$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/5657d890-d69b-3941-a691-028f30555b49.roa File: 5657d890-d69b-3941-a691-028f30555b49.roa (raw, json) Hash identifier: Q7EhkBHVTXuAE3+DLeDg7g7EZHeUbb3i2B03DtOfCUo= Subject key identifier: FA:19:C4:CA:28:97:EE:49:D9:B6:C5:65:1A:BC:1B:85:74:92:1F:9B Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584D037D10C22C0AB8428681A880 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/5657d890-d69b-3941-a691-028f30555b49.roa Signing time: Sat 28 Feb 2026 14:00:40 +0000 ROA not before: Sat 28 Feb 2026 14:00:40 +0000 ROA not after: Fri 29 May 2026 13:00:40 +0000 asID: 16591 IP address blocks: 136.56.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:03:7d:10:c2:2c:0a:b8:42:86:81:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Feb 28 14:00:40 2026 GMT Not After : May 29 13:00:40 2026 GMT Subject: CN=96b8e8b8-1ab0-43ab-a9e1-08bff1881f11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:3b:9e:38:40:01:a3:07:63:92:3d:3d:9e:57: e2:da:22:eb:ac:6b:c9:86:5a:c2:23:59:e2:ce:76: 75:5e:c6:5f:4a:1e:9f:4d:55:22:fe:df:02:50:81: c8:3d:49:4b:f8:e2:39:97:57:66:c8:5e:8e:1a:60: fd:6e:2f:42:ac:1e:50:48:94:38:4a:23:9c:da:5d: 43:24:af:21:f2:4c:1d:09:46:44:ee:92:38:cd:4d: be:b0:af:a6:e7:8d:d4:03:2f:22:fe:45:b2:ee:01: 59:41:f3:ca:54:89:97:79:15:a3:c3:85:2a:4a:9a: e8:45:ec:fc:bf:c7:f7:47:5f:62:30:82:84:1f:2f: 79:e5:aa:2f:78:e9:fd:80:b1:15:6b:95:0c:56:67: c6:58:51:50:53:52:20:5b:6f:25:73:2a:58:fe:5d: a9:b3:4a:de:c1:7a:5b:d1:0d:e1:9f:55:d3:86:b7: d4:8a:a7:d3:21:90:cb:83:53:38:f2:12:ff:77:01: 1d:50:9b:37:a9:a3:c0:b7:0c:98:47:0c:6a:05:c1: 9a:41:8a:f6:38:3b:bc:8b:fc:3c:3e:7b:31:d7:96: f2:9d:28:3e:08:a5:ae:c0:da:6b:2f:e0:03:2b:20: c5:d0:2b:9a:ee:20:29:f2:15:05:bc:ae:42:bf:c2: fe:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:19:C4:CA:28:97:EE:49:D9:B6:C5:65:1A:BC:1B:85:74:92:1F:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/5657d890-d69b-3941-a691-028f30555b49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.56.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:26:11:9f:42:ef:ee:06:bc:54:40:42:8f:27:a9:9c:cb:29: 05:ff:4b:40:4f:82:3b:82:4c:8b:b7:ce:f7:73:3b:0a:b7:9b: 25:cb:8a:87:d6:c8:7a:d9:52:8a:e0:b7:a2:17:8a:c0:5b:a9: 37:96:9c:8a:9d:c5:31:74:71:21:85:c1:c3:0a:78:c3:7f:9f: 00:84:39:c1:9f:c6:73:02:5d:46:f2:9b:74:d3:bd:22:3a:89: e8:d0:df:f3:74:a0:4d:60:2e:07:06:d1:5e:2d:04:6f:05:15: 61:36:75:4f:30:65:30:02:46:62:cb:7a:c0:00:21:68:52:86: b7:5e:42:e6:a5:a0:42:b6:f8:5b:b4:6a:88:5b:e1:ef:dc:d4: 00:76:c5:bf:d7:45:28:08:a6:f3:e8:51:7a:a2:17:4b:fd:13: 53:f9:73:b3:65:39:57:8a:5d:db:c4:f0:d9:30:f1:2c:69:61: 42:05:45:5f:12:eb:8f:87:43:6a:79:c3:04:eb:21:e1:8c:38: 40:73:7d:23:c2:6b:2c:57:b1:02:ed:91:19:3b:d8:0d:8e:9e: 80:91:81:9f:1b:66:f7:98:1f:05:9d:b1:5c:35:48:6b:0b:c8: d6:c5:f6:11:f5:13:40:e8:88:45:04:0b:7d:31:d0:e3:4c:5e: d4:84:85:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0DfRDCLAq4QoaBqIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDIyODE0MDA0MFoXDTI2MDUyOTEzMDA0MFowLzEtMCsGA1UEAxMk OTZiOGU4YjgtMWFiMC00M2FiLWE5ZTEtMDhiZmYxODgxZjExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgDueOEABowdjkj09nlfi2iLrrGvJhlrCI1ni znZ1XsZfSh6fTVUi/t8CUIHIPUlL+OI5l1dmyF6OGmD9bi9CrB5QSJQ4SiOc2l1D JK8h8kwdCUZE7pI4zU2+sK+m543UAy8i/kWy7gFZQfPKVImXeRWjw4UqSproRez8 v8f3R19iMIKEHy955aoveOn9gLEVa5UMVmfGWFFQU1IgW28lcypY/l2ps0rewXpb 0Q3hn1XThrfUiqfTIZDLg1M48hL/dwEdUJs3qaPAtwyYRwxqBcGaQYr2ODu8i/w8 Pnsx15bynSg+CKWuwNprL+ADKyDF0Cua7iAp8hUFvK5Cv8L+cwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPoZxMool+5J2bbFZRq8G4V0kh+bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvNTY1N2Q4OTAtZDY5Yi0z OTQxLWE2OTEtMDI4ZjMwNTU1YjQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDjAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE4mEZ9C7+4GvFRAQo8nqZzLKQX/S0BPgjuCTIu3zvdzOwq3myXLiofW yHrZUorgt6IXisBbqTeWnIqdxTF0cSGFwcMKeMN/nwCEOcGfxnMCXUbym3TTvSI6 iejQ3/N0oE1gLgcG0V4tBG8FFWE2dU8wZTACRmLLesAAIWhShrdeQualoEK2+Fu0 aohb4e/c1AB2xb/XRSgIpvPoUXqiF0v9E1P5c7NlOVeKXdvE8Nkw8SxpYUIFRV8S 64+HQ2p5wwTrIeGMOEBzfSPCayxXsQLtkRk72A2OnoCRgZ8bZveYHwWdsVw1SGsL yNbF9hH1E0DoiEUEC30x0ONMXtSEhds= -----END CERTIFICATE-----Generated at Mon Mar 2 14:41:19 2026 by rpki-client