$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/ad039e30-d35a-3212-ab40-0e7e21434e3a.roa File: ad039e30-d35a-3212-ab40-0e7e21434e3a.roa (raw, json) Hash identifier: Fqn/093BfmV4hKidBSl3QQxUkor/g2TV4zN5MI2BPEY= Subject key identifier: C9:A3:82:36:B3:5E:93:27:7D:83:0F:0E:FE:2C:3C:F0:AE:EB:1A:59 Certificate issuer: /CN=81fb7701-7454-4b9b-810d-3d604f504467 Certificate serial: 010D0C9F4328584F146797BA30A55A559F49EB78 Authority key identifier: 46:DA:10:10:BB:03:C2:50:43:1B:D3:31:D6:D6:A6:9A:5C:15:0A:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/ad039e30-d35a-3212-ab40-0e7e21434e3a.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 8075 IP address blocks: 199.65.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/81fb7701-7454-4b9b-810d-3d604f504467.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/81fb7701-7454-4b9b-810d-3d604f504467.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:97:ba:30:a5:5a:55:9f:49:eb:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81fb7701-7454-4b9b-810d-3d604f504467 Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=a8636992-6cd6-4f37-b504-aae1d043781b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:42:44:91:a0:a1:22:86:42:7f:14:dd:3c:af: 8c:64:65:b2:e0:2e:e5:23:e9:c2:3a:ea:6b:09:72: f0:63:e9:8c:cd:e8:f0:ab:31:2b:fe:58:80:d5:71: f8:12:ff:50:8a:53:72:7a:98:7a:8c:d8:08:89:9b: df:25:06:b7:2d:0f:e2:7e:ea:fb:94:43:57:f6:9f: ed:c4:fc:47:a2:c6:3b:3c:60:38:6e:73:38:99:30: f9:69:8e:da:07:d9:07:79:c1:31:e4:27:34:d3:0a: da:7e:f6:a6:dc:99:7b:98:10:49:a4:c3:62:7e:30: 53:45:6f:e9:ae:e4:04:e8:62:8e:28:db:41:c5:51: a8:84:58:63:16:9d:76:c0:e7:73:e1:95:17:6c:03: d1:20:6f:fa:7a:b3:8a:09:9d:89:91:64:a8:14:29: e4:16:ac:0f:87:68:d5:b6:ba:a5:6d:12:ea:13:9b: 66:36:c6:64:41:9b:75:c3:96:53:c4:53:36:0c:0d: e6:26:e5:4e:41:f8:95:e9:42:49:04:ce:6d:ca:11: 90:ed:e1:e4:e0:ee:eb:29:44:56:74:77:9b:e5:1b: a5:53:24:3b:27:62:a9:ce:65:bc:3d:ac:6e:6c:1e: be:9b:3e:70:7b:e7:9f:8d:5b:7c:d5:1e:4b:ca:b6: d2:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:A3:82:36:B3:5E:93:27:7D:83:0F:0E:FE:2C:3C:F0:AE:EB:1A:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/ad039e30-d35a-3212-ab40-0e7e21434e3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/81fb7701-7454-4b9b-810d-3d604f504467.crl X509v3 Authority Key Identifier: keyid:46:DA:10:10:BB:03:C2:50:43:1B:D3:31:D6:D6:A6:9A:5C:15:0A:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467.cer sbgp-ipAddrBlock: critical IPv4: 199.65.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:ea:fc:d0:4a:4e:e5:99:95:1d:fd:c4:bd:ad:19:fe:ed:0f: 5b:3e:0e:75:af:ed:02:25:57:69:77:a9:ff:59:99:b2:20:c7: 26:ca:5f:02:1f:34:93:9d:63:47:82:09:35:22:a0:ce:51:9e: 59:5c:d9:61:1a:2d:83:a6:2f:e8:5d:12:3e:ad:35:27:ce:8c: 6b:22:90:cb:5a:fa:3c:6b:72:f9:71:2a:f4:70:1a:fe:6a:cd: 34:d1:43:c7:b0:d4:c9:23:57:f4:31:fb:fb:f0:a6:7a:72:95: e3:f9:07:5c:fe:5b:f5:72:dc:c4:9e:a0:85:02:9f:08:45:45: 84:2f:99:f3:10:37:3a:8a:3d:ee:6a:f4:d3:b5:93:08:ad:45: 19:49:a6:2f:ff:7a:78:7e:f5:ce:62:1e:60:64:1c:32:ec:46: f6:83:e8:fe:aa:2c:5f:2e:16:6e:45:cd:0e:63:09:35:fc:43: 19:49:95:8f:0d:ef:40:01:11:9d:17:c7:00:ed:ac:b6:77:a8: 49:73:0e:fe:ad:4b:ea:24:6e:dd:c0:1b:53:1e:e9:f3:f9:b8: f5:7c:62:95:c9:37:a4:10:1e:a0:95:61:22:36:cc:5b:da:cc: aa:4a:ee:ad:e5:49:40:17:1d:dc:10:9d:5a:26:e2:5f:37:57: 8c:90:20:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8UZ5e6MKVaVZ9J63gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODFmYjc3MDEtNzQ1NC00YjliLTgxMGQtM2Q2MDRmNTA0 NDY3MB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk YTg2MzY5OTItNmNkNi00ZjM3LWI1MDQtYWFlMWQwNDM3ODFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0JEkaChIoZCfxTdPK+MZGWy4C7lI+nCOupr CXLwY+mMzejwqzEr/liA1XH4Ev9QilNyeph6jNgIiZvfJQa3LQ/ifur7lENX9p/t xPxHosY7PGA4bnM4mTD5aY7aB9kHecEx5Cc00wrafvam3Jl7mBBJpMNifjBTRW/p ruQE6GKOKNtBxVGohFhjFp12wOdz4ZUXbAPRIG/6erOKCZ2JkWSoFCnkFqwPh2jV trqlbRLqE5tmNsZkQZt1w5ZTxFM2DA3mJuVOQfiV6UJJBM5tyhGQ7eHk4O7rKURW dHeb5RulUyQ7J2KpzmW8PaxubB6+mz5we+efjVt81R5LyrbSTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMmjgjazXpMnfYMPDv4sPPCu6xpZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MWZi NzcwMS03NDU0LTRiOWItODEwZC0zZDYwNGY1MDQ0NjcvYWQwMzllMzAtZDM1YS0z MjEyLWFiNDAtMGU3ZTIxNDM0ZTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODFmYjc3MDEtNzQ1NC00YjliLTgx MGQtM2Q2MDRmNTA0NDY3LzgxZmI3NzAxLTc0NTQtNGI5Yi04MTBkLTNkNjA0ZjUw NDQ2Ny5jcmwwHwYDVR0jBBgwFoAURtoQELsDwlBDG9Mx1tammlwVCs4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84MWZiNzcwMS03NDU0LTRiOWItODEwZC0zZDYw NGY1MDQ0NjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEx0EQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKrq/NBKTuWZlR39xL2tGf7tD1s+DnWv7QIlV2l3qf9ZmbIgxybKXwIf NJOdY0eCCTUioM5Rnllc2WEaLYOmL+hdEj6tNSfOjGsikMta+jxrcvlxKvRwGv5q zTTRQ8ew1MkjV/Qx+/vwpnpyleP5B1z+W/Vy3MSeoIUCnwhFRYQvmfMQNzqKPe5q 9NO1kwitRRlJpi//enh+9c5iHmBkHDLsRvaD6P6qLF8uFm5FzQ5jCTX8QxlJlY8N 70ABEZ0XxwDtrLZ3qElzDv6tS+okbt3AG1Me6fP5uPV8YpXJN6QQHqCVYSI2zFva zKpK7q3lSUAXHdwQnVom4l83V4yQIMw= -----END CERTIFICATE-----Generated at Mon Oct 12 19:27:36 2026 by rpki-client