$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac717083-6970-4d32-8573-0bfa89700c9e/e4536b58-c3e7-36a1-96cf-019ddc7bfba9.roa File: e4536b58-c3e7-36a1-96cf-019ddc7bfba9.roa (raw, json) Hash identifier: Q5WZilXdMwBIKUcGbTDiWynleJpz/wJQn1hhEFc2MAQ= Subject key identifier: 1A:59:BC:70:04:07:7B:1F:EB:EE:DD:E5:57:D1:40:EF:C7:B9:C1:DD Certificate issuer: /CN=ac717083-6970-4d32-8573-0bfa89700c9e Certificate serial: 010D0C9F4328584CA5F71116642F69D94C304380 Authority key identifier: 20:5F:B3:EA:78:E5:E9:47:0A:C5:56:AE:EA:F5:6D:E0:3D:9E:FD:AD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac717083-6970-4d32-8573-0bfa89700c9e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac717083-6970-4d32-8573-0bfa89700c9e/e4536b58-c3e7-36a1-96cf-019ddc7bfba9.roa Signing time: Mon 26 Jan 2026 02:00:32 +0000 ROA not before: Mon 26 Jan 2026 02:00:32 +0000 ROA not after: Sun 26 Apr 2026 01:00:32 +0000 asID: 802 IP address blocks: 130.63.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac717083-6970-4d32-8573-0bfa89700c9e/ac717083-6970-4d32-8573-0bfa89700c9e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac717083-6970-4d32-8573-0bfa89700c9e/ac717083-6970-4d32-8573-0bfa89700c9e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac717083-6970-4d32-8573-0bfa89700c9e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a5:f7:11:16:64:2f:69:d9:4c:30:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac717083-6970-4d32-8573-0bfa89700c9e Validity Not Before: Jan 26 02:00:32 2026 GMT Not After : Apr 26 01:00:32 2026 GMT Subject: CN=3ca1cf5a-6583-4c65-b2c4-acdb60f24c70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:09:95:c8:56:89:12:75:99:1b:8e:c5:aa:39: fc:2d:98:c3:40:ce:96:04:ed:c6:f6:e2:26:bf:34: 26:2d:0c:5e:e5:9a:8d:16:0b:19:15:27:2c:79:c7: f6:7b:98:08:2b:91:b4:5c:1d:33:c3:5b:28:79:02: ce:f6:a3:e1:10:e0:c1:9f:e7:5f:03:01:b7:7d:da: 24:d6:54:38:2d:c4:e8:34:e5:64:30:a6:11:af:d0: c1:53:40:f6:c7:84:f0:70:4a:52:84:0a:61:c6:5e: dd:5a:12:c7:d8:a9:e9:b3:25:d7:fc:f8:96:55:91: ae:84:40:95:cb:30:ca:e1:ec:28:fe:dc:38:e7:1c: f5:37:a4:c3:29:01:71:4c:56:fd:34:12:20:d2:ba: b1:06:ca:a3:00:6c:f2:c3:d1:4b:c1:4a:74:cd:ca: 6a:b1:7d:0e:bb:fd:48:2e:33:36:e9:d1:28:58:b5: f9:2f:6b:55:f1:69:7d:c5:56:36:e6:3e:be:21:e6: 0d:bf:d1:65:ba:97:cc:6d:5d:77:bc:64:fb:9e:fa: 0c:cb:cf:76:a6:08:77:fa:b7:fc:cc:27:4f:7b:7f: 6c:33:a0:f8:99:19:cc:0a:1c:a2:d1:2b:87:de:73: 70:e1:27:b6:37:5b:ef:ec:7f:ee:2b:2b:34:e3:f3: 00:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:59:BC:70:04:07:7B:1F:EB:EE:DD:E5:57:D1:40:EF:C7:B9:C1:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac717083-6970-4d32-8573-0bfa89700c9e/e4536b58-c3e7-36a1-96cf-019ddc7bfba9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac717083-6970-4d32-8573-0bfa89700c9e/ac717083-6970-4d32-8573-0bfa89700c9e.crl X509v3 Authority Key Identifier: keyid:20:5F:B3:EA:78:E5:E9:47:0A:C5:56:AE:EA:F5:6D:E0:3D:9E:FD:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac717083-6970-4d32-8573-0bfa89700c9e.cer sbgp-ipAddrBlock: critical IPv4: 130.63.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:3b:9a:0b:9a:ad:31:01:bc:85:15:77:c9:e6:fa:eb:b7:67: 42:2c:38:ad:74:b3:fa:6c:d7:15:ac:3f:e1:85:2d:c4:23:47: 39:72:a9:58:09:19:31:11:b5:b2:a9:66:47:79:30:b2:53:57: b2:7c:43:90:ed:02:ff:f0:a5:0f:90:67:92:88:4e:c6:3f:7d: 05:a9:52:6f:71:1b:ae:a5:63:30:9c:04:ca:89:8d:e4:53:9d: af:8f:72:f6:19:1f:95:81:19:8d:5f:00:06:23:d9:77:e3:a7: f0:59:9c:3d:ad:cd:3c:b0:45:fd:e6:f1:5a:a8:b8:44:43:f8: 9f:91:f1:aa:c0:f1:92:37:0a:04:9c:48:85:35:9d:d7:fe:f2: ab:b2:cc:00:a8:44:73:1c:bd:ac:60:8c:c3:71:9c:a1:54:7b: 00:34:49:81:8f:b6:92:64:3b:32:2c:4c:5a:55:9b:3c:52:93: 7b:48:62:5e:fb:71:ba:e6:da:76:3f:7a:9d:c7:f0:4e:ac:49: 41:c1:51:09:fa:73:63:ac:4b:23:4e:93:5d:0b:60:86:b5:b1: 30:08:a8:21:0c:b3:ea:26:82:55:11:2a:72:dd:1c:37:f9:e1: f8:b1:03:7f:8e:8c:41:11:2d:2f:1f:20:25:73:c5:36:00:3c: 83:a6:cd:66 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEyl9xEWZC9p2UwwQ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM3MTcwODMtNjk3MC00ZDMyLTg1NzMtMGJmYTg5NzAw YzllMB4XDTI2MDEyNjAyMDAzMloXDTI2MDQyNjAxMDAzMlowLzEtMCsGA1UEAxMk M2NhMWNmNWEtNjU4My00YzY1LWIyYzQtYWNkYjYwZjI0YzcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQmVyFaJEnWZG47Fqjn8LZjDQM6WBO3G9uIm vzQmLQxe5ZqNFgsZFScsecf2e5gIK5G0XB0zw1soeQLO9qPhEODBn+dfAwG3fdok 1lQ4LcToNOVkMKYRr9DBU0D2x4TwcEpShAphxl7dWhLH2KnpsyXX/PiWVZGuhECV yzDK4ewo/tw45xz1N6TDKQFxTFb9NBIg0rqxBsqjAGzyw9FLwUp0zcpqsX0Ou/1I LjM26dEoWLX5L2tV8Wl9xVY25j6+IeYNv9FlupfMbV13vGT7nvoMy892pgh3+rf8 zCdPe39sM6D4mRnMChyi0SuH3nNw4Se2N1vv7H/uKys04/MApQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFBpZvHAEB3sf6+7d5VfRQO/HucHdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hYzcx NzA4My02OTcwLTRkMzItODU3My0wYmZhODk3MDBjOWUvZTQ1MzZiNTgtYzNlNy0z NmExLTk2Y2YtMDE5ZGRjN2JmYmE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYWM3MTcwODMtNjk3MC00ZDMyLTg1 NzMtMGJmYTg5NzAwYzllL2FjNzE3MDgzLTY5NzAtNGQzMi04NTczLTBiZmE4OTcw MGM5ZS5jcmwwHwYDVR0jBBgwFoAUIF+z6njl6UcKxVau6vVt4D2e/a0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hYzcxNzA4My02OTcwLTRkMzItODU3My0wYmZh ODk3MDBjOWUuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgj8wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAFDuaC5qtMQG8hRV3yeb667dnQiw4rXSz+mzXFaw/4YUtxCNHOXKpWAkZ MRG1sqlmR3kwslNXsnxDkO0C//ClD5BnkohOxj99BalSb3EbrqVjMJwEyomN5FOd r49y9hkflYEZjV8ABiPZd+On8FmcPa3NPLBF/ebxWqi4REP4n5HxqsDxkjcKBJxI hTWd1/7yq7LMAKhEcxy9rGCMw3GcoVR7ADRJgY+2kmQ7MixMWlWbPFKTe0hiXvtx uubadj96ncfwTqxJQcFRCfpzY6xLI06TXQtghrWxMAioIQyz6iaCVREqct0cN/nh +LEDf46MQREtLx8gJXPFNgA8g6bNZg== -----END CERTIFICATE-----Generated at Mon Mar 2 22:53:02 2026 by rpki-client