd:db:30:97:23:ab:2a:88:bd: e1:91:94:5e:71:bc:7f:66:d7:a5:f4:02:a2:2b:c5: 61:bc:84:4c:82:c6:5d:6c:5e:e8:90:26:d0:51:3c: 81:24:fa:02:6e:ed:be:c2:59:18:ff:eb:6b:c2:87: 41:01:05:dd:b4:7b:85:66:39:c7:5a:9d:38:f2:dc: 30:8f:70:0b:ee:6c:71:5a:ec:8e:96:5d:00:a1:7e: bc:46:99:77:51:e7:99:fe:be:3a:c6:68:ed:39:d2: 32:32:fd:55:07:cb:64:df:38:89:93:f6:36:10:ae: 9c:1c:c4:25:14:df:4d:21:f4:21:ae:45:27:3b:75: 56:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:D0:86:CD:E6:13:EA:78:94:AC:8A:DE:EF:E0:BA:60:92:4D:67:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/d508a1f5-3140-32b0-b64e-df158da10677.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/81fb7701-7454-4b9b-810d-3d604f504467.crl X509v3 Authority Key Identifier: keyid:46:DA:10:10:BB:03:C2:50:43:1B:D3:31:D6:D6:A6:9A:5C:15:0A:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467.cer sbgp-ipAddrBlock: critical IPv4: 199.65.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:ee:32:f3:4a:09:5b:a0:52:20:d7:01:df:f5:d8:35:36:89: 8f:71:a5:42:a4:a0:b0:f6:f2:66:31:f9:c4:ca:9a:05:ed:5a: 77:08:27:f7:ba:75:1b:15:19:de:cf:4e:4b:0d:94:32:2a:cd: 52:d8:e1:b4:19:57:48:fb:a3:37:23:01:b9:92:66:99:25:5f: 17:5b:ab:b5:3c:96:6d:d3:70:62:41:f4:79:4a:09:cb:1f:5b: d0:24:96:16:0b:35:5c:91:d5:41:5e:b9:65:48:0a:f8:63:14: 2c:0c:a4:b9:3c:5d:3f:09:97:94:f6:8d:08:dc:e9:06:7d:42: 33:9b:ef:91:3b:85:22:88:16:65:0a:69:9f:aa:10:7c:18:ab: 25:fd:25:dd:b6:8c:52:a4:12:4a:11:ce:3d:fc:1f:b9:1a:1f: b0:c4:cf:8e:51:88:59:ca:3b:48:73:22:aa:f9:ba:e9:3e:b0: fc:5c:24:49:72:73:40:34:69:54:b9:38:41:b1:0c:0f:d5:fb: 55:c7:d5:ba:3d:2d:f1:19:c5:97:65:a5:89:ca:a4:ea:75:b6: d9:bf:7b:35:72:26:40:e0:15:af:fa:a2:9d:5b:4d:43:21:aa: 70:fc:77:1a:b5:59:10:a9:5c:eb:95:5a:f1:b1:25:27:a9:91: b1:8b:1a:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyqJw95YsKAYZ7/sQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODFmYjc3MDEtNzQ1NC00YjliLTgxMGQtM2Q2MDRmNTA0 NDY3MB4XDTI2MDEyNzE0MDAzNloXDTI2MDQyNzEzMDAzNlowLzEtMCsGA1UEAxMk NGQ2NTUwZWMtYjZhYS00NjEzLTk0ZWYtMjM4ZDEwZjczMWE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqID82fQoSq4qn62e8SN6PmoZfPu/MMyt2bof TPYJoV7ENVozzdu1c6ux9tT1IcDYsSEf8PgYsqDU7TLjX/ShRSyK7Icqt2XkRqqg zVg2P+vbiHvlRkoOqAnnzaGUQehLm3NoL1kiJtB3bnPWyjGBRRLDIdlZmAfrI5YG lm3N2zCXI6sqiL3hkZRecbx/Ztel9AKiK8VhvIRMgsZdbF7okCbQUTyBJPoCbu2+ wlkY/+trwodBAQXdtHuFZjnHWp048twwj3AL7mxxWuyOll0AoX68Rpl3UeeZ/r46 xmjtOdIyMv1VB8tk3ziJk/Y2EK6cHMQlFN9NIfQhrkUnO3VWAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFInQhs3mE+p4lKyK3u/gumCSTWd1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MWZi NzcwMS03NDU0LTRiOWItODEwZC0zZDYwNGY1MDQ0NjcvZDUwOGExZjUtMzE0MC0z MmIwLWI2NGUtZGYxNThkYTEwNjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODFmYjc3MDEtNzQ1NC00YjliLTgx MGQtM2Q2MDRmNTA0NDY3LzgxZmI3NzAxLTc0NTQtNGI5Yi04MTBkLTNkNjA0ZjUw NDQ2Ny5jcmwwHwYDVR0jBBgwFoAURtoQELsDwlBDG9Mx1tammlwVCs4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84MWZiNzcwMS03NDU0LTRiOWItODEwZC0zZDYw NGY1MDQ0NjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEx0EQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABTuMvNKCVugUiDXAd/12DU2iY9xpUKkoLD28mYx+cTKmgXtWncIJ/e6 dRsVGd7PTksNlDIqzVLY4bQZV0j7ozcjAbmSZpklXxdbq7U8lm3TcGJB9HlKCcsf W9AklhYLNVyR1UFeuWVICvhjFCwMpLk8XT8Jl5T2jQjc6QZ9QjOb75E7hSKIFmUK aZ+qEHwYqyX9Jd22jFKkEkoRzj38H7kaH7DEz45RiFnKO0hzIqr5uuk+sPxcJEly c0A0aVS5OEGxDA/V+1XH1bo9LfEZxZdlpYnKpOp1ttm/ezVyJkDgFa/6op1bTUMh qnD8dxq1WRCpXOuVWvGxJSepkbGLGrs= -----END CERTIFICATE-----Generated at Mon Mar 2 09:31:04 2026 by rpki-client