$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/4de85870-1812-37c2-b185-f215614574da.roa File: 4de85870-1812-37c2-b185-f215614574da.roa (raw, json) Hash identifier: YnFj9f5JEqLAf2Jn63KQ0yZo+pPVOEDtsMK2Zm5mXYM= Subject key identifier: 0D:F4:58:EA:CB:82:0D:12:DA:6F:90:9B:59:FC:8E:63:4E:95:43:E1 Certificate issuer: /CN=81fb7701-7454-4b9b-810d-3d604f504467 Certificate serial: 010D0C9F4328584E5D14AA3411E0794CDBA0D900 Authority key identifier: 46:DA:10:10:BB:03:C2:50:43:1B:D3:31:D6:D6:A6:9A:5C:15:0A:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/4de85870-1812-37c2-b185-f215614574da.roa Signing time: Thu 02 Jul 2026 09:00:12 +0000 ROA not before: Thu 02 Jul 2026 09:00:12 +0000 ROA not after: Wed 30 Sep 2026 09:00:12 +0000 asID: 14618 IP address blocks: 199.65.40.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/81fb7701-7454-4b9b-810d-3d604f504467.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/81fb7701-7454-4b9b-810d-3d604f504467.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Jul 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5d:14:aa:34:11:e0:79:4c:db:a0:d9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81fb7701-7454-4b9b-810d-3d604f504467 Validity Not Before: Jul 2 09:00:12 2026 GMT Not After : Sep 30 09:00:12 2026 GMT Subject: CN=3c5bb749-942d-4d5c-8f43-1b8038411cef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:fc:a6:5c:6c:8d:ca:4e:2a:09:96:23:19:ae: 37:07:65:00:3d:82:49:25:cc:98:2a:52:32:12:83: 2c:6d:35:80:ae:77:f1:1e:b2:03:fb:55:f3:28:25: 50:db:98:10:07:d5:a8:85:81:d6:4a:ed:16:a7:8d: 1e:73:41:c0:77:10:c0:4f:b7:a1:7b:4d:3c:af:db: 27:9b:84:33:58:68:ab:80:93:df:e9:a0:fb:fc:bd: e5:b6:d3:62:bd:0d:12:29:e0:5f:90:bd:31:ab:2d: 32:26:c9:e7:4a:79:bf:40:1c:5b:ba:3c:b8:4b:bc: 20:fa:c4:35:ba:5b:8b:a4:db:79:30:0d:63:54:6d: 27:d1:e1:a1:6e:de:6f:1b:0d:0c:ae:7d:57:ba:91: e3:61:1c:d3:b2:55:39:86:34:21:77:ae:46:24:6e: d5:f1:b2:b6:04:79:8d:77:33:1a:35:dd:46:4a:3f: d0:3c:a7:82:f6:71:37:80:20:fd:58:cb:4f:f0:cc: f6:53:f6:10:32:b6:36:dc:60:6b:4c:5f:75:0a:39: 53:c0:68:dd:b8:bb:95:98:46:b3:98:7f:e7:ce:18: 31:4a:59:bc:f7:42:d5:a8:e1:32:57:8d:b5:05:8c: fd:49:dd:f7:09:79:6d:32:0c:92:f2:4c:d6:33:f9: c3:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:F4:58:EA:CB:82:0D:12:DA:6F:90:9B:59:FC:8E:63:4E:95:43:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/4de85870-1812-37c2-b185-f215614574da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/81fb7701-7454-4b9b-810d-3d604f504467.crl X509v3 Authority Key Identifier: keyid:46:DA:10:10:BB:03:C2:50:43:1B:D3:31:D6:D6:A6:9A:5C:15:0A:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467.cer sbgp-ipAddrBlock: critical IPv4: 199.65.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:66:f9:8a:6b:38:a5:b5:45:f3:4d:fc:18:8b:47:cc:dd:22: e0:c1:69:3f:a3:57:59:c8:c8:03:d5:da:21:8d:54:f9:08:f1: 8a:a9:ff:56:b5:ee:08:b0:42:cc:c3:d5:df:e1:5e:6a:81:ae: ab:35:8c:25:42:19:35:55:b1:9a:96:4b:c5:4f:02:9b:46:58: 94:0e:05:cb:00:a9:da:78:74:6b:fe:f6:39:be:37:26:02:2c: 03:4c:2f:a0:29:b9:40:c4:4a:e7:2f:74:60:02:83:06:66:37: f2:60:3b:5f:0d:b9:f5:0d:3a:37:25:60:14:24:34:f2:51:b0: 95:20:bc:97:63:73:1d:fe:db:83:9d:ac:b7:b5:6d:e2:d4:60: 56:bc:21:58:c5:ab:83:0b:47:ca:13:07:a9:4b:34:ba:c4:2d: a9:c1:39:9f:8d:37:55:e6:ec:9a:1e:43:4e:0d:ec:6a:dc:80: 38:9e:f4:c5:ae:7f:c2:0f:4d:ce:5b:4c:31:b4:d8:d4:86:77: 32:f4:ba:4d:0a:ed:9d:51:c1:c5:74:91:0d:1e:09:69:d2:29: 7f:40:22:79:a6:89:1f:ed:00:b8:91:a5:05:13:4f:b3:f5:ba: e0:2e:0a:00:f1:14:8f:af:77:30:1c:d7:71:79:a5:31:cd:2f: b3:68:93:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5dFKo0EeB5TNug2QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODFmYjc3MDEtNzQ1NC00YjliLTgxMGQtM2Q2MDRmNTA0 NDY3MB4XDTI2MDcwMjA5MDAxMloXDTI2MDkzMDA5MDAxMlowLzEtMCsGA1UEAxMk M2M1YmI3NDktOTQyZC00ZDVjLThmNDMtMWI4MDM4NDExY2VmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvymXGyNyk4qCZYjGa43B2UAPYJJJcyYKlIy EoMsbTWArnfxHrID+1XzKCVQ25gQB9WohYHWSu0Wp40ec0HAdxDAT7ehe008r9sn m4QzWGirgJPf6aD7/L3lttNivQ0SKeBfkL0xqy0yJsnnSnm/QBxbujy4S7wg+sQ1 uluLpNt5MA1jVG0n0eGhbt5vGw0Mrn1XupHjYRzTslU5hjQhd65GJG7V8bK2BHmN dzMaNd1GSj/QPKeC9nE3gCD9WMtP8Mz2U/YQMrY23GBrTF91CjlTwGjduLuVmEaz mH/nzhgxSlm890LVqOEyV421BYz9Sd33CXltMgyS8kzWM/nDVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA30WOrLgg0S2m+Qm1n8jmNOlUPhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MWZi NzcwMS03NDU0LTRiOWItODEwZC0zZDYwNGY1MDQ0NjcvNGRlODU4NzAtMTgxMi0z N2MyLWIxODUtZjIxNTYxNDU3NGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODFmYjc3MDEtNzQ1NC00YjliLTgx MGQtM2Q2MDRmNTA0NDY3LzgxZmI3NzAxLTc0NTQtNGI5Yi04MTBkLTNkNjA0ZjUw NDQ2Ny5jcmwwHwYDVR0jBBgwFoAURtoQELsDwlBDG9Mx1tammlwVCs4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84MWZiNzcwMS03NDU0LTRiOWItODEwZC0zZDYw NGY1MDQ0NjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx0EoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAABm+YprOKW1RfNN/BiLR8zdIuDBaT+jV1nIyAPV2iGNVPkI8Yqp/1a1 7giwQszD1d/hXmqBrqs1jCVCGTVVsZqWS8VPAptGWJQOBcsAqdp4dGv+9jm+NyYC LANML6ApuUDESucvdGACgwZmN/JgO18NufUNOjclYBQkNPJRsJUgvJdjcx3+24Od rLe1beLUYFa8IVjFq4MLR8oTB6lLNLrELanBOZ+NN1Xm7JoeQ04N7GrcgDie9MWu f8IPTc5bTDG02NSGdzL0uk0K7Z1RwcV0kQ0eCWnSKX9AInmmiR/tALiRpQUTT7P1 uuAuCgDxFI+vdzAc13F5pTHNL7NokwQ= -----END CERTIFICATE-----Generated at Mon Jul 6 18:23:51 2026 by rpki-client