$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/72dda1b5-1896-3122-a9fd-3eadfa41596d.roa File: 72dda1b5-1896-3122-a9fd-3eadfa41596d.roa (raw, json) Hash identifier: V/YHYlRWF4WA3eWjvywly7pBYQGb1uAt4Cbjum2uMgc= Subject key identifier: 65:B4:C2:63:9D:9E:31:E4:0B:CE:89:DC:93:3B:F7:DE:3D:C3:B3:DC Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584D037CF8D7B33F198D45896380 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/72dda1b5-1896-3122-a9fd-3eadfa41596d.roa Signing time: Sat 28 Feb 2026 14:00:40 +0000 ROA not before: Sat 28 Feb 2026 14:00:40 +0000 ROA not after: Fri 29 May 2026 13:00:40 +0000 asID: 16591 IP address blocks: 136.34.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:03:7c:f8:d7:b3:3f:19:8d:45:89:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Feb 28 14:00:40 2026 GMT Not After : May 29 13:00:40 2026 GMT Subject: CN=0dfffe62-5010-4113-beb2-a16fdb00d876 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:87:78:84:59:ce:df:01:bf:d4:cf:3c:85:ab: 5f:fe:d1:26:ef:5c:2c:c3:17:b8:c9:6c:90:44:65: e9:62:2b:1f:79:12:1b:ac:cf:65:f2:8f:c9:5e:6b: 07:25:ee:b2:39:02:b8:09:ea:bd:72:e4:fb:12:0f: e4:4a:8a:8d:15:a5:37:21:78:53:27:a5:e0:b4:a4: 58:25:96:f0:ea:2c:82:fc:07:2f:74:37:fd:7d:48: c1:ae:84:ea:ed:c2:cc:f5:fe:9d:6f:d6:48:c7:42: 78:25:27:38:c5:1d:d8:9f:cb:07:ca:22:bf:74:27: f4:3e:0e:67:1e:44:8f:10:ea:67:30:ed:b3:7b:a7: 34:97:1c:d9:eb:71:e6:4c:ff:21:a0:db:c4:19:68: ea:a7:3b:c3:10:53:28:b8:98:1b:c4:dc:fd:e8:d1: ab:b6:c2:12:44:c8:a5:13:bc:cf:5c:f7:e8:a2:6a: 93:73:b3:eb:c9:d9:fc:cd:a4:ef:6f:27:a4:f2:59: bf:2d:11:4d:ac:dc:c2:06:c7:52:7d:65:6a:ae:1f: 10:f0:15:f7:bb:b6:87:b4:98:4d:37:56:a2:f7:d5: 66:68:2e:3a:71:e8:b5:e1:d1:b7:96:9e:1b:29:57: e5:e0:1b:a1:1a:8d:cf:fd:af:d5:af:e3:1f:4c:33: 3f:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:B4:C2:63:9D:9E:31:E4:0B:CE:89:DC:93:3B:F7:DE:3D:C3:B3:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/72dda1b5-1896-3122-a9fd-3eadfa41596d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.34.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:df:69:12:d8:4e:71:1e:af:02:66:82:04:b5:45:3e:6d:2a: 04:b4:91:d0:71:10:13:fb:02:95:37:6c:73:4c:b8:7f:aa:6b: 53:fb:4c:0c:28:1d:82:46:57:7e:c6:0e:3b:11:63:af:59:fa: ee:b0:10:55:38:09:c3:36:d5:63:75:88:9a:2f:e5:d7:5a:0e: 7b:10:e8:0c:d1:8a:6e:56:7a:0b:cb:6c:86:92:79:77:14:f9: 69:90:7e:be:34:46:4a:87:2d:93:42:da:9d:bc:36:89:f7:e8: 37:10:d1:40:d9:0d:c3:96:cd:87:b7:4e:49:86:72:10:f7:ac: ee:fb:41:00:37:4b:c3:0f:16:78:50:30:c6:2a:8d:f2:75:f4: 5a:e1:63:5e:80:06:b7:c3:65:00:b7:ed:85:ec:08:e7:03:1c: 73:1e:f0:92:92:b7:b8:ac:0c:af:a5:2b:e0:63:3c:6e:3a:f9: 30:07:63:e4:aa:ad:98:3c:52:19:c1:a1:56:7b:16:4c:00:9d: e7:8c:72:48:33:9f:1a:3a:db:9d:38:09:2e:96:45:bb:e1:4b: 8e:91:b9:5a:90:dc:cf:4e:25:98:22:7f:f7:87:38:c0:60:01: ba:a9:fe:9e:97:33:41:a2:d2:43:fa:2f:47:5f:47:e4:92:2d: f6:f8:b8:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0DfPjXsz8ZjUWJY4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDIyODE0MDA0MFoXDTI2MDUyOTEzMDA0MFowLzEtMCsGA1UEAxMk MGRmZmZlNjItNTAxMC00MTEzLWJlYjItYTE2ZmRiMDBkODc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYd4hFnO3wG/1M88hatf/tEm71wswxe4yWyQ RGXpYisfeRIbrM9l8o/JXmsHJe6yOQK4Ceq9cuT7Eg/kSoqNFaU3IXhTJ6XgtKRY JZbw6iyC/AcvdDf9fUjBroTq7cLM9f6db9ZIx0J4JSc4xR3Yn8sHyiK/dCf0Pg5n HkSPEOpnMO2ze6c0lxzZ63HmTP8hoNvEGWjqpzvDEFMouJgbxNz96NGrtsISRMil E7zPXPfoomqTc7Prydn8zaTvbyek8lm/LRFNrNzCBsdSfWVqrh8Q8BX3u7aHtJhN N1ai99VmaC46cei14dG3lp4bKVfl4BuhGo3P/a/Vr+MfTDM/wwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGW0wmOdnjHkC86J3JM79949w7PcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvNzJkZGExYjUtMTg5Ni0z MTIyLWE5ZmQtM2VhZGZhNDE1OTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCLwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAffaRLYTnEerwJmggS1RT5tKgS0kdBxEBP7ApU3bHNMuH+qa1P7TAwo HYJGV37GDjsRY69Z+u6wEFU4CcM21WN1iJov5ddaDnsQ6AzRim5WegvLbIaSeXcU +WmQfr40RkqHLZNC2p28Non36DcQ0UDZDcOWzYe3TkmGchD3rO77QQA3S8MPFnhQ MMYqjfJ19FrhY16ABrfDZQC37YXsCOcDHHMe8JKSt7isDK+lK+BjPG46+TAHY+Sq rZg8UhnBoVZ7FkwAneeMckgznxo62504CS6WRbvhS46RuVqQ3M9OJZgif/eHOMBg Abqp/p6XM0Gi0kP6L0dfR+SSLfb4uOE= -----END CERTIFICATE-----Generated at Mon Mar 2 10:00:20 2026 by rpki-client