$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/d508a1f5-3140-32b0-b64e-df158da10677.roa File: d508a1f5-3140-32b0-b64e-df158da10677.roa (raw, json) Hash identifier: iJMWTrV0UJB8NuT93B/qPL+Y8t8fImq/rPH0mokBEo0= Subject key identifier: 45:12:1C:9E:80:E7:E5:E2:F5:DB:DB:61:23:F6:45:51:0B:00:2D:7B Certificate issuer: /CN=81fb7701-7454-4b9b-810d-3d604f504467 Certificate serial: 010D0C9F4328584F0D6CE09A97F3A4979021F900 Authority key identifier: 46:DA:10:10:BB:03:C2:50:43:1B:D3:31:D6:D6:A6:9A:5C:15:0A:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/d508a1f5-3140-32b0-b64e-df158da10677.roa Signing time: Thu 03 Sep 2026 13:00:12 +0000 ROA not before: Thu 03 Sep 2026 13:00:12 +0000 ROA not after: Wed 02 Dec 2026 14:00:12 +0000 asID: 16509 IP address blocks: 199.65.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/81fb7701-7454-4b9b-810d-3d604f504467.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/81fb7701-7454-4b9b-810d-3d604f504467.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:6c:e0:9a:97:f3:a4:97:90:21:f9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81fb7701-7454-4b9b-810d-3d604f504467 Validity Not Before: Sep 3 13:00:12 2026 GMT Not After : Dec 2 14:00:12 2026 GMT Subject: CN=9a9b6fdd-a6c2-42a9-8f01-1dd5e428e0ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:d1:36:a8:5a:d8:ab:a4:46:ef:13:34:c2:3d: e9:b7:0d:c1:13:f7:88:33:0e:64:9b:7a:d2:42:c8: ec:72:4c:6b:8d:69:10:ed:39:0d:5c:a6:d3:2d:f8: 31:7b:49:ee:8f:62:61:a0:4c:3b:06:b4:2c:76:06: c0:43:52:d0:27:6f:6b:2d:b4:82:09:73:76:0b:d8: 5f:20:89:80:8b:f2:9b:23:2f:a3:97:67:7a:ff:1a: ea:3f:37:51:fc:e3:4c:7e:b1:38:5c:72:c8:51:fc: 75:1a:b1:64:1b:e4:33:8e:a7:08:45:79:16:14:29: f5:cf:8b:98:05:8b:05:7e:6b:0b:fe:8d:d6:49:47: eb:df:92:32:13:b3:a3:a6:e1:9c:d1:ce:4e:67:ed: cc:7e:36:00:9a:65:30:45:6c:81:aa:ed:45:4f:d6: ff:56:ae:1d:bd:a5:1c:66:7e:c6:57:02:6d:2b:26: 6f:31:1f:19:73:2b:7e:43:3e:84:b2:f6:c1:8d:b0: e3:20:d9:94:f2:39:5a:77:df:c0:70:a7:06:c2:81: 5c:f9:4c:08:4f:de:1c:cf:bf:6f:76:55:39:9a:e9: 1c:a0:09:94:37:1d:c5:c5:24:21:97:80:36:32:f9: c1:96:81:17:e3:61:15:7e:01:38:c3:85:91:05:31: 35:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:12:1C:9E:80:E7:E5:E2:F5:DB:DB:61:23:F6:45:51:0B:00:2D:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/d508a1f5-3140-32b0-b64e-df158da10677.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/81fb7701-7454-4b9b-810d-3d604f504467.crl X509v3 Authority Key Identifier: keyid:46:DA:10:10:BB:03:C2:50:43:1B:D3:31:D6:D6:A6:9A:5C:15:0A:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467.cer sbgp-ipAddrBlock: critical IPv4: 199.65.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:99:0d:ce:0e:11:a8:74:0d:88:cb:51:fd:93:e0:e3:a4:5d: 81:83:41:79:a8:53:a8:2e:94:c0:b2:7b:b9:56:8b:4b:3f:96: bf:13:63:b2:66:6e:df:08:9d:8f:e0:bf:d3:59:a8:b9:be:98: 54:a9:03:c3:68:c5:91:2c:e5:59:52:73:54:b2:a1:41:40:b3: 95:24:fb:35:0c:4e:a9:63:22:37:89:69:09:b0:95:c6:9c:24: a1:72:31:b2:82:8e:ea:42:7c:5c:ca:ab:98:f6:59:10:9f:5f: 77:6d:c0:b1:e8:f0:8b:bc:1c:f4:50:58:d8:cc:5c:4a:21:46: fe:28:61:8a:2e:c4:82:a0:ac:9b:bc:58:99:b1:55:c3:40:39: 41:ea:ce:28:78:8e:8e:65:f2:1b:b7:37:d6:d6:0c:25:b0:27: c3:ac:32:4e:69:50:ca:76:ba:c9:98:a7:46:29:bd:ba:2c:0b: db:fe:a5:8c:61:4b:f1:45:02:d1:06:48:0e:bd:38:14:ec:0a: a0:bc:cb:e4:6f:1e:ec:e6:a5:73:c2:b1:07:0c:e0:4c:5c:fe: 1a:1c:18:c4:ef:1f:9b:ee:00:48:a7:e5:0a:ba:40:dc:b5:4e: d9:32:e0:83:09:34:3e:8c:66:c2:79:e7:37:a2:6b:80:98:cb: 9b:dd:81:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8NbOCal/Okl5Ah+QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODFmYjc3MDEtNzQ1NC00YjliLTgxMGQtM2Q2MDRmNTA0 NDY3MB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk OWE5YjZmZGQtYTZjMi00MmE5LThmMDEtMWRkNWU0MjhlMGFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7tE2qFrYq6RG7xM0wj3ptw3BE/eIMw5km3rS QsjsckxrjWkQ7TkNXKbTLfgxe0nuj2JhoEw7BrQsdgbAQ1LQJ29rLbSCCXN2C9hf IImAi/KbIy+jl2d6/xrqPzdR/ONMfrE4XHLIUfx1GrFkG+QzjqcIRXkWFCn1z4uY BYsFfmsL/o3WSUfr35IyE7OjpuGc0c5OZ+3MfjYAmmUwRWyBqu1FT9b/Vq4dvaUc Zn7GVwJtKyZvMR8Zcyt+Qz6EsvbBjbDjINmU8jlad9/AcKcGwoFc+UwIT94cz79v dlU5mukcoAmUNx3FxSQhl4A2MvnBloEX42EVfgE4w4WRBTE1xQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEUSHJ6A5+Xi9dvbYSP2RVELAC17MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MWZi NzcwMS03NDU0LTRiOWItODEwZC0zZDYwNGY1MDQ0NjcvZDUwOGExZjUtMzE0MC0z MmIwLWI2NGUtZGYxNThkYTEwNjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODFmYjc3MDEtNzQ1NC00YjliLTgx MGQtM2Q2MDRmNTA0NDY3LzgxZmI3NzAxLTc0NTQtNGI5Yi04MTBkLTNkNjA0ZjUw NDQ2Ny5jcmwwHwYDVR0jBBgwFoAURtoQELsDwlBDG9Mx1tammlwVCs4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84MWZiNzcwMS03NDU0LTRiOWItODEwZC0zZDYw NGY1MDQ0NjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEx0EQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJmZDc4OEah0DYjLUf2T4OOkXYGDQXmoU6gulMCye7lWi0s/lr8TY7Jm bt8InY/gv9NZqLm+mFSpA8NoxZEs5VlSc1SyoUFAs5Uk+zUMTqljIjeJaQmwlcac JKFyMbKCjupCfFzKq5j2WRCfX3dtwLHo8Iu8HPRQWNjMXEohRv4oYYouxIKgrJu8 WJmxVcNAOUHqzih4jo5l8hu3N9bWDCWwJ8OsMk5pUMp2usmYp0YpvbosC9v+pYxh S/FFAtEGSA69OBTsCqC8y+RvHuzmpXPCsQcM4Exc/hocGMTvH5vuAEin5Qq6QNy1 Ttky4IMJND6MZsJ55zeia4CYy5vdgRQ= -----END CERTIFICATE-----Generated at Thu Oct 1 21:01:52 2026 by rpki-client