$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/81d21e71-c5b7-3e95-b04f-c6dd9de90e8a.roa File: 81d21e71-c5b7-3e95-b04f-c6dd9de90e8a.roa (raw, json) Hash identifier: 9RVaC/Yw9xM63ciJqDN6q1HbCIVYmrJjqAjKMkUPMyg= Subject key identifier: E9:5C:06:01:1A:F6:AC:C5:5A:11:12:64:F8:6B:82:EE:15:2C:C3:DD Certificate issuer: /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15 Certificate serial: 010D0C9F4328584D40CA3C8FB39408D396AA9D80 Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/81d21e71-c5b7-3e95-b04f-c6dd9de90e8a.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 32787 IP address blocks: 65.51.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:ca:3c:8f:b3:94:08:d3:96:aa:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15 Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=3a149197-fd65-4ad4-b31a-872cdf30bee6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:23:b0:a7:58:98:be:c6:fa:be:db:a9:ca:0e: 8b:73:34:22:54:b7:94:f0:ef:c9:a8:8c:ba:02:c7: 3b:3c:0e:c9:76:b1:c7:d0:ff:ef:ba:16:df:2e:85: 56:20:0e:26:65:a3:82:7f:96:f3:1e:97:51:a1:eb: af:df:78:67:36:81:20:3d:eb:fa:11:fa:1c:df:77: 13:f5:8a:e4:fe:68:67:28:f8:21:0f:31:bb:1d:53: 94:45:5a:72:61:36:90:6a:1a:82:57:11:1b:db:8c: 3f:99:4f:d7:71:d1:02:2b:24:73:71:eb:31:84:d6: b9:65:ab:96:d3:9e:24:b8:08:70:32:03:dc:32:92: 4f:e5:a5:6a:b5:4c:14:5c:16:b6:8f:ab:7c:7f:51: dd:5c:a1:b3:2c:c7:1a:f5:4d:1b:36:0e:a1:e2:59: 3d:db:5e:45:22:59:4e:a5:2f:c9:e8:3f:50:8f:aa: c7:f2:10:9f:69:27:51:da:4d:6f:06:86:a4:7d:42: 3c:c4:f6:0f:24:36:8f:7b:4a:6a:69:b7:5f:ae:66: a8:66:cc:b2:b0:ff:00:18:61:ec:c1:c1:b7:53:0f: 96:07:01:6a:0d:c5:52:c3:cd:af:79:9b:0e:cc:dd: b2:2d:78:53:dd:ae:eb:4f:83:86:9c:02:77:f5:d1: 9b:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:5C:06:01:1A:F6:AC:C5:5A:11:12:64:F8:6B:82:EE:15:2C:C3:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/81d21e71-c5b7-3e95-b04f-c6dd9de90e8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl X509v3 Authority Key Identifier: keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer sbgp-ipAddrBlock: critical IPv4: 65.51.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:de:44:ca:61:59:13:36:e0:c6:8a:ed:a0:33:d3:c1:0b:38: 70:10:f9:b1:ec:23:af:ed:b1:57:af:0b:91:f4:35:a9:2c:91: e0:e9:cc:b4:7f:78:b7:47:fa:f4:07:8d:96:2a:6b:fe:6c:5c: 57:e8:87:df:db:60:b6:a2:a0:38:b4:56:0b:bf:af:73:96:8b: 80:b0:70:2f:fd:71:d0:3f:d9:fd:97:c0:ee:91:36:b5:5b:8e: e6:ab:ac:93:06:ab:08:97:bc:e2:3f:68:66:45:11:d9:d3:f8: 34:a8:08:f8:a0:db:e5:45:30:cb:f9:2e:e7:07:d1:ed:61:fd: b2:28:fc:be:05:73:bc:2f:9c:c9:33:07:11:0a:2a:a4:30:d5: 96:bd:50:58:a3:55:36:f3:ad:97:1e:22:12:6d:5c:ec:9b:49: 6d:2b:76:ce:5c:d7:06:3d:a8:f8:a6:50:28:ba:18:3b:54:a8: 09:f8:75:dd:8e:3b:71:d9:58:e2:fe:b4:39:35:1e:0b:43:dc: 31:d8:76:cd:53:e0:ad:5f:fd:0b:49:0d:25:ca:bd:af:79:2f: a8:cc:cf:f5:8f:70:91:1a:e6:78:0b:ed:32:e6:11:2f:bb:d2: 6f:2f:11:a2:ec:d6:d8:6b:69:59:6c:0d:fc:9e:59:f0:77:0c: 35:fe:79:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1AyjyPs5QI05aqnYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZThmOGM0MTEtZmE1Yy00MjhjLThhYzEtZTA4ZThhMDBh ZDE1MB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk M2ExNDkxOTctZmQ2NS00YWQ0LWIzMWEtODcyY2RmMzBiZWU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCOwp1iYvsb6vtupyg6LczQiVLeU8O/JqIy6 Asc7PA7JdrHH0P/vuhbfLoVWIA4mZaOCf5bzHpdRoeuv33hnNoEgPev6Efoc33cT 9Yrk/mhnKPghDzG7HVOURVpyYTaQahqCVxEb24w/mU/XcdECKyRzcesxhNa5ZauW 054kuAhwMgPcMpJP5aVqtUwUXBa2j6t8f1HdXKGzLMca9U0bNg6h4lk9215FIllO pS/J6D9Qj6rH8hCfaSdR2k1vBoakfUI8xPYPJDaPe0pqabdfrmaoZsyysP8AGGHs wcG3Uw+WBwFqDcVSw82veZsOzN2yLXhT3a7rT4OGnAJ39dGbzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOlcBgEa9qzFWhESZPhrgu4VLMPdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lOGY4 YzQxMS1mYTVjLTQyOGMtOGFjMS1lMDhlOGEwMGFkMTUvODFkMjFlNzEtYzViNy0z ZTk1LWIwNGYtYzZkZDlkZTkwZThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZThmOGM0MTEtZmE1Yy00MjhjLThh YzEtZTA4ZThhMDBhZDE1L2U4ZjhjNDExLWZhNWMtNDI4Yy04YWMxLWUwOGU4YTAw YWQxNS5jcmwwHwYDVR0jBBgwFoAU2mOPS3cNceq6IgA5tQH/tSVxq18wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lOGY4YzQxMS1mYTVjLTQyOGMtOGFjMS1lMDhl OGEwMGFkMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQTPeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAveRMphWRM24MaK7aAz08ELOHAQ+bHsI6/tsVevC5H0NakskeDpzLR/ eLdH+vQHjZYqa/5sXFfoh9/bYLaioDi0Vgu/r3OWi4CwcC/9cdA/2f2XwO6RNrVb juarrJMGqwiXvOI/aGZFEdnT+DSoCPig2+VFMMv5LucH0e1h/bIo/L4Fc7wvnMkz BxEKKqQw1Za9UFijVTbzrZceIhJtXOybSW0rds5c1wY9qPimUCi6GDtUqAn4dd2O O3HZWOL+tDk1HgtD3DHYds1T4K1f/QtJDSXKva95L6jMz/WPcJEa5ngL7TLmES+7 0m8vEaLs1thraVlsDfyeWfB3DDX+eTQ= -----END CERTIFICATE-----Generated at Thu Mar 26 13:53:34 2026 by rpki-client