$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/e4acaa6a-9b22-365e-a7d0-a8a4de2e75af.roa File: e4acaa6a-9b22-365e-a7d0-a8a4de2e75af.roa (raw, json) Hash identifier: AHf1wTZwLG0BN/yMqWbo2MwehIDgloAFXineXh4GhkU= Subject key identifier: 2B:8A:77:E2:E0:26:7A:F2:40:92:87:FA:79:F6:A6:AE:0B:0A:AE:09 Certificate issuer: /CN=81565da9-aab9-45ca-b99c-0684053daa09 Certificate serial: 010D0C9F4328584D20AF54B2A4552795B016A680 Authority key identifier: D7:5C:90:A0:F6:CD:17:C6:44:68:A9:C4:16:61:D5:7E:64:23:2D:C8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/e4acaa6a-9b22-365e-a7d0-a8a4de2e75af.roa Signing time: Wed 11 Mar 2026 01:00:32 +0000 ROA not before: Wed 11 Mar 2026 01:00:32 +0000 ROA not after: Tue 09 Jun 2026 01:00:32 +0000 asID: 8987 IP address blocks: 198.151.8.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/81565da9-aab9-45ca-b99c-0684053daa09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/81565da9-aab9-45ca-b99c-0684053daa09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 25 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:20:af:54:b2:a4:55:27:95:b0:16:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81565da9-aab9-45ca-b99c-0684053daa09 Validity Not Before: Mar 11 01:00:32 2026 GMT Not After : Jun 9 01:00:32 2026 GMT Subject: CN=999d6e79-2ea6-458d-abb6-a3bff41e3de9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:7a:dc:a0:b4:a9:17:ff:ef:1c:5f:e7:ec:9d: 25:80:ff:9a:78:8f:b2:de:b5:25:86:60:de:3c:0e: df:6c:54:39:8e:75:4e:86:f9:f6:4a:bc:4d:0c:53: 0f:9f:cf:9f:af:e3:fb:97:92:84:09:8e:1e:ee:15: 1b:11:47:66:a1:ae:14:54:29:6a:91:61:b1:d2:79: 08:c8:4f:4f:72:97:2e:de:55:c4:5f:d6:e3:c6:40: 6b:29:42:a9:ca:8d:68:7a:ed:f2:bd:ca:c9:39:72: 1f:ce:81:72:31:d1:92:61:17:fe:1f:e7:ce:6c:98: f4:00:b5:82:4c:0d:ce:82:ea:0f:89:b8:53:62:19: 1c:8c:c3:fe:9e:73:ab:e9:36:38:fa:16:23:c1:bd: 61:04:a1:cb:0c:04:2a:fc:53:df:79:0c:de:d5:9c: b7:d4:34:0f:1a:a8:ba:9d:90:80:91:1d:96:87:2c: 61:54:fe:f7:55:65:f3:fa:d5:a3:88:00:3a:d1:4e: d7:3f:b0:50:95:6b:de:95:79:e6:13:35:07:0f:ab: 14:3f:a0:15:83:6b:0b:81:07:48:4e:50:8b:78:b0: 3a:d5:2b:78:7b:ae:4b:82:33:de:a7:bd:10:48:13: 9e:cc:d7:d7:fe:e5:f9:16:77:93:00:49:69:5d:da: d9:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:8A:77:E2:E0:26:7A:F2:40:92:87:FA:79:F6:A6:AE:0B:0A:AE:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/e4acaa6a-9b22-365e-a7d0-a8a4de2e75af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/81565da9-aab9-45ca-b99c-0684053daa09.crl X509v3 Authority Key Identifier: keyid:D7:5C:90:A0:F6:CD:17:C6:44:68:A9:C4:16:61:D5:7E:64:23:2D:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09.cer sbgp-ipAddrBlock: critical IPv4: 198.151.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:c5:93:69:2d:ca:d3:25:62:7e:9d:04:ad:30:9f:4a:19:55: fb:56:fd:62:8e:3d:58:29:c0:88:ae:bd:50:35:82:0a:c5:bb: dc:a5:34:99:36:74:52:54:be:ab:c6:5b:be:33:de:4e:6e:fa: 9f:b6:a0:e0:57:7c:cb:02:6c:50:2c:c1:7c:e5:85:66:fb:9b: d6:e2:5d:9e:4f:ee:87:1e:59:b5:72:42:c2:33:f5:64:0b:a6: 04:36:2c:c5:8c:46:aa:26:c2:4f:4d:6b:ab:1e:03:e0:cf:af: 4d:7f:ee:16:cc:76:90:f9:2f:48:82:7d:8e:b2:2f:da:bb:4c: 30:10:07:c8:68:c2:b9:53:fa:ea:82:92:c7:13:c9:d8:a0:c9: 80:cd:b1:2a:7c:4b:a6:87:11:ad:0a:05:5d:7b:ee:e8:cd:97: f9:0a:6a:b1:2c:4d:37:69:a0:81:a3:e1:c1:e2:b3:5a:87:52: f2:0f:91:bd:f2:58:73:00:ab:91:43:b2:07:0e:70:e3:ff:40: 1a:aa:f4:9a:17:6d:56:18:a8:fa:d5:f9:ae:c2:88:00:e5:73: 8b:3d:14:76:65:44:87:1c:1e:42:6f:0a:37:2a:24:75:ac:7d: bf:99:75:bf:de:31:cf:a5:f7:20:ca:7d:25:da:00:95:3c:67: ad:03:0b:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0gr1SypFUnlbAWpoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODE1NjVkYTktYWFiOS00NWNhLWI5OWMtMDY4NDA1M2Rh YTA5MB4XDTI2MDMxMTAxMDAzMloXDTI2MDYwOTAxMDAzMlowLzEtMCsGA1UEAxMk OTk5ZDZlNzktMmVhNi00NThkLWFiYjYtYTNiZmY0MWUzZGU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHrcoLSpF//vHF/n7J0lgP+aeI+y3rUlhmDe PA7fbFQ5jnVOhvn2SrxNDFMPn8+fr+P7l5KECY4e7hUbEUdmoa4UVClqkWGx0nkI yE9Pcpcu3lXEX9bjxkBrKUKpyo1oeu3yvcrJOXIfzoFyMdGSYRf+H+fObJj0ALWC TA3OguoPibhTYhkcjMP+nnOr6TY4+hYjwb1hBKHLDAQq/FPfeQze1Zy31DQPGqi6 nZCAkR2WhyxhVP73VWXz+tWjiAA60U7XP7BQlWvelXnmEzUHD6sUP6AVg2sLgQdI TlCLeLA61St4e65LgjPep70QSBOezNfX/uX5FneTAElpXdrZ3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCuKd+LgJnryQJKH+nn2pq4LCq4JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84MTU2 NWRhOS1hYWI5LTQ1Y2EtYjk5Yy0wNjg0MDUzZGFhMDkvZTRhY2FhNmEtOWIyMi0z NjVlLWE3ZDAtYThhNGRlMmU3NWFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODE1NjVkYTktYWFiOS00NWNhLWI5 OWMtMDY4NDA1M2RhYTA5LzgxNTY1ZGE5LWFhYjktNDVjYS1iOTljLTA2ODQwNTNk YWEwOS5jcmwwHwYDVR0jBBgwFoAU11yQoPbNF8ZEaKnEFmHVfmQjLcgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84MTU2NWRhOS1hYWI5LTQ1Y2EtYjk5Yy0wNjg0 MDUzZGFhMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxpcIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEDFk2ktytMlYn6dBK0wn0oZVftW/WKOPVgpwIiuvVA1ggrFu9ylNJk2 dFJUvqvGW74z3k5u+p+2oOBXfMsCbFAswXzlhWb7m9biXZ5P7oceWbVyQsIz9WQL pgQ2LMWMRqomwk9Na6seA+DPr01/7hbMdpD5L0iCfY6yL9q7TDAQB8howrlT+uqC kscTydigyYDNsSp8S6aHEa0KBV177ujNl/kKarEsTTdpoIGj4cHis1qHUvIPkb3y WHMAq5FDsgcOcOP/QBqq9JoXbVYYqPrV+a7CiADlc4s9FHZlRIccHkJvCjcqJHWs fb+Zdb/eMc+l9yDKfSXaAJU8Z60DC+0= -----END CERTIFICATE-----Generated at Mon Mar 23 17:25:23 2026 by rpki-client