$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/a2a5412a-3648-378f-aff7-c7d443d07c08.roa File: a2a5412a-3648-378f-aff7-c7d443d07c08.roa (raw, json) Hash identifier: Tjnysl6s5hnFd1OhN14Q2osMV/d3EU2U4lKlLoqiVvQ= Subject key identifier: 3C:8C:BB:36:27:BC:E4:07:63:1C:E9:A1:92:AF:6C:D7:EE:3A:FA:ED Certificate issuer: /CN=88db2ec8-651c-4bdc-bf38-97fe38702609 Certificate serial: 010D0C9F4328584D8AC5484FF5CBE5055F3EBA00 Authority key identifier: 78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/a2a5412a-3648-378f-aff7-c7d443d07c08.roa Signing time: Sat 18 Apr 2026 01:00:24 +0000 ROA not before: Sat 18 Apr 2026 01:00:24 +0000 ROA not after: Fri 17 Jul 2026 01:00:24 +0000 asID: 3320 IP address blocks: 81.199.64.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Apr 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8a:c5:48:4f:f5:cb:e5:05:5f:3e:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88db2ec8-651c-4bdc-bf38-97fe38702609 Validity Not Before: Apr 18 01:00:24 2026 GMT Not After : Jul 17 01:00:24 2026 GMT Subject: CN=baa30dc3-a226-4069-847a-edb01fcc7934 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:39:82:3d:34:13:a1:45:a0:7f:00:3e:b5:e5: 6d:63:fe:0d:26:cd:07:6d:21:90:36:12:cf:78:5a: 52:95:0b:0a:9e:29:fb:49:eb:91:2c:1a:4c:09:1c: 21:aa:06:65:ed:df:e6:d4:fa:66:18:82:4d:0b:d2: a2:8e:cf:86:f0:b2:e5:94:42:85:38:5e:e4:d1:64: 6f:e3:d9:e5:9a:f9:bd:2b:8a:97:70:79:fe:cb:26: d0:64:98:1e:ce:7f:95:29:93:97:0b:11:59:9b:3e: da:85:0e:f7:23:8d:80:3c:d4:6e:d4:88:26:44:7e: 8a:56:f9:18:fa:d8:56:1d:bf:a2:a9:1e:35:70:3f: 01:0b:db:66:0d:fa:38:ee:73:d7:3c:c4:73:f2:d0: 7b:da:c8:44:6f:c5:db:52:24:cb:0c:d2:35:9d:63: 33:18:f0:2a:a8:3d:9b:a4:96:d5:88:bc:aa:83:c2: 58:d9:c8:dc:25:c7:0c:63:04:75:ee:e8:0e:18:7d: 30:f6:ef:bb:98:1d:e0:35:a5:41:c5:09:89:51:17: d0:c5:ef:50:37:ad:73:c0:24:30:2e:d9:de:ea:f9: 5b:56:3e:b3:ce:29:2d:f8:0e:4d:10:56:e0:7f:7a: 0d:78:d2:91:1e:36:2f:c2:35:25:5f:30:2b:4b:45: 14:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:8C:BB:36:27:BC:E4:07:63:1C:E9:A1:92:AF:6C:D7:EE:3A:FA:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/a2a5412a-3648-378f-aff7-c7d443d07c08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.crl X509v3 Authority Key Identifier: keyid:78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer sbgp-ipAddrBlock: critical IPv4: 81.199.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:cf:8c:ef:94:19:df:28:07:df:cb:2a:f3:64:42:12:34:22: bb:77:34:af:5b:ce:6f:78:f9:56:1c:bb:ac:c1:37:4e:e0:3c: 9d:20:9c:94:3e:f6:1f:6f:0b:84:00:d8:07:67:48:40:f9:b5: 45:57:c3:84:39:e6:96:67:0f:64:e8:a7:0f:37:be:3f:4a:ad: 01:45:49:8e:2e:af:b6:4f:12:49:c4:b2:c4:e2:e5:aa:d2:b7: 71:bc:bb:d8:89:6d:6b:39:e0:59:06:e9:00:18:91:cf:76:97: 23:85:79:20:0e:94:46:eb:00:2f:8b:8b:30:d7:d1:58:76:ab: b7:42:89:fb:34:02:5c:64:07:01:6c:6f:44:8c:6b:9b:76:65: fc:0b:ed:d0:3d:d1:7a:cf:e7:47:74:67:50:1f:c7:00:ed:1c: 41:85:1a:5e:8c:73:09:27:3e:4c:c8:45:47:4a:6d:df:61:16: 05:02:3f:96:59:d8:99:95:d4:0b:5a:53:f4:89:ad:dc:c3:1a: 4d:de:9c:e3:29:48:21:32:4f:24:91:cd:ee:c9:19:7c:a1:81: 87:9b:cd:3c:24:96:04:60:d6:5b:b7:99:f3:ef:9c:16:a5:c6: 88:19:88:a4:04:ae:ec:dc:04:e3:a3:6b:b7:3e:8e:0a:cb:56: 01:1b:d8:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2KxUhP9cvlBV8+ugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODhkYjJlYzgtNjUxYy00YmRjLWJmMzgtOTdmZTM4NzAy NjA5MB4XDTI2MDQxODAxMDAyNFoXDTI2MDcxNzAxMDAyNFowLzEtMCsGA1UEAxMk YmFhMzBkYzMtYTIyNi00MDY5LTg0N2EtZWRiMDFmY2M3OTM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzmCPTQToUWgfwA+teVtY/4NJs0HbSGQNhLP eFpSlQsKnin7SeuRLBpMCRwhqgZl7d/m1PpmGIJNC9Kijs+G8LLllEKFOF7k0WRv 49nlmvm9K4qXcHn+yybQZJgezn+VKZOXCxFZmz7ahQ73I42APNRu1IgmRH6KVvkY +thWHb+iqR41cD8BC9tmDfo47nPXPMRz8tB72shEb8XbUiTLDNI1nWMzGPAqqD2b pJbViLyqg8JY2cjcJccMYwR17ugOGH0w9u+7mB3gNaVBxQmJURfQxe9QN61zwCQw Ltne6vlbVj6zzikt+A5NEFbgf3oNeNKRHjYvwjUlXzArS0UUJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDyMuzYnvOQHYxzpoZKvbNfuOvrtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OGRi MmVjOC02NTFjLTRiZGMtYmYzOC05N2ZlMzg3MDI2MDkvYTJhNTQxMmEtMzY0OC0z NzhmLWFmZjctYzdkNDQzZDA3YzA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODhkYjJlYzgtNjUxYy00YmRjLWJm MzgtOTdmZTM4NzAyNjA5Lzg4ZGIyZWM4LTY1MWMtNGJkYy1iZjM4LTk3ZmUzODcw MjYwOS5jcmwwHwYDVR0jBBgwFoAUeOWLAyWpWva/3XB5vVJQ5gP+sAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OGRiMmVjOC02NTFjLTRiZGMtYmYzOC05N2Zl Mzg3MDI2MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDUcdAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADLPjO+UGd8oB9/LKvNkQhI0Irt3NK9bzm94+VYcu6zBN07gPJ0gnJQ+ 9h9vC4QA2AdnSED5tUVXw4Q55pZnD2Topw83vj9KrQFFSY4ur7ZPEknEssTi5arS t3G8u9iJbWs54FkG6QAYkc92lyOFeSAOlEbrAC+LizDX0Vh2q7dCifs0AlxkBwFs b0SMa5t2ZfwL7dA90XrP50d0Z1AfxwDtHEGFGl6McwknPkzIRUdKbd9hFgUCP5ZZ 2JmV1AtaU/SJrdzDGk3enOMpSCEyTySRze7JGXyhgYebzTwklgRg1lu3mfPvnBal xogZiKQEruzcBOOja7c+jgrLVgEb2B8= -----END CERTIFICATE-----Generated at Mon Apr 27 11:21:20 2026 by rpki-client