$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/52f649f1-44ae-35e5-aead-f4d230c61b37.roa File: 52f649f1-44ae-35e5-aead-f4d230c61b37.roa (raw, json) Hash identifier: E4BGMyxmCF2wOmtpY/l5IDk9e1BjwLQjpTSdJ8xDShE= Subject key identifier: F6:EA:3B:48:4B:BE:2D:6C:BD:E3:90:42:F3:E2:1C:D2:9D:85:94:F3 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584CD73B5820F33B0DC99B14D040 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/52f649f1-44ae-35e5-aead-f4d230c61b37.roa Signing time: Thu 12 Feb 2026 17:33:00 +0000 ROA not before: Thu 12 Feb 2026 17:33:00 +0000 ROA not after: Wed 13 May 2026 16:33:00 +0000 asID: 16591 IP address blocks: 136.61.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d7:3b:58:20:f3:3b:0d:c9:9b:14:d0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Feb 12 17:33:00 2026 GMT Not After : May 13 16:33:00 2026 GMT Subject: CN=4d79c26c-efe6-4f9a-b086-2da312580468 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:97:2a:f9:76:11:40:36:12:26:30:6f:8a:b4: 53:2b:38:ba:81:8f:0e:24:03:cd:65:76:88:10:e0: 25:47:65:3e:ff:cd:30:15:82:e8:ec:3c:8c:4d:b1: f3:7a:45:12:7f:ad:8a:ec:e5:6e:a0:41:35:1a:82: 32:b7:2f:ac:05:63:a7:1b:f1:0f:0e:59:6a:65:83: 56:c2:6f:0d:fd:a9:3f:83:32:22:b4:4f:de:85:84: f7:e9:0a:a0:6b:93:66:5c:58:aa:db:39:8d:92:74: f4:c6:29:76:ce:86:ab:ea:84:88:70:1e:12:a1:62: 66:08:79:9a:7c:d9:71:6f:37:de:24:5a:22:ff:93: 79:df:29:da:7e:91:2b:e3:91:46:32:ec:dd:7b:2e: 46:92:72:99:ac:60:e7:01:1b:4c:1b:75:53:75:98: 3f:44:53:fe:64:6a:da:f1:97:08:07:4a:14:50:b9: 1e:57:56:cd:55:83:95:05:39:cd:96:7f:62:43:7a: 38:09:84:e5:64:f1:91:b0:e0:75:6c:8d:71:d6:ef: e7:0e:40:99:20:c3:0b:d8:5c:ef:b0:45:ba:42:67: 8e:56:92:b4:2e:2b:e5:b0:3d:04:c6:9d:8a:d1:41: 01:c2:0a:33:6e:dd:cd:5e:1d:86:0f:63:1f:36:76: 23:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:EA:3B:48:4B:BE:2D:6C:BD:E3:90:42:F3:E2:1C:D2:9D:85:94:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/52f649f1-44ae-35e5-aead-f4d230c61b37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.61.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:25:c7:45:84:3d:8c:5c:1e:14:f5:af:9e:fb:5d:f4:88:2b: 5d:9a:c8:7a:0d:13:cc:20:d5:cc:44:e5:d3:0a:e3:35:91:48: 8c:b7:de:6f:7c:a3:83:65:ec:7c:f3:c4:2f:a2:5b:fd:93:94: 5b:b1:bf:ce:20:6f:bc:5e:57:77:e5:0e:b3:b7:bf:b8:28:23: f7:f1:6b:93:e3:c9:47:23:97:ca:1b:b6:8b:4c:97:03:96:c0: e8:5b:23:a3:f3:37:e8:8b:c3:94:7a:da:ac:79:86:9b:92:39: e2:24:69:82:5d:22:fb:93:34:cb:9c:c8:51:0e:44:da:2f:d7: 11:a0:9c:5a:ba:50:80:28:2c:23:29:3f:96:83:cc:10:4b:8d: 1f:bd:e8:aa:7e:a7:bb:02:97:11:c2:85:f7:a2:91:61:ac:46: 5e:11:91:d2:98:4b:8d:4f:cf:ef:02:ca:9f:2b:7b:b0:48:40: 77:71:c8:ea:9d:aa:35:e7:f3:4c:24:02:7a:93:5f:1b:bc:33: cb:23:62:c2:11:06:41:30:26:53:f4:2b:52:ab:fa:39:ed:68: e9:cd:e7:00:f0:cb:c3:29:4c:e6:f0:bc:4e:e4:c4:44:49:24: 05:52:01:38:63:cd:88:d8:49:76:a4:e6:ae:46:21:27:f6:c0: ee:f6:ac:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzXO1gg8zsNyZsU0EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDIxMjE3MzMwMFoXDTI2MDUxMzE2MzMwMFowLzEtMCsGA1UEAxMk NGQ3OWMyNmMtZWZlNi00ZjlhLWIwODYtMmRhMzEyNTgwNDY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5cq+XYRQDYSJjBvirRTKzi6gY8OJAPNZXaI EOAlR2U+/80wFYLo7DyMTbHzekUSf62K7OVuoEE1GoIyty+sBWOnG/EPDllqZYNW wm8N/ak/gzIitE/ehYT36Qqga5NmXFiq2zmNknT0xil2zoar6oSIcB4SoWJmCHma fNlxbzfeJFoi/5N53ynafpEr45FGMuzdey5GknKZrGDnARtMG3VTdZg/RFP+ZGra 8ZcIB0oUULkeV1bNVYOVBTnNln9iQ3o4CYTlZPGRsOB1bI1x1u/nDkCZIMML2Fzv sEW6QmeOVpK0LivlsD0Exp2K0UEBwgozbt3NXh2GD2MfNnYjZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPbqO0hLvi1sveOQQvPiHNKdhZTzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvNTJmNjQ5ZjEtNDRhZS0z NWU1LWFlYWQtZjRkMjMwYzYxYjM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiD2QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIolx0WEPYxcHhT1r577XfSIK12ayHoNE8wg1cxE5dMK4zWRSIy33m98 o4Nl7HzzxC+iW/2TlFuxv84gb7xeV3flDrO3v7goI/fxa5PjyUcjl8obtotMlwOW wOhbI6PzN+iLw5R62qx5hpuSOeIkaYJdIvuTNMucyFEORNov1xGgnFq6UIAoLCMp P5aDzBBLjR+96Kp+p7sClxHChfeikWGsRl4RkdKYS41Pz+8Cyp8re7BIQHdxyOqd qjXn80wkAnqTXxu8M8sjYsIRBkEwJlP0K1Kr+jntaOnN5wDwy8MpTObwvE7kxERJ JAVSAThjzYjYSXak5q5GISf2wO72rMM= -----END CERTIFICATE-----Generated at Mon Mar 2 12:56:49 2026 by rpki-client