$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/2bf32f48-be14-3c24-8c12-8479af447587.roa File: 2bf32f48-be14-3c24-8c12-8479af447587.roa (raw, json) Hash identifier: 9NIXByo0X6MpR5lMbqo1Wgpv3FnW98LM7HIFSLNoWcg= Subject key identifier: B7:D5:C2:D5:34:F4:89:43:E2:F5:24:C5:D3:62:71:3F:84:0A:DA:44 Certificate issuer: /CN=81fb7701-7454-4b9b-810d-3d604f504467 Certificate serial: 010D0C9F4328584F4974F267B71CC670CCD0DDC0 Authority key identifier: 46:DA:10:10:BB:03:C2:50:43:1B:D3:31:D6:D6:A6:9A:5C:15:0A:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/2bf32f48-be14-3c24-8c12-8479af447587.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16509 IP address blocks: 199.65.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/81fb7701-7454-4b9b-810d-3d604f504467.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/81fb7701-7454-4b9b-810d-3d604f504467.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:f2:67:b7:1c:c6:70:cc:d0:dd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81fb7701-7454-4b9b-810d-3d604f504467 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=285ec82a-7607-4a78-b8c1-f91d324dc3de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a2:54:e2:28:71:20:67:b4:59:c2:7c:3c:95: 5e:13:34:00:da:b1:8c:5e:2c:6b:90:44:69:5b:da: e3:74:65:57:11:9c:6b:fd:30:0c:9b:12:bb:f8:da: 17:bb:30:26:42:7b:9e:17:d1:c2:8c:5c:32:d5:01: 91:b4:2d:97:bc:ad:50:cd:04:a3:77:2a:ac:1c:02: 85:08:70:c9:74:4b:f5:8c:61:5b:a5:52:29:6f:e3: e5:51:fa:16:5f:c8:cc:1e:a9:8b:e3:14:a1:93:86: 83:00:5d:de:46:3d:15:56:f5:fc:06:7c:13:21:bb: e4:47:37:3d:1f:25:8c:f8:4b:a9:9c:8f:05:d1:41: f3:e5:6c:b9:23:c2:64:58:51:f2:c8:4e:e6:15:0d: b1:74:0c:59:ed:32:a0:58:07:07:c6:f3:88:a7:e9: 9d:56:34:1d:f1:b8:bd:f2:0b:b3:27:a2:a3:50:01: 75:4c:50:ea:ac:e9:72:d7:bd:bd:bf:61:ee:84:51: b1:0c:fc:60:90:1b:c6:44:43:96:62:12:d4:0f:f2: 14:52:7e:e1:75:02:da:4c:e9:00:6f:8d:d4:ad:da: 69:2f:dc:9e:bb:68:8e:b4:97:9b:87:ca:e9:d3:26: 3c:58:19:77:45:76:71:52:06:bf:ff:e4:95:30:d0: ab:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:D5:C2:D5:34:F4:89:43:E2:F5:24:C5:D3:62:71:3F:84:0A:DA:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/2bf32f48-be14-3c24-8c12-8479af447587.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/81fb7701-7454-4b9b-810d-3d604f504467.crl X509v3 Authority Key Identifier: keyid:46:DA:10:10:BB:03:C2:50:43:1B:D3:31:D6:D6:A6:9A:5C:15:0A:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467.cer sbgp-ipAddrBlock: critical IPv4: 199.65.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:24:16:4d:1a:7a:d7:d4:09:65:af:75:0d:98:89:fc:53:1d: 87:a4:12:a7:41:23:1b:c4:f5:bd:6a:f7:8b:d1:00:23:a3:6c: bc:f6:e0:4b:85:f5:32:1c:f7:f1:35:70:65:e8:d8:79:31:22: 0e:1f:ec:17:76:b6:b9:6a:03:ad:66:b9:a9:4f:64:5b:7b:6e: 89:9c:69:f7:cb:10:2e:27:80:5e:11:5f:78:e1:61:ba:fb:dd: 3d:4a:18:63:92:47:e0:9c:e4:65:2b:af:0f:22:2d:e0:a5:95: e6:00:b5:20:f8:73:5d:a8:6c:c3:ee:4e:e7:5e:67:aa:d6:79: 39:5c:f5:74:34:2d:c6:4f:03:5c:47:7c:ef:cf:5d:b4:d6:58: 71:38:2b:31:99:49:69:e2:d4:5c:c0:92:fd:5f:62:27:c8:40: 03:aa:22:ec:ce:8f:52:ab:bd:64:c4:21:58:8f:b3:0c:b8:cf: eb:e8:32:b9:c8:0b:15:48:61:35:02:17:fe:17:83:7a:6b:96: e7:1e:b1:aa:b0:27:9d:5a:9d:28:1f:ec:2e:c0:80:86:92:87: 1d:d6:95:91:72:b7:82:38:e9:94:76:5d:12:ab:42:ab:63:cb: 96:d0:3e:29:6e:b8:a0:57:51:40:b1:61:1d:97:11:06:5f:15: 1c:06:ac:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdPJntxzGcMzQ3cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODFmYjc3MDEtNzQ1NC00YjliLTgxMGQtM2Q2MDRmNTA0 NDY3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Mjg1ZWM4MmEtNzYwNy00YTc4LWI4YzEtZjkxZDMyNGRjM2RlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6JU4ihxIGe0WcJ8PJVeEzQA2rGMXixrkERp W9rjdGVXEZxr/TAMmxK7+NoXuzAmQnueF9HCjFwy1QGRtC2XvK1QzQSjdyqsHAKF CHDJdEv1jGFbpVIpb+PlUfoWX8jMHqmL4xShk4aDAF3eRj0VVvX8BnwTIbvkRzc9 HyWM+EupnI8F0UHz5Wy5I8JkWFHyyE7mFQ2xdAxZ7TKgWAcHxvOIp+mdVjQd8bi9 8guzJ6KjUAF1TFDqrOly1729v2HuhFGxDPxgkBvGREOWYhLUD/IUUn7hdQLaTOkA b43UrdppL9yeu2iOtJebh8rp0yY8WBl3RXZxUga//+SVMNCrowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLfVwtU09IlD4vUkxdNicT+ECtpEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MWZi NzcwMS03NDU0LTRiOWItODEwZC0zZDYwNGY1MDQ0NjcvMmJmMzJmNDgtYmUxNC0z YzI0LThjMTItODQ3OWFmNDQ3NTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODFmYjc3MDEtNzQ1NC00YjliLTgx MGQtM2Q2MDRmNTA0NDY3LzgxZmI3NzAxLTc0NTQtNGI5Yi04MTBkLTNkNjA0ZjUw NDQ2Ny5jcmwwHwYDVR0jBBgwFoAURtoQELsDwlBDG9Mx1tammlwVCs4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84MWZiNzcwMS03NDU0LTRiOWItODEwZC0zZDYw NGY1MDQ0NjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEx0EwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI4kFk0aetfUCWWvdQ2YifxTHYekEqdBIxvE9b1q94vRACOjbLz24EuF 9TIc9/E1cGXo2HkxIg4f7Bd2trlqA61mualPZFt7bomcaffLEC4ngF4RX3jhYbr7 3T1KGGOSR+Cc5GUrrw8iLeClleYAtSD4c12obMPuTudeZ6rWeTlc9XQ0LcZPA1xH fO/PXbTWWHE4KzGZSWni1FzAkv1fYifIQAOqIuzOj1KrvWTEIViPswy4z+voMrnI CxVIYTUCF/4Xg3prlucesaqwJ51anSgf7C7AgIaShx3WlZFyt4I46ZR2XRKrQqtj y5bQPiluuKBXUUCxYR2XEQZfFRwGrGg= -----END CERTIFICATE-----Generated at Thu Oct 8 12:43:58 2026 by rpki-client