$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/69336cfa-04f1-3c28-a1b7-21e5a98bc6db.roa File: 69336cfa-04f1-3c28-a1b7-21e5a98bc6db.roa (raw, json) Hash identifier: a9O7wCYbioqJoiNCLM41CBpxKh7T1hPzIanKhY/kPP4= Subject key identifier: D7:31:5F:C0:71:88:AA:5C:E6:17:5A:EA:41:0A:07:E2:AE:C1:9A:7B Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584D037D48EB41BDF5A2E8E1D900 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/69336cfa-04f1-3c28-a1b7-21e5a98bc6db.roa Signing time: Sat 28 Feb 2026 14:00:40 +0000 ROA not before: Sat 28 Feb 2026 14:00:40 +0000 ROA not after: Fri 29 May 2026 13:00:40 +0000 asID: 16591 IP address blocks: 136.33.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:03:7d:48:eb:41:bd:f5:a2:e8:e1:d9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Feb 28 14:00:40 2026 GMT Not After : May 29 13:00:40 2026 GMT Subject: CN=a7b520d6-1e27-48ce-9e95-c6e2b107eecf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:71:2c:1d:8e:3b:e5:0f:71:3c:bb:7c:9a:18: b1:8f:08:27:3d:93:7f:a1:75:9d:6e:05:1d:f6:37: 09:ea:8a:65:9e:fb:87:af:1b:7f:8f:24:5d:ee:04: 88:08:24:58:19:f5:f2:05:b7:a7:dc:2a:28:a7:a2: 59:75:96:69:96:90:cc:85:a1:e0:b5:af:2e:dc:d1: c2:4c:1c:7b:6e:77:79:94:34:9a:41:d9:99:cf:53: 8e:f1:16:3d:94:13:b3:fa:89:3d:f6:c7:bf:c4:cd: a5:e4:ad:24:b0:5b:38:9f:6d:b3:86:45:8a:e7:63: c6:94:de:4d:3f:79:de:b2:68:9b:fe:9c:b0:29:e5: c2:b6:6f:d6:54:bc:17:f3:25:bf:e2:e8:1d:72:6a: 7f:56:16:e4:88:62:d2:08:fb:56:1e:f6:ed:16:05: 4a:a1:69:eb:32:85:2c:d7:c5:60:ba:5f:54:3e:9b: 7b:71:aa:9d:32:d8:93:51:e0:b4:12:d8:18:6e:cc: 6d:2a:1f:30:40:a2:6f:7a:f4:db:c8:69:29:97:a2: c9:2f:5f:7f:b8:48:ee:09:e2:7e:7b:a8:39:77:e1: a9:ab:68:66:aa:d4:51:ff:68:80:28:ee:18:b3:a8: 5b:97:1c:94:fa:d7:a2:ba:72:6f:55:d8:f7:ba:c3: f1:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:31:5F:C0:71:88:AA:5C:E6:17:5A:EA:41:0A:07:E2:AE:C1:9A:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/69336cfa-04f1-3c28-a1b7-21e5a98bc6db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.33.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:45:65:35:0e:a1:ee:9f:11:f1:8b:b9:1f:eb:e2:79:da:88: 79:9c:e2:ce:f9:f8:ac:8f:3d:78:91:b4:f0:b5:38:e3:ca:31: 7f:9e:75:11:44:0f:de:f5:d6:74:18:99:b6:28:28:7c:67:01: 4b:27:e4:72:a4:82:74:4b:30:f6:73:a1:83:68:29:2b:65:09: d8:89:65:9e:72:97:8d:79:77:b9:ee:37:48:d0:9a:e7:e2:4e: 08:35:42:4c:d5:dc:08:8c:82:9c:48:b7:85:2d:53:70:98:fe: 83:5d:56:89:b7:ab:ec:44:f1:07:43:8b:f5:61:23:88:6a:5f: cd:29:d3:83:fd:4e:03:7b:7b:5a:76:ec:7d:9f:35:a5:65:fe: 57:1b:6b:da:5f:4f:06:43:a3:bd:10:66:3a:b8:e6:c9:c5:a3: a9:8e:48:0b:67:8f:1e:02:57:62:b9:27:2f:05:2a:1c:50:c0: bc:43:e3:6f:82:35:1d:05:d2:13:6d:02:92:45:b4:a2:a0:6d: 91:8c:c9:a2:5e:ea:a3:7a:c0:0b:40:72:1b:86:1f:a4:6f:be: 17:19:c0:70:ba:cc:31:51:37:0e:be:8c:f1:ca:d7:84:0b:16: 48:97:c6:24:5d:9a:67:af:ba:d8:34:41:c2:35:ba:b1:3a:cf: da:46:90:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0DfUjrQb31oujh2QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDIyODE0MDA0MFoXDTI2MDUyOTEzMDA0MFowLzEtMCsGA1UEAxMk YTdiNTIwZDYtMWUyNy00OGNlLTllOTUtYzZlMmIxMDdlZWNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXEsHY475Q9xPLt8mhixjwgnPZN/oXWdbgUd 9jcJ6oplnvuHrxt/jyRd7gSICCRYGfXyBben3Coop6JZdZZplpDMhaHgta8u3NHC TBx7bnd5lDSaQdmZz1OO8RY9lBOz+ok99se/xM2l5K0ksFs4n22zhkWK52PGlN5N P3nesmib/pywKeXCtm/WVLwX8yW/4ugdcmp/VhbkiGLSCPtWHvbtFgVKoWnrMoUs 18Vgul9UPpt7caqdMtiTUeC0EtgYbsxtKh8wQKJvevTbyGkpl6LJL19/uEjuCeJ+ e6g5d+Gpq2hmqtRR/2iAKO4Ys6hblxyU+teiunJvVdj3usPxHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNcxX8BxiKpc5hda6kEKB+KuwZp7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvNjkzMzZjZmEtMDRmMS0z YzI4LWExYjctMjFlNWE5OGJjNmRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCEAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIJFZTUOoe6fEfGLuR/r4nnaiHmc4s75+KyPPXiRtPC1OOPKMX+edRFE D9711nQYmbYoKHxnAUsn5HKkgnRLMPZzoYNoKStlCdiJZZ5yl415d7nuN0jQmufi Tgg1QkzV3AiMgpxIt4UtU3CY/oNdVom3q+xE8QdDi/VhI4hqX80p04P9TgN7e1p2 7H2fNaVl/lcba9pfTwZDo70QZjq45snFo6mOSAtnjx4CV2K5Jy8FKhxQwLxD42+C NR0F0hNtApJFtKKgbZGMyaJe6qN6wAtAchuGH6RvvhcZwHC6zDFRNw6+jPHK14QL FkiXxiRdmmevutg0QcI1urE6z9pGkJM= -----END CERTIFICATE-----Generated at Mon Mar 2 11:38:12 2026 by rpki-client