$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/d508a1f5-3140-32b0-b64e-df158da10677.roa File: d508a1f5-3140-32b0-b64e-df158da10677.roa (raw, json) Hash identifier: LsYAh1oSdy9GdzVLIxXPuLLpQ9CVBmsGIB1lHg2xwwI= Subject key identifier: 76:2C:88:2B:DE:B1:42:72:4C:BA:56:AC:CE:67:D4:F0:EA:4C:0C:0B Certificate issuer: /CN=81fb7701-7454-4b9b-810d-3d604f504467 Certificate serial: 010D0C9F4328584E6B0A15AC0677C0D940E9FE00 Authority key identifier: 46:DA:10:10:BB:03:C2:50:43:1B:D3:31:D6:D6:A6:9A:5C:15:0A:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/d508a1f5-3140-32b0-b64e-df158da10677.roa Signing time: Tue 07 Jul 2026 09:00:12 +0000 ROA not before: Tue 07 Jul 2026 09:00:12 +0000 ROA not after: Mon 05 Oct 2026 09:00:12 +0000 asID: 16509 IP address blocks: 199.65.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/81fb7701-7454-4b9b-810d-3d604f504467.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/81fb7701-7454-4b9b-810d-3d604f504467.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6b:0a:15:ac:06:77:c0:d9:40:e9:fe:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81fb7701-7454-4b9b-810d-3d604f504467 Validity Not Before: Jul 7 09:00:12 2026 GMT Not After : Oct 5 09:00:12 2026 GMT Subject: CN=e338a063-5928-4025-b882-2337b7437e8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:11:ce:32:08:7f:a1:17:d2:9d:28:17:00:92: 31:86:78:f0:2e:52:45:09:2b:30:48:3b:5d:c0:fc: d5:ac:e3:33:2c:26:ce:e8:05:71:2c:70:11:14:b2: b9:da:e7:92:c6:c9:ba:ea:c3:39:e7:20:28:2d:4d: e8:cd:32:f9:39:6f:31:a2:c9:50:9f:c2:d3:b7:45: 8a:55:db:13:11:68:b0:ae:1c:bd:11:d6:c7:21:ea: 5b:b2:2c:b6:87:30:b2:5d:ed:14:a7:be:8d:b3:44: e8:fb:20:30:b4:c5:ec:73:fb:b4:72:f6:94:2e:12: 75:d0:54:42:f9:68:4e:4f:c5:7c:1e:b0:f1:09:ee: 36:43:c0:a7:6a:59:9a:36:49:1d:0d:b0:ac:d2:bf: 49:b3:75:e5:44:1e:85:07:7e:87:81:fd:8f:25:66: 01:31:c8:69:20:3f:40:46:2f:bb:84:ee:f8:84:d3: 89:b4:e9:a2:8f:b9:b9:3e:51:04:2e:af:30:52:85: a1:44:ac:b1:27:07:14:e5:62:33:b4:0c:99:0b:a5: c7:b9:7b:3a:60:d4:a7:06:e8:59:d4:f3:be:3e:31: 84:6c:6f:f7:1c:fa:8a:1f:9b:b0:34:de:41:c1:f6: 07:4f:06:af:92:0b:72:45:75:48:34:55:17:2a:be: e2:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:2C:88:2B:DE:B1:42:72:4C:BA:56:AC:CE:67:D4:F0:EA:4C:0C:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/d508a1f5-3140-32b0-b64e-df158da10677.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/81fb7701-7454-4b9b-810d-3d604f504467.crl X509v3 Authority Key Identifier: keyid:46:DA:10:10:BB:03:C2:50:43:1B:D3:31:D6:D6:A6:9A:5C:15:0A:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467.cer sbgp-ipAddrBlock: critical IPv4: 199.65.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:8d:a1:5e:d9:6a:46:e1:0b:31:91:1c:0f:d5:fb:c2:36:c0: 62:99:d6:7e:27:92:e1:9a:42:c1:de:00:3e:df:b6:a1:f8:96: 4a:99:f7:88:9b:65:db:ad:5f:0f:50:47:6b:c8:17:b9:9f:76: 3d:8b:d1:d4:a1:d6:ea:73:c7:50:59:bc:b8:3d:db:b5:3c:09: af:b7:c2:90:d2:b6:84:a4:c1:4a:99:40:91:a3:bc:4d:dd:ee: 38:03:07:29:ef:af:88:c5:a5:94:de:72:91:10:d6:d2:b3:41: a5:a9:a6:b8:b3:da:10:aa:d0:8e:ad:13:4f:2b:52:51:71:ec: 24:4f:26:a6:4e:49:74:27:27:5c:bf:51:b6:cc:60:68:7b:87: cc:00:da:22:16:5d:1c:a6:96:53:e8:9e:b5:f3:ba:3e:aa:2a: 2b:a1:c1:7b:16:5b:5a:3e:8c:65:a9:06:b9:95:24:76:d6:7e: 8b:fb:92:41:f6:81:bb:2a:99:a4:03:48:91:9e:d6:47:80:cd: 80:07:17:49:a1:1e:1f:ef:72:96:a1:4b:78:51:38:4d:26:9c: fb:79:66:ae:02:c5:c7:49:0e:db:bd:47:a4:ad:64:86:41:cf: 88:cb:de:25:9a:18:ed:e3:6b:a0:ee:fc:5a:d0:36:6e:1c:ad: f5:91:d7:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5rChWsBnfA2UDp/gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODFmYjc3MDEtNzQ1NC00YjliLTgxMGQtM2Q2MDRmNTA0 NDY3MB4XDTI2MDcwNzA5MDAxMloXDTI2MTAwNTA5MDAxMlowLzEtMCsGA1UEAxMk ZTMzOGEwNjMtNTkyOC00MDI1LWI4ODItMjMzN2I3NDM3ZThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBHOMgh/oRfSnSgXAJIxhnjwLlJFCSswSDtd wPzVrOMzLCbO6AVxLHARFLK52ueSxsm66sM55yAoLU3ozTL5OW8xoslQn8LTt0WK VdsTEWiwrhy9EdbHIepbsiy2hzCyXe0Up76Ns0To+yAwtMXsc/u0cvaULhJ10FRC +WhOT8V8HrDxCe42Q8CnalmaNkkdDbCs0r9Js3XlRB6FB36Hgf2PJWYBMchpID9A Ri+7hO74hNOJtOmij7m5PlEELq8wUoWhRKyxJwcU5WIztAyZC6XHuXs6YNSnBuhZ 1PO+PjGEbG/3HPqKH5uwNN5BwfYHTwavkgtyRXVINFUXKr7iVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHYsiCvesUJyTLpWrM5n1PDqTAwLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MWZi NzcwMS03NDU0LTRiOWItODEwZC0zZDYwNGY1MDQ0NjcvZDUwOGExZjUtMzE0MC0z MmIwLWI2NGUtZGYxNThkYTEwNjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODFmYjc3MDEtNzQ1NC00YjliLTgx MGQtM2Q2MDRmNTA0NDY3LzgxZmI3NzAxLTc0NTQtNGI5Yi04MTBkLTNkNjA0ZjUw NDQ2Ny5jcmwwHwYDVR0jBBgwFoAURtoQELsDwlBDG9Mx1tammlwVCs4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84MWZiNzcwMS03NDU0LTRiOWItODEwZC0zZDYw NGY1MDQ0NjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEx0EQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALaNoV7ZakbhCzGRHA/V+8I2wGKZ1n4nkuGaQsHeAD7ftqH4lkqZ94ib ZdutXw9QR2vIF7mfdj2L0dSh1upzx1BZvLg927U8Ca+3wpDStoSkwUqZQJGjvE3d 7jgDBynvr4jFpZTecpEQ1tKzQaWppriz2hCq0I6tE08rUlFx7CRPJqZOSXQnJ1y/ UbbMYGh7h8wA2iIWXRymllPonrXzuj6qKiuhwXsWW1o+jGWpBrmVJHbWfov7kkH2 gbsqmaQDSJGe1keAzYAHF0mhHh/vcpahS3hROE0mnPt5Zq4CxcdJDtu9R6StZIZB z4jL3iWaGO3ja6Du/FrQNm4crfWR1wk= -----END CERTIFICATE-----Generated at Fri Jul 24 18:04:50 2026 by rpki-client