$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/1ba059d3-8cbf-3efe-8b2f-89c194863927.roa File: 1ba059d3-8cbf-3efe-8b2f-89c194863927.roa (raw, json) Hash identifier: 0Q6WnRPQCtGT07/E/9raVVi+2SpjKCOF3q9MsIkElOY= Subject key identifier: BE:69:E2:D6:50:3B:B6:20:AE:79:54:7D:83:8C:2F:B1:C8:D7:8C:55 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584D037CF7845BC10E133ACA0380 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/1ba059d3-8cbf-3efe-8b2f-89c194863927.roa Signing time: Sat 28 Feb 2026 14:00:40 +0000 ROA not before: Sat 28 Feb 2026 14:00:40 +0000 ROA not after: Fri 29 May 2026 13:00:40 +0000 asID: 16591 IP address blocks: 136.50.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:03:7c:f7:84:5b:c1:0e:13:3a:ca:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Feb 28 14:00:40 2026 GMT Not After : May 29 13:00:40 2026 GMT Subject: CN=aac0ac04-849c-4e43-9b2c-d9a3a2b9d17a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:a4:5f:9e:56:a9:39:4d:91:4e:29:77:cd:9a: 20:22:10:cb:7f:0e:c9:8d:ff:23:4a:8c:4c:b8:48: d4:fd:d5:e6:6c:21:a5:18:76:1f:21:5d:ac:0b:73: d3:b6:98:02:ad:ff:12:d0:ef:35:25:9e:24:8a:db: 1f:73:0e:71:24:e5:52:17:ea:ab:b0:52:00:42:0d: 41:22:d8:2d:99:ed:a6:98:c5:a6:0e:ef:78:e8:21: 82:c5:1d:8f:a0:29:69:65:b5:d2:04:40:f7:2e:4b: e0:74:e9:aa:7d:20:c5:08:ec:1c:a8:17:8e:01:8f: 35:9e:c0:d3:a1:22:96:db:8a:a7:12:99:08:e9:e4: 04:d9:4c:16:c0:42:d9:fc:b1:88:51:61:f1:b1:cf: 43:af:8d:ef:33:1f:09:af:7a:ee:ca:c9:51:36:ff: ef:67:59:47:d1:20:6e:1f:26:71:be:71:aa:a1:46: 60:62:0d:68:ce:89:af:9f:b2:d4:3b:d4:06:f0:ca: 3e:93:86:ff:97:7a:5a:20:54:f8:f5:4a:54:9d:a0: 17:c3:14:6f:39:63:2a:00:81:d6:33:b2:ed:04:6a: 72:4c:7b:a9:9c:6a:ec:46:eb:f0:6c:87:61:37:5f: 56:9c:50:ba:b9:20:34:7e:ae:54:bb:33:2d:24:fc: a9:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:69:E2:D6:50:3B:B6:20:AE:79:54:7D:83:8C:2F:B1:C8:D7:8C:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/1ba059d3-8cbf-3efe-8b2f-89c194863927.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.50.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:0e:f9:9c:5e:5a:e8:da:55:9f:95:88:e1:08:22:f0:f5:8e: 76:75:24:67:1a:a2:b4:a1:db:98:93:3b:4c:61:df:b4:55:b2: 50:17:6e:f9:33:64:88:1e:9b:0a:44:ac:a6:a8:98:c4:9f:71: d1:8a:25:90:91:ee:b3:71:23:20:36:e1:89:f0:0d:04:9c:9e: 0e:e8:dc:86:62:77:8b:cc:7f:27:fe:01:14:52:3f:20:2c:d5: b3:43:f3:0c:55:bf:be:be:27:15:0f:d8:d4:30:a0:c4:91:a1: 92:2f:45:ed:29:04:39:2d:e6:a7:c5:74:37:91:3e:49:53:51: 36:aa:4c:1d:1d:c9:9e:8e:e3:2d:24:4d:54:60:cf:4d:24:01: 24:41:fe:b8:7e:73:78:d8:5c:3d:81:3b:61:4c:1c:aa:1c:b8: e6:6e:5f:d3:9f:92:87:7f:ae:40:f7:a2:e7:90:fe:c3:66:a9: 68:14:dc:63:1d:cd:9a:f9:6e:da:5e:d2:86:cf:f2:ae:45:d1: 19:cb:13:cf:41:f2:e2:94:69:a1:ad:b1:55:d4:a7:03:79:d9: 8c:a4:b3:be:d7:39:3b:d4:e7:0d:8c:d1:56:e6:34:8a:f4:3e: ed:d0:fc:9d:47:d1:3c:9c:a5:78:51:2a:c0:03:cf:a4:9d:e1: ea:a2:3d:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0DfPeEW8EOEzrKA4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDIyODE0MDA0MFoXDTI2MDUyOTEzMDA0MFowLzEtMCsGA1UEAxMk YWFjMGFjMDQtODQ5Yy00ZTQzLTliMmMtZDlhM2EyYjlkMTdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqRfnlapOU2RTil3zZogIhDLfw7Jjf8jSoxM uEjU/dXmbCGlGHYfIV2sC3PTtpgCrf8S0O81JZ4kitsfcw5xJOVSF+qrsFIAQg1B Itgtme2mmMWmDu946CGCxR2PoClpZbXSBED3LkvgdOmqfSDFCOwcqBeOAY81nsDT oSKW24qnEpkI6eQE2UwWwELZ/LGIUWHxsc9Dr43vMx8Jr3ruyslRNv/vZ1lH0SBu HyZxvnGqoUZgYg1ozomvn7LUO9QG8Mo+k4b/l3paIFT49UpUnaAXwxRvOWMqAIHW M7LtBGpyTHupnGrsRuvwbIdhN19WnFC6uSA0fq5UuzMtJPypNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL5p4tZQO7YgrnlUfYOML7HI14xVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMWJhMDU5ZDMtOGNiZi0z ZWZlLThiMmYtODljMTk0ODYzOTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDKwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHUO+ZxeWujaVZ+ViOEIIvD1jnZ1JGcaorSh25iTO0xh37RVslAXbvkz ZIgemwpErKaomMSfcdGKJZCR7rNxIyA24YnwDQScng7o3IZid4vMfyf+ARRSPyAs 1bND8wxVv76+JxUP2NQwoMSRoZIvRe0pBDkt5qfFdDeRPklTUTaqTB0dyZ6O4y0k TVRgz00kASRB/rh+c3jYXD2BO2FMHKocuOZuX9Ofkod/rkD3oueQ/sNmqWgU3GMd zZr5btpe0obP8q5F0RnLE89B8uKUaaGtsVXUpwN52Yyks77XOTvU5w2M0VbmNIr0 Pu3Q/J1H0TycpXhRKsADz6Sd4eqiPWo= -----END CERTIFICATE-----Generated at Mon Mar 2 09:44:12 2026 by rpki-client