$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/72af0589-5060-3a98-9b53-ea7be26f3c65.roa File: 72af0589-5060-3a98-9b53-ea7be26f3c65.roa (raw, json) Hash identifier: fQR9/CLwvkZ4wWlCLqZDSaGwOoXFUh5bEY3R6XUJvjQ= Subject key identifier: 61:C1:90:EE:FB:C9:4F:81:57:40:57:E9:0E:CB:03:AB:CC:59:B8:02 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584D037D004931C9C475A9A28B80 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/72af0589-5060-3a98-9b53-ea7be26f3c65.roa Signing time: Sat 28 Feb 2026 14:00:40 +0000 ROA not before: Sat 28 Feb 2026 14:00:40 +0000 ROA not after: Fri 29 May 2026 13:00:40 +0000 asID: 16591 IP address blocks: 136.35.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:03:7d:00:49:31:c9:c4:75:a9:a2:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Feb 28 14:00:40 2026 GMT Not After : May 29 13:00:40 2026 GMT Subject: CN=82624c41-d4ec-40ad-b3c3-2ac01a6bfe7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:9c:70:2c:b7:e9:dc:2d:8d:bd:0e:b6:b7:f3: 64:92:51:cf:c6:58:27:a0:16:df:c4:6d:fe:64:14: e1:77:9d:56:a4:29:60:9d:03:b4:c4:06:09:95:6d: b9:f1:fd:a1:04:ba:5d:5b:92:ea:ba:20:9c:b1:28: ac:4b:b9:ac:86:1f:6c:28:88:1c:3a:e8:a4:13:53: bc:55:b0:63:e8:05:2e:a1:75:5d:a0:cd:19:7f:6e: 15:6b:eb:42:92:a1:68:7b:0c:31:4a:e2:1a:9f:a7: bb:9b:c4:82:7e:59:2d:af:e4:7f:02:ff:af:a0:bb: a7:e6:11:f2:d1:74:31:5a:7d:ff:26:78:ed:c6:08: d0:49:72:a0:f3:b9:26:76:b0:b4:d2:57:3f:31:4e: ef:ea:61:97:52:12:bc:8d:19:f1:63:58:e0:91:c1: 77:1a:05:34:2f:cb:76:06:31:b0:96:3b:a8:0b:a4: ed:2c:3e:ba:4f:18:f7:cc:64:1e:e4:05:56:8c:d9: 6e:ce:47:2a:ed:af:02:10:58:02:95:1c:20:10:f5: 09:2d:0e:dc:e6:b8:68:6b:57:7f:66:a7:f7:05:0a: c2:68:82:ba:0e:38:f2:c3:f8:c5:ec:a9:be:ca:09: 2b:85:74:51:97:6b:5d:b4:97:c1:99:34:14:39:32: 01:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:C1:90:EE:FB:C9:4F:81:57:40:57:E9:0E:CB:03:AB:CC:59:B8:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/72af0589-5060-3a98-9b53-ea7be26f3c65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.35.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:4c:89:53:bc:2c:3b:0f:1b:e4:be:37:a7:5f:a2:9e:8f:0e: 39:28:7d:70:af:48:f8:96:cd:9f:79:4c:ae:eb:66:36:6e:ce: 2e:bc:c9:0c:33:11:e4:c8:2d:81:4a:2a:c8:cf:ad:b2:99:d5: e4:94:31:63:9f:63:fd:96:41:b6:39:5f:ca:02:c2:06:2e:53: d8:25:87:c0:77:2c:51:0a:bc:6c:17:9c:75:c8:69:1c:cb:89: ff:a6:22:28:87:f7:8d:ae:b3:ae:11:45:2e:54:eb:59:eb:45: 55:09:2e:03:2e:2a:5e:7e:2b:da:3e:9a:6b:1a:47:70:c3:b8: 7d:fc:ab:0a:e3:c4:82:15:1d:e1:57:2d:59:7e:18:c4:fb:88: 4a:fb:fc:29:44:c2:a5:56:51:06:96:ae:fe:0a:13:8f:ba:be: dc:66:70:f2:a2:ed:de:8e:ee:00:6e:47:41:bd:53:c2:33:1d: 85:ec:2f:f4:0a:93:bb:37:d5:da:f0:ec:6f:45:72:8e:32:d8: 81:b1:2a:6f:3d:d6:47:3b:bd:3d:cd:2d:5a:84:6f:f5:31:c9: ef:20:a6:c4:b0:49:55:a4:77:5e:3f:98:4a:2f:68:59:bf:14: 8b:73:0f:7a:31:04:61:cc:1f:51:c2:a9:39:0f:3d:0c:75:67: 05:0d:0e:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0DfQBJMcnEdamii4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDIyODE0MDA0MFoXDTI2MDUyOTEzMDA0MFowLzEtMCsGA1UEAxMk ODI2MjRjNDEtZDRlYy00MGFkLWIzYzMtMmFjMDFhNmJmZTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5xwLLfp3C2NvQ62t/NkklHPxlgnoBbfxG3+ ZBThd51WpClgnQO0xAYJlW258f2hBLpdW5LquiCcsSisS7mshh9sKIgcOuikE1O8 VbBj6AUuoXVdoM0Zf24Va+tCkqFoewwxSuIan6e7m8SCflktr+R/Av+voLun5hHy 0XQxWn3/JnjtxgjQSXKg87kmdrC00lc/MU7v6mGXUhK8jRnxY1jgkcF3GgU0L8t2 BjGwljuoC6TtLD66Txj3zGQe5AVWjNluzkcq7a8CEFgClRwgEPUJLQ7c5rhoa1d/ Zqf3BQrCaIK6Djjyw/jF7Km+ygkrhXRRl2tdtJfBmTQUOTIBLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGHBkO77yU+BV0BX6Q7LA6vMWbgCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvNzJhZjA1ODktNTA2MC0z YTk4LTliNTMtZWE3YmUyNmYzYzY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCPQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGtMiVO8LDsPG+S+N6dfop6PDjkofXCvSPiWzZ95TK7rZjZuzi68yQwz EeTILYFKKsjPrbKZ1eSUMWOfY/2WQbY5X8oCwgYuU9glh8B3LFEKvGwXnHXIaRzL if+mIiiH942us64RRS5U61nrRVUJLgMuKl5+K9o+mmsaR3DDuH38qwrjxIIVHeFX LVl+GMT7iEr7/ClEwqVWUQaWrv4KE4+6vtxmcPKi7d6O7gBuR0G9U8IzHYXsL/QK k7s31drw7G9Fco4y2IGxKm891kc7vT3NLVqEb/Uxye8gpsSwSVWkd14/mEovaFm/ FItzD3oxBGHMH1HCqTkPPQx1ZwUNDpo= -----END CERTIFICATE-----Generated at Mon Mar 2 08:39:23 2026 by rpki-client