$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/20d71fc6-63e2-35b5-8642-c8020055e79b.roa File: 20d71fc6-63e2-35b5-8642-c8020055e79b.roa (raw, json) Hash identifier: ghXBqZzBciIItBu+7RhBvn/7Kx+TSdKry+Ci7h6WCIY= Subject key identifier: 0F:FA:2E:16:0F:3B:68:A0:C5:EB:02:04:56:F0:2F:93:D3:71:FA:40 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584D037D4B609F2A9DC72647E500 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/20d71fc6-63e2-35b5-8642-c8020055e79b.roa Signing time: Sat 28 Feb 2026 14:00:40 +0000 ROA not before: Sat 28 Feb 2026 14:00:40 +0000 ROA not after: Fri 29 May 2026 13:00:40 +0000 asID: 16591 IP address blocks: 136.36.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:03:7d:4b:60:9f:2a:9d:c7:26:47:e5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Feb 28 14:00:40 2026 GMT Not After : May 29 13:00:40 2026 GMT Subject: CN=ee623a3e-8b6a-4978-8b86-b595903b37b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:68:e5:19:4a:29:4d:14:61:7a:2c:25:05:8f: 38:6a:6f:c7:a1:ad:1e:f3:45:08:f4:b0:c2:c6:ef: ed:69:0a:bc:91:b1:04:97:1b:ea:31:e1:be:ba:5f: 76:88:d3:31:da:ed:7b:60:12:24:1d:9e:07:d4:87: 86:ed:2c:42:30:bb:85:bc:4d:9b:ad:fa:39:34:93: 46:41:4b:61:89:76:63:db:41:8f:dc:b5:88:02:91: 16:1b:f5:07:97:3a:67:b3:ca:0b:c0:b9:8b:1e:59: 68:cb:92:21:87:44:3b:5c:0a:7f:26:a5:a5:16:6b: 12:bf:16:7c:42:f4:df:43:3f:b8:44:a3:b4:75:32: 44:8c:60:de:37:39:13:49:5f:be:cc:31:be:65:4b: 95:8c:0d:19:ea:1b:84:a3:fa:4f:c1:32:77:68:ec: 6a:1c:e5:2a:8c:5c:e9:5c:2b:8c:35:bd:bb:de:f9: d6:70:86:66:8e:22:07:bd:de:b4:48:80:58:fe:0c: 45:30:60:09:b9:99:29:39:04:35:21:e3:f7:26:6e: 25:a6:90:5c:4e:ab:30:f9:a0:30:a5:f5:8d:a6:49: d1:a5:87:cd:10:47:6c:15:17:9c:4d:a3:b3:2d:2b: c0:dc:1d:94:81:73:ff:61:24:89:6a:40:bb:69:c6: 1c:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:FA:2E:16:0F:3B:68:A0:C5:EB:02:04:56:F0:2F:93:D3:71:FA:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/20d71fc6-63e2-35b5-8642-c8020055e79b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.36.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:28:13:67:f3:93:df:e9:60:ce:a3:df:e6:b4:43:2b:35:26: b2:d8:39:ef:4d:72:62:42:d9:47:d6:a0:20:19:26:5f:1f:17: bd:d3:c8:b0:34:18:df:ab:0d:4c:18:0a:43:75:e2:85:b4:73: 64:a4:da:70:9f:5d:d0:dc:bf:67:ee:49:40:24:2e:66:e8:cf: 13:b7:d8:4c:9c:1a:04:ee:8a:18:98:53:a3:1e:5a:a3:21:01: f5:b1:2d:4e:fe:2f:10:26:4c:77:39:cb:c4:c4:b4:96:3f:80: 7d:0a:91:62:bd:b4:5a:f3:7b:09:64:46:7c:90:56:ce:dd:6d: 12:48:fc:2a:70:fd:5b:07:cb:77:1b:89:f4:4a:15:68:ca:9f: bc:de:94:ad:02:7e:8c:9b:4e:3f:d2:93:dd:27:ef:03:dd:10: 38:ef:74:d1:a3:14:e3:a0:3c:11:80:71:b8:64:4e:e3:ae:d9: 96:ee:81:64:2d:d2:0d:8a:15:ba:65:66:c4:49:66:6c:4e:7c: 63:1c:b6:fd:3f:fe:5c:42:52:21:f0:47:91:20:a6:bd:c1:c1: 52:ad:b4:a0:a1:65:e5:5d:d5:46:c8:bb:4f:83:3e:85:de:68: 66:b4:3c:51:3c:99:7b:df:85:2d:c0:02:63:04:a6:51:61:f5: 69:a1:36:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0DfUtgnyqdxyZH5QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDIyODE0MDA0MFoXDTI2MDUyOTEzMDA0MFowLzEtMCsGA1UEAxMk ZWU2MjNhM2UtOGI2YS00OTc4LThiODYtYjU5NTkwM2IzN2IxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGjlGUopTRRheiwlBY84am/Hoa0e80UI9LDC xu/taQq8kbEElxvqMeG+ul92iNMx2u17YBIkHZ4H1IeG7SxCMLuFvE2brfo5NJNG QUthiXZj20GP3LWIApEWG/UHlzpns8oLwLmLHlloy5Ihh0Q7XAp/JqWlFmsSvxZ8 QvTfQz+4RKO0dTJEjGDeNzkTSV++zDG+ZUuVjA0Z6huEo/pPwTJ3aOxqHOUqjFzp XCuMNb273vnWcIZmjiIHvd60SIBY/gxFMGAJuZkpOQQ1IeP3Jm4lppBcTqsw+aAw pfWNpknRpYfNEEdsFRecTaOzLSvA3B2UgXP/YSSJakC7acYcgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA/6LhYPO2igxesCBFbwL5PTcfpAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMjBkNzFmYzYtNjNlMi0z NWI1LTg2NDItYzgwMjAwNTVlNzliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCQwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD4oE2fzk9/pYM6j3+a0Qys1JrLYOe9NcmJC2UfWoCAZJl8fF73TyLA0 GN+rDUwYCkN14oW0c2Sk2nCfXdDcv2fuSUAkLmbozxO32EycGgTuihiYU6MeWqMh AfWxLU7+LxAmTHc5y8TEtJY/gH0KkWK9tFrzewlkRnyQVs7dbRJI/Cpw/VsHy3cb ifRKFWjKn7zelK0CfoybTj/Sk90n7wPdEDjvdNGjFOOgPBGAcbhkTuOu2ZbugWQt 0g2KFbplZsRJZmxOfGMctv0//lxCUiHwR5Egpr3BwVKttKChZeVd1UbIu0+DPoXe aGa0PFE8mXvfhS3AAmMEplFh9WmhNg4= -----END CERTIFICATE-----Generated at Mon Mar 2 11:38:09 2026 by rpki-client