$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/364006d0-ea94-3a36-8462-73e689a224d9.roa File: 364006d0-ea94-3a36-8462-73e689a224d9.roa (raw, json) Hash identifier: dXeO3WCN5f+/ix0S55uEYgJPGGk3L7RvZUMfNtcx+jM= Subject key identifier: 57:FF:8A:67:79:5F:9A:38:30:60:AF:B3:DE:A8:9A:F8:BA:6F:E4:A9 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584D037D150E1B605D096407A600 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/364006d0-ea94-3a36-8462-73e689a224d9.roa Signing time: Sat 28 Feb 2026 14:00:40 +0000 ROA not before: Sat 28 Feb 2026 14:00:40 +0000 ROA not after: Fri 29 May 2026 13:00:40 +0000 asID: 16591 IP address blocks: 136.36.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:03:7d:15:0e:1b:60:5d:09:64:07:a6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Feb 28 14:00:40 2026 GMT Not After : May 29 13:00:40 2026 GMT Subject: CN=7fd200bb-010d-4a8b-809b-0f1bde7a5b6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:4e:19:fb:5c:92:b4:38:d2:4b:ae:44:a2:a0: 92:ab:05:4f:18:6c:a2:72:9f:52:3b:aa:2c:c3:91: 29:45:a7:f5:ac:4c:fa:47:21:be:0b:74:c4:59:89: 4f:e9:04:3a:7f:13:5f:13:c8:3e:68:b7:2a:0e:15: ea:19:98:67:45:df:97:c3:19:a3:aa:17:eb:88:94: 43:a4:79:5a:c6:6a:c7:99:6b:8b:df:24:b7:96:09: e3:bc:a5:7d:6b:aa:61:4f:81:74:6f:cb:22:8a:d1: e7:88:db:20:a8:38:85:ce:2c:88:a3:ac:37:b2:44: 4e:02:f7:27:83:dc:bb:8d:1d:ed:e2:6e:7f:40:9d: cd:7a:1f:f3:3d:23:73:dc:23:99:c6:75:7e:97:db: fc:4d:5b:ab:e5:47:21:06:2c:c5:0c:a3:86:e6:18: 19:93:5d:11:e8:19:f3:e9:d7:2a:9b:75:d7:06:77: 85:be:17:c0:43:2e:b4:6d:d3:ed:c3:9d:1d:8f:73: 96:ae:72:19:f4:59:02:6a:b2:07:56:37:85:83:c3: 9d:ca:a1:b3:70:d1:e7:ce:ed:84:f1:da:09:da:24: 64:2c:54:55:f6:1b:4b:2b:c4:45:c3:8e:ef:67:16: 1d:f0:9c:bd:50:bb:a8:32:dd:db:5c:89:df:60:03: 0a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:FF:8A:67:79:5F:9A:38:30:60:AF:B3:DE:A8:9A:F8:BA:6F:E4:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/364006d0-ea94-3a36-8462-73e689a224d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.36.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:9e:74:b9:d2:a0:1a:7b:f1:d9:70:8c:de:a3:63:39:b3:17: 9d:2e:20:dc:d4:99:2c:2b:66:53:e5:f3:2e:48:ad:50:89:2f: 53:14:bd:f3:37:2c:c6:54:9b:04:41:46:a8:9c:3f:32:36:f6: 34:0d:7f:bd:e0:56:15:81:00:ed:31:da:76:17:3f:b3:af:b1: fe:ef:d6:fb:29:9e:8c:c1:8f:52:a8:36:c4:84:89:6b:35:4e: 7f:8e:0a:19:54:9b:97:e7:65:5d:f9:53:d8:31:cb:8e:e1:0b: fb:0a:e8:25:ed:12:4f:42:88:60:e5:67:08:ce:b7:8f:87:ea: 26:0b:df:ca:44:98:28:ff:4a:50:14:26:37:33:3f:e7:39:51: 98:c7:a9:5c:37:81:01:34:8b:64:15:06:a7:d9:90:1b:9e:36: a6:de:0e:13:93:d1:bc:52:5c:52:f4:b0:41:65:9b:23:6d:c4: ff:43:96:71:15:30:e9:33:52:d4:16:5b:4c:21:04:e5:d4:3a: d3:2d:4f:ae:40:e5:00:e7:1e:77:c3:ae:79:d5:db:91:46:be: 13:1c:9e:3c:d1:58:b4:4e:ee:6f:38:c5:da:4e:fe:1d:11:d0: 6d:25:68:0c:b2:34:ab:b7:0c:de:41:84:7a:e5:e9:c2:b5:45: ca:94:b7:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0DfRUOG2BdCWQHpgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDIyODE0MDA0MFoXDTI2MDUyOTEzMDA0MFowLzEtMCsGA1UEAxMk N2ZkMjAwYmItMDEwZC00YThiLTgwOWItMGYxYmRlN2E1YjZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxk4Z+1yStDjSS65EoqCSqwVPGGyicp9SO6os w5EpRaf1rEz6RyG+C3TEWYlP6QQ6fxNfE8g+aLcqDhXqGZhnRd+XwxmjqhfriJRD pHlaxmrHmWuL3yS3lgnjvKV9a6phT4F0b8siitHniNsgqDiFziyIo6w3skROAvcn g9y7jR3t4m5/QJ3Neh/zPSNz3COZxnV+l9v8TVur5UchBizFDKOG5hgZk10R6Bnz 6dcqm3XXBneFvhfAQy60bdPtw50dj3OWrnIZ9FkCarIHVjeFg8OdyqGzcNHnzu2E 8doJ2iRkLFRV9htLK8RFw47vZxYd8Jy9ULuoMt3bXInfYAMKhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFf/imd5X5o4MGCvs96omvi6b+SpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMzY0MDA2ZDAtZWE5NC0z YTM2LTg0NjItNzNlNjg5YTIyNGQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCQgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFmedLnSoBp78dlwjN6jYzmzF50uINzUmSwrZlPl8y5IrVCJL1MUvfM3 LMZUmwRBRqicPzI29jQNf73gVhWBAO0x2nYXP7Ovsf7v1vspnozBj1KoNsSEiWs1 Tn+OChlUm5fnZV35U9gxy47hC/sK6CXtEk9CiGDlZwjOt4+H6iYL38pEmCj/SlAU JjczP+c5UZjHqVw3gQE0i2QVBqfZkBueNqbeDhOT0bxSXFL0sEFlmyNtxP9DlnEV MOkzUtQWW0whBOXUOtMtT65A5QDnHnfDrnnV25FGvhMcnjzRWLRO7m84xdpO/h0R 0G0laAyyNKu3DN5BhHrl6cK1RcqUt1I= -----END CERTIFICATE-----Generated at Mon Mar 2 09:47:10 2026 by rpki-client