$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/3d0f2f83-fcef-3336-b059-f11f1b644441.roa File: 3d0f2f83-fcef-3336-b059-f11f1b644441.roa (raw, json) Hash identifier: tugicnTmNd7DZn2oeIAO990kzPXXBFBiA4HkA9AsdaM= Subject key identifier: DA:EE:F5:E2:72:35:72:F0:82:35:4E:F6:88:5F:DA:A1:27:AF:ED:D3 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584D037CF39F6756EAAFE3F402C0 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/3d0f2f83-fcef-3336-b059-f11f1b644441.roa Signing time: Sat 28 Feb 2026 14:00:40 +0000 ROA not before: Sat 28 Feb 2026 14:00:40 +0000 ROA not after: Fri 29 May 2026 13:00:40 +0000 asID: 16591 IP address blocks: 136.34.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:03:7c:f3:9f:67:56:ea:af:e3:f4:02:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Feb 28 14:00:40 2026 GMT Not After : May 29 13:00:40 2026 GMT Subject: CN=f71d82d6-6815-4cc6-aa12-ad57bed1d6f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:1f:58:71:09:0d:c7:74:ad:1d:a4:f1:83:f7: 80:b8:bc:3f:9f:e5:fd:d5:0e:c9:63:ee:72:c7:5d: ca:d5:70:f5:15:ce:2d:d9:a3:52:9a:e5:4c:2e:9d: 8c:ea:b7:9e:50:34:89:59:13:61:ae:e8:93:da:9f: 84:36:b5:bc:15:78:72:f5:2a:35:51:28:bb:a1:25: 3a:ef:86:30:60:a6:6c:b1:ad:53:5d:45:1c:7a:d2: dd:8f:55:74:5e:3f:d6:22:b1:3b:82:72:16:c8:79: 7d:40:b1:2a:02:35:bf:a3:17:e8:d1:6d:70:3b:e2: 10:65:d3:ba:c4:4b:48:1c:d8:51:a7:98:33:e0:1c: d4:bc:64:f2:96:9c:7f:a3:0e:c6:6f:1c:c1:fd:5d: 13:a8:91:56:c1:66:40:6a:cc:64:f3:4d:73:86:4f: b1:35:3e:13:57:77:97:36:b1:5b:a8:bd:e6:63:05: 9a:7c:f5:a0:60:ec:40:57:12:b3:90:d4:f7:93:fd: ef:99:cd:2c:9f:11:bf:6b:e1:72:3a:6d:e0:6d:43: 6d:42:1f:cd:fa:55:7b:7c:d3:dd:e6:52:9b:6a:59: f3:54:5e:f2:2c:dd:79:43:a3:07:06:d0:aa:92:70: bc:9b:4c:1c:e4:18:60:a3:71:1f:df:c2:49:d5:d9: e2:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:EE:F5:E2:72:35:72:F0:82:35:4E:F6:88:5F:DA:A1:27:AF:ED:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/3d0f2f83-fcef-3336-b059-f11f1b644441.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.34.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:83:55:f9:22:a6:b1:bd:30:f2:92:58:8f:ad:68:1f:b9:e0: d4:56:d1:20:26:a2:e1:1e:45:0d:8b:b3:86:9a:39:ed:ce:13: cb:f7:fc:43:1c:43:3e:d7:77:95:1a:38:c7:85:a1:91:fa:ab: 9d:67:f3:c3:f3:30:b8:e5:45:37:67:35:e0:0b:79:11:33:23: a6:da:d3:5c:81:fa:bd:98:d6:3a:df:58:95:28:69:19:f3:c2: 5d:03:83:9a:d4:dc:61:3e:2d:de:64:e0:84:fe:97:b7:fa:cb: c4:d7:f1:71:e9:c5:2f:d6:b4:dd:1a:3a:01:20:5d:36:31:15: 2d:1a:88:c7:0e:8a:e3:23:2f:43:74:8b:9d:75:bf:d7:61:ef: 64:7a:a6:3a:b7:d1:d5:79:bf:88:17:3f:45:96:95:a6:ba:8c: 32:5d:35:f7:b9:b5:7f:a6:82:49:06:dc:85:5f:d9:0b:af:04: e7:a4:31:b4:88:3e:88:8e:49:a0:41:5a:10:b2:1f:72:3f:c7: 90:9c:03:4d:27:89:af:62:6a:b9:03:f8:4e:b8:77:0b:d5:d7: 33:16:fb:3d:ba:01:82:ea:36:9a:2c:83:8b:94:2b:80:78:1f: c9:94:f1:9a:3d:f4:8b:5f:f5:4f:35:3d:6d:b9:ac:a3:1a:cc: a0:c9:ea:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0DfPOfZ1bqr+P0AsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDIyODE0MDA0MFoXDTI2MDUyOTEzMDA0MFowLzEtMCsGA1UEAxMk ZjcxZDgyZDYtNjgxNS00Y2M2LWFhMTItYWQ1N2JlZDFkNmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjB9YcQkNx3StHaTxg/eAuLw/n+X91Q7JY+5y x13K1XD1Fc4t2aNSmuVMLp2M6reeUDSJWRNhruiT2p+ENrW8FXhy9So1USi7oSU6 74YwYKZssa1TXUUcetLdj1V0Xj/WIrE7gnIWyHl9QLEqAjW/oxfo0W1wO+IQZdO6 xEtIHNhRp5gz4BzUvGTylpx/ow7GbxzB/V0TqJFWwWZAasxk801zhk+xNT4TV3eX NrFbqL3mYwWafPWgYOxAVxKzkNT3k/3vmc0snxG/a+FyOm3gbUNtQh/N+lV7fNPd 5lKbalnzVF7yLN15Q6MHBtCqknC8m0wc5Bhgo3Ef38JJ1dniSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNru9eJyNXLwgjVO9ohf2qEnr+3TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvM2QwZjJmODMtZmNlZi0z MzM2LWIwNTktZjExZjFiNjQ0NDQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCLQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHGDVfkiprG9MPKSWI+taB+54NRW0SAmouEeRQ2Ls4aaOe3OE8v3/EMc Qz7Xd5UaOMeFoZH6q51n88PzMLjlRTdnNeALeREzI6ba01yB+r2Y1jrfWJUoaRnz wl0Dg5rU3GE+Ld5k4IT+l7f6y8TX8XHpxS/WtN0aOgEgXTYxFS0aiMcOiuMjL0N0 i511v9dh72R6pjq30dV5v4gXP0WWlaa6jDJdNfe5tX+mgkkG3IVf2QuvBOekMbSI PoiOSaBBWhCyH3I/x5CcA00nia9iarkD+E64dwvV1zMW+z26AYLqNposg4uUK4B4 H8mU8Zo99Itf9U81PW25rKMazKDJ6h0= -----END CERTIFICATE-----Generated at Mon Mar 2 13:39:25 2026 by rpki-client