$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/1c3859cd-a379-3805-b0c7-cf92685a3438.roa File: 1c3859cd-a379-3805-b0c7-cf92685a3438.roa (raw, json) Hash identifier: 4UettEEErv3SxHs6Q+XXrvKLsjgqRaY1Cs8pTTUeUKk= Subject key identifier: 99:ED:2C:DC:BB:32:06:54:AD:A4:6E:E6:5E:13:93:0E:83:2C:C2:36 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584D037D4E6ED8D760FE4DE48166 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/1c3859cd-a379-3805-b0c7-cf92685a3438.roa Signing time: Sat 28 Feb 2026 14:00:40 +0000 ROA not before: Sat 28 Feb 2026 14:00:40 +0000 ROA not after: Fri 29 May 2026 13:00:40 +0000 asID: 16591 IP address blocks: 136.52.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:03:7d:4e:6e:d8:d7:60:fe:4d:e4:81:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Feb 28 14:00:40 2026 GMT Not After : May 29 13:00:40 2026 GMT Subject: CN=0d938ddd-d63b-4343-95e6-9bee6cbd5aab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ff:0a:dc:51:40:66:6c:c9:63:00:a1:7d:5c: 73:30:82:77:56:b3:6e:e4:75:96:3b:64:aa:2a:ad: 2a:c6:a5:18:ee:f7:82:51:24:3d:c2:14:fe:f3:03: 71:38:ee:e6:89:db:cd:dc:e8:5d:58:36:bd:ce:48: 05:e0:4c:76:a8:c9:1f:d3:b6:86:a8:a9:16:b1:c7: 9b:b7:33:f4:62:bd:01:8f:bc:95:26:47:f0:60:e3: 99:c6:6f:dd:17:52:4f:0c:a6:e7:20:a2:09:ef:c3: d0:81:89:ff:0e:d2:34:fe:a4:91:1e:01:66:dc:71: d7:c0:38:5c:19:5f:8b:a5:8d:f7:78:19:5d:2d:58: f3:26:b5:f4:b9:48:16:84:6d:b0:3e:26:0d:2c:56: 05:d0:f1:d5:d7:61:e8:20:78:32:41:77:7c:6c:ef: 94:25:06:40:0a:fc:cb:b6:62:40:fc:70:7d:e9:60: 3b:59:ab:42:40:2f:ee:8a:f6:cb:23:e9:61:02:ec: 26:3a:10:5f:67:e1:fd:cf:ff:eb:e1:26:e6:82:ba: d9:fc:69:d0:4c:e5:b0:36:ea:2a:aa:c2:35:2d:63: f6:9e:19:94:42:f9:17:a1:4b:16:83:d8:bd:bf:11: 2c:43:dc:f8:b6:c5:14:9c:e0:44:b5:a8:f7:7d:68: 11:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:ED:2C:DC:BB:32:06:54:AD:A4:6E:E6:5E:13:93:0E:83:2C:C2:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/1c3859cd-a379-3805-b0c7-cf92685a3438.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.52.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:94:bd:b1:9e:95:12:92:71:7f:2a:9a:b9:3e:b1:e9:19:c6: 77:5d:4c:56:33:67:c5:12:23:22:54:e8:d8:2c:ff:86:eb:85: c9:c8:75:3d:6f:7c:72:e4:85:b4:aa:bf:6a:42:91:d3:d5:fe: af:0b:df:16:cd:f2:61:fe:9b:ed:85:ee:27:13:ea:42:9b:81: 5d:38:e7:cc:76:fd:1f:62:1f:08:ba:61:46:da:ea:ff:72:c2: ce:1a:4d:c2:f6:8b:06:56:88:b8:d6:1b:2c:c8:9d:9a:2e:3e: 36:31:6b:15:b5:13:73:37:e4:87:65:f5:5d:b8:41:21:b5:d1: 74:fb:75:00:60:11:e1:2d:ce:72:5f:c2:1a:cc:4b:0b:9b:9d: 6c:65:bf:f3:26:19:b8:d2:66:c4:83:0e:35:ca:b9:9e:3a:96: 89:99:83:94:7d:6f:e2:33:ff:91:7d:03:b4:48:64:21:26:e8: e1:a9:79:f4:20:98:fe:c2:48:ce:c1:04:b7:f1:36:74:7d:8e: 00:99:65:45:92:74:0f:a4:18:6a:fc:c2:ec:27:fb:c5:6e:20: 0e:0e:ce:81:57:99:ca:24:16:74:23:20:ba:fa:63:13:f0:84: f9:98:65:6a:5f:5d:e6:53:63:c4:13:30:1a:4a:0d:06:f5:51: ce:d0:0a:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0DfU5u2Ndg/k3kgWYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDIyODE0MDA0MFoXDTI2MDUyOTEzMDA0MFowLzEtMCsGA1UEAxMk MGQ5MzhkZGQtZDYzYi00MzQzLTk1ZTYtOWJlZTZjYmQ1YWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApf8K3FFAZmzJYwChfVxzMIJ3VrNu5HWWO2Sq Kq0qxqUY7veCUSQ9whT+8wNxOO7midvN3OhdWDa9zkgF4Ex2qMkf07aGqKkWsceb tzP0Yr0Bj7yVJkfwYOOZxm/dF1JPDKbnIKIJ78PQgYn/DtI0/qSRHgFm3HHXwDhc GV+LpY33eBldLVjzJrX0uUgWhG2wPiYNLFYF0PHV12HoIHgyQXd8bO+UJQZACvzL tmJA/HB96WA7WatCQC/uivbLI+lhAuwmOhBfZ+H9z//r4SbmgrrZ/GnQTOWwNuoq qsI1LWP2nhmUQvkXoUsWg9i9vxEsQ9z4tsUUnOBEtaj3fWgRfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJntLNy7MgZUraRu5l4Tkw6DLMI2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMWMzODU5Y2QtYTM3OS0z ODA1LWIwYzctY2Y5MjY4NWEzNDM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDQgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACKUvbGelRKScX8qmrk+sekZxnddTFYzZ8USIyJU6Ngs/4brhcnIdT1v fHLkhbSqv2pCkdPV/q8L3xbN8mH+m+2F7icT6kKbgV0458x2/R9iHwi6YUba6v9y ws4aTcL2iwZWiLjWGyzInZouPjYxaxW1E3M35Idl9V24QSG10XT7dQBgEeEtznJf whrMSwubnWxlv/MmGbjSZsSDDjXKuZ46lomZg5R9b+Iz/5F9A7RIZCEm6OGpefQg mP7CSM7BBLfxNnR9jgCZZUWSdA+kGGr8wuwn+8VuIA4OzoFXmcokFnQjILr6YxPw hPmYZWpfXeZTY8QTMBpKDQb1Uc7QCmM= -----END CERTIFICATE-----Generated at Mon Mar 2 09:46:08 2026 by rpki-client