$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/0d35164e-0555-3d38-a332-e25e49271a03.roa File: 0d35164e-0555-3d38-a332-e25e49271a03.roa (raw, json) Hash identifier: 5pnOdbWEvVWiowa12wRqsJF9YTjrz+6z/PYzgJSLHno= Subject key identifier: CD:07:6F:CC:49:42:39:6A:58:FA:5D:7F:80:2A:13:30:A2:A7:EF:5A Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584D037D53D995C31095CF4C4E80 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/0d35164e-0555-3d38-a332-e25e49271a03.roa Signing time: Sat 28 Feb 2026 14:00:40 +0000 ROA not before: Sat 28 Feb 2026 14:00:40 +0000 ROA not after: Fri 29 May 2026 13:00:40 +0000 asID: 16591 IP address blocks: 136.46.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:03:7d:53:d9:95:c3:10:95:cf:4c:4e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Feb 28 14:00:40 2026 GMT Not After : May 29 13:00:40 2026 GMT Subject: CN=2cb1a956-add9-488f-8e90-f5a82f0c51a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:72:ea:ba:0c:91:d7:7b:e1:2b:f2:3a:e6:d7: 4e:04:52:d8:82:da:57:0f:d8:1c:9f:0d:8e:d9:a1: 13:c6:df:46:c1:41:7d:be:ab:32:96:37:6e:1f:46: 4d:d1:ce:ea:22:9c:96:f2:30:0e:f1:82:cd:e4:0c: f6:d6:70:a7:ab:d2:06:e5:69:81:0a:62:a3:7c:34: cd:2f:5e:c8:57:8a:5a:99:63:19:9c:f6:49:90:88: 3e:39:0f:d4:2c:c3:64:dc:62:fc:59:f3:47:04:08: 0e:db:45:62:01:f5:be:f8:d9:e7:5f:6c:cf:58:82: ee:61:d2:12:65:14:0c:37:42:5a:c1:91:ce:8b:4f: 00:20:33:1c:fe:ab:af:36:9b:ba:3b:e3:80:8b:19: fe:d9:29:9b:d5:ff:af:04:bc:11:3e:86:3d:bb:00: 32:65:41:82:df:79:c3:55:ad:4e:ba:47:8b:1e:6d: 07:e6:bf:b7:3d:c1:ae:8e:ea:99:13:63:5b:e0:1b: 6d:9c:84:f3:40:d0:e9:16:9b:51:fa:50:7b:46:72: 9f:ef:23:17:2e:b7:93:7f:e0:b9:7d:e5:b3:23:4f: 07:e1:f6:da:ea:16:c0:c5:9f:d8:bf:f4:29:b7:43: 5f:70:9c:46:80:97:bf:b2:f4:da:f2:a9:33:1d:45: da:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:07:6F:CC:49:42:39:6A:58:FA:5D:7F:80:2A:13:30:A2:A7:EF:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/0d35164e-0555-3d38-a332-e25e49271a03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.46.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:b3:66:5f:07:a4:7a:31:93:3d:6b:39:c1:39:ac:be:0c:44: 9e:24:a3:72:87:86:b3:7e:c0:44:31:13:47:34:bf:04:8d:a4: 57:3f:5f:ef:73:f2:54:77:14:3d:45:a9:87:71:6e:ae:94:44: bd:36:1f:ae:c3:39:05:ea:03:fd:bb:e9:60:b6:a9:51:57:0e: 3e:73:b1:6b:5b:94:6c:c2:18:16:6c:32:b9:e3:63:b6:d1:58: 99:bf:ff:3a:27:d4:e0:c0:e0:58:c2:50:f1:97:69:ee:bc:95: cc:53:d2:5e:f1:22:fa:35:c1:f5:57:7a:7d:f8:f7:d9:32:8b: 0f:7c:04:fa:d3:4a:d3:92:c1:db:80:ac:26:96:8f:04:5e:8a: 20:96:0b:0a:55:ef:6f:d4:a1:d5:57:a0:fc:5a:20:a2:39:0c: c5:66:6d:c6:29:51:69:12:8f:c2:40:a4:eb:3d:9f:b1:3b:a2: a9:a1:4a:16:37:2e:b2:8c:90:c2:e1:a5:62:2e:0d:8f:62:4f: b5:e0:4d:9a:a2:20:7a:54:27:1b:36:e0:f4:bd:25:dc:c3:88: 5c:34:23:50:b2:64:62:34:a8:35:a0:27:d2:40:b3:68:0c:e7: 28:22:38:37:15:d4:39:fc:97:bf:74:06:eb:68:2d:61:a9:c9: dd:e2:37:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0DfVPZlcMQlc9MToAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDIyODE0MDA0MFoXDTI2MDUyOTEzMDA0MFowLzEtMCsGA1UEAxMk MmNiMWE5NTYtYWRkOS00ODhmLThlOTAtZjVhODJmMGM1MWEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3LqugyR13vhK/I65tdOBFLYgtpXD9gcnw2O 2aETxt9GwUF9vqsyljduH0ZN0c7qIpyW8jAO8YLN5Az21nCnq9IG5WmBCmKjfDTN L17IV4pamWMZnPZJkIg+OQ/ULMNk3GL8WfNHBAgO20ViAfW++NnnX2zPWILuYdIS ZRQMN0JawZHOi08AIDMc/quvNpu6O+OAixn+2Smb1f+vBLwRPoY9uwAyZUGC33nD Va1OukeLHm0H5r+3PcGujuqZE2Nb4BttnITzQNDpFptR+lB7RnKf7yMXLreTf+C5 feWzI08H4fba6hbAxZ/Yv/Qpt0NfcJxGgJe/svTa8qkzHUXalwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM0Hb8xJQjlqWPpdf4AqEzCip+9aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMGQzNTE2NGUtMDU1NS0z ZDM4LWEzMzItZTI1ZTQ5MjcxYTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiC6AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEqzZl8HpHoxkz1rOcE5rL4MRJ4ko3KHhrN+wEQxE0c0vwSNpFc/X+9z 8lR3FD1FqYdxbq6URL02H67DOQXqA/276WC2qVFXDj5zsWtblGzCGBZsMrnjY7bR WJm//zon1ODA4FjCUPGXae68lcxT0l7xIvo1wfVXen3499kyiw98BPrTStOSwduA rCaWjwReiiCWCwpV72/UodVXoPxaIKI5DMVmbcYpUWkSj8JApOs9n7E7oqmhShY3 LrKMkMLhpWIuDY9iT7XgTZqiIHpUJxs24PS9JdzDiFw0I1CyZGI0qDWgJ9JAs2gM 5ygiODcV1Dn8l790ButoLWGpyd3iNws= -----END CERTIFICATE-----Generated at Mon Mar 2 16:28:34 2026 by rpki-client