$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/128a74c3-e6aa-3d06-ac4a-655a48640308.roa File: 128a74c3-e6aa-3d06-ac4a-655a48640308.roa (raw, json) Hash identifier: Y+G+NptqQtzOEVGd4vziOoMI4/DXkuCZG1nQpt4uBOQ= Subject key identifier: B9:1F:B7:17:0E:EB:A8:1A:42:9A:94:6A:24:F3:EE:3B:7F:00:D6:F6 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584D037D0E1EB70C399CE1F8F380 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/128a74c3-e6aa-3d06-ac4a-655a48640308.roa Signing time: Sat 28 Feb 2026 14:00:40 +0000 ROA not before: Sat 28 Feb 2026 14:00:40 +0000 ROA not after: Fri 29 May 2026 13:00:40 +0000 asID: 16591 IP address blocks: 136.33.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:03:7d:0e:1e:b7:0c:39:9c:e1:f8:f3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Feb 28 14:00:40 2026 GMT Not After : May 29 13:00:40 2026 GMT Subject: CN=80f7fc21-6e36-435d-a675-b64246693caf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:2d:d8:a5:31:04:90:ef:41:2d:b4:03:46:91: ad:67:31:fe:73:61:54:0a:bd:b0:94:e3:7e:f0:91: a5:a7:fa:29:51:e0:7f:ca:71:1b:20:b1:57:c5:a4: f1:11:59:21:cd:ec:34:29:2e:17:53:81:67:73:88: ab:f9:3f:09:b6:85:1f:aa:83:03:9f:3f:47:17:7a: a4:3d:30:f5:a7:19:00:4c:45:7e:47:f3:83:8b:72: 49:9b:78:3e:87:ea:00:3d:c0:76:97:21:8a:99:f3: fb:54:97:78:b2:21:5f:a6:d1:27:1c:3b:e6:b1:e8: 32:35:4b:0f:46:68:d3:a8:ad:15:42:25:15:b3:8c: 7a:db:14:e0:f8:3e:e3:80:aa:35:9a:93:aa:5f:c4: f4:05:7e:ad:3a:3c:82:2c:fd:9b:d2:53:53:7b:65: c8:e9:6e:97:88:03:d9:08:a4:f1:15:c9:54:64:7a: 4d:5f:6d:21:fb:ff:05:b8:57:9b:81:41:65:6c:50: 43:0c:d4:12:4d:7c:8d:1c:71:c9:d7:a3:b1:a0:76: 0e:d1:9d:d2:25:c3:46:6c:bd:56:32:d8:f3:0e:c1: a5:6c:ed:26:07:64:9c:0b:dd:f7:4b:67:38:69:da: 27:20:27:d7:53:6f:27:20:a7:a8:bd:53:64:e9:cd: ea:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:1F:B7:17:0E:EB:A8:1A:42:9A:94:6A:24:F3:EE:3B:7F:00:D6:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/128a74c3-e6aa-3d06-ac4a-655a48640308.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.33.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:51:f1:1f:eb:5b:01:b2:c4:cf:5e:6a:41:50:0f:c3:29:f5: b9:ca:48:16:d1:76:ab:a5:02:56:8a:0b:29:a0:56:35:d6:18: a2:cc:fa:59:60:14:64:d8:a4:19:d9:2c:b6:2d:dc:79:15:8e: 6b:d3:e8:7f:0c:14:3d:44:ee:9e:88:d7:d8:71:70:45:15:e5: 66:15:e6:1e:bd:e6:cd:70:47:00:55:26:a3:9a:19:c7:86:80: 40:f9:11:4a:9a:6b:a5:c8:5e:79:e3:50:d7:c7:83:5a:04:67: 8a:3e:0a:ee:58:0d:58:3c:9c:70:0d:8e:05:1d:3e:96:12:d6: c0:14:81:e8:84:09:35:f7:2f:34:a0:84:92:7c:a7:8c:96:b8: c1:56:e6:44:74:cb:ce:16:b8:5d:02:76:e2:66:53:fa:7d:46: 4b:b7:87:89:38:7f:90:09:4b:0e:bd:a2:b2:04:c2:ca:45:8e: 1f:03:96:9c:e5:f7:dd:3e:15:52:4c:9b:9b:be:6e:20:ff:c4: a4:ac:da:14:2d:3c:56:fe:ff:b2:1a:70:04:56:8b:0b:ee:c2: 7a:96:ba:ef:d6:e6:90:cc:52:d1:55:5e:32:b1:35:84:4d:96: 22:49:87:e4:e6:9c:13:69:98:79:d4:8f:bc:6a:7e:a6:b6:ab: 9b:24:17:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0DfQ4etww5nOH484AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDIyODE0MDA0MFoXDTI2MDUyOTEzMDA0MFowLzEtMCsGA1UEAxMk ODBmN2ZjMjEtNmUzNi00MzVkLWE2NzUtYjY0MjQ2NjkzY2FmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiC3YpTEEkO9BLbQDRpGtZzH+c2FUCr2wlON+ 8JGlp/opUeB/ynEbILFXxaTxEVkhzew0KS4XU4Fnc4ir+T8JtoUfqoMDnz9HF3qk PTD1pxkATEV+R/ODi3JJm3g+h+oAPcB2lyGKmfP7VJd4siFfptEnHDvmsegyNUsP RmjTqK0VQiUVs4x62xTg+D7jgKo1mpOqX8T0BX6tOjyCLP2b0lNTe2XI6W6XiAPZ CKTxFclUZHpNX20h+/8FuFebgUFlbFBDDNQSTXyNHHHJ16OxoHYO0Z3SJcNGbL1W MtjzDsGlbO0mB2ScC933S2c4adonICfXU28nIKeovVNk6c3qcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLkftxcO66gaQpqUaiTz7jt/ANb2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMTI4YTc0YzMtZTZhYS0z ZDA2LWFjNGEtNjU1YTQ4NjQwMzA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCFgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHNR8R/rWwGyxM9eakFQD8Mp9bnKSBbRdqulAlaKCymgVjXWGKLM+llg FGTYpBnZLLYt3HkVjmvT6H8MFD1E7p6I19hxcEUV5WYV5h695s1wRwBVJqOaGceG gED5EUqaa6XIXnnjUNfHg1oEZ4o+Cu5YDVg8nHANjgUdPpYS1sAUgeiECTX3LzSg hJJ8p4yWuMFW5kR0y84WuF0CduJmU/p9Rku3h4k4f5AJSw69orIEwspFjh8Dlpzl 990+FVJMm5u+biD/xKSs2hQtPFb+/7IacARWiwvuwnqWuu/W5pDMUtFVXjKxNYRN liJJh+TmnBNpmHnUj7xqfqa2q5skF0E= -----END CERTIFICATE-----Generated at Mon Mar 2 16:28:42 2026 by rpki-client