$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/67235be9-e70f-35dc-8e56-2a5b56bdc270.roa File: 67235be9-e70f-35dc-8e56-2a5b56bdc270.roa (raw, json) Hash identifier: v//c6uEBYH2nqlJQvCzqy0Q+hCM7Ng5YPX+iqbIKDBg= Subject key identifier: FF:E9:B4:C6:D8:EE:A3:15:BC:0B:3A:90:22:45:1E:7D:92:03:61:59 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584D037D4D265FBF926473491B80 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/67235be9-e70f-35dc-8e56-2a5b56bdc270.roa Signing time: Sat 28 Feb 2026 14:00:40 +0000 ROA not before: Sat 28 Feb 2026 14:00:40 +0000 ROA not after: Fri 29 May 2026 13:00:40 +0000 asID: 16591 IP address blocks: 136.37.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:03:7d:4d:26:5f:bf:92:64:73:49:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Feb 28 14:00:40 2026 GMT Not After : May 29 13:00:40 2026 GMT Subject: CN=8dd2cf48-ea87-4b38-844a-39d28e61b2bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:31:db:e6:92:19:c5:f0:33:47:b6:b9:cc:51: ee:02:63:4e:31:64:b4:ff:1e:17:ea:43:32:5c:5a: 07:6e:83:d9:f9:39:1f:08:8a:2e:9a:6d:f1:e4:ea: c1:66:aa:62:a5:53:1f:4a:2f:98:f4:a9:7a:01:2c: ae:a0:b1:13:1f:f0:11:17:f1:61:17:cb:c9:4d:f4: 0d:73:7b:94:77:0c:fa:29:ec:f5:09:6a:15:fb:fb: 6a:16:1b:9a:64:6c:1f:21:54:3d:bd:2c:d0:21:c1: c7:38:64:c0:48:46:1f:89:4a:9a:0f:de:f7:36:96: 26:d6:d8:cf:19:27:7f:c7:df:68:ba:36:5d:0d:45: 04:d8:63:f8:fe:a8:d6:15:e3:6f:de:4a:80:d2:dd: 4f:f5:fe:a4:17:2a:28:68:bb:5f:23:73:1b:c7:c8: b2:bf:fe:0c:85:2d:fa:08:f0:ee:6c:a4:8d:a5:3c: eb:ba:c6:52:18:65:fe:c3:a2:43:01:e5:94:ba:a1: 20:fb:d1:92:11:7d:5c:68:61:a9:a4:88:d8:60:a1: 32:40:c1:8b:b1:b8:3d:20:75:13:54:74:5c:eb:b5: f9:bc:ca:d5:bc:b1:bd:37:64:1e:fa:e9:a1:5b:ee: ad:80:59:47:96:5e:4b:ce:48:55:05:41:4f:1a:9f: fb:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:E9:B4:C6:D8:EE:A3:15:BC:0B:3A:90:22:45:1E:7D:92:03:61:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/67235be9-e70f-35dc-8e56-2a5b56bdc270.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.37.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:a5:2b:7c:66:52:52:4a:1d:06:0f:d8:40:da:1f:2e:51:bc: 6d:12:d7:5d:5f:84:d1:80:cc:23:a2:bf:77:4d:c9:76:4f:6b: 20:06:5f:8f:29:80:80:7a:61:f3:8f:2c:ba:bb:22:66:53:66: ce:db:02:ee:0b:50:18:fc:cf:d3:83:ab:fb:e8:12:db:bb:e0: 93:d4:79:9c:be:57:cb:f8:dc:d7:5c:2c:16:ef:6c:84:f8:89: a3:0f:bf:cc:af:46:38:2c:3c:a5:af:a3:d9:95:2c:b0:7c:b8: fb:59:72:fe:eb:dd:bb:02:4d:9b:5d:d1:a1:36:c7:e7:bf:3c: 29:fe:df:12:4c:09:b3:44:2f:4a:d7:81:0f:59:f0:7b:34:b5: 13:16:47:48:23:22:07:44:32:ac:c5:65:fe:b9:8d:c9:3c:c0: 39:52:b5:a9:db:e9:eb:f3:54:48:43:38:ef:01:bb:94:aa:ff: 7a:07:16:1d:4a:37:56:88:a4:60:56:f3:60:e0:17:da:69:77: 8d:d5:4d:b4:56:4c:53:1e:ff:9c:85:7f:20:5a:dc:60:2a:e8: f7:08:78:4e:ca:19:97:db:aa:73:75:e4:66:03:af:00:d0:ec: f4:9f:23:2a:dd:5d:59:80:a5:40:e2:3a:84:a4:ef:d2:f9:17: bf:2e:f0:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0DfU0mX7+SZHNJG4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDIyODE0MDA0MFoXDTI2MDUyOTEzMDA0MFowLzEtMCsGA1UEAxMk OGRkMmNmNDgtZWE4Ny00YjM4LTg0NGEtMzlkMjhlNjFiMmJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzHb5pIZxfAzR7a5zFHuAmNOMWS0/x4X6kMy XFoHboPZ+TkfCIoumm3x5OrBZqpipVMfSi+Y9Kl6ASyuoLETH/ARF/FhF8vJTfQN c3uUdwz6Kez1CWoV+/tqFhuaZGwfIVQ9vSzQIcHHOGTASEYfiUqaD973NpYm1tjP GSd/x99oujZdDUUE2GP4/qjWFeNv3kqA0t1P9f6kFyooaLtfI3Mbx8iyv/4MhS36 CPDubKSNpTzrusZSGGX+w6JDAeWUuqEg+9GSEX1caGGppIjYYKEyQMGLsbg9IHUT VHRc67X5vMrVvLG9N2Qe+umhW+6tgFlHll5LzkhVBUFPGp/7gQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP/ptMbY7qMVvAs6kCJFHn2SA2FZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvNjcyMzViZTktZTcwZi0z NWRjLThlNTYtMmE1YjU2YmRjMjcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCUwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC2lK3xmUlJKHQYP2EDaHy5RvG0S111fhNGAzCOiv3dNyXZPayAGX48p gIB6YfOPLLq7ImZTZs7bAu4LUBj8z9ODq/voEtu74JPUeZy+V8v43NdcLBbvbIT4 iaMPv8yvRjgsPKWvo9mVLLB8uPtZcv7r3bsCTZtd0aE2x+e/PCn+3xJMCbNEL0rX gQ9Z8Hs0tRMWR0gjIgdEMqzFZf65jck8wDlStanb6evzVEhDOO8Bu5Sq/3oHFh1K N1aIpGBW82DgF9ppd43VTbRWTFMe/5yFfyBa3GAq6PcIeE7KGZfbqnN15GYDrwDQ 7PSfIyrdXVmApUDiOoSk79L5F78u8KM= -----END CERTIFICATE-----Generated at Mon Mar 2 09:44:15 2026 by rpki-client