$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/3762e11f-303e-3d09-a4fc-d2fa0e31a984.roa File: 3762e11f-303e-3d09-a4fc-d2fa0e31a984.roa (raw, json) Hash identifier: X4Lpt9U/5UIEVWVBzzTwF48gdrgnxsJa6NLi40b8x7I= Subject key identifier: B3:DB:0E:BC:23:A9:44:52:D3:81:54:29:47:1A:70:05:58:31:44:F9 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584D037D5238B02FFE727E681380 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/3762e11f-303e-3d09-a4fc-d2fa0e31a984.roa Signing time: Sat 28 Feb 2026 14:00:40 +0000 ROA not before: Sat 28 Feb 2026 14:00:40 +0000 ROA not after: Fri 29 May 2026 13:00:40 +0000 asID: 16591 IP address blocks: 136.63.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:03:7d:52:38:b0:2f:fe:72:7e:68:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Feb 28 14:00:40 2026 GMT Not After : May 29 13:00:40 2026 GMT Subject: CN=873ae6bf-5c44-4069-ab00-9c8b5f4b5214 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:4f:4e:e0:05:b5:85:10:9d:c5:31:aa:23:ab: fa:04:6b:e4:d4:5f:7f:ce:ac:ac:34:e2:16:79:cf: f7:69:39:54:c9:8a:12:78:9f:7a:ab:cd:f6:f3:c3: eb:93:12:e1:df:d9:0c:9a:4a:05:d0:3e:0a:53:4c: dc:7b:ff:2b:e4:f8:28:1e:c0:af:e8:84:b4:82:1a: bd:c3:e0:f9:b5:ae:72:7a:62:20:3e:42:a8:a8:12: 1e:be:70:39:84:ad:7a:22:cb:19:61:69:78:84:fc: 1c:3e:46:64:e8:63:eb:13:5e:64:b3:38:41:0e:fc: 4a:a5:bc:a7:78:cf:ee:20:26:7f:97:40:42:60:cd: 57:64:c0:13:80:b4:60:98:23:68:ab:90:24:b6:6a: ba:d9:b8:a2:7d:55:01:a5:ef:b3:76:41:07:0d:e0: 3d:f7:f2:3e:4f:82:e9:36:dd:03:32:ec:c6:07:f8: 01:5a:be:b6:26:7f:e9:34:66:bf:34:f6:70:3b:9f: a0:a5:29:18:ae:53:14:fb:c7:dc:ae:cf:65:92:77: 96:12:a3:53:1e:61:80:4e:59:e6:b2:9f:cf:4e:01: 75:c7:2a:13:d0:c3:8a:dd:fe:94:cd:b3:e3:55:d0: 33:db:ab:74:19:c5:f7:56:29:4f:03:0b:86:97:7d: 9f:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:DB:0E:BC:23:A9:44:52:D3:81:54:29:47:1A:70:05:58:31:44:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/3762e11f-303e-3d09-a4fc-d2fa0e31a984.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.63.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:72:40:b5:12:6c:82:30:d6:9a:8d:26:d1:21:44:f3:1a:87: 71:d0:c0:a8:04:20:c8:c5:fe:04:37:15:59:13:0c:91:40:41: a1:31:2f:ad:7a:e4:6c:96:88:0c:1e:58:5e:84:1e:3e:af:d2: 1b:b4:19:6a:8e:17:c7:b0:25:0d:a6:7d:71:da:ed:c0:1c:28: 4d:ae:b2:9b:76:87:b7:e2:c1:7f:41:4c:a2:22:07:14:dc:55: 73:68:d2:62:58:87:30:f3:56:43:20:97:2f:c5:80:d5:64:0c: 52:19:90:11:c6:07:08:ed:be:a7:4d:c2:99:4d:54:c9:ff:fa: ff:4d:2c:2b:a3:31:10:db:f4:92:13:c1:36:68:cd:21:90:dd: cb:ea:c3:8b:67:e2:f4:20:0b:66:06:d2:85:61:3d:d5:7e:b1: d8:d8:b4:f4:79:2e:e7:ea:37:17:63:7e:8d:c3:13:f8:b2:d8: 20:d7:d5:02:d1:d4:03:82:c0:00:4a:48:51:9e:50:c5:c3:e4: e4:8c:d0:93:1c:25:7c:84:45:8c:c0:75:56:b9:f8:98:80:f6: ea:4b:b5:34:db:80:ed:60:0a:62:1d:ea:e0:ad:bb:cd:02:b6: a7:7b:05:41:bb:16:b7:60:d2:8c:22:b2:60:73:b1:51:01:03: d5:48:56:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0DfVI4sC/+cn5oE4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDIyODE0MDA0MFoXDTI2MDUyOTEzMDA0MFowLzEtMCsGA1UEAxMk ODczYWU2YmYtNWM0NC00MDY5LWFiMDAtOWM4YjVmNGI1MjE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxk9O4AW1hRCdxTGqI6v6BGvk1F9/zqysNOIW ec/3aTlUyYoSeJ96q83288PrkxLh39kMmkoF0D4KU0zce/8r5PgoHsCv6IS0ghq9 w+D5ta5yemIgPkKoqBIevnA5hK16IssZYWl4hPwcPkZk6GPrE15kszhBDvxKpbyn eM/uICZ/l0BCYM1XZMATgLRgmCNoq5Aktmq62biifVUBpe+zdkEHDeA99/I+T4Lp Nt0DMuzGB/gBWr62Jn/pNGa/NPZwO5+gpSkYrlMU+8fcrs9lkneWEqNTHmGATlnm sp/PTgF1xyoT0MOK3f6UzbPjVdAz26t0GcX3VilPAwuGl32fWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLPbDrwjqURS04FUKUcacAVYMUT5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMzc2MmUxMWYtMzAzZS0z ZDA5LWE0ZmMtZDJmYTBlMzFhOTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiD8QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAINyQLUSbIIw1pqNJtEhRPMah3HQwKgEIMjF/gQ3FVkTDJFAQaExL616 5GyWiAweWF6EHj6v0hu0GWqOF8ewJQ2mfXHa7cAcKE2uspt2h7fiwX9BTKIiBxTc VXNo0mJYhzDzVkMgly/FgNVkDFIZkBHGBwjtvqdNwplNVMn/+v9NLCujMRDb9JIT wTZozSGQ3cvqw4tn4vQgC2YG0oVhPdV+sdjYtPR5LufqNxdjfo3DE/iy2CDX1QLR 1AOCwABKSFGeUMXD5OSM0JMcJXyERYzAdVa5+JiA9upLtTTbgO1gCmId6uCtu80C tqd7BUG7Frdg0owismBzsVEBA9VIVl4= -----END CERTIFICATE-----Generated at Mon Mar 2 08:03:47 2026 by rpki-client