$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/40ff31f9-bb55-3743-9e6e-0ed497625978.roa File: 40ff31f9-bb55-3743-9e6e-0ed497625978.roa (raw, json) Hash identifier: 8Ldanohb/9110b297Ij2/aFTbIXRmEycl/JzCtzyzJM= Subject key identifier: FB:56:59:F9:F1:59:48:A7:9F:8A:16:32:69:F5:B7:58:B7:D3:1F:2A Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584D037D143B3C5908EAC940A680 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/40ff31f9-bb55-3743-9e6e-0ed497625978.roa Signing time: Sat 28 Feb 2026 14:00:40 +0000 ROA not before: Sat 28 Feb 2026 14:00:40 +0000 ROA not after: Fri 29 May 2026 13:00:40 +0000 asID: 16591 IP address blocks: 136.36.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:03:7d:14:3b:3c:59:08:ea:c9:40:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Feb 28 14:00:40 2026 GMT Not After : May 29 13:00:40 2026 GMT Subject: CN=2b10dcee-82d7-4e18-ad2f-eb63e25a02f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b6:73:8c:41:c2:65:e4:16:77:fd:8b:db:d6: 2d:7c:e5:9a:33:04:95:35:91:8c:51:a1:a8:db:cb: 25:06:44:3d:25:4b:87:d6:05:42:9b:9f:c6:1f:c5: 8b:7f:e7:ea:3b:f1:72:43:87:97:45:53:48:42:81: 0e:2b:9d:78:b8:dd:d1:e1:14:d5:b3:60:7b:a2:89: db:4e:03:35:99:b2:47:c0:e3:58:17:12:45:92:d5: 91:4a:e2:6e:98:28:8b:d2:02:96:e3:17:71:a2:5b: 58:c4:b0:05:57:8d:15:3f:ff:14:50:e2:2c:a4:0d: 26:52:9b:d4:b8:17:18:27:ba:a2:b2:de:b6:10:22: 94:76:d6:b7:1b:10:ce:4d:7e:52:60:d6:e1:96:eb: f4:bb:e6:3d:4c:27:4e:a8:74:3c:35:58:2f:24:00: 59:c2:b6:70:bc:3e:8d:83:1b:1c:e2:7a:12:00:d2: 76:d3:02:47:ac:64:21:ee:db:88:cf:36:03:64:b3: f4:a3:b8:0b:94:23:c6:76:78:0b:59:4f:8f:b1:7c: 42:6f:4c:a8:cc:b6:b6:cd:e5:20:3b:6e:23:0b:7e: 52:cb:59:63:47:e4:e9:0c:36:65:25:a4:ea:28:34: ba:1b:6f:f2:49:eb:25:6d:0a:21:3f:f1:80:04:06: a0:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:56:59:F9:F1:59:48:A7:9F:8A:16:32:69:F5:B7:58:B7:D3:1F:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/40ff31f9-bb55-3743-9e6e-0ed497625978.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.36.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:13:b1:6d:62:b2:df:b4:04:d5:f8:cb:52:ce:4b:bf:13:80: 7d:1b:0a:6b:3c:b9:0e:25:2e:dd:0f:bc:fc:4f:77:a6:66:e7: d8:ca:25:b0:52:a4:a3:d0:5d:55:27:43:4b:bd:08:4c:81:e5: 24:c6:4b:52:3e:f0:a3:bf:84:f6:24:4b:57:2a:f2:ab:52:82: 84:a2:40:ac:de:7f:0f:14:6f:e7:81:c6:ce:28:e0:c7:9f:fb: 45:1e:73:bd:0a:f8:f1:0c:5a:ac:27:fa:f9:14:52:b4:f6:bb: 33:78:3c:34:81:fe:eb:eb:af:fe:4b:ff:5a:77:dd:a7:c7:16: 93:d9:56:09:4b:93:6b:83:04:99:14:01:5e:2b:74:d0:de:f4: 39:8d:03:f1:f3:03:da:c5:f9:d8:ca:e3:29:86:56:a8:1f:37: 00:b2:cc:36:3a:88:fc:3e:ca:46:78:2f:b9:a8:d2:70:07:8f: d1:23:ce:3f:9d:83:f0:7c:d4:d7:ac:ea:53:17:9b:1a:10:27: e7:95:30:35:a2:bc:97:da:49:18:e4:ae:d0:60:e4:80:af:7e: 02:a6:21:bb:a3:72:8b:bb:48:de:77:52:03:55:94:c4:03:24: 9a:7e:8d:ff:28:ab:15:a2:c6:c7:50:7d:a0:43:22:99:a7:60: 92:24:e0:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0DfRQ7PFkI6slApoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDIyODE0MDA0MFoXDTI2MDUyOTEzMDA0MFowLzEtMCsGA1UEAxMk MmIxMGRjZWUtODJkNy00ZTE4LWFkMmYtZWI2M2UyNWEwMmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7ZzjEHCZeQWd/2L29YtfOWaMwSVNZGMUaGo 28slBkQ9JUuH1gVCm5/GH8WLf+fqO/FyQ4eXRVNIQoEOK514uN3R4RTVs2B7oonb TgM1mbJHwONYFxJFktWRSuJumCiL0gKW4xdxoltYxLAFV40VP/8UUOIspA0mUpvU uBcYJ7qist62ECKUdta3GxDOTX5SYNbhluv0u+Y9TCdOqHQ8NVgvJABZwrZwvD6N gxsc4noSANJ20wJHrGQh7tuIzzYDZLP0o7gLlCPGdngLWU+PsXxCb0yozLa2zeUg O24jC35Sy1ljR+TpDDZlJaTqKDS6G2/ySeslbQohP/GABAagIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPtWWfnxWUinn4oWMmn1t1i30x8qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvNDBmZjMxZjktYmI1NS0z NzQzLTllNmUtMGVkNDk3NjI1OTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCSAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIATsW1ist+0BNX4y1LOS78TgH0bCms8uQ4lLt0PvPxPd6Zm59jKJbBS pKPQXVUnQ0u9CEyB5STGS1I+8KO/hPYkS1cq8qtSgoSiQKzefw8Ub+eBxs4o4Mef +0Uec70K+PEMWqwn+vkUUrT2uzN4PDSB/uvrr/5L/1p33afHFpPZVglLk2uDBJkU AV4rdNDe9DmNA/HzA9rF+djK4ymGVqgfNwCyzDY6iPw+ykZ4L7mo0nAHj9Ejzj+d g/B81Nes6lMXmxoQJ+eVMDWivJfaSRjkrtBg5ICvfgKmIbujcou7SN53UgNVlMQD JJp+jf8oqxWixsdQfaBDIpmnYJIk4BE= -----END CERTIFICATE-----Generated at Mon Mar 2 09:51:55 2026 by rpki-client