$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/8afb097d-bf51-3fc0-91b1-2046acbd3a80.roa File: 8afb097d-bf51-3fc0-91b1-2046acbd3a80.roa (raw, json) Hash identifier: XmX0SjOBo1RPptifoZ2x41IB8egHTamiZMnWQqz7dUQ= Subject key identifier: AA:11:A5:7E:6F:54:E8:4E:C1:9F:26:FF:56:43:45:73:61:89:FD:92 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584D037D11DDB948241AA4B1D980 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/8afb097d-bf51-3fc0-91b1-2046acbd3a80.roa Signing time: Sat 28 Feb 2026 14:00:40 +0000 ROA not before: Sat 28 Feb 2026 14:00:40 +0000 ROA not after: Fri 29 May 2026 13:00:40 +0000 asID: 16591 IP address blocks: 136.38.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:03:7d:11:dd:b9:48:24:1a:a4:b1:d9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Feb 28 14:00:40 2026 GMT Not After : May 29 13:00:40 2026 GMT Subject: CN=2b882482-40c0-435e-8443-7b6ce20a5cfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:93:ab:30:43:4d:de:92:2c:bd:c6:45:64:c4: 3d:9f:1b:4b:e2:0a:ec:2e:b9:ad:4a:18:34:bd:48: 4d:01:e2:e3:4a:f4:52:b1:fe:7a:31:a7:84:fd:e2: 6a:7e:1b:09:c4:7d:df:ea:2a:d2:c5:31:9e:99:fa: 88:61:92:f9:c3:12:92:b3:49:b7:2e:2a:1f:72:a4: c7:81:2a:11:6f:46:95:1c:cd:94:c4:0f:e1:8f:39: ef:89:ad:1f:9c:2f:0c:44:70:cc:73:9a:83:dc:1b: 02:7e:4a:e0:f1:b3:82:5a:a4:5f:9e:ae:d0:bd:ad: 38:6d:ba:81:86:cb:50:ef:43:8b:da:c1:7e:cf:14: 6a:30:2f:4a:59:df:16:4b:72:78:19:77:4b:73:f1: f8:0a:c1:e9:df:39:b4:d0:f6:16:f1:e3:02:ab:cc: dd:03:5e:d8:5d:03:6f:6e:b9:5c:2c:c7:b3:89:95: a8:f9:46:9a:82:6b:b3:4e:ea:71:76:ab:af:96:72: eb:78:db:b2:da:d5:6b:82:a7:a7:11:ff:40:ca:00: 3f:9d:92:b9:bf:44:2b:9c:eb:7b:51:82:9e:0a:97: cd:ec:b3:08:4c:77:f5:69:28:b6:26:dd:96:0d:aa: 49:28:94:29:04:12:40:ed:b4:19:7a:34:e4:05:56: 5d:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:11:A5:7E:6F:54:E8:4E:C1:9F:26:FF:56:43:45:73:61:89:FD:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/8afb097d-bf51-3fc0-91b1-2046acbd3a80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.38.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:98:37:a9:9a:16:96:38:44:0a:d0:69:24:d8:43:7d:ee:a3: 7b:69:3e:88:5d:24:a1:80:15:4b:1c:ef:b1:de:08:f7:21:6d: 0d:c5:03:4c:29:33:61:8a:3f:e6:70:bc:8c:85:cd:85:4a:5a: af:13:d3:27:4c:ea:f4:fc:af:0e:f0:85:aa:07:6e:8a:74:96: e7:48:45:93:40:f5:26:39:de:ae:32:3b:30:bd:3d:ae:65:06: b2:e7:64:5b:d8:20:83:da:77:c1:bb:23:45:d3:43:df:e5:ee: 6a:a7:36:43:2f:0a:d3:19:ee:81:6a:94:4f:1a:65:80:37:72: 30:58:05:c3:ce:c5:80:75:c8:7a:85:3e:0d:b9:53:ca:c0:44: 30:c4:47:d5:f5:cd:da:c0:77:40:75:f4:51:f7:f6:cf:47:1e: 64:9f:ad:0d:7e:41:ce:81:03:d9:70:2e:b3:c9:70:93:d9:93: 08:93:38:02:2b:6c:0e:fd:69:35:56:cf:23:e2:35:db:d3:b8: 29:49:b6:ea:6b:07:e3:12:4e:ad:8f:9f:9a:bd:1a:10:02:fa: c1:65:84:9b:5a:19:9c:d6:fe:80:42:7c:fd:d0:35:65:73:89: e1:a0:b6:69:83:d9:0a:97:fa:21:d2:da:0c:57:36:b5:1c:d8: 3b:4f:98:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0DfRHduUgkGqSx2YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDIyODE0MDA0MFoXDTI2MDUyOTEzMDA0MFowLzEtMCsGA1UEAxMk MmI4ODI0ODItNDBjMC00MzVlLTg0NDMtN2I2Y2UyMGE1Y2ZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJOrMENN3pIsvcZFZMQ9nxtL4grsLrmtShg0 vUhNAeLjSvRSsf56MaeE/eJqfhsJxH3f6irSxTGemfqIYZL5wxKSs0m3LiofcqTH gSoRb0aVHM2UxA/hjznvia0fnC8MRHDMc5qD3BsCfkrg8bOCWqRfnq7Qva04bbqB hstQ70OL2sF+zxRqMC9KWd8WS3J4GXdLc/H4CsHp3zm00PYW8eMCq8zdA17YXQNv brlcLMeziZWo+UaagmuzTupxdquvlnLreNuy2tVrgqenEf9AygA/nZK5v0QrnOt7 UYKeCpfN7LMITHf1aSi2Jt2WDapJKJQpBBJA7bQZejTkBVZdtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKoRpX5vVOhOwZ8m/1ZDRXNhif2SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvOGFmYjA5N2QtYmY1MS0z ZmMwLTkxYjEtMjA0NmFjYmQzYTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCbgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGyYN6maFpY4RArQaSTYQ33uo3tpPohdJKGAFUsc77HeCPchbQ3FA0wp M2GKP+ZwvIyFzYVKWq8T0ydM6vT8rw7whaoHbop0ludIRZNA9SY53q4yOzC9Pa5l BrLnZFvYIIPad8G7I0XTQ9/l7mqnNkMvCtMZ7oFqlE8aZYA3cjBYBcPOxYB1yHqF Pg25U8rARDDER9X1zdrAd0B19FH39s9HHmSfrQ1+Qc6BA9lwLrPJcJPZkwiTOAIr bA79aTVWzyPiNdvTuClJtuprB+MSTq2Pn5q9GhAC+sFlhJtaGZzW/oBCfP3QNWVz ieGgtmmD2QqX+iHS2gxXNrUc2DtPmBc= -----END CERTIFICATE-----Generated at Mon Mar 2 13:32:40 2026 by rpki-client