$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b77a7d1-99e1-41fd-a1d7-901b6db5d45f/f0c12dd2-83e6-3b1e-9ff5-b3b103077075.roa File: f0c12dd2-83e6-3b1e-9ff5-b3b103077075.roa (raw, json) Hash identifier: nQGBxuw9QNox8zz5Lg+7TLs6plkGnibaKj43PiGd7ww= Subject key identifier: 21:8E:12:09:3B:A2:BB:DF:27:23:C0:59:3A:39:5B:B6:23:76:1B:C7 Certificate issuer: /CN=8b77a7d1-99e1-41fd-a1d7-901b6db5d45f Certificate serial: 010D0C9F4328584D571FA24DF4A66F137B4F5CEE Authority key identifier: F4:AB:8E:0B:AE:72:8E:39:E6:31:A4:DE:75:CD:AD:E2:2D:95:33:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b77a7d1-99e1-41fd-a1d7-901b6db5d45f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b77a7d1-99e1-41fd-a1d7-901b6db5d45f/f0c12dd2-83e6-3b1e-9ff5-b3b103077075.roa Signing time: Mon 30 Mar 2026 13:00:30 +0000 ROA not before: Mon 30 Mar 2026 13:00:30 +0000 ROA not after: Sun 28 Jun 2026 13:00:30 +0000 asID: 399218 IP address blocks: 172.81.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b77a7d1-99e1-41fd-a1d7-901b6db5d45f/8b77a7d1-99e1-41fd-a1d7-901b6db5d45f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b77a7d1-99e1-41fd-a1d7-901b6db5d45f/8b77a7d1-99e1-41fd-a1d7-901b6db5d45f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b77a7d1-99e1-41fd-a1d7-901b6db5d45f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:57:1f:a2:4d:f4:a6:6f:13:7b:4f:5c:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b77a7d1-99e1-41fd-a1d7-901b6db5d45f Validity Not Before: Mar 30 13:00:30 2026 GMT Not After : Jun 28 13:00:30 2026 GMT Subject: CN=80f86c74-ec9d-499a-9da1-894251a9299b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:bd:4e:fb:a6:b7:7c:15:f1:cf:e0:54:fd:50: 92:61:af:01:4e:aa:9e:1c:c9:62:b7:12:14:49:b7: 4a:5c:e2:75:dc:0b:50:af:2b:07:a0:89:d5:aa:cf: 8a:e1:d8:31:6b:01:f8:e0:2b:fa:7e:d5:e4:d3:3e: 24:ab:47:c0:ea:ce:f0:67:e2:2e:db:1d:bf:15:4d: 18:34:6e:36:e3:23:3d:ee:2f:33:f7:bf:1c:ba:2b: 65:f0:3f:86:fa:99:6e:87:4e:af:65:61:d4:0c:51: 4d:85:fd:16:cb:01:32:2e:02:da:d7:91:34:3a:8f: a9:30:61:89:4e:c5:bc:0a:68:db:eb:7f:7b:63:77: 87:ab:93:8f:60:a4:e2:a3:8c:4a:83:dd:f8:e0:2c: 84:5d:8b:70:b2:72:79:7a:75:81:29:aa:4f:84:c4: 03:9e:a5:9d:a0:d1:88:5d:e3:ce:1d:79:d1:6a:78: f6:58:b5:5a:c3:5b:99:4d:bf:13:aa:68:73:fd:54: 0f:98:da:b7:64:c4:32:d1:bb:db:5e:46:4a:e6:ef: 8d:0a:9a:8b:91:fc:71:8f:c0:8d:cf:e3:75:89:6a: 37:fc:2f:72:ed:10:19:3e:0e:40:90:30:d0:62:2e: ad:3f:6d:4d:e2:dc:f5:d5:df:22:ff:15:66:72:7e: 8a:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:8E:12:09:3B:A2:BB:DF:27:23:C0:59:3A:39:5B:B6:23:76:1B:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b77a7d1-99e1-41fd-a1d7-901b6db5d45f/f0c12dd2-83e6-3b1e-9ff5-b3b103077075.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b77a7d1-99e1-41fd-a1d7-901b6db5d45f/8b77a7d1-99e1-41fd-a1d7-901b6db5d45f.crl X509v3 Authority Key Identifier: keyid:F4:AB:8E:0B:AE:72:8E:39:E6:31:A4:DE:75:CD:AD:E2:2D:95:33:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b77a7d1-99e1-41fd-a1d7-901b6db5d45f.cer sbgp-ipAddrBlock: critical IPv4: 172.81.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:cf:d7:8c:15:6c:d2:10:3f:cd:b6:a4:c2:19:71:42:cb:39: b7:22:86:aa:de:34:a8:56:d2:84:62:31:1b:7a:fc:72:bd:56: 1a:31:f7:c6:80:35:cd:d2:17:53:3f:ff:9a:40:02:4b:f9:85: 42:23:c1:89:36:21:68:ee:18:66:4a:2b:07:97:d8:5d:e8:05: e3:68:83:39:e5:fe:9b:46:56:e2:22:f4:7a:4e:ae:e2:84:7e: a3:1b:a9:ce:3c:18:30:aa:27:1c:a5:bb:df:f5:3b:2e:0c:2b: ff:13:f9:be:67:b1:b8:34:f0:28:a1:04:2d:e8:c7:b8:d0:ff: fa:6b:80:fe:29:1c:53:d9:06:c5:1d:55:1a:9b:37:5c:49:c2: b7:92:f1:e5:a6:32:38:b5:c1:c4:8c:7a:13:6e:c6:4e:7d:d0: 6d:a6:e0:8f:74:86:e3:1b:40:e4:8b:33:77:ab:db:c6:5f:15: 71:4e:ef:d6:f9:c4:43:a0:0c:d9:77:de:45:d6:66:a1:3a:28: 3f:66:a2:47:d0:55:80:b5:b4:a2:32:c8:6a:61:20:68:bf:2a: 43:01:9d:1e:63:af:81:15:73:ca:85:70:9b:95:fb:b1:73:9d: 85:b8:ac:c8:13:7a:35:24:6e:f7:5d:90:c2:60:80:aa:13:cb: 36:2f:35:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1XH6JN9KZvE3tPXO4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGI3N2E3ZDEtOTllMS00MWZkLWExZDctOTAxYjZkYjVk NDVmMB4XDTI2MDMzMDEzMDAzMFoXDTI2MDYyODEzMDAzMFowLzEtMCsGA1UEAxMk ODBmODZjNzQtZWM5ZC00OTlhLTlkYTEtODk0MjUxYTkyOTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhb1O+6a3fBXxz+BU/VCSYa8BTqqeHMlitxIU SbdKXOJ13AtQrysHoInVqs+K4dgxawH44Cv6ftXk0z4kq0fA6s7wZ+Iu2x2/FU0Y NG424yM97i8z978cuitl8D+G+pluh06vZWHUDFFNhf0WywEyLgLa15E0Oo+pMGGJ TsW8Cmjb6397Y3eHq5OPYKTio4xKg9344CyEXYtwsnJ5enWBKapPhMQDnqWdoNGI XePOHXnRanj2WLVaw1uZTb8Tqmhz/VQPmNq3ZMQy0bvbXkZK5u+NCpqLkfxxj8CN z+N1iWo3/C9y7RAZPg5AkDDQYi6tP21N4tz11d8i/xVmcn6KRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCGOEgk7orvfJyPAWTo5W7YjdhvHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84Yjc3 YTdkMS05OWUxLTQxZmQtYTFkNy05MDFiNmRiNWQ0NWYvZjBjMTJkZDItODNlNi0z YjFlLTlmZjUtYjNiMTAzMDc3MDc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGI3N2E3ZDEtOTllMS00MWZkLWEx ZDctOTAxYjZkYjVkNDVmLzhiNzdhN2QxLTk5ZTEtNDFmZC1hMWQ3LTkwMWI2ZGI1 ZDQ1Zi5jcmwwHwYDVR0jBBgwFoAU9KuOC65yjjnmMaTedc2t4i2VM1cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84Yjc3YTdkMS05OWUxLTQxZmQtYTFkNy05MDFi NmRiNWQ0NWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArFEkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAADP14wVbNIQP822pMIZcULLObcihqreNKhW0oRiMRt6/HK9Vhox98aA Nc3SF1M//5pAAkv5hUIjwYk2IWjuGGZKKweX2F3oBeNogznl/ptGVuIi9HpOruKE fqMbqc48GDCqJxylu9/1Oy4MK/8T+b5nsbg08CihBC3ox7jQ//prgP4pHFPZBsUd VRqbN1xJwreS8eWmMji1wcSMehNuxk590G2m4I90huMbQOSLM3er28ZfFXFO79b5 xEOgDNl33kXWZqE6KD9mokfQVYC1tKIyyGphIGi/KkMBnR5jr4EVc8qFcJuV+7Fz nYW4rMgTejUkbvddkMJggKoTyzYvNfk= -----END CERTIFICATE-----Generated at Sun Apr 19 15:32:35 2026 by rpki-client