$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/1a08e8cd-4f6e-3190-8e11-17e4d98e9a8e.roa File: 1a08e8cd-4f6e-3190-8e11-17e4d98e9a8e.roa (raw, json) Hash identifier: S5jo5/Vr4X/rrc/MMzNnLgp2oXYzc/1TBICltt3RuXo= Subject key identifier: 6E:83:57:95:CD:7C:2D:83:AA:6B:71:6F:78:08:9E:C6:AE:A5:ED:A4 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584D037D48CDF4205D3DC43A1F40 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/1a08e8cd-4f6e-3190-8e11-17e4d98e9a8e.roa Signing time: Sat 28 Feb 2026 14:00:40 +0000 ROA not before: Sat 28 Feb 2026 14:00:40 +0000 ROA not after: Fri 29 May 2026 13:00:40 +0000 asID: 16591 IP address blocks: 136.37.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:03:7d:48:cd:f4:20:5d:3d:c4:3a:1f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Feb 28 14:00:40 2026 GMT Not After : May 29 13:00:40 2026 GMT Subject: CN=8a89d260-b8cf-4794-8144-b13113cc7465 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:9e:0f:49:1a:36:81:de:c9:d8:fb:a8:9f:8b: f3:84:e3:ca:90:18:dc:71:b0:c8:d3:64:2d:22:ee: e3:fa:b8:c6:7a:c3:aa:74:5a:b0:33:93:20:a5:43: 9e:b2:ea:cf:6b:58:c6:d8:87:f4:b5:ed:4d:a1:03: f6:0d:40:34:bf:14:b1:31:81:eb:3c:96:7e:46:ce: 50:9a:0d:e9:9e:d3:c1:28:89:f6:d8:13:54:2c:5a: f8:bf:68:1c:af:5f:a1:9a:55:87:62:ee:86:82:47: 99:e5:30:90:c0:7e:63:6a:16:44:b9:a9:07:33:55: d9:89:6b:93:67:ec:d5:2d:34:41:97:06:b9:0d:c2: 9a:fd:ac:fe:f8:7d:9e:c5:1d:94:cd:3f:8b:06:d8: 93:5a:ed:a3:19:05:06:e7:c9:62:23:b9:ef:d5:d8: b2:e2:55:0f:c4:a6:a9:02:ba:44:00:36:f8:94:8b: 87:fc:ce:e7:9f:cd:93:57:21:30:3a:91:e6:09:fb: 71:2b:0d:e1:dc:23:43:5e:1e:70:b4:43:ee:52:05: fd:00:f8:41:3a:dd:14:71:b1:ae:5f:57:1d:6e:7c: 53:df:cf:dc:35:5d:d0:af:e9:a6:10:6f:59:1f:6b: f9:ca:df:23:10:b6:70:2b:75:1c:bd:05:81:cc:1c: 65:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:83:57:95:CD:7C:2D:83:AA:6B:71:6F:78:08:9E:C6:AE:A5:ED:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/1a08e8cd-4f6e-3190-8e11-17e4d98e9a8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.37.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:d0:21:c3:03:64:94:c0:e5:c4:4c:fd:37:49:2f:34:f8:e1: fd:07:32:8a:b9:91:83:e6:c0:40:75:07:0d:76:3a:06:49:07: 06:f5:43:f3:99:bd:0b:f3:a4:45:fd:68:9f:ec:05:c5:c9:42: db:be:95:b4:64:cb:d0:88:f9:46:1d:6f:81:79:3d:c7:c4:54: 98:c8:fc:30:5e:b0:ec:d4:fa:ad:18:09:e2:52:72:6d:09:87: 55:8b:af:f9:65:7f:d1:16:79:05:8f:37:a5:d0:f0:74:7e:a4: 10:2b:fe:8c:9b:79:4b:19:3f:60:c8:3d:27:75:64:4b:85:e0: 66:d2:63:db:6a:32:e8:63:d8:f9:6b:46:19:40:1c:70:5f:d6: 83:8c:3d:a5:ee:a6:64:3a:e2:14:47:03:8e:52:b5:76:fd:3d: 51:49:86:6d:c2:57:f0:91:4d:7d:33:ce:86:37:c6:93:73:3c: 3d:3f:f2:3d:4c:2e:ad:63:2a:d8:46:ba:be:3a:4a:79:2c:51: 03:a1:f7:e0:e5:f9:7e:68:7a:77:5d:40:8a:b1:0b:b5:44:5d: db:0b:28:7c:47:a5:14:2f:d2:93:03:9b:c5:5f:c8:f7:5f:f2: 18:df:38:a3:da:51:50:50:60:c2:f5:87:29:fa:62:9f:4e:8f: b4:33:07:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0DfUjN9CBdPcQ6H0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDIyODE0MDA0MFoXDTI2MDUyOTEzMDA0MFowLzEtMCsGA1UEAxMk OGE4OWQyNjAtYjhjZi00Nzk0LTgxNDQtYjEzMTEzY2M3NDY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw54PSRo2gd7J2Puon4vzhOPKkBjccbDI02Qt Iu7j+rjGesOqdFqwM5MgpUOesurPa1jG2If0te1NoQP2DUA0vxSxMYHrPJZ+Rs5Q mg3pntPBKIn22BNULFr4v2gcr1+hmlWHYu6GgkeZ5TCQwH5jahZEuakHM1XZiWuT Z+zVLTRBlwa5DcKa/az++H2exR2UzT+LBtiTWu2jGQUG58liI7nv1diy4lUPxKap ArpEADb4lIuH/M7nn82TVyEwOpHmCftxKw3h3CNDXh5wtEPuUgX9APhBOt0UcbGu X1cdbnxT38/cNV3Qr+mmEG9ZH2v5yt8jELZwK3UcvQWBzBxlgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG6DV5XNfC2Dqmtxb3gInsaupe2kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMWEwOGU4Y2QtNGY2ZS0z MTkwLThlMTEtMTdlNGQ5OGU5YThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCXQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAILQIcMDZJTA5cRM/TdJLzT44f0HMoq5kYPmwEB1Bw12OgZJBwb1Q/OZ vQvzpEX9aJ/sBcXJQtu+lbRky9CI+UYdb4F5PcfEVJjI/DBesOzU+q0YCeJScm0J h1WLr/llf9EWeQWPN6XQ8HR+pBAr/oybeUsZP2DIPSd1ZEuF4GbSY9tqMuhj2Plr RhlAHHBf1oOMPaXupmQ64hRHA45StXb9PVFJhm3CV/CRTX0zzoY3xpNzPD0/8j1M Lq1jKthGur46SnksUQOh9+Dl+X5oenddQIqxC7VEXdsLKHxHpRQv0pMDm8VfyPdf 8hjfOKPaUVBQYML1hyn6Yp9Oj7QzBzQ= -----END CERTIFICATE-----Generated at Mon Mar 2 08:00:59 2026 by rpki-client