$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/f37faead-b956-3114-a99f-cdac78f2fc6a.roa File: f37faead-b956-3114-a99f-cdac78f2fc6a.roa (raw, json) Hash identifier: 2yGF1IJTMAn5G4rgFnOxk1uGeHEaTaDvHJUagbHSo9g= Subject key identifier: 84:C0:5A:B5:B9:6D:23:B4:44:3D:81:02:D0:D8:5A:2A:33:64:5A:93 Certificate issuer: /CN=81fb7701-7454-4b9b-810d-3d604f504467 Certificate serial: 010D0C9F4328584CAA270B9FCE7D2D1BCA2E91C8 Authority key identifier: 46:DA:10:10:BB:03:C2:50:43:1B:D3:31:D6:D6:A6:9A:5C:15:0A:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/f37faead-b956-3114-a99f-cdac78f2fc6a.roa Signing time: Tue 27 Jan 2026 14:00:36 +0000 ROA not before: Tue 27 Jan 2026 14:00:36 +0000 ROA not after: Mon 27 Apr 2026 13:00:36 +0000 asID: 14618 IP address blocks: 199.65.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/81fb7701-7454-4b9b-810d-3d604f504467.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/81fb7701-7454-4b9b-810d-3d604f504467.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:aa:27:0b:9f:ce:7d:2d:1b:ca:2e:91:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81fb7701-7454-4b9b-810d-3d604f504467 Validity Not Before: Jan 27 14:00:36 2026 GMT Not After : Apr 27 13:00:36 2026 GMT Subject: CN=388e3ab6-112c-459c-8829-203532817323 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:c1:d9:81:e4:77:e3:34:cc:50:3c:a1:16:bf: 8b:92:72:a6:29:e3:ce:51:0b:10:73:da:ad:55:51: 9f:41:c9:d1:60:23:15:bb:96:ae:f4:a2:9c:37:53: fe:9a:0d:f6:b1:17:8c:8c:c6:ad:de:09:ce:cb:c0: e8:a8:bb:fa:ef:89:ed:31:89:db:2b:03:3d:79:15: 77:5a:58:06:0b:e3:23:f9:e3:e8:e8:3b:83:c8:ba: f6:8d:f4:79:65:00:88:fe:fe:5e:53:f0:aa:95:be: 16:5e:fb:a2:9e:17:78:07:99:bd:50:dd:bf:70:97: 96:d6:d5:0d:76:65:ed:39:50:3b:c9:5b:91:0b:75: f6:fe:56:ab:08:b9:60:f6:ef:bf:0e:c3:ee:26:07: f2:6a:7a:ca:97:65:ee:3d:d6:e0:86:1f:58:e9:06: f3:3c:fb:ec:7c:90:1b:4e:32:17:29:4b:ec:ad:27: 33:f8:e4:7d:0d:36:69:c5:3a:0e:e3:6d:3b:9b:62: a0:63:80:41:50:7f:5e:cc:be:ac:69:44:a6:9e:6d: cf:2c:f9:92:7d:8e:f9:5a:0c:2f:9b:2e:65:18:ae: e5:fc:32:10:bd:79:8f:bf:39:8b:b2:5e:78:ed:d2: 62:2c:db:14:52:6b:a0:bb:f5:66:b9:f8:c5:43:96: f4:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:C0:5A:B5:B9:6D:23:B4:44:3D:81:02:D0:D8:5A:2A:33:64:5A:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/f37faead-b956-3114-a99f-cdac78f2fc6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/81fb7701-7454-4b9b-810d-3d604f504467.crl X509v3 Authority Key Identifier: keyid:46:DA:10:10:BB:03:C2:50:43:1B:D3:31:D6:D6:A6:9A:5C:15:0A:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467.cer sbgp-ipAddrBlock: critical IPv4: 199.65.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:c1:66:66:6e:9e:e9:d0:8e:21:17:05:68:3b:67:81:04:73: 86:cf:23:b9:d8:22:22:a4:7e:9f:c7:b6:c0:81:01:79:84:4b: 92:32:11:06:65:d0:d9:86:cc:e4:92:fb:2d:2b:0b:68:62:5b: 8d:d0:df:d2:09:d9:ec:56:d9:4e:bb:3b:f3:81:81:7c:3a:f4: 3a:97:9c:6a:fe:9a:b6:c3:6b:38:29:e7:f4:18:8c:84:e0:77: a2:b6:5e:6d:96:97:14:ae:d1:40:76:8f:da:98:2b:db:e6:42: 82:f7:22:5e:83:d3:6c:08:bc:9e:47:ef:cc:a1:d8:67:ad:f1: ef:36:94:b6:57:ab:d6:e2:ac:3e:82:3c:39:8f:f8:57:1b:4e: 4d:90:40:eb:a4:84:83:52:f1:99:1e:80:66:a5:a9:af:de:84: ac:97:d1:ca:73:d2:90:2d:48:3d:ac:e0:c8:84:4a:5a:d4:c0: 68:67:ad:82:c4:b0:05:35:f4:a0:7a:36:7b:76:3b:8f:16:ce: 3c:ae:06:0f:cd:05:0e:21:c9:55:26:eb:53:bb:87:13:f2:0d: 5e:bb:20:68:fb:ee:bb:e1:d4:84:1f:5f:2e:ec:50:0f:73:70: eb:4b:ea:58:81:8b:82:d8:0e:47:38:df:b6:01:7c:7d:60:98: af:3c:54:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyqJwufzn0tG8oukcgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODFmYjc3MDEtNzQ1NC00YjliLTgxMGQtM2Q2MDRmNTA0 NDY3MB4XDTI2MDEyNzE0MDAzNloXDTI2MDQyNzEzMDAzNlowLzEtMCsGA1UEAxMk Mzg4ZTNhYjYtMTEyYy00NTljLTg4MjktMjAzNTMyODE3MzIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMHZgeR34zTMUDyhFr+LknKmKePOUQsQc9qt VVGfQcnRYCMVu5au9KKcN1P+mg32sReMjMat3gnOy8DoqLv674ntMYnbKwM9eRV3 WlgGC+Mj+ePo6DuDyLr2jfR5ZQCI/v5eU/Cqlb4WXvuinhd4B5m9UN2/cJeW1tUN dmXtOVA7yVuRC3X2/larCLlg9u+/DsPuJgfyanrKl2XuPdbghh9Y6QbzPPvsfJAb TjIXKUvsrScz+OR9DTZpxToO4207m2KgY4BBUH9ezL6saUSmnm3PLPmSfY75Wgwv my5lGK7l/DIQvXmPvzmLsl547dJiLNsUUmugu/VmufjFQ5b0uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFITAWrW5bSO0RD2BAtDYWiozZFqTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MWZi NzcwMS03NDU0LTRiOWItODEwZC0zZDYwNGY1MDQ0NjcvZjM3ZmFlYWQtYjk1Ni0z MTE0LWE5OWYtY2RhYzc4ZjJmYzZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODFmYjc3MDEtNzQ1NC00YjliLTgx MGQtM2Q2MDRmNTA0NDY3LzgxZmI3NzAxLTc0NTQtNGI5Yi04MTBkLTNkNjA0ZjUw NDQ2Ny5jcmwwHwYDVR0jBBgwFoAURtoQELsDwlBDG9Mx1tammlwVCs4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84MWZiNzcwMS03NDU0LTRiOWItODEwZC0zZDYw NGY1MDQ0NjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEx0EQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAELBZmZununQjiEXBWg7Z4EEc4bPI7nYIiKkfp/HtsCBAXmES5IyEQZl 0NmGzOSS+y0rC2hiW43Q39IJ2exW2U67O/OBgXw69DqXnGr+mrbDazgp5/QYjITg d6K2Xm2WlxSu0UB2j9qYK9vmQoL3Il6D02wIvJ5H78yh2Get8e82lLZXq9birD6C PDmP+FcbTk2QQOukhINS8ZkegGalqa/ehKyX0cpz0pAtSD2s4MiESlrUwGhnrYLE sAU19KB6Nnt2O48WzjyuBg/NBQ4hyVUm61O7hxPyDV67IGj77rvh1IQfXy7sUA9z cOtL6liBi4LYDkc437YBfH1gmK88VJI= -----END CERTIFICATE-----Generated at Mon Mar 2 04:43:08 2026 by rpki-client