$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/0032e347-6e3a-3cea-940c-039940ff7a70.roa File: 0032e347-6e3a-3cea-940c-039940ff7a70.roa (raw, json) Hash identifier: Ffzs7TzM6zw6V/rSAswSWyeObWJL2QW4x4SD1rFxZFs= Subject key identifier: AB:CE:42:3C:EE:C6:54:11:9A:32:A0:4E:D0:EB:25:D5:5F:70:03:B5 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584D037D5187FD6ED73B4554A600 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/0032e347-6e3a-3cea-940c-039940ff7a70.roa Signing time: Sat 28 Feb 2026 14:00:40 +0000 ROA not before: Sat 28 Feb 2026 14:00:40 +0000 ROA not after: Fri 29 May 2026 13:00:40 +0000 asID: 16591 IP address blocks: 136.32.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:03:7d:51:87:fd:6e:d7:3b:45:54:a6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Feb 28 14:00:40 2026 GMT Not After : May 29 13:00:40 2026 GMT Subject: CN=b7c0016b-5549-4194-96ca-f0812aa8bd0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:da:35:7a:5d:eb:03:70:d1:3c:9f:ce:77:4e: 6d:20:7d:f8:b2:f3:eb:9e:35:e8:88:6d:95:fd:66: 61:94:c9:6f:af:9b:fd:4a:32:be:98:b1:25:5d:b5: 0c:94:44:c5:dd:8e:e0:a2:94:c5:1b:78:02:9b:de: df:93:f3:9d:cb:e5:b0:cd:80:92:34:02:4a:8d:a2: a7:a7:af:98:18:9c:0c:87:47:b2:a7:f9:f0:ae:76: d2:5d:34:7c:c8:3b:86:79:d6:9b:60:c1:f8:c5:48: b7:5e:77:2f:3e:89:5e:56:19:bb:20:46:1b:7f:51: a7:4a:23:96:c2:6a:de:22:97:1c:3e:83:2d:9b:e5: da:39:8d:8f:21:b7:a7:69:ea:cd:f3:5d:60:fa:22: b7:eb:11:5d:4a:b4:59:c5:9c:5e:8d:88:a2:be:df: 07:21:4f:8d:94:4a:e1:f7:2a:9e:3f:6f:d8:18:2e: 94:82:60:c7:b4:17:eb:68:34:c2:ad:6a:90:5d:36: 08:c7:20:79:45:d8:c8:f1:0d:98:2d:e9:3d:0d:b8: 2a:56:b5:1e:4a:48:a2:6a:cf:05:9f:75:d3:09:d0: ef:53:f9:a7:ac:ee:0d:00:b2:9b:ff:5e:c5:ef:6f: f8:c3:30:dc:a8:46:28:54:8c:08:af:97:e2:17:96: 76:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:CE:42:3C:EE:C6:54:11:9A:32:A0:4E:D0:EB:25:D5:5F:70:03:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/0032e347-6e3a-3cea-940c-039940ff7a70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.32.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:2f:62:5f:18:d8:62:b7:70:ea:96:bb:74:53:82:2f:97:ed: ed:87:74:11:ef:ed:62:1c:20:23:3e:65:11:57:3a:70:47:dc: a0:81:f2:3b:8f:59:f3:cb:38:ef:50:6d:40:a3:32:da:8e:fc: 63:6e:14:58:a7:32:67:45:1c:5d:e7:16:26:99:3c:b9:c0:ee: 30:e6:1a:d5:b3:e6:12:61:87:f7:ec:2d:ea:22:71:16:68:8f: 07:28:5e:ba:4c:37:64:21:5a:a5:06:2b:90:b1:49:93:13:26: f2:ac:80:45:48:9e:70:a0:7d:1c:09:ee:18:3d:0c:85:fb:11: db:45:4e:35:e9:d6:3b:ad:6f:a8:76:d1:66:6c:ea:19:6a:ed: 91:38:de:94:97:35:b6:a6:ee:f8:a7:8f:2f:ef:33:51:90:0b: cf:8b:98:40:2a:c2:3d:4f:0b:c9:fc:a5:19:4c:9e:50:9a:87: 70:51:b1:4a:fa:19:9e:85:65:46:33:bc:70:bc:9b:eb:36:c8: 3a:45:ed:8a:f6:05:b3:bf:09:1a:b5:36:1e:cb:20:e1:ec:d1: 51:7f:08:58:f3:2e:b7:07:00:26:59:8c:65:4e:81:8b:52:eb: 0d:41:c3:b5:a6:47:54:68:c1:d9:53:bc:20:7a:ea:e3:20:a3: 1f:59:86:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0DfVGH/W7XO0VUpgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDIyODE0MDA0MFoXDTI2MDUyOTEzMDA0MFowLzEtMCsGA1UEAxMk YjdjMDAxNmItNTU0OS00MTk0LTk2Y2EtZjA4MTJhYThiZDBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnto1el3rA3DRPJ/Od05tIH34svPrnjXoiG2V /WZhlMlvr5v9SjK+mLElXbUMlETF3Y7gopTFG3gCm97fk/Ody+WwzYCSNAJKjaKn p6+YGJwMh0eyp/nwrnbSXTR8yDuGedabYMH4xUi3XncvPoleVhm7IEYbf1GnSiOW wmreIpccPoMtm+XaOY2PIbenaerN811g+iK36xFdSrRZxZxejYiivt8HIU+NlErh 9yqeP2/YGC6UgmDHtBfraDTCrWqQXTYIxyB5RdjI8Q2YLek9DbgqVrUeSkiias8F n3XTCdDvU/mnrO4NALKb/17F72/4wzDcqEYoVIwIr5fiF5Z2hQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKvOQjzuxlQRmjKgTtDrJdVfcAO1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMDAzMmUzNDctNmUzYS0z Y2VhLTk0MGMtMDM5OTQwZmY3YTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCCQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD0vYl8Y2GK3cOqWu3RTgi+X7e2HdBHv7WIcICM+ZRFXOnBH3KCB8juP WfPLOO9QbUCjMtqO/GNuFFinMmdFHF3nFiaZPLnA7jDmGtWz5hJhh/fsLeoicRZo jwcoXrpMN2QhWqUGK5CxSZMTJvKsgEVInnCgfRwJ7hg9DIX7EdtFTjXp1jutb6h2 0WZs6hlq7ZE43pSXNbam7vinjy/vM1GQC8+LmEAqwj1PC8n8pRlMnlCah3BRsUr6 GZ6FZUYzvHC8m+s2yDpF7Yr2BbO/CRq1Nh7LIOHs0VF/CFjzLrcHACZZjGVOgYtS 6w1Bw7WmR1RowdlTvCB66uMgox9ZhoE= -----END CERTIFICATE-----Generated at Mon Mar 2 09:08:42 2026 by rpki-client