$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/38f93485-d290-34c3-90ff-ea5a55bdd7e9.roa File: 38f93485-d290-34c3-90ff-ea5a55bdd7e9.roa (raw, json) Hash identifier: jcNwWkXhIG725CfxofdbMS5WXFdFP96Fxvj91AsFdP4= Subject key identifier: F5:67:06:5B:3D:A9:57:CE:9D:A4:EA:05:F2:AF:EF:58:A9:D1:20:BB Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584D037CFCF69B48409C468CE520 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/38f93485-d290-34c3-90ff-ea5a55bdd7e9.roa Signing time: Sat 28 Feb 2026 14:00:40 +0000 ROA not before: Sat 28 Feb 2026 14:00:40 +0000 ROA not after: Fri 29 May 2026 13:00:40 +0000 asID: 16591 IP address blocks: 136.60.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:03:7c:fc:f6:9b:48:40:9c:46:8c:e5:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Feb 28 14:00:40 2026 GMT Not After : May 29 13:00:40 2026 GMT Subject: CN=a4f492e7-d376-483e-ad54-53603655c34c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e1:99:77:15:fc:78:9a:44:99:e5:ac:16:e9: ca:78:f8:7c:9c:11:41:a0:b9:e8:17:59:01:25:5c: be:21:44:51:4f:62:9e:86:14:f8:ef:3f:5c:81:72: 0c:26:38:78:b9:38:d5:a4:4b:6e:44:ac:5f:c0:11: 2a:55:2b:61:5c:62:a1:09:a4:83:c9:ee:92:9c:af: 46:df:ff:e8:bc:1a:60:01:bf:64:0d:a3:73:43:d8: 03:30:a8:a5:46:3a:19:ac:3d:f3:05:a6:e3:cd:6c: c3:f7:e1:3b:e9:ef:e9:c0:4a:98:8b:04:a4:43:0f: 11:69:59:b2:88:08:ce:6b:2a:aa:c6:fb:30:01:f1: a0:8e:40:f4:16:5d:d3:43:f5:e3:0f:91:e2:1b:25: e9:71:0c:9c:d8:da:f6:71:c0:e6:37:fd:4b:4c:29: c3:c9:17:4c:99:20:dd:5f:e3:34:85:a7:ec:17:59: 62:4e:ac:c0:a8:7e:9d:9b:9a:be:88:52:29:d9:33: d0:4f:9c:38:80:26:33:0a:9a:19:8c:95:e4:6d:07: e5:cd:0c:1e:1d:49:03:9d:6d:fa:3e:e8:8b:cc:62: 21:1b:76:ab:ac:9a:45:12:a6:27:fd:e0:84:9d:93: bc:f2:27:c3:70:7e:8f:72:92:e2:1e:d0:82:95:48: 22:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:67:06:5B:3D:A9:57:CE:9D:A4:EA:05:F2:AF:EF:58:A9:D1:20:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/38f93485-d290-34c3-90ff-ea5a55bdd7e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.60.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:53:7f:87:64:5d:5a:9c:96:4f:0c:7f:be:f9:74:71:d4:60: 54:e7:45:e4:fa:95:34:c3:23:4a:9b:f9:12:ef:1c:05:40:cd: b2:f9:ed:75:41:4e:8e:9f:78:76:71:f0:e4:18:38:d3:48:15: c9:26:05:b8:a8:8a:bf:58:2b:41:67:6a:38:4e:27:d2:2c:29: 03:43:a2:57:57:bd:9a:14:7c:c4:20:72:11:ac:34:45:67:98: 2c:67:a8:e2:ea:aa:d0:fc:fd:70:37:df:a9:cb:d6:f5:d5:07: a1:77:7a:1e:4c:64:46:54:8f:70:e4:06:6a:99:e8:01:90:1b: c1:18:99:33:c7:0f:39:e2:4c:35:51:38:44:ca:1b:04:76:ac: 03:78:af:cc:83:1d:b1:57:38:e8:52:91:83:c2:85:4d:d9:3f: 98:74:49:1d:e4:a5:dd:61:d1:07:c7:30:17:0a:21:39:24:91: 74:7f:03:be:19:12:f5:fc:50:ac:74:39:02:44:99:26:b3:be: b9:ce:bf:ec:c1:35:29:38:fa:e3:fb:ce:85:1d:49:41:e1:54: 75:b1:62:06:45:83:c9:f4:4d:7e:b9:23:16:ab:94:e5:5a:74: 2a:fe:a0:f2:e1:15:88:a9:4c:a6:86:ab:7b:9a:9b:1f:5b:11: f9:84:d4:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0DfPz2m0hAnEaM5SAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDIyODE0MDA0MFoXDTI2MDUyOTEzMDA0MFowLzEtMCsGA1UEAxMk YTRmNDkyZTctZDM3Ni00ODNlLWFkNTQtNTM2MDM2NTVjMzRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+GZdxX8eJpEmeWsFunKePh8nBFBoLnoF1kB JVy+IURRT2KehhT47z9cgXIMJjh4uTjVpEtuRKxfwBEqVSthXGKhCaSDye6SnK9G 3//ovBpgAb9kDaNzQ9gDMKilRjoZrD3zBabjzWzD9+E76e/pwEqYiwSkQw8RaVmy iAjOayqqxvswAfGgjkD0Fl3TQ/XjD5HiGyXpcQyc2Nr2ccDmN/1LTCnDyRdMmSDd X+M0hafsF1liTqzAqH6dm5q+iFIp2TPQT5w4gCYzCpoZjJXkbQflzQweHUkDnW36 PuiLzGIhG3arrJpFEqYn/eCEnZO88ifDcH6PcpLiHtCClUgi/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPVnBls9qVfOnaTqBfKv71ip0SC7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMzhmOTM0ODUtZDI5MC0z NGMzLTkwZmYtZWE1YTU1YmRkN2U5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDzgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIZTf4dkXVqclk8Mf775dHHUYFTnReT6lTTDI0qb+RLvHAVAzbL57XVB To6feHZx8OQYONNIFckmBbioir9YK0FnajhOJ9IsKQNDoldXvZoUfMQgchGsNEVn mCxnqOLqqtD8/XA336nL1vXVB6F3eh5MZEZUj3DkBmqZ6AGQG8EYmTPHDzniTDVR OETKGwR2rAN4r8yDHbFXOOhSkYPChU3ZP5h0SR3kpd1h0QfHMBcKITkkkXR/A74Z EvX8UKx0OQJEmSazvrnOv+zBNSk4+uP7zoUdSUHhVHWxYgZFg8n0TX65IxarlOVa dCr+oPLhFYipTKaGq3uamx9bEfmE1B4= -----END CERTIFICATE-----Generated at Mon Mar 2 08:03:40 2026 by rpki-client