$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/19e0b13d-972d-345a-ab73-5c57313f5b7c.roa File: 19e0b13d-972d-345a-ab73-5c57313f5b7c.roa (raw, json) Hash identifier: HV6ojObWIi5GnU/KTRTlKtfwRD5jOJgxUSSqCvD3fs4= Subject key identifier: 36:6E:04:90:D7:4A:46:A9:3C:51:07:38:C8:78:29:62:6F:6B:F4:C5 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584D037D000B5D9A61301E272100 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/19e0b13d-972d-345a-ab73-5c57313f5b7c.roa Signing time: Sat 28 Feb 2026 14:00:40 +0000 ROA not before: Sat 28 Feb 2026 14:00:40 +0000 ROA not after: Fri 29 May 2026 13:00:40 +0000 asID: 16591 IP address blocks: 136.33.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:03:7d:00:0b:5d:9a:61:30:1e:27:21:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Feb 28 14:00:40 2026 GMT Not After : May 29 13:00:40 2026 GMT Subject: CN=8468853f-abc8-4051-af80-35fd11a5de47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:21:49:23:c1:5f:9f:1e:6b:fa:d0:0d:9d:13: d9:ab:6f:7b:60:46:87:d6:4b:25:0f:d0:2d:c0:2f: 40:f3:9e:f3:db:70:bc:4e:32:ea:43:50:2d:20:3f: 9f:b0:fc:e9:03:1d:69:b0:48:5d:3c:48:23:97:95: bc:99:25:93:23:78:3d:4a:2e:7f:d6:9a:62:35:63: 40:e5:ce:65:21:a1:42:74:e9:51:52:79:b1:0f:46: 87:32:81:4f:65:6f:30:d2:cb:f6:a3:fb:99:3f:9b: 13:2d:2a:84:3d:5f:94:de:ec:e7:96:b3:66:75:d3: 9a:32:4c:f8:be:50:28:28:29:dd:df:a6:94:cf:5b: 8e:44:8c:6d:1b:d9:00:12:00:3a:69:1e:57:e6:c4: e6:2f:ac:06:15:21:95:ee:1b:8e:43:8e:0c:15:3f: 5c:11:c4:f1:0f:2a:a2:ad:24:60:0f:5f:8c:8e:62: 18:79:70:20:b2:a4:5a:26:6e:45:61:64:56:4d:24: ae:f9:05:90:b1:45:a8:76:d6:13:1f:53:27:4d:29: 89:19:0d:71:6b:56:ad:21:f5:ae:09:fe:41:3b:26: 73:85:dc:ae:06:99:28:08:59:9d:48:f8:48:91:62: 3c:3d:81:3e:ff:40:e5:da:e3:4d:13:bc:8a:ab:c6: fc:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:6E:04:90:D7:4A:46:A9:3C:51:07:38:C8:78:29:62:6F:6B:F4:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/19e0b13d-972d-345a-ab73-5c57313f5b7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.33.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:1f:b9:6e:56:d4:4e:8d:02:88:16:d5:33:a9:7d:b3:47:d1: 07:20:b3:78:6c:a2:6c:74:c9:9f:46:44:5c:a9:4f:5a:77:aa: b4:b0:90:2b:14:96:cc:e5:49:c7:85:11:60:fb:28:f8:d8:54: 2b:5f:da:43:56:d1:95:67:df:3c:6e:1b:f2:bb:0c:a2:89:cd: b1:a4:40:34:40:31:25:c2:9d:49:cc:ab:6a:dd:a2:60:3f:4b: ae:5e:e4:59:a0:59:f5:e6:f7:3b:6d:be:ce:e1:64:40:36:ec: 6c:52:69:be:60:e0:5e:54:a0:4e:6c:7f:dc:cc:36:18:4b:dd: ba:51:a6:a3:8b:47:25:2c:7a:b6:26:de:82:1e:e0:02:51:fe: ca:c4:c0:cc:51:42:0a:34:99:3f:68:be:eb:18:c5:f3:db:55: b6:dd:40:03:ee:40:b5:ad:13:58:23:5a:50:52:c6:ba:15:4e: 97:2e:3d:14:5c:a1:59:dc:cb:4b:6f:31:48:9c:c3:c0:3b:99: 17:fc:cf:44:a8:70:b8:53:1f:a7:34:8c:26:e3:56:02:63:da: 1c:b6:2c:75:dc:3c:3a:bb:8f:f6:2c:42:eb:1b:6a:96:85:ef: cb:04:34:2d:77:48:b8:7d:79:44:01:84:f6:c8:97:3f:53:2e: 74:13:b9:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0DfQALXZphMB4nIQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDIyODE0MDA0MFoXDTI2MDUyOTEzMDA0MFowLzEtMCsGA1UEAxMk ODQ2ODg1M2YtYWJjOC00MDUxLWFmODAtMzVmZDExYTVkZTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliFJI8Ffnx5r+tANnRPZq297YEaH1kslD9At wC9A857z23C8TjLqQ1AtID+fsPzpAx1psEhdPEgjl5W8mSWTI3g9Si5/1ppiNWNA 5c5lIaFCdOlRUnmxD0aHMoFPZW8w0sv2o/uZP5sTLSqEPV+U3uznlrNmddOaMkz4 vlAoKCnd36aUz1uORIxtG9kAEgA6aR5X5sTmL6wGFSGV7huOQ44MFT9cEcTxDyqi rSRgD1+MjmIYeXAgsqRaJm5FYWRWTSSu+QWQsUWodtYTH1MnTSmJGQ1xa1atIfWu Cf5BOyZzhdyuBpkoCFmdSPhIkWI8PYE+/0Dl2uNNE7yKq8b85QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDZuBJDXSkapPFEHOMh4KWJva/TFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMTllMGIxM2QtOTcyZC0z NDVhLWFiNzMtNWM1NzMxM2Y1YjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCFwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHAfuW5W1E6NAogW1TOpfbNH0Qcgs3hsomx0yZ9GRFypT1p3qrSwkCsU lszlSceFEWD7KPjYVCtf2kNW0ZVn3zxuG/K7DKKJzbGkQDRAMSXCnUnMq2rdomA/ S65e5FmgWfXm9zttvs7hZEA27GxSab5g4F5UoE5sf9zMNhhL3bpRpqOLRyUserYm 3oIe4AJR/srEwMxRQgo0mT9ovusYxfPbVbbdQAPuQLWtE1gjWlBSxroVTpcuPRRc oVncy0tvMUicw8A7mRf8z0SocLhTH6c0jCbjVgJj2hy2LHXcPDq7j/YsQusbapaF 78sENC13SLh9eUQBhPbIlz9TLnQTuUA= -----END CERTIFICATE-----Generated at Mon Mar 2 09:29:57 2026 by rpki-client