$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/8503825e-5495-3576-a211-aae2c1171607.roa File: 8503825e-5495-3576-a211-aae2c1171607.roa (raw, json) Hash identifier: xD5rMIXHJrGeGwfDliSjGVkJtUuqzyXIK2h3jYSqQ8c= Subject key identifier: 64:25:EB:91:2D:76:C3:D3:8E:97:8E:48:19:B7:22:27:D7:47:AA:8B Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584D037D13355F9667827C02D4E0 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/8503825e-5495-3576-a211-aae2c1171607.roa Signing time: Sat 28 Feb 2026 14:00:40 +0000 ROA not before: Sat 28 Feb 2026 14:00:40 +0000 ROA not after: Fri 29 May 2026 13:00:40 +0000 asID: 16591 IP address blocks: 136.32.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:03:7d:13:35:5f:96:67:82:7c:02:d4:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Feb 28 14:00:40 2026 GMT Not After : May 29 13:00:40 2026 GMT Subject: CN=83448295-bfd4-4d5a-afef-467840361eb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:85:76:fd:02:e3:cb:63:e7:85:2a:f6:44:fc: 2e:e6:7e:ab:1c:3c:fa:d0:62:97:d0:f7:9d:c9:d0: 23:16:8d:7c:1c:00:4a:ef:d3:50:fa:24:27:4f:6c: 19:4c:55:a8:0c:33:24:fe:ec:b6:5b:cf:73:f0:41: d9:7d:67:03:c4:96:be:c0:2a:27:da:d7:e2:21:85: 4e:10:ef:7f:e3:af:8e:ef:b4:5a:2a:fc:ec:0d:bb: d2:c1:bb:a2:e6:ab:1c:47:99:47:9a:21:fe:c5:30: 8c:e4:2f:78:73:45:0c:c2:59:43:8b:20:7d:4f:4d: ef:ce:f0:b6:e8:d7:5f:04:5b:2c:77:0c:ed:e8:ad: 19:94:5c:97:ec:07:72:54:cb:fa:69:30:d1:72:fc: a0:36:93:0c:9e:c3:44:58:a6:5e:bf:a9:a6:83:9a: 22:61:c4:60:de:c9:1f:3c:7c:e3:bb:44:6e:0a:3a: 80:2e:10:4f:45:38:52:28:f9:43:60:d3:96:f4:8c: 96:8e:53:67:b3:9a:73:80:cf:d9:34:2b:a0:ed:d7: d9:a6:19:80:df:40:9c:55:75:98:9a:1f:48:af:e4: 39:a3:44:52:64:77:91:2f:97:5b:e5:07:c2:89:34: 84:67:8c:28:cc:ad:b1:f1:cb:65:f1:cb:43:bd:e4: 5c:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:25:EB:91:2D:76:C3:D3:8E:97:8E:48:19:B7:22:27:D7:47:AA:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/8503825e-5495-3576-a211-aae2c1171607.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.32.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:33:9e:9a:01:e3:6a:a9:35:25:14:4e:2a:ec:97:01:29:b6: 97:d0:da:2b:fd:96:66:b5:09:61:65:30:92:06:87:e5:7a:12: ab:2d:97:51:19:47:ca:45:42:17:25:2b:96:37:b4:fa:ad:40: a3:aa:a0:be:a8:64:68:42:91:ad:7a:3b:7d:f0:08:03:7c:eb: e7:5f:aa:84:23:86:df:c6:11:2c:f5:8b:79:50:3c:b7:37:1c: e8:ba:e9:04:fb:f1:79:42:0d:b6:df:78:77:c1:7d:38:1f:2f: 76:98:06:ac:a2:3c:9e:d4:37:13:54:70:01:ae:49:d2:bf:91: bc:b5:02:40:82:9e:aa:43:53:cc:a4:08:79:08:bc:7e:67:75: 49:95:25:67:04:dc:25:4a:f2:e7:74:a5:cc:0b:18:0d:08:22: e2:81:cd:f9:d6:d3:30:2a:d0:5b:db:a4:bb:e0:0d:ec:98:c6: 16:77:2a:12:2e:d2:d9:6b:32:bf:39:38:e6:b1:b8:06:c1:7b: 1e:a1:24:b3:b1:0f:ff:10:bb:4d:ba:e7:e0:66:01:23:ea:fd: cc:1a:39:1f:3a:91:10:dc:31:37:22:80:aa:29:64:42:96:06: 15:7e:9e:08:d9:4f:a1:d5:ce:bd:e2:09:a1:90:d8:23:0f:28: 87:5d:19:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0DfRM1X5ZngnwC1OAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDIyODE0MDA0MFoXDTI2MDUyOTEzMDA0MFowLzEtMCsGA1UEAxMk ODM0NDgyOTUtYmZkNC00ZDVhLWFmZWYtNDY3ODQwMzYxZWI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1IV2/QLjy2PnhSr2RPwu5n6rHDz60GKX0Ped ydAjFo18HABK79NQ+iQnT2wZTFWoDDMk/uy2W89z8EHZfWcDxJa+wCon2tfiIYVO EO9/46+O77RaKvzsDbvSwbui5qscR5lHmiH+xTCM5C94c0UMwllDiyB9T03vzvC2 6NdfBFssdwzt6K0ZlFyX7AdyVMv6aTDRcvygNpMMnsNEWKZev6mmg5oiYcRg3skf PHzju0RuCjqALhBPRThSKPlDYNOW9IyWjlNns5pzgM/ZNCug7dfZphmA30CcVXWY mh9Ir+Q5o0RSZHeRL5db5QfCiTSEZ4wozK2x8ctl8ctDveRcWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGQl65EtdsPTjpeOSBm3IifXR6qLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvODUwMzgyNWUtNTQ5NS0z NTc2LWEyMTEtYWFlMmMxMTcxNjA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCAgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEQznpoB42qpNSUUTirslwEptpfQ2iv9lma1CWFlMJIGh+V6Eqstl1EZ R8pFQhclK5Y3tPqtQKOqoL6oZGhCka16O33wCAN86+dfqoQjht/GESz1i3lQPLc3 HOi66QT78XlCDbbfeHfBfTgfL3aYBqyiPJ7UNxNUcAGuSdK/kby1AkCCnqpDU8yk CHkIvH5ndUmVJWcE3CVK8ud0pcwLGA0IIuKBzfnW0zAq0FvbpLvgDeyYxhZ3KhIu 0tlrMr85OOaxuAbBex6hJLOxD/8Qu0265+BmASPq/cwaOR86kRDcMTcigKopZEKW BhV+ngjZT6HVzr3iCaGQ2CMPKIddGbY= -----END CERTIFICATE-----Generated at Mon Mar 2 11:45:19 2026 by rpki-client