$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/f86bc310-3455-3516-afb5-5f330d8fa6b1.roa File: f86bc310-3455-3516-afb5-5f330d8fa6b1.roa (raw, json) Hash identifier: hKjMKElqcw9TUujyVPsD8N1RyU2RieioAba5fFoGfb8= Subject key identifier: 36:E8:15:34:8F:F7:BD:E4:D8:EB:79:52:23:AC:5E:19:00:ED:90:0A Certificate issuer: /CN=81fb7701-7454-4b9b-810d-3d604f504467 Certificate serial: 010D0C9F4328584D8AC53ADBF3A75DCD55D21000 Authority key identifier: 46:DA:10:10:BB:03:C2:50:43:1B:D3:31:D6:D6:A6:9A:5C:15:0A:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/f86bc310-3455-3516-afb5-5f330d8fa6b1.roa Signing time: Sat 18 Apr 2026 01:00:24 +0000 ROA not before: Sat 18 Apr 2026 01:00:24 +0000 ROA not after: Fri 17 Jul 2026 01:00:24 +0000 asID: 54282 IP address blocks: 199.65.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/81fb7701-7454-4b9b-810d-3d604f504467.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/81fb7701-7454-4b9b-810d-3d604f504467.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Apr 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8a:c5:3a:db:f3:a7:5d:cd:55:d2:10:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81fb7701-7454-4b9b-810d-3d604f504467 Validity Not Before: Apr 18 01:00:24 2026 GMT Not After : Jul 17 01:00:24 2026 GMT Subject: CN=7e168b56-0621-4c26-b763-656356f5f490 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:14:b2:f5:a5:dd:c2:2f:1f:45:f4:b7:a6:97: 77:97:07:fd:d6:86:e4:75:eb:e6:94:7a:56:0f:03: 14:96:d5:85:5e:bb:66:e3:9f:47:2d:f7:b2:f6:be: 7a:58:f9:a7:4e:48:ce:c7:c0:77:a1:cb:56:69:a5: 45:e7:cd:8f:8f:8a:da:ee:fb:d6:1b:e6:43:b5:46: ad:8d:99:5e:d1:f9:d6:bf:43:7b:a2:4a:bc:e3:ae: 02:94:62:19:92:0e:f0:86:d8:78:b9:6b:9a:41:54: ac:e0:db:a0:99:cc:90:91:80:96:be:11:e4:d1:5f: c3:ac:5d:06:cb:43:26:bf:24:bc:70:99:98:c1:e3: f5:96:4c:81:8f:83:c8:de:ae:59:f4:e3:74:80:9c: 91:80:e5:b0:14:a4:13:62:08:e8:03:0f:f8:aa:c4: f7:aa:4a:2e:d0:3f:45:ed:68:c4:7d:58:8d:2f:16: e2:1f:67:e8:6f:81:8b:57:2f:00:41:ed:79:0f:f6: 86:22:7c:0f:26:ed:32:c6:2b:e2:f7:4b:d1:c1:13: 12:65:8d:e0:19:59:6e:ae:d3:1e:82:b7:8d:b1:e8: 48:da:fe:4b:f7:5d:7b:c4:41:29:62:a7:c2:3f:c2: d9:42:f6:47:13:a4:04:df:31:05:f5:c5:f8:c4:1b: 73:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:E8:15:34:8F:F7:BD:E4:D8:EB:79:52:23:AC:5E:19:00:ED:90:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/f86bc310-3455-3516-afb5-5f330d8fa6b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/81fb7701-7454-4b9b-810d-3d604f504467.crl X509v3 Authority Key Identifier: keyid:46:DA:10:10:BB:03:C2:50:43:1B:D3:31:D6:D6:A6:9A:5C:15:0A:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467.cer sbgp-ipAddrBlock: critical IPv4: 199.65.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:f1:4b:a9:b7:cf:aa:73:cb:c7:67:df:04:6b:a2:e9:4c:f6: 56:81:5a:e5:5c:72:f7:ee:74:55:77:77:32:4e:c8:80:c5:b2: 52:d8:6a:c0:c5:7e:5d:9a:47:88:1e:33:a7:0f:82:17:57:cd: c8:55:01:26:3b:31:06:3d:44:c0:af:80:ed:9d:f4:98:ea:b7: c4:81:e8:58:e2:42:a6:b2:d3:fc:01:2b:74:fb:7d:21:f6:31: 8a:49:27:1a:f6:9c:9b:a2:d3:7a:f1:dd:21:a1:c3:29:19:0a: 6c:22:b7:2f:01:30:ec:d5:7e:9b:fa:f1:37:85:3e:fb:b1:08: 81:38:77:31:df:e9:b1:e9:59:e4:3b:09:2f:e2:07:fd:41:ca: 9a:87:bf:3d:41:18:7b:b1:21:b7:40:b4:29:aa:3a:5d:b5:42: 4e:a0:8d:1b:62:5d:f9:01:ae:22:e9:51:28:18:fc:95:51:03: 41:1b:36:37:28:1a:27:65:9e:f2:54:28:3f:a3:05:25:e8:a0: 1f:6d:cf:f2:4c:c6:d8:d4:c4:1f:fa:75:cc:80:c2:72:01:90: 73:08:49:36:72:e7:7c:eb:d8:e3:7d:79:1e:ec:3e:19:81:4e: b6:df:65:3f:8e:81:bd:29:a4:e5:18:0b:52:57:dd:45:ee:08: ad:a9:72:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2KxTrb86ddzVXSEAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODFmYjc3MDEtNzQ1NC00YjliLTgxMGQtM2Q2MDRmNTA0 NDY3MB4XDTI2MDQxODAxMDAyNFoXDTI2MDcxNzAxMDAyNFowLzEtMCsGA1UEAxMk N2UxNjhiNTYtMDYyMS00YzI2LWI3NjMtNjU2MzU2ZjVmNDkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRSy9aXdwi8fRfS3ppd3lwf91obkdevmlHpW DwMUltWFXrtm459HLfey9r56WPmnTkjOx8B3octWaaVF582Pj4ra7vvWG+ZDtUat jZle0fnWv0N7okq8464ClGIZkg7whth4uWuaQVSs4NugmcyQkYCWvhHk0V/DrF0G y0MmvyS8cJmYweP1lkyBj4PI3q5Z9ON0gJyRgOWwFKQTYgjoAw/4qsT3qkou0D9F 7WjEfViNLxbiH2fob4GLVy8AQe15D/aGInwPJu0yxivi90vRwRMSZY3gGVlurtMe greNsehI2v5L9117xEEpYqfCP8LZQvZHE6QE3zEF9cX4xBtzJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDboFTSP973k2Ot5UiOsXhkA7ZAKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MWZi NzcwMS03NDU0LTRiOWItODEwZC0zZDYwNGY1MDQ0NjcvZjg2YmMzMTAtMzQ1NS0z NTE2LWFmYjUtNWYzMzBkOGZhNmIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODFmYjc3MDEtNzQ1NC00YjliLTgx MGQtM2Q2MDRmNTA0NDY3LzgxZmI3NzAxLTc0NTQtNGI5Yi04MTBkLTNkNjA0ZjUw NDQ2Ny5jcmwwHwYDVR0jBBgwFoAURtoQELsDwlBDG9Mx1tammlwVCs4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84MWZiNzcwMS03NDU0LTRiOWItODEwZC0zZDYw NGY1MDQ0NjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEx0EQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFPxS6m3z6pzy8dn3wRroulM9laBWuVccvfudFV3dzJOyIDFslLYasDF fl2aR4geM6cPghdXzchVASY7MQY9RMCvgO2d9Jjqt8SB6FjiQqay0/wBK3T7fSH2 MYpJJxr2nJui03rx3SGhwykZCmwity8BMOzVfpv68TeFPvuxCIE4dzHf6bHpWeQ7 CS/iB/1BypqHvz1BGHuxIbdAtCmqOl21Qk6gjRtiXfkBriLpUSgY/JVRA0EbNjco GidlnvJUKD+jBSXooB9tz/JMxtjUxB/6dcyAwnIBkHMISTZy53zr2ON9eR7sPhmB TrbfZT+Ogb0ppOUYC1JX3UXuCK2pcoE= -----END CERTIFICATE-----Generated at Sun Apr 19 04:55:23 2026 by rpki-client