$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/a2a5412a-3648-378f-aff7-c7d443d07c08.roa File: a2a5412a-3648-378f-aff7-c7d443d07c08.roa (raw, json) Hash identifier: OzFopJqIzeGXhYm75ccHxYB7I813M6R+ibyzSkAMW20= Subject key identifier: 1D:5C:5D:42:23:56:1C:0A:8D:EC:54:CF:F2:4E:34:8E:F3:09:FC:98 Certificate issuer: /CN=88db2ec8-651c-4bdc-bf38-97fe38702609 Certificate serial: 010D0C9F4328584CAA271E20B57C1B3E27D3F8C0 Authority key identifier: 78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/a2a5412a-3648-378f-aff7-c7d443d07c08.roa Signing time: Tue 27 Jan 2026 14:00:36 +0000 ROA not before: Tue 27 Jan 2026 14:00:36 +0000 ROA not after: Mon 27 Apr 2026 13:00:36 +0000 asID: 3320 IP address blocks: 81.199.64.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:aa:27:1e:20:b5:7c:1b:3e:27:d3:f8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88db2ec8-651c-4bdc-bf38-97fe38702609 Validity Not Before: Jan 27 14:00:36 2026 GMT Not After : Apr 27 13:00:36 2026 GMT Subject: CN=bbb73dc0-a2ed-4aea-af87-634c37b2a631 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:3c:6a:53:73:58:2a:96:e2:26:04:66:7c:6e: 0f:9a:eb:a2:5c:56:d4:47:9e:8d:e8:ce:ce:b7:70: a0:61:77:91:be:e1:65:9f:ef:8b:28:ce:cb:fd:14: 5b:f9:4d:b2:91:7b:f3:6f:7b:d5:b4:0b:86:29:fd: d2:c7:63:da:94:07:88:bc:2f:11:72:c6:27:3b:7a: 7d:f6:35:78:69:7c:04:ee:ed:58:9e:de:ce:71:96: 45:79:0f:46:a3:34:4c:c5:aa:40:da:b7:20:11:a8: 4a:83:bc:9e:a3:67:3d:69:a3:99:81:03:d5:dc:6f: 4a:12:78:5e:7f:a8:30:f3:3b:67:78:a4:1c:ba:0c: a5:bb:bc:ec:ff:8a:09:ca:89:1f:33:54:1d:3c:8a: dd:7b:e6:f2:25:e6:03:1b:e2:7d:d7:91:a4:4c:9f: 8f:fe:db:7c:f7:a5:dd:94:ce:b5:5a:a6:e1:0c:5c: b9:9f:3c:81:b4:a9:6f:1b:c1:8a:3a:36:e5:1e:45: d1:55:ca:d7:d4:1d:34:14:46:3b:12:65:c9:49:b8: 00:60:b7:2f:bc:6d:3a:de:33:0e:d8:98:4f:ca:55: 89:92:6c:77:86:12:36:1d:5d:f9:59:1c:94:4b:fd: ea:cc:bf:7a:1a:c5:a7:2a:cd:e4:9d:b3:db:c0:a1: 44:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:5C:5D:42:23:56:1C:0A:8D:EC:54:CF:F2:4E:34:8E:F3:09:FC:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/a2a5412a-3648-378f-aff7-c7d443d07c08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.crl X509v3 Authority Key Identifier: keyid:78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer sbgp-ipAddrBlock: critical IPv4: 81.199.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:4e:ae:b1:18:d2:e2:28:4f:56:11:9a:18:d1:8f:81:46:32: 08:ac:7d:53:b3:c0:52:3e:29:b2:27:e9:5a:28:1c:67:51:f9: f4:03:b9:97:6b:e2:be:21:60:e4:97:2a:c6:4a:41:de:87:32: 17:2a:9c:28:ab:69:e2:79:ca:4c:9f:2e:f3:e3:c0:21:05:f3: 63:f0:7b:47:44:df:cd:39:16:40:fe:68:45:a6:1f:40:e9:23: 93:46:4f:ab:cc:d2:cc:a1:d6:50:e4:e5:31:23:2a:13:45:64: 7f:e6:84:69:a9:3e:61:d9:19:dd:00:fb:bf:5d:f2:af:f3:15: f1:df:b2:40:ee:a2:1b:c6:ad:22:0f:fe:50:49:7b:fc:e0:64: f2:ad:c7:a5:6f:5f:28:2a:e8:9b:bb:7f:c4:53:33:40:ac:24: d2:9c:91:70:62:ee:6e:2f:2a:fe:21:33:0e:be:2a:da:d2:ba: 2e:62:75:81:3d:86:37:65:81:89:d8:8e:c8:ba:3e:fc:e8:62: 09:b1:45:d6:18:0b:20:5f:8c:5b:bf:22:0d:24:67:5a:5e:f0: 70:43:f4:98:52:49:5d:d4:9a:06:e1:a0:d5:3d:10:34:cc:d1: 39:b6:b3:2c:fb:cb:fe:48:2c:04:c1:44:1f:5c:ec:2b:0b:7f: b8:ff:70:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyqJx4gtXwbPifT+MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODhkYjJlYzgtNjUxYy00YmRjLWJmMzgtOTdmZTM4NzAy NjA5MB4XDTI2MDEyNzE0MDAzNloXDTI2MDQyNzEzMDAzNlowLzEtMCsGA1UEAxMk YmJiNzNkYzAtYTJlZC00YWVhLWFmODctNjM0YzM3YjJhNjMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDxqU3NYKpbiJgRmfG4PmuuiXFbUR56N6M7O t3CgYXeRvuFln++LKM7L/RRb+U2ykXvzb3vVtAuGKf3Sx2PalAeIvC8RcsYnO3p9 9jV4aXwE7u1Ynt7OcZZFeQ9GozRMxapA2rcgEahKg7yeo2c9aaOZgQPV3G9KEnhe f6gw8ztneKQcugylu7zs/4oJyokfM1QdPIrde+byJeYDG+J915GkTJ+P/tt896Xd lM61WqbhDFy5nzyBtKlvG8GKOjblHkXRVcrX1B00FEY7EmXJSbgAYLcvvG063jMO 2JhPylWJkmx3hhI2HV35WRyUS/3qzL96GsWnKs3knbPbwKFEXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB1cXUIjVhwKjexUz/JONI7zCfyYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OGRi MmVjOC02NTFjLTRiZGMtYmYzOC05N2ZlMzg3MDI2MDkvYTJhNTQxMmEtMzY0OC0z NzhmLWFmZjctYzdkNDQzZDA3YzA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODhkYjJlYzgtNjUxYy00YmRjLWJm MzgtOTdmZTM4NzAyNjA5Lzg4ZGIyZWM4LTY1MWMtNGJkYy1iZjM4LTk3ZmUzODcw MjYwOS5jcmwwHwYDVR0jBBgwFoAUeOWLAyWpWva/3XB5vVJQ5gP+sAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OGRiMmVjOC02NTFjLTRiZGMtYmYzOC05N2Zl Mzg3MDI2MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDUcdAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHZOrrEY0uIoT1YRmhjRj4FGMgisfVOzwFI+KbIn6VooHGdR+fQDuZdr 4r4hYOSXKsZKQd6HMhcqnCiraeJ5ykyfLvPjwCEF82Pwe0dE3805FkD+aEWmH0Dp I5NGT6vM0syh1lDk5TEjKhNFZH/mhGmpPmHZGd0A+79d8q/zFfHfskDuohvGrSIP /lBJe/zgZPKtx6VvXygq6Ju7f8RTM0CsJNKckXBi7m4vKv4hMw6+KtrSui5idYE9 hjdlgYnYjsi6PvzoYgmxRdYYCyBfjFu/Ig0kZ1pe8HBD9JhSSV3UmgbhoNU9EDTM 0Tm2syz7y/5ILATBRB9c7CsLf7j/cNs= -----END CERTIFICATE-----Generated at Mon Mar 2 08:19:53 2026 by rpki-client