$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/1ff05e1f-0778-375d-b536-2aac7ca85ac1.roa File: 1ff05e1f-0778-375d-b536-2aac7ca85ac1.roa (raw, json) Hash identifier: IBG62cotelj9jti6jjbitIT3WOUwJ1zqqs6wIm6K2Gc= Subject key identifier: FE:99:7B:1A:33:B5:68:33:F1:E9:06:BA:CF:7F:65:05:89:37:DF:0A Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584D037D1004719EE4A71C2B1500 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/1ff05e1f-0778-375d-b536-2aac7ca85ac1.roa Signing time: Sat 28 Feb 2026 14:00:40 +0000 ROA not before: Sat 28 Feb 2026 14:00:40 +0000 ROA not after: Fri 29 May 2026 13:00:40 +0000 asID: 16591 IP address blocks: 136.38.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:03:7d:10:04:71:9e:e4:a7:1c:2b:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Feb 28 14:00:40 2026 GMT Not After : May 29 13:00:40 2026 GMT Subject: CN=63acc9eb-5080-4ec9-a93d-cf98ba866ac3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:bf:47:70:bb:c6:d8:10:63:50:5f:53:14:7e: 64:4c:55:30:d1:94:45:12:cd:e9:e6:03:70:c2:70: 84:82:f0:f8:7c:31:3a:7d:a6:8a:52:63:68:b4:23: e4:76:dc:ae:f1:39:dd:f2:6a:e9:73:7c:86:82:49: 78:1a:d1:58:70:a4:67:82:a7:f6:1f:4c:00:a7:6f: f2:52:b1:49:40:c9:5e:44:b9:c3:94:b4:cd:c6:13: be:41:ce:9b:4e:e4:eb:bc:ab:24:b6:d3:b8:a8:5c: 0d:32:38:eb:12:18:ae:df:8d:19:6b:c6:a8:96:ec: ce:a0:8d:90:de:0a:25:45:49:76:68:f2:af:65:59: a7:49:a9:47:42:5b:40:2c:cc:3b:44:3e:f0:b2:0a: 07:fa:89:45:0c:b6:e9:91:5e:28:69:ee:d3:21:7c: 89:e2:5a:97:55:ef:f6:83:8d:c6:9c:a1:e0:b5:7a: 13:64:a2:44:8a:0a:c8:c1:8e:2c:77:fc:69:2e:5e: f4:e0:01:e0:97:16:8d:c7:68:f0:6d:c8:09:70:9e: f4:01:47:ef:d6:6f:e7:ed:8d:ae:a3:e0:f6:1d:00: d5:b4:ba:8d:f6:8e:dd:88:2d:17:70:97:86:06:fc: 89:90:f1:3e:01:f1:55:c4:32:83:ac:93:b9:1e:24: ab:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:99:7B:1A:33:B5:68:33:F1:E9:06:BA:CF:7F:65:05:89:37:DF:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/1ff05e1f-0778-375d-b536-2aac7ca85ac1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.38.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:13:3e:86:82:d9:43:59:5b:30:2b:9c:24:b8:64:79:a0:c8: 24:8f:4b:dc:07:57:e6:fd:fa:ce:95:cd:6f:8a:01:b2:87:42: 72:04:5e:b8:80:87:6d:df:8f:f3:d1:a3:cc:fb:f6:8b:f8:79: 8d:b4:f4:27:de:77:13:0e:21:22:63:bc:12:34:f3:fa:96:de: 95:29:ac:2f:82:bd:06:a1:a6:07:be:99:d5:d3:3f:27:a9:3f: 38:73:e7:d0:01:3d:a4:8d:02:d2:62:a2:a0:ac:8d:83:5f:4b: 50:6f:1a:26:d1:f3:18:a3:98:49:22:8a:67:00:7a:5f:02:a7: 32:c3:da:c2:07:d9:02:b2:bc:2c:85:92:b5:bb:23:c5:6a:50: 50:f7:a2:1d:02:50:69:a4:ff:89:05:24:1a:dd:56:6b:16:c3: 84:c7:09:5a:ca:94:f8:4a:50:09:08:8e:32:cf:48:6b:1d:1c: 45:c1:08:02:a7:bc:aa:60:fa:c6:10:2b:da:3a:ed:25:38:21: e4:49:ae:28:a7:65:cd:2e:91:ed:a2:39:ca:27:74:24:eb:59: ab:fc:1d:b7:b6:05:b1:2a:dc:5a:6e:cb:bb:d5:69:2f:63:ce: ad:a2:06:d0:a6:1e:6b:64:12:ce:4e:f9:ec:f0:f2:d4:6f:1a: 0d:fd:2b:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0DfRAEcZ7kpxwrFQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDIyODE0MDA0MFoXDTI2MDUyOTEzMDA0MFowLzEtMCsGA1UEAxMk NjNhY2M5ZWItNTA4MC00ZWM5LWE5M2QtY2Y5OGJhODY2YWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAub9HcLvG2BBjUF9TFH5kTFUw0ZRFEs3p5gNw wnCEgvD4fDE6faaKUmNotCPkdtyu8Tnd8mrpc3yGgkl4GtFYcKRngqf2H0wAp2/y UrFJQMleRLnDlLTNxhO+Qc6bTuTrvKskttO4qFwNMjjrEhiu340Za8aoluzOoI2Q 3golRUl2aPKvZVmnSalHQltALMw7RD7wsgoH+olFDLbpkV4oae7TIXyJ4lqXVe/2 g43GnKHgtXoTZKJEigrIwY4sd/xpLl704AHglxaNx2jwbcgJcJ70AUfv1m/n7Y2u o+D2HQDVtLqN9o7diC0XcJeGBvyJkPE+AfFVxDKDrJO5HiSrsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP6ZexoztWgz8ekGus9/ZQWJN98KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMWZmMDVlMWYtMDc3OC0z NzVkLWI1MzYtMmFhYzdjYTg1YWMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCZQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACUTPoaC2UNZWzArnCS4ZHmgyCSPS9wHV+b9+s6VzW+KAbKHQnIEXriA h23fj/PRo8z79ov4eY209CfedxMOISJjvBI08/qW3pUprC+CvQahpge+mdXTPyep Pzhz59ABPaSNAtJioqCsjYNfS1BvGibR8xijmEkiimcAel8CpzLD2sIH2QKyvCyF krW7I8VqUFD3oh0CUGmk/4kFJBrdVmsWw4THCVrKlPhKUAkIjjLPSGsdHEXBCAKn vKpg+sYQK9o67SU4IeRJriinZc0uke2iOcondCTrWav8Hbe2BbEq3Fpuy7vVaS9j zq2iBtCmHmtkEs5O+ezw8tRvGg39K+c= -----END CERTIFICATE-----Generated at Mon Mar 2 11:38:20 2026 by rpki-client