$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/38d37420-1173-37e8-8b80-d46f66f04263.roa File: 38d37420-1173-37e8-8b80-d46f66f04263.roa (raw, json) Hash identifier: A4MN68zMwJr3RWIhyGcWpRN3DjZFKKZAkNP1TUlNf94= Subject key identifier: C5:F5:46:DB:22:46:48:99:6F:EB:BB:3F:80:D8:4D:40:AD:B8:1A:E8 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584D037CFF941877B2778F7452C0 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/38d37420-1173-37e8-8b80-d46f66f04263.roa Signing time: Sat 28 Feb 2026 14:00:40 +0000 ROA not before: Sat 28 Feb 2026 14:00:40 +0000 ROA not after: Fri 29 May 2026 13:00:40 +0000 asID: 16591 IP address blocks: 136.34.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:03:7c:ff:94:18:77:b2:77:8f:74:52:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Feb 28 14:00:40 2026 GMT Not After : May 29 13:00:40 2026 GMT Subject: CN=479f2538-6ac6-42a1-be90-4d0a1312bf9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:15:2b:b7:c8:3a:60:db:30:e4:0f:cc:df:75: a4:cd:58:d0:33:a9:1d:f1:e0:c2:65:1b:4f:b9:78: bb:84:e7:98:47:41:d6:85:d7:ce:0f:2f:68:40:09: 1f:ed:48:14:dc:03:28:9d:29:67:38:25:48:71:8d: ec:50:55:e3:a7:fe:e2:2f:9f:55:74:b4:09:c5:47: 33:54:04:72:43:59:da:a2:45:df:c0:b7:04:b8:f9: 41:12:94:64:d6:e1:87:5d:ef:76:4e:e6:c8:bf:e9: 29:44:78:a1:4e:b4:7c:11:e8:12:d1:a6:1c:01:e5: 8a:6d:8b:29:03:f6:f7:10:dc:b2:8a:ac:e7:c8:0f: 00:61:3e:17:b6:92:a1:62:d2:51:75:ee:74:17:53: 27:fd:31:d1:d1:38:7c:44:b4:e9:84:8d:c6:50:76: bb:27:83:35:31:27:9c:0f:a3:9b:91:2a:fe:a7:41: 9a:6a:2c:fb:9d:37:45:77:a7:7c:ac:2a:04:96:58: 38:23:f3:95:a2:8f:3f:17:d8:9a:b4:f0:1e:0e:c7: 13:d8:b9:53:75:41:72:c6:12:41:af:4e:72:c6:55: a3:7f:9a:8d:47:01:2b:f1:a6:61:3b:14:85:8a:23: f4:e8:47:85:1d:d6:b1:71:cd:2d:0d:3a:8d:62:22: f7:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:F5:46:DB:22:46:48:99:6F:EB:BB:3F:80:D8:4D:40:AD:B8:1A:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/38d37420-1173-37e8-8b80-d46f66f04263.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.34.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:f5:f9:e6:f5:3c:8d:b6:6d:07:37:d4:62:fb:a6:41:16:ed: 3d:35:d8:14:85:5d:99:46:f7:e8:1e:3f:60:50:eb:1f:4f:6d: 10:cf:48:57:74:09:e9:9c:99:ed:83:e9:df:7d:52:8c:9f:32: 49:0f:d5:5a:90:54:e6:de:18:62:32:b4:fe:92:46:b5:7c:bd: 4d:c0:85:4a:42:db:40:11:c5:13:3c:a2:31:09:04:ff:46:56: 9c:6d:57:b6:1f:f3:03:0f:2f:6b:4b:04:20:e7:4a:bc:83:9c: 43:a0:f3:ce:8d:c5:8d:cd:5f:f8:b4:cc:df:e3:bb:50:c9:90: cf:92:da:e3:95:ab:63:71:ef:57:7c:52:57:c6:e7:08:22:d7: b3:73:b6:ee:d8:ff:e6:ab:06:14:b6:55:0c:a8:ed:61:7c:82: 8a:93:44:fe:50:53:11:c6:36:8d:55:83:00:78:fd:07:fa:03: 32:0d:d6:92:9c:4f:42:a5:a0:f6:73:f5:8c:98:f3:b8:1d:a2: 92:fb:35:8c:bb:b1:49:f5:db:99:72:4c:5d:0d:95:32:a6:16: ab:ca:4e:b9:90:50:3b:24:a4:c0:89:ad:68:2c:15:d5:38:a1: 1e:37:1e:60:76:74:0c:cc:8a:64:45:d8:15:09:65:ce:25:c7: 18:b4:ce:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0DfP+UGHeyd490UsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDIyODE0MDA0MFoXDTI2MDUyOTEzMDA0MFowLzEtMCsGA1UEAxMk NDc5ZjI1MzgtNmFjNi00MmExLWJlOTAtNGQwYTEzMTJiZjljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBUrt8g6YNsw5A/M33WkzVjQM6kd8eDCZRtP uXi7hOeYR0HWhdfODy9oQAkf7UgU3AMonSlnOCVIcY3sUFXjp/7iL59VdLQJxUcz VARyQ1naokXfwLcEuPlBEpRk1uGHXe92TubIv+kpRHihTrR8EegS0aYcAeWKbYsp A/b3ENyyiqznyA8AYT4XtpKhYtJRde50F1Mn/THR0Th8RLTphI3GUHa7J4M1MSec D6ObkSr+p0Gaaiz7nTdFd6d8rCoEllg4I/OVoo8/F9iatPAeDscT2LlTdUFyxhJB r05yxlWjf5qNRwEr8aZhOxSFiiP06EeFHdaxcc0tDTqNYiL3KwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMX1RtsiRkiZb+u7P4DYTUCtuBroMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMzhkMzc0MjAtMTE3My0z N2U4LThiODAtZDQ2ZjY2ZjA0MjYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCIQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIr1+eb1PI22bQc31GL7pkEW7T012BSFXZlG9+geP2BQ6x9PbRDPSFd0 Cemcme2D6d99UoyfMkkP1VqQVObeGGIytP6SRrV8vU3AhUpC20ARxRM8ojEJBP9G VpxtV7Yf8wMPL2tLBCDnSryDnEOg886NxY3NX/i0zN/ju1DJkM+S2uOVq2Nx71d8 UlfG5wgi17Nztu7Y/+arBhS2VQyo7WF8goqTRP5QUxHGNo1VgwB4/Qf6AzIN1pKc T0KloPZz9YyY87gdopL7NYy7sUn125lyTF0NlTKmFqvKTrmQUDskpMCJrWgsFdU4 oR43HmB2dAzMimRF2BUJZc4lxxi0zjI= -----END CERTIFICATE-----Generated at Mon Mar 2 11:22:10 2026 by rpki-client