$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/457728f7-f101-3968-af04-bee701511c93.roa File: 457728f7-f101-3968-af04-bee701511c93.roa (raw, json) Hash identifier: iRZKGAxC8pffjYGioVIwrECxW1LAgVKucgYcVZq7doY= Subject key identifier: 12:50:FC:B6:27:48:33:AE:63:E5:E4:74:7F:FA:C7:22:52:DB:82:D3 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584D037D50BC2210E7EA5C0F1CC0 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/457728f7-f101-3968-af04-bee701511c93.roa Signing time: Sat 28 Feb 2026 14:00:40 +0000 ROA not before: Sat 28 Feb 2026 14:00:40 +0000 ROA not after: Fri 29 May 2026 13:00:40 +0000 asID: 16591 IP address blocks: 136.48.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:03:7d:50:bc:22:10:e7:ea:5c:0f:1c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Feb 28 14:00:40 2026 GMT Not After : May 29 13:00:40 2026 GMT Subject: CN=98ef2775-aba8-4b96-bbf9-140035e76220 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:0c:8e:39:e9:df:4c:01:bb:40:ff:c3:20:a8: 96:af:b0:d5:7a:35:08:e7:1b:fc:de:4d:62:d7:30: 09:bc:e8:42:25:65:02:2e:8f:0f:43:71:9a:da:08: c9:74:38:75:5e:8b:37:65:72:d5:ce:4e:43:1a:c3: cc:63:73:8a:b6:9f:94:f3:f7:ee:38:a2:27:18:1f: 66:a4:90:ce:fe:77:2f:c3:71:0e:46:61:db:05:19: e7:8d:27:d6:75:5b:e1:4f:ef:11:cb:37:57:a1:85: 15:a5:96:15:0d:ab:04:06:97:36:b2:0d:b0:fe:24: 1e:92:67:fd:e2:8b:00:9e:c0:73:07:4a:ee:78:5c: 5b:da:0e:7b:b6:77:a6:6f:6e:30:d8:c1:a7:7e:9e: 3e:94:53:a5:fe:50:7e:fe:59:03:fb:5c:78:a8:50: 04:ba:e9:3d:a5:a7:9b:a1:a1:64:96:79:f7:3b:95: b6:7b:9e:d5:02:a2:99:41:cf:ac:ba:6e:a9:03:61: 51:73:bc:ab:90:54:07:4c:f2:a1:de:aa:16:43:24: 8f:6b:d6:d3:c5:67:6b:de:4a:21:02:96:62:e0:20: da:ef:d2:67:d8:a9:db:e6:18:69:83:75:fa:b8:75: d4:20:62:2c:8e:91:51:eb:2b:21:c4:fc:82:40:5a: fa:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:50:FC:B6:27:48:33:AE:63:E5:E4:74:7F:FA:C7:22:52:DB:82:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/457728f7-f101-3968-af04-bee701511c93.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.48.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:ce:b9:b7:51:9f:70:e5:09:6c:d2:fb:57:a7:5b:15:00:3f: 15:b6:4b:78:83:0f:35:1c:55:60:fe:a8:5c:4c:81:de:88:23: 32:d5:70:93:c0:6c:bf:fb:82:b2:d1:ec:6d:28:83:f6:27:cc: 32:95:b6:40:bb:03:f4:a2:c4:d1:d7:f3:6a:f6:3f:32:86:a1: 7a:7c:99:4d:7e:2f:7f:1e:40:43:76:ba:58:9a:40:ec:a6:09: e4:02:c4:40:b4:7e:cb:d6:ca:2c:70:af:a1:a0:2d:a7:5b:b9: ef:64:c6:63:6f:da:af:a3:d5:d4:54:34:0f:cb:73:ba:b5:65: 3e:20:ad:76:af:d0:dc:5c:22:7e:23:b6:6b:ca:41:3d:aa:4a: 59:ad:ea:ec:ac:09:ca:c3:ae:a0:ef:32:1b:8b:40:93:31:57: d9:7b:f5:7b:3d:49:41:ca:0a:86:04:cf:94:79:8a:7d:2e:b9: 7b:db:dc:e3:c7:cc:9e:f3:27:1d:32:33:bb:0b:f4:54:da:ff: 8d:73:b1:10:86:e4:c8:af:ad:73:a7:c7:a1:f7:71:3c:46:25: 11:81:c8:4e:d4:46:40:76:b9:7a:1f:5d:45:e6:66:88:33:c3: 8f:c7:33:bc:05:67:a7:df:18:f3:9a:ce:48:8c:41:29:a3:c7: 4a:c3:54:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0DfVC8IhDn6lwPHMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDIyODE0MDA0MFoXDTI2MDUyOTEzMDA0MFowLzEtMCsGA1UEAxMk OThlZjI3NzUtYWJhOC00Yjk2LWJiZjktMTQwMDM1ZTc2MjIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwyOOenfTAG7QP/DIKiWr7DVejUI5xv83k1i 1zAJvOhCJWUCLo8PQ3Ga2gjJdDh1Xos3ZXLVzk5DGsPMY3OKtp+U8/fuOKInGB9m pJDO/ncvw3EORmHbBRnnjSfWdVvhT+8RyzdXoYUVpZYVDasEBpc2sg2w/iQekmf9 4osAnsBzB0rueFxb2g57tnemb24w2MGnfp4+lFOl/lB+/lkD+1x4qFAEuuk9paeb oaFklnn3O5W2e57VAqKZQc+sum6pA2FRc7yrkFQHTPKh3qoWQySPa9bTxWdr3koh ApZi4CDa79Jn2Knb5hhpg3X6uHXUIGIsjpFR6yshxPyCQFr6cwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBJQ/LYnSDOuY+XkdH/6xyJS24LTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvNDU3NzI4ZjctZjEwMS0z OTY4LWFmMDQtYmVlNzAxNTExYzkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDAQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADTOubdRn3DlCWzS+1enWxUAPxW2S3iDDzUcVWD+qFxMgd6IIzLVcJPA bL/7grLR7G0og/YnzDKVtkC7A/SixNHX82r2PzKGoXp8mU1+L38eQEN2uliaQOym CeQCxEC0fsvWyixwr6GgLadbue9kxmNv2q+j1dRUNA/Lc7q1ZT4grXav0NxcIn4j tmvKQT2qSlmt6uysCcrDrqDvMhuLQJMxV9l79Xs9SUHKCoYEz5R5in0uuXvb3OPH zJ7zJx0yM7sL9FTa/41zsRCG5MivrXOnx6H3cTxGJRGByE7URkB2uXofXUXmZogz w4/HM7wFZ6ffGPOazkiMQSmjx0rDVBo= -----END CERTIFICATE-----Generated at Mon Mar 2 14:29:41 2026 by rpki-client