$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a33076ca-fcc0-379d-aa92-4f3e982487f1.roa File: a33076ca-fcc0-379d-aa92-4f3e982487f1.roa (raw, json) Hash identifier: AVgfMEwcZRbyDfDjXRfQLdZLhliqh9t5qwqZRRYRDI4= Subject key identifier: 96:B7:E4:2A:BE:C6:9D:03:B5:8A:CD:AE:D6:9B:64:D6:67:47:D8:26 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584D037CF7CAD39C15CFBC6F1980 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a33076ca-fcc0-379d-aa92-4f3e982487f1.roa Signing time: Sat 28 Feb 2026 14:00:40 +0000 ROA not before: Sat 28 Feb 2026 14:00:40 +0000 ROA not after: Fri 29 May 2026 13:00:40 +0000 asID: 16591 IP address blocks: 136.61.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:03:7c:f7:ca:d3:9c:15:cf:bc:6f:19:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Feb 28 14:00:40 2026 GMT Not After : May 29 13:00:40 2026 GMT Subject: CN=e58937e1-f483-4188-ba20-73bd45028a46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:4e:6b:a9:16:a0:15:16:da:eb:7c:3b:a8:45: 5d:32:c4:a2:63:d1:19:68:a5:c8:c7:de:50:67:80: 6b:43:90:af:4f:90:41:36:fa:b7:1a:ee:d0:fa:25: f2:80:2e:8c:5d:b4:4b:3c:e1:f0:12:bb:48:f1:48: 92:90:6f:e9:0a:a5:93:e0:1d:8d:7e:ce:4b:90:aa: 0b:13:f3:79:82:3e:0e:af:92:96:bc:9b:2e:74:69: 38:b1:c7:39:04:7d:dd:49:3c:71:fa:52:2f:8b:12: 98:87:29:6f:7d:b9:41:09:a4:88:5e:22:c4:f9:92: 30:f0:cf:1b:d1:b3:d3:15:95:72:36:21:40:fc:0a: bd:c1:75:c1:e6:b9:ac:e8:68:15:d4:8c:aa:ae:11: ac:70:74:73:15:3f:e5:10:34:aa:81:f2:a2:d1:e9: b2:97:bb:7b:80:7f:6c:a4:09:37:f1:81:a9:7b:57: 1d:d1:e0:87:24:05:24:a6:23:50:c4:fa:53:d2:e0: fb:02:bc:b0:31:a0:d3:53:7b:42:a1:ed:1e:e8:67: 53:89:ac:91:2e:81:3a:01:16:e4:55:98:6b:e5:0d: 1b:81:27:59:ea:f2:fa:bc:ec:4a:df:76:24:4a:59: 1d:8b:00:d7:3d:0f:d1:16:56:cf:85:d0:62:b3:09: 18:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:B7:E4:2A:BE:C6:9D:03:B5:8A:CD:AE:D6:9B:64:D6:67:47:D8:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a33076ca-fcc0-379d-aa92-4f3e982487f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.61.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:2b:48:e0:58:17:94:f5:db:cc:24:68:a2:03:83:5c:d3:dd: b9:3f:7e:9e:a6:9c:92:c5:6a:a6:02:f2:4a:de:e0:81:9c:c9: 06:4d:8b:c8:41:0f:f3:ba:df:fd:64:d7:f6:76:3e:72:b0:e8: e1:a4:d0:ad:bd:a9:3e:06:e0:38:11:26:9c:40:40:41:d0:94: 8b:5b:81:5d:63:99:2f:5d:55:5e:76:7d:3d:0d:93:ff:94:8d: 34:9e:2b:f2:ae:9f:dc:f7:d0:5a:e8:18:84:36:49:cc:21:f8: 7d:2d:e5:e6:fc:5d:68:d0:3d:cc:8a:fe:e5:22:c8:ad:de:d0: 8c:c2:88:1c:fb:24:57:85:65:84:29:9f:5d:60:db:65:08:4d: 85:85:48:05:69:27:2a:0c:c8:56:a3:0a:f7:7c:b6:dd:36:d2: db:5a:ff:09:0f:d7:fa:c2:f3:d1:a8:49:1f:67:2d:6e:f9:ba: 87:71:80:a6:ae:a6:22:a4:03:6c:bb:3d:a4:9a:be:90:1b:0b: cb:12:53:3e:a4:58:a2:70:d9:58:aa:f3:d6:f1:4b:8c:c6:b4: ca:e8:9e:a5:be:2f:59:0d:5d:bc:1d:92:83:b8:46:c8:bf:96: b0:00:b8:c2:5c:53:d0:e9:b3:33:c2:1c:a1:38:64:44:7e:19: 3c:54:96:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0DfPfK05wVz7xvGYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDIyODE0MDA0MFoXDTI2MDUyOTEzMDA0MFowLzEtMCsGA1UEAxMk ZTU4OTM3ZTEtZjQ4My00MTg4LWJhMjAtNzNiZDQ1MDI4YTQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0E5rqRagFRba63w7qEVdMsSiY9EZaKXIx95Q Z4BrQ5CvT5BBNvq3Gu7Q+iXygC6MXbRLPOHwErtI8UiSkG/pCqWT4B2Nfs5LkKoL E/N5gj4Or5KWvJsudGk4scc5BH3dSTxx+lIvixKYhylvfblBCaSIXiLE+ZIw8M8b 0bPTFZVyNiFA/Aq9wXXB5rms6GgV1IyqrhGscHRzFT/lEDSqgfKi0emyl7t7gH9s pAk38YGpe1cd0eCHJAUkpiNQxPpT0uD7ArywMaDTU3tCoe0e6GdTiayRLoE6ARbk VZhr5Q0bgSdZ6vL6vOxK33YkSlkdiwDXPQ/RFlbPhdBiswkYbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJa35Cq+xp0DtYrNrtabZNZnR9gmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvYTMzMDc2Y2EtZmNjMC0z NzlkLWFhOTItNGYzZTk4MjQ4N2YxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiD1wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA0rSOBYF5T128wkaKIDg1zT3bk/fp6mnJLFaqYC8kre4IGcyQZNi8hB D/O63/1k1/Z2PnKw6OGk0K29qT4G4DgRJpxAQEHQlItbgV1jmS9dVV52fT0Nk/+U jTSeK/Kun9z30FroGIQ2Scwh+H0t5eb8XWjQPcyK/uUiyK3e0IzCiBz7JFeFZYQp n11g22UITYWFSAVpJyoMyFajCvd8tt020tta/wkP1/rC89GoSR9nLW75uodxgKau piKkA2y7PaSavpAbC8sSUz6kWKJw2Viq89bxS4zGtMronqW+L1kNXbwdkoO4Rsi/ lrAAuMJcU9DpszPCHKE4ZER+GTxUlt0= -----END CERTIFICATE-----Generated at Mon Mar 2 12:42:24 2026 by rpki-client