$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a436ac52-91aa-3c41-8e92-858df4f15e6d.roa File: a436ac52-91aa-3c41-8e92-858df4f15e6d.roa (raw, json) Hash identifier: gZsOzygLq0jm1+3RqlXKwhzYJiTYgw/b3ksQWwm3iRE= Subject key identifier: BB:1E:A6:5F:44:15:D3:DF:15:B9:E9:53:B7:6A:74:FC:10:8A:B6:65 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584D037D1278B836E0C253DB6B70 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a436ac52-91aa-3c41-8e92-858df4f15e6d.roa Signing time: Sat 28 Feb 2026 14:00:40 +0000 ROA not before: Sat 28 Feb 2026 14:00:40 +0000 ROA not after: Fri 29 May 2026 13:00:40 +0000 asID: 16591 IP address blocks: 136.32.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:03:7d:12:78:b8:36:e0:c2:53:db:6b:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Feb 28 14:00:40 2026 GMT Not After : May 29 13:00:40 2026 GMT Subject: CN=e0744619-1a0b-479f-a7e5-2dc44b339fed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:7e:83:06:1b:fc:f7:39:3c:75:c1:3c:70:0e: af:bd:b8:18:fb:8f:e5:46:b9:4b:c8:fc:70:a2:d0: 47:5f:43:78:87:8f:8d:99:37:eb:80:7a:10:b0:a7: 82:6a:16:2d:9f:2e:81:7e:61:88:09:f8:3f:f4:a5: bc:af:d6:76:99:5d:72:00:df:34:04:43:d5:2e:be: 4a:d0:c7:a3:c8:80:4f:05:f0:e4:4c:21:c2:c4:cb: b6:24:3a:86:c9:13:4c:71:c6:64:e7:56:32:05:76: 1a:7b:66:ab:7d:d8:ba:3f:c7:6d:07:07:4c:1b:54: b3:ca:c9:04:ca:b6:60:76:54:e9:6f:16:63:b1:eb: d1:30:1a:c6:3a:14:02:64:47:18:f7:4c:fe:2c:2e: ee:df:b3:bc:3a:a7:83:21:06:33:b1:8b:06:b2:bd: e7:32:ab:b4:91:88:af:c7:ee:4c:5d:2d:50:9f:72: d4:8e:d6:16:07:21:31:6f:1f:ec:9f:e1:36:1a:d5: 38:4c:27:27:99:e5:c0:1d:e3:5b:cd:a7:8c:b3:c1: 58:18:05:19:65:10:b2:00:98:75:78:ea:b0:c3:79: cf:8a:40:61:4d:78:53:6b:89:6a:39:24:cc:3c:84: 45:32:4f:92:d8:77:62:65:8b:80:1a:f0:89:bd:17: fa:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:1E:A6:5F:44:15:D3:DF:15:B9:E9:53:B7:6A:74:FC:10:8A:B6:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a436ac52-91aa-3c41-8e92-858df4f15e6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.32.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:b3:74:36:7a:7b:f9:67:53:7d:0d:65:29:0a:7f:e4:fa:44: ef:49:b3:35:3a:fd:43:b6:09:36:63:f9:62:23:52:ab:83:ed: 6a:f0:83:b9:78:64:8a:e7:3f:88:59:bf:51:5f:d2:0f:02:dd: ab:9b:f3:ca:17:aa:f9:65:6b:fe:da:b6:8d:23:c9:4c:1e:3b: 1b:fe:a3:d2:f3:e7:da:31:6f:cc:62:76:5b:57:52:e5:16:4d: 2c:a8:d1:2e:da:0f:90:25:5c:f9:ed:ac:03:9c:28:70:ad:08: 4c:3d:f3:d8:76:70:a3:3c:83:81:3d:f7:a7:13:ec:eb:24:bd: bb:70:15:18:ab:0a:b5:d8:62:9a:95:57:6d:2f:4a:a4:f7:32: 27:6d:85:a0:a3:44:2c:e6:44:65:db:69:2e:17:c6:05:36:54: f6:c2:ef:66:e5:fd:94:35:af:f4:a0:c4:6d:4d:9e:db:5c:d1: cf:71:55:9c:75:f5:6b:7d:eb:28:f6:6f:79:02:6f:66:63:3b: 68:61:07:2c:f1:6c:84:fb:51:34:64:6e:10:1b:dd:b3:ed:40: 06:ec:98:3e:d8:5b:d9:bf:f2:34:3e:52:33:83:6e:30:0b:04: 75:b2:73:42:6c:75:3b:2c:59:d9:09:cb:8d:46:cd:8c:d3:76: b3:00:1f:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0DfRJ4uDbgwlPba3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDIyODE0MDA0MFoXDTI2MDUyOTEzMDA0MFowLzEtMCsGA1UEAxMk ZTA3NDQ2MTktMWEwYi00NzlmLWE3ZTUtMmRjNDRiMzM5ZmVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl36DBhv89zk8dcE8cA6vvbgY+4/lRrlLyPxw otBHX0N4h4+NmTfrgHoQsKeCahYtny6BfmGICfg/9KW8r9Z2mV1yAN80BEPVLr5K 0MejyIBPBfDkTCHCxMu2JDqGyRNMccZk51YyBXYae2arfdi6P8dtBwdMG1SzyskE yrZgdlTpbxZjsevRMBrGOhQCZEcY90z+LC7u37O8OqeDIQYzsYsGsr3nMqu0kYiv x+5MXS1Qn3LUjtYWByExbx/sn+E2GtU4TCcnmeXAHeNbzaeMs8FYGAUZZRCyAJh1 eOqww3nPikBhTXhTa4lqOSTMPIRFMk+S2HdiZYuAGvCJvRf6gQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLsepl9EFdPfFbnpU7dqdPwQirZlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvYTQzNmFjNTItOTFhYS0z YzQxLThlOTItODU4ZGY0ZjE1ZTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCDgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAazdDZ6e/lnU30NZSkKf+T6RO9JszU6/UO2CTZj+WIjUquD7Wrwg7l4 ZIrnP4hZv1Ff0g8C3aub88oXqvlla/7ato0jyUweOxv+o9Lz59oxb8xidltXUuUW TSyo0S7aD5AlXPntrAOcKHCtCEw989h2cKM8g4E996cT7OskvbtwFRirCrXYYpqV V20vSqT3MidthaCjRCzmRGXbaS4XxgU2VPbC72bl/ZQ1r/SgxG1Nnttc0c9xVZx1 9Wt96yj2b3kCb2ZjO2hhByzxbIT7UTRkbhAb3bPtQAbsmD7YW9m/8jQ+UjODbjAL BHWyc0JsdTssWdkJy41GzYzTdrMAHy4= -----END CERTIFICATE-----Generated at Mon Mar 2 10:02:24 2026 by rpki-client