$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a99c9c6b-8ce8-31f4-a448-3c740e27d48a.roa File: a99c9c6b-8ce8-31f4-a448-3c740e27d48a.roa (raw, json) Hash identifier: cyaQcGXfbxwsnC/t7wzhKKi1zbkn00PBboEJRw8TZqo= Subject key identifier: F3:A9:FC:FA:70:21:8A:BE:36:A5:FD:4E:84:73:5F:25:07:8F:A4:67 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584D037D16217E925B27C969C280 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a99c9c6b-8ce8-31f4-a448-3c740e27d48a.roa Signing time: Sat 28 Feb 2026 14:00:40 +0000 ROA not before: Sat 28 Feb 2026 14:00:40 +0000 ROA not after: Fri 29 May 2026 13:00:40 +0000 asID: 16591 IP address blocks: 136.34.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:03:7d:16:21:7e:92:5b:27:c9:69:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Feb 28 14:00:40 2026 GMT Not After : May 29 13:00:40 2026 GMT Subject: CN=b7504eb4-53e5-47c9-bb02-b70a66fe01f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:16:76:e4:2f:d3:06:81:20:3e:62:a8:ec:5d: 17:cf:25:89:1c:e2:b6:ad:d8:ab:98:f8:39:e4:eb: 24:dc:2c:64:68:c9:aa:0f:8b:3e:03:1a:27:3b:a3: db:80:a4:47:a8:f2:e7:f7:63:b3:1c:2e:79:1a:bc: 45:4c:50:d1:84:83:02:e0:d6:57:97:29:57:95:c0: 50:8b:80:a4:2e:af:fc:87:df:5c:4c:39:49:80:49: b0:e3:c3:62:3b:3e:75:fb:0a:30:81:a0:94:84:b3: f1:98:e0:9f:a9:75:ec:19:da:6e:9f:a5:d8:07:a5: 98:31:b9:94:31:58:df:30:f8:15:60:8e:20:28:97: 36:4d:c2:ba:ed:54:82:e1:c5:43:2e:48:b2:7b:e1: 7f:1b:c5:37:e0:90:26:e9:c2:a7:20:5b:ca:63:96: c3:52:78:87:69:19:44:b7:e3:33:09:f0:8d:f3:b9: 68:cd:b1:20:63:ea:0c:ab:b5:9e:bf:92:a5:2e:46: 34:c6:ab:78:3d:3d:bc:35:d8:45:04:5f:f0:39:d3: ec:11:b7:6b:56:8c:35:81:59:0d:68:55:04:a5:1d: 1c:ea:a0:f5:c6:43:94:9f:45:38:4f:e2:65:df:18: 05:6f:20:44:61:10:74:0b:2f:a2:df:48:0d:bf:2e: 82:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:A9:FC:FA:70:21:8A:BE:36:A5:FD:4E:84:73:5F:25:07:8F:A4:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a99c9c6b-8ce8-31f4-a448-3c740e27d48a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.34.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:c0:07:cd:47:7c:39:1c:ae:4c:df:02:08:f8:07:37:63:1e: aa:d8:a0:1f:b3:38:a5:b1:c9:8f:5b:65:33:cb:ae:99:d0:58: 6a:eb:44:c7:b3:83:d9:16:5c:c1:67:71:a7:a2:fc:f8:3a:d5: a0:03:fd:8f:80:94:df:38:3d:af:07:be:8e:a8:ed:d3:79:40: 5c:5a:ce:9a:4f:70:5b:4c:ec:63:8c:cc:7f:86:3c:5d:fa:1b: 43:58:e9:f9:df:af:0a:ef:51:03:73:37:c0:c4:f8:70:91:da: 8d:34:e1:7b:17:1b:98:54:ec:fe:ef:04:c3:df:17:8f:b8:ed: 67:f8:3c:59:ea:b8:ef:5f:15:37:06:72:cb:c1:f2:88:6a:8d: 2e:44:5c:c0:77:59:f9:5e:21:bf:a9:02:b9:7e:c5:91:d2:e2: 9d:4b:9d:e7:28:08:ff:65:27:ed:93:c5:6c:d9:8d:db:5b:34: 90:65:81:29:dd:9d:76:02:c5:ff:b9:6d:6d:aa:c6:04:bb:a5: d5:e2:4a:f8:f1:18:ee:73:41:ad:9c:24:27:bb:5f:dc:e2:b9: 03:af:ee:62:08:fe:80:5b:65:6a:5a:c8:ce:d9:d1:9b:3f:fa: 39:2d:82:78:ee:22:7a:99:d3:4f:6f:c3:e1:db:57:a0:dc:ab: a7:ce:58:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0DfRYhfpJbJ8lpwoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDIyODE0MDA0MFoXDTI2MDUyOTEzMDA0MFowLzEtMCsGA1UEAxMk Yjc1MDRlYjQtNTNlNS00N2M5LWJiMDItYjcwYTY2ZmUwMWY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRZ25C/TBoEgPmKo7F0XzyWJHOK2rdirmPg5 5Osk3CxkaMmqD4s+AxonO6PbgKRHqPLn92OzHC55GrxFTFDRhIMC4NZXlylXlcBQ i4CkLq/8h99cTDlJgEmw48NiOz51+wowgaCUhLPxmOCfqXXsGdpun6XYB6WYMbmU MVjfMPgVYI4gKJc2TcK67VSC4cVDLkiye+F/G8U34JAm6cKnIFvKY5bDUniHaRlE t+MzCfCN87lozbEgY+oMq7Wev5KlLkY0xqt4PT28NdhFBF/wOdPsEbdrVow1gVkN aFUEpR0c6qD1xkOUn0U4T+Jl3xgFbyBEYRB0Cy+i30gNvy6CiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPOp/PpwIYq+NqX9ToRzXyUHj6RnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvYTk5YzljNmItOGNlOC0z MWY0LWE0NDgtM2M3NDBlMjdkNDhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCJwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD3AB81HfDkcrkzfAgj4BzdjHqrYoB+zOKWxyY9bZTPLrpnQWGrrRMez g9kWXMFncaei/Pg61aAD/Y+AlN84Pa8Hvo6o7dN5QFxazppPcFtM7GOMzH+GPF36 G0NY6fnfrwrvUQNzN8DE+HCR2o004XsXG5hU7P7vBMPfF4+47Wf4PFnquO9fFTcG csvB8ohqjS5EXMB3WfleIb+pArl+xZHS4p1LnecoCP9lJ+2TxWzZjdtbNJBlgSnd nXYCxf+5bW2qxgS7pdXiSvjxGO5zQa2cJCe7X9ziuQOv7mII/oBbZWpayM7Z0Zs/ +jktgnjuInqZ009vw+HbV6Dcq6fOWAo= -----END CERTIFICATE-----Generated at Mon Mar 2 08:04:05 2026 by rpki-client