$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/bf158f20-c503-30b9-8360-4c308164a27f.roa File: bf158f20-c503-30b9-8360-4c308164a27f.roa (raw, json) Hash identifier: Lm1n92p5WYkWMxpuVfELdp/udxL8J5qts1OJawp9SrE= Subject key identifier: 2F:6D:E3:8E:12:49:1D:7C:B8:95:C9:23:03:3E:D3:CD:12:E2:D3:1B Certificate issuer: /CN=1773b91b-a601-4f0d-af4c-93b3f65e6404 Certificate serial: 010D0C9F4328584D00B275E7B4E7089027885E80 Authority key identifier: E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/bf158f20-c503-30b9-8360-4c308164a27f.roa Signing time: Fri 27 Feb 2026 14:00:40 +0000 ROA not before: Fri 27 Feb 2026 14:00:40 +0000 ROA not after: Thu 28 May 2026 13:00:40 +0000 asID: 19165 IP address blocks: 136.29.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:00:b2:75:e7:b4:e7:08:90:27:88:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1773b91b-a601-4f0d-af4c-93b3f65e6404 Validity Not Before: Feb 27 14:00:40 2026 GMT Not After : May 28 13:00:40 2026 GMT Subject: CN=0ea4c7d3-d4b6-4d81-8f1a-087ab07bd77e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:1d:31:d1:13:7b:11:64:13:97:a6:58:63:23: 27:a8:7b:3c:bf:cb:21:30:5d:28:16:ab:08:31:8b: d7:06:3b:00:95:9f:5c:73:8b:f9:09:71:8b:31:7a: 17:13:51:c9:d2:44:6f:e6:e7:2c:82:05:db:03:0a: 1e:ce:b3:2d:d5:17:80:a8:d6:11:ec:d7:ee:75:e1: 18:72:2d:12:73:6a:a7:f2:50:2a:fc:72:10:0b:ed: 76:6e:9f:23:51:6a:88:6e:53:2b:40:08:90:14:fc: 6d:15:7f:5b:f2:d0:f9:89:f4:ca:3c:59:ca:94:25: de:dc:c3:94:ce:30:cd:bf:3a:c5:8e:b6:c7:52:ec: d0:76:88:8e:2c:d6:34:74:4d:54:21:a4:48:72:79: ae:f7:d2:fe:46:68:e6:5c:7e:db:84:fb:5f:df:0b: 24:f2:e5:52:95:1a:6e:e4:db:e6:72:2b:b7:88:45: 4a:46:d4:94:d5:2f:00:c4:c3:35:a3:57:72:e0:4c: ff:9d:e6:69:78:bf:5a:43:80:28:50:6c:98:9d:2a: cc:66:8f:d9:27:ae:3e:ac:80:ac:9c:96:24:e9:c9: 6d:09:d4:0c:57:2a:d2:36:d2:e5:14:44:ab:a8:f2: 9a:5e:37:9e:fe:58:b8:c7:03:00:f2:aa:b5:61:f7: 39:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:6D:E3:8E:12:49:1D:7C:B8:95:C9:23:03:3E:D3:CD:12:E2:D3:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/bf158f20-c503-30b9-8360-4c308164a27f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl X509v3 Authority Key Identifier: keyid:E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer sbgp-ipAddrBlock: critical IPv4: 136.29.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:87:ff:da:aa:80:d2:5d:d0:19:43:b0:00:64:b2:26:0f:7a: b0:0d:c0:7e:89:92:54:f8:af:3d:17:3a:e6:f6:0e:88:33:d0: 1d:4a:86:c8:cb:84:7c:5d:5b:93:bf:aa:00:cb:fd:fb:57:32: 4d:23:a7:cc:c3:a9:f0:34:02:7a:b5:3d:7e:e3:3b:cc:35:b3: c7:1b:bb:41:1a:4a:86:5c:5b:33:c7:35:ca:7b:c7:42:d2:f8: ce:6f:5d:00:99:4b:ac:9c:12:2b:db:8f:e3:87:25:4d:fd:1b: f6:64:ea:fa:e9:b6:19:d0:b1:84:0b:18:7d:7d:b2:81:92:38: 9c:08:46:94:b1:ad:31:2b:2b:41:23:40:7d:74:02:02:71:ec: 17:11:f3:ca:cf:33:7e:55:c1:f7:1c:b3:71:b8:7e:ab:fe:9a: 1c:be:43:7c:5c:30:4e:11:fb:4e:9a:a1:48:79:bd:e9:0f:8f: d7:01:22:be:fc:3d:96:2f:79:6e:fb:ca:41:2b:df:77:2b:23: 31:9b:a7:65:37:ba:21:1e:73:f6:ed:11:0b:6b:b5:79:49:0d: 5b:32:7d:bf:78:1e:d2:ec:a0:83:13:5e:32:9d:06:38:ce:96: 7f:fb:f9:9a:92:a9:5a:31:b1:41:7c:99:c9:af:30:13:c2:2f: ae:9c:ed:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0AsnXntOcIkCeIXoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTc3M2I5MWItYTYwMS00ZjBkLWFmNGMtOTNiM2Y2NWU2 NDA0MB4XDTI2MDIyNzE0MDA0MFoXDTI2MDUyODEzMDA0MFowLzEtMCsGA1UEAxMk MGVhNGM3ZDMtZDRiNi00ZDgxLThmMWEtMDg3YWIwN2JkNzdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkh0x0RN7EWQTl6ZYYyMnqHs8v8shMF0oFqsI MYvXBjsAlZ9cc4v5CXGLMXoXE1HJ0kRv5ucsggXbAwoezrMt1ReAqNYR7NfudeEY ci0Sc2qn8lAq/HIQC+12bp8jUWqIblMrQAiQFPxtFX9b8tD5ifTKPFnKlCXe3MOU zjDNvzrFjrbHUuzQdoiOLNY0dE1UIaRIcnmu99L+RmjmXH7bhPtf3wsk8uVSlRpu 5Nvmciu3iEVKRtSU1S8AxMM1o1dy4Ez/neZpeL9aQ4AoUGyYnSrMZo/ZJ64+rICs nJYk6cltCdQMVyrSNtLlFESrqPKaXjee/li4xwMA8qq1Yfc5MwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC9t444SSR18uJXJIwM+080S4tMbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xNzcz YjkxYi1hNjAxLTRmMGQtYWY0Yy05M2IzZjY1ZTY0MDQvYmYxNThmMjAtYzUwMy0z MGI5LTgzNjAtNGMzMDgxNjRhMjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMTc3M2I5MWItYTYwMS00ZjBkLWFm NGMtOTNiM2Y2NWU2NDA0LzE3NzNiOTFiLWE2MDEtNGYwZC1hZjRjLTkzYjNmNjVl NjQwNC5jcmwwHwYDVR0jBBgwFoAU5dhVH06yx92E7wMChlouzzki8a8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xNzczYjkxYi1hNjAxLTRmMGQtYWY0Yy05M2Iz ZjY1ZTY0MDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiB3wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAACH/9qqgNJd0BlDsABksiYPerANwH6JklT4rz0XOub2Dogz0B1KhsjL hHxdW5O/qgDL/ftXMk0jp8zDqfA0Anq1PX7jO8w1s8cbu0EaSoZcWzPHNcp7x0LS +M5vXQCZS6ycEivbj+OHJU39G/Zk6vrpthnQsYQLGH19soGSOJwIRpSxrTErK0Ej QH10AgJx7BcR88rPM35Vwfccs3G4fqv+mhy+Q3xcME4R+06aoUh5vekPj9cBIr78 PZYveW77ykEr33crIzGbp2U3uiEec/btEQtrtXlJDVsyfb94HtLsoIMTXjKdBjjO ln/7+ZqSqVoxsUF8mcmvMBPCL66c7aY= -----END CERTIFICATE-----Generated at Mon Mar 2 11:45:28 2026 by rpki-client