$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/437c7491-acf1-3988-ad8f-3d1717c41cc3.roa File: 437c7491-acf1-3988-ad8f-3d1717c41cc3.roa (raw, json) Hash identifier: fdO4jftKM9VVTbLk9aY55YHFb49EAH2T+q56RPbKSOs= Subject key identifier: 22:B2:05:94:4D:88:F5:0E:47:12:3F:EA:D2:E2:73:5F:33:17:93:EF Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584D037CFAC9E328B0A5D06D4400 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/437c7491-acf1-3988-ad8f-3d1717c41cc3.roa Signing time: Sat 28 Feb 2026 14:00:40 +0000 ROA not before: Sat 28 Feb 2026 14:00:40 +0000 ROA not after: Fri 29 May 2026 13:00:40 +0000 asID: 16591 IP address blocks: 136.53.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:03:7c:fa:c9:e3:28:b0:a5:d0:6d:44:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Feb 28 14:00:40 2026 GMT Not After : May 29 13:00:40 2026 GMT Subject: CN=4ea8744e-c26e-4836-b809-8db047cfe5bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:3e:86:b7:79:f2:ba:18:5f:19:e1:6c:d3:9a: cb:49:af:56:51:42:02:99:cd:40:ec:d6:c7:de:24: 2e:60:4c:75:21:a2:b0:a1:a1:8a:2d:56:3d:92:2b: 13:b6:ea:f7:75:5f:f6:b4:30:94:97:96:77:a4:21: 9f:92:7c:77:2e:54:49:89:c7:57:4e:78:58:e8:97: 12:69:5a:5a:e8:88:9b:6b:3e:17:47:64:29:12:4e: 48:f7:6f:65:0b:9f:e4:c4:b0:d4:40:33:fc:5e:d7: d4:6b:ad:56:83:91:b8:dc:e9:62:25:bb:61:f1:bc: 99:fc:e9:54:9b:40:eb:6f:a2:b9:cd:69:14:25:fe: cf:6d:94:43:ba:1f:cd:65:03:69:2d:48:3f:fb:db: ea:2d:1a:c5:99:4d:98:63:9b:0c:78:ea:a3:6b:7d: 05:b8:42:51:ba:a5:18:8a:4a:58:80:e1:dd:2c:77: 76:23:87:6d:ad:fd:b0:a9:19:92:b4:9b:fa:d9:25: dc:62:12:e8:8e:76:3d:fc:a8:e3:1f:fe:d5:fd:0b: 8e:fd:84:ff:85:ee:91:1d:90:8e:69:4e:33:b0:f3: cf:c8:b4:74:bb:c9:db:d0:28:8d:73:7f:40:60:d2: e5:79:07:65:76:17:81:ae:12:10:b2:79:56:c1:40: f8:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:B2:05:94:4D:88:F5:0E:47:12:3F:EA:D2:E2:73:5F:33:17:93:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/437c7491-acf1-3988-ad8f-3d1717c41cc3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.53.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:00:ce:ae:a3:e1:d1:67:d4:46:51:9d:07:d3:b0:fe:47:53: 1d:70:3d:c9:bf:dc:f1:20:e4:25:e1:b9:1b:61:b5:0b:fa:cc: 2e:c2:b0:8d:04:4b:c3:29:b9:98:cf:59:fa:0b:f5:94:a0:78: a5:d2:65:08:c3:03:3e:88:a6:2b:bc:34:30:6b:2c:a4:b3:40: f5:3b:e3:70:83:c5:24:cf:3c:97:f1:8d:83:2e:5c:6e:f2:c9: ee:16:49:25:0f:6c:80:2b:0b:d6:6e:e0:2b:ea:22:ab:54:9e: 19:a9:e3:48:cf:4e:38:28:80:d3:a1:b3:e9:ff:18:39:76:59: e3:6e:69:90:74:85:a5:f3:b4:3b:bb:38:22:7d:69:08:97:b2: 30:23:28:b3:35:e3:60:5c:ec:c4:57:28:fb:18:63:82:b4:c4: 44:74:b9:a7:5e:12:7d:95:75:8c:66:03:c3:b8:da:b5:9c:73: dc:ab:68:19:45:22:74:94:7a:6e:a0:5c:12:3c:3a:18:ef:d0: 1f:01:c1:7c:fa:aa:12:ce:56:08:ec:3a:dc:c4:49:b9:ad:24: cd:04:a7:f6:cf:d8:8a:41:81:1a:38:f1:b4:7c:71:c0:aa:29: b5:da:62:11:2e:24:10:3a:34:54:1b:64:87:7c:4a:ac:49:32: 81:a5:a2:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0DfPrJ4yiwpdBtRAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDIyODE0MDA0MFoXDTI2MDUyOTEzMDA0MFowLzEtMCsGA1UEAxMk NGVhODc0NGUtYzI2ZS00ODM2LWI4MDktOGRiMDQ3Y2ZlNWJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoT6Gt3nyuhhfGeFs05rLSa9WUUICmc1A7NbH 3iQuYEx1IaKwoaGKLVY9kisTtur3dV/2tDCUl5Z3pCGfknx3LlRJicdXTnhY6JcS aVpa6Iibaz4XR2QpEk5I929lC5/kxLDUQDP8XtfUa61Wg5G43OliJbth8byZ/OlU m0Drb6K5zWkUJf7PbZRDuh/NZQNpLUg/+9vqLRrFmU2YY5sMeOqja30FuEJRuqUY ikpYgOHdLHd2I4dtrf2wqRmStJv62SXcYhLojnY9/KjjH/7V/QuO/YT/he6RHZCO aU4zsPPPyLR0u8nb0CiNc39AYNLleQdldheBrhIQsnlWwUD4LQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCKyBZRNiPUORxI/6tLic18zF5PvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvNDM3Yzc0OTEtYWNmMS0z OTg4LWFkOGYtM2QxNzE3YzQxY2MzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADwAzq6j4dFn1EZRnQfTsP5HUx1wPcm/3PEg5CXhuRthtQv6zC7CsI0E S8MpuZjPWfoL9ZSgeKXSZQjDAz6Ipiu8NDBrLKSzQPU743CDxSTPPJfxjYMuXG7y ye4WSSUPbIArC9Zu4CvqIqtUnhmp40jPTjgogNOhs+n/GDl2WeNuaZB0haXztDu7 OCJ9aQiXsjAjKLM142Bc7MRXKPsYY4K0xER0uadeEn2VdYxmA8O42rWcc9yraBlF InSUem6gXBI8Ohjv0B8BwXz6qhLOVgjsOtzESbmtJM0Ep/bP2IpBgRo48bR8ccCq KbXaYhEuJBA6NFQbZId8SqxJMoGlos8= -----END CERTIFICATE-----Generated at Mon Mar 2 16:45:31 2026 by rpki-client