$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/2bf32f48-be14-3c24-8c12-8479af447587.roa File: 2bf32f48-be14-3c24-8c12-8479af447587.roa (raw, json) Hash identifier: RzlmFg4NR/kzRkZgNdOPt+iKG0YIqvIQaH0rGdy47H0= Subject key identifier: 2A:8F:FF:C2:65:FD:93:75:DD:1D:A5:92:E0:F1:36:AF:60:A7:87:07 Certificate issuer: /CN=81fb7701-7454-4b9b-810d-3d604f504467 Certificate serial: 010D0C9F4328584D1B1A083B2380302D33CA2F70 Authority key identifier: 46:DA:10:10:BB:03:C2:50:43:1B:D3:31:D6:D6:A6:9A:5C:15:0A:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/2bf32f48-be14-3c24-8c12-8479af447587.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 16509 IP address blocks: 199.65.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/81fb7701-7454-4b9b-810d-3d604f504467.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/81fb7701-7454-4b9b-810d-3d604f504467.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:1a:08:3b:23:80:30:2d:33:ca:2f:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81fb7701-7454-4b9b-810d-3d604f504467 Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=b3017398-8580-4e8a-adf9-4c39abf9deb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d4:08:0c:98:a0:9d:da:7c:a6:99:30:c5:dd: 9d:65:10:ff:bb:ca:0a:61:f5:76:3c:97:c2:9e:29: 92:d3:00:54:41:06:6c:82:70:b9:7c:e5:d8:65:07: 4c:59:41:3b:24:2e:19:87:5a:6e:ae:63:0c:19:11: c9:30:9c:f6:d8:3f:cc:d1:9b:c1:32:d5:53:40:68: 85:95:41:34:c7:2f:34:1f:e7:a7:e8:2e:eb:2f:d9: 01:18:1a:36:12:67:cd:84:bc:aa:e9:e0:05:1f:cb: dc:e7:5c:2b:ba:77:43:06:da:a4:82:50:7f:2e:97: aa:96:01:34:72:2a:02:86:0b:68:70:ac:64:8c:15: 53:1d:f1:1b:8f:3c:19:5f:44:f8:a6:72:06:ae:92: 8b:a5:fd:48:eb:cf:b9:b6:15:76:bd:46:20:a4:e6: e5:82:a9:21:12:75:0a:10:f6:8b:e3:cf:1c:c6:21: 3c:b6:c5:a8:c8:75:b9:71:01:60:de:11:b4:ad:0d: db:2c:94:8b:d6:ae:0d:25:22:32:34:0e:d3:e0:9c: 5d:e5:7e:3c:6d:67:a5:2c:3b:f4:bd:8a:03:7a:d7: b2:1c:71:1c:7c:01:6f:51:43:d8:c2:54:c5:0e:9a: ae:fd:f6:75:02:fd:7d:1c:b5:8a:37:33:25:ba:65: 8a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:8F:FF:C2:65:FD:93:75:DD:1D:A5:92:E0:F1:36:AF:60:A7:87:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/2bf32f48-be14-3c24-8c12-8479af447587.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/81fb7701-7454-4b9b-810d-3d604f504467.crl X509v3 Authority Key Identifier: keyid:46:DA:10:10:BB:03:C2:50:43:1B:D3:31:D6:D6:A6:9A:5C:15:0A:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467.cer sbgp-ipAddrBlock: critical IPv4: 199.65.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:6e:08:19:8b:07:5b:1e:3c:2c:90:3d:88:75:e2:f8:23:15: 99:a1:86:0b:b5:a3:45:30:49:3f:a0:93:55:2a:7f:a7:8b:47: 18:f6:6c:66:b1:d4:5e:df:1d:63:5b:e9:21:65:75:22:e1:2a: 08:47:56:f3:1b:95:e0:25:38:01:76:44:45:e3:13:73:8a:75: 61:68:d5:cd:3b:a9:55:24:cb:5a:32:4a:85:f0:69:da:68:4d: 79:0c:2d:6e:c6:f4:b6:6d:fb:ae:8e:65:fe:dd:2b:78:fb:08: e1:1e:e6:45:7c:17:77:f4:64:6f:93:4a:02:32:b5:b3:93:f6: 40:44:65:e6:76:e5:2e:4f:01:12:9c:27:b2:bb:f0:69:9e:3e: 27:9a:71:f4:9b:63:ff:3e:a3:b8:27:5f:64:f6:08:f3:0f:7d: fc:9b:d8:0b:54:dc:8c:f1:aa:31:42:b6:2c:94:e3:fa:aa:35: d2:5f:28:a1:a0:eb:0b:a6:2b:97:1e:8d:f2:92:87:80:7a:0f: 00:ba:00:d7:35:cc:60:e2:b5:ac:a2:c9:f0:b0:ab:b8:d9:bf: 50:d9:b0:f2:34:5c:10:16:e6:66:58:1b:73:82:49:7b:73:14: 9d:78:7a:43:20:86:79:90:fb:51:12:d1:be:93:a6:00:89:23: c8:b4:e8:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bGgg7I4AwLTPKL3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODFmYjc3MDEtNzQ1NC00YjliLTgxMGQtM2Q2MDRmNTA0 NDY3MB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk YjMwMTczOTgtODU4MC00ZThhLWFkZjktNGMzOWFiZjlkZWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNQIDJigndp8ppkwxd2dZRD/u8oKYfV2PJfC nimS0wBUQQZsgnC5fOXYZQdMWUE7JC4Zh1purmMMGRHJMJz22D/M0ZvBMtVTQGiF lUE0xy80H+en6C7rL9kBGBo2EmfNhLyq6eAFH8vc51wrundDBtqkglB/LpeqlgE0 cioChgtocKxkjBVTHfEbjzwZX0T4pnIGrpKLpf1I68+5thV2vUYgpOblgqkhEnUK EPaL488cxiE8tsWoyHW5cQFg3hG0rQ3bLJSL1q4NJSIyNA7T4Jxd5X48bWelLDv0 vYoDeteyHHEcfAFvUUPYwlTFDpqu/fZ1Av19HLWKNzMlumWKPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCqP/8Jl/ZN13R2lkuDxNq9gp4cHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MWZi NzcwMS03NDU0LTRiOWItODEwZC0zZDYwNGY1MDQ0NjcvMmJmMzJmNDgtYmUxNC0z YzI0LThjMTItODQ3OWFmNDQ3NTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODFmYjc3MDEtNzQ1NC00YjliLTgx MGQtM2Q2MDRmNTA0NDY3LzgxZmI3NzAxLTc0NTQtNGI5Yi04MTBkLTNkNjA0ZjUw NDQ2Ny5jcmwwHwYDVR0jBBgwFoAURtoQELsDwlBDG9Mx1tammlwVCs4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84MWZiNzcwMS03NDU0LTRiOWItODEwZC0zZDYw NGY1MDQ0NjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEx0EwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGtuCBmLB1sePCyQPYh14vgjFZmhhgu1o0UwST+gk1Uqf6eLRxj2bGax 1F7fHWNb6SFldSLhKghHVvMbleAlOAF2REXjE3OKdWFo1c07qVUky1oySoXwadpo TXkMLW7G9LZt+66OZf7dK3j7COEe5kV8F3f0ZG+TSgIytbOT9kBEZeZ25S5PARKc J7K78GmePieacfSbY/8+o7gnX2T2CPMPffyb2AtU3IzxqjFCtiyU4/qqNdJfKKGg 6wumK5cejfKSh4B6DwC6ANc1zGDitayiyfCwq7jZv1DZsPI0XBAW5mZYG3OCSXtz FJ14ekMghnmQ+1ES0b6TpgCJI8i06K0= -----END CERTIFICATE-----Generated at Thu Mar 19 12:34:05 2026 by rpki-client