$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a4c9fc1e-0d7d-3b3c-8443-64e1e8832d3b.roa File: a4c9fc1e-0d7d-3b3c-8443-64e1e8832d3b.roa (raw, json) Hash identifier: oHEXpvXRhu2JtpMQcl+4h1rJSAysegPNm4kflSOkhOE= Subject key identifier: 33:E6:F8:66:6B:29:6B:89:F3:23:8E:49:77:A7:70:01:A1:96:28:9B Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584D037D51018B8E68D0EF64F300 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a4c9fc1e-0d7d-3b3c-8443-64e1e8832d3b.roa Signing time: Sat 28 Feb 2026 14:00:40 +0000 ROA not before: Sat 28 Feb 2026 14:00:40 +0000 ROA not after: Fri 29 May 2026 13:00:40 +0000 asID: 16591 IP address blocks: 136.42.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:03:7d:51:01:8b:8e:68:d0:ef:64:f3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Feb 28 14:00:40 2026 GMT Not After : May 29 13:00:40 2026 GMT Subject: CN=5542abdc-f335-43db-afeb-87705e0e4a85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:9f:05:58:9c:dc:e5:a5:e0:a1:e5:4f:55:fd: aa:7b:ee:ef:d5:24:a9:48:a6:a7:d6:7f:b3:84:46: d9:15:71:60:71:aa:c7:44:c3:08:e4:18:42:89:0a: 4e:46:6f:c6:c2:e3:2d:8b:8a:16:92:a0:90:20:6f: 38:66:3d:a6:d3:cb:d8:e8:e7:85:e1:99:6d:4f:ef: 3c:d4:a7:fa:d1:84:e7:5b:b9:f1:65:9c:c5:1f:0e: 6e:3c:f1:e3:1c:d2:a2:f8:92:04:da:de:fa:73:ab: dd:b6:f6:2d:8e:91:39:76:2b:c1:4a:39:77:d0:66: 77:1a:47:1f:bd:60:b2:79:03:b7:b8:ee:1b:de:fe: bb:ac:5f:6b:67:26:33:10:6c:8d:de:0a:c2:12:39: cd:18:f4:2c:3d:ae:e5:e7:0f:54:16:40:7a:bc:2c: e5:0f:18:6c:72:f2:3b:40:37:c2:f3:c8:dc:48:9c: 3c:7c:23:c0:d6:ee:a7:c0:7a:5c:ee:3d:c1:b8:2e: 38:e6:14:35:48:da:a2:3f:95:1a:08:0c:5c:4e:2b: 54:cb:77:e5:c7:9d:44:85:34:e0:c8:42:af:3e:e5: c4:ee:66:ab:e1:43:ee:f7:d2:b2:3c:7c:ad:3d:03: e6:42:b3:23:13:e9:56:10:e4:25:78:f0:b2:2a:72: 25:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:E6:F8:66:6B:29:6B:89:F3:23:8E:49:77:A7:70:01:A1:96:28:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a4c9fc1e-0d7d-3b3c-8443-64e1e8832d3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.42.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:f3:fd:3d:05:a2:d3:dd:84:78:9f:78:1c:bc:40:b3:c9:a3: 33:ed:2a:80:ad:df:a4:15:52:25:c3:0e:a1:d8:a2:a8:80:f4: 02:06:8e:9f:16:3a:90:da:22:c3:94:75:fc:5b:cc:98:f6:9c: 6f:62:bc:00:6c:19:94:53:59:d9:42:d7:20:b5:d7:79:6b:05: 3e:7e:29:53:b2:1f:d0:63:74:96:35:5b:4f:34:d8:9d:77:37: 16:08:05:94:8e:9a:21:b7:75:9d:16:18:1d:fb:ab:18:63:06: e1:48:12:d0:c0:ad:dd:0d:c8:c0:9b:c1:66:f3:59:69:f9:f6: 7e:5a:47:42:1e:ef:6c:c0:f0:7b:31:4d:ec:c9:77:e0:0e:71: a5:1f:33:83:76:f2:f4:0e:3e:56:77:0d:b3:fe:70:56:f7:70: b3:03:1f:c4:e7:e5:2f:f8:15:4e:4e:a3:83:1e:b4:66:4a:0c: 1e:42:8e:96:ff:ee:9b:fb:3c:64:cc:2d:6a:21:33:9e:54:ca: 50:f8:55:c0:52:7c:fe:f7:4a:89:c3:ba:7b:3a:7c:6c:94:70: af:70:c2:59:82:12:e8:3c:44:05:87:14:44:55:5b:78:c9:6a: 34:14:13:f3:5a:e8:a1:07:71:a9:37:bc:ec:66:6e:df:63:f9: 94:3d:f9:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0DfVEBi45o0O9k8wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDIyODE0MDA0MFoXDTI2MDUyOTEzMDA0MFowLzEtMCsGA1UEAxMk NTU0MmFiZGMtZjMzNS00M2RiLWFmZWItODc3MDVlMGU0YTg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl58FWJzc5aXgoeVPVf2qe+7v1SSpSKan1n+z hEbZFXFgcarHRMMI5BhCiQpORm/GwuMti4oWkqCQIG84Zj2m08vY6OeF4ZltT+88 1Kf60YTnW7nxZZzFHw5uPPHjHNKi+JIE2t76c6vdtvYtjpE5divBSjl30GZ3Gkcf vWCyeQO3uO4b3v67rF9rZyYzEGyN3grCEjnNGPQsPa7l5w9UFkB6vCzlDxhscvI7 QDfC88jcSJw8fCPA1u6nwHpc7j3BuC445hQ1SNqiP5UaCAxcTitUy3flx51EhTTg yEKvPuXE7mar4UPu99KyPHytPQPmQrMjE+lWEOQlePCyKnIlUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDPm+GZrKWuJ8yOOSXencAGhliibMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvYTRjOWZjMWUtMGQ3ZC0z YjNjLTg0NDMtNjRlMWU4ODMyZDNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDiCoYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAPz/T0FotPdhHifeBy8QLPJozPtKoCt36QVUiXDDqHYoqiA9AIGjp8W OpDaIsOUdfxbzJj2nG9ivABsGZRTWdlC1yC113lrBT5+KVOyH9BjdJY1W0802J13 NxYIBZSOmiG3dZ0WGB37qxhjBuFIEtDArd0NyMCbwWbzWWn59n5aR0Ie72zA8Hsx TezJd+AOcaUfM4N28vQOPlZ3DbP+cFb3cLMDH8Tn5S/4FU5Oo4MetGZKDB5Cjpb/ 7pv7PGTMLWohM55UylD4VcBSfP73SonDuns6fGyUcK9wwlmCEug8RAWHFERVW3jJ ajQUE/Na6KEHcak3vOxmbt9j+ZQ9+f8= -----END CERTIFICATE-----Generated at Mon Mar 2 17:08:41 2026 by rpki-client