$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/ae1103be-198c-3199-8f4f-aa8f9f3b939b.roa File: ae1103be-198c-3199-8f4f-aa8f9f3b939b.roa (raw, json) Hash identifier: YhU87fshpboa+9yXVWIrdoYh5j3Cp0xdoLCoQ8WMTD4= Subject key identifier: E5:E3:C9:01:DE:C0:21:84:37:02:7C:18:56:0E:46:38:41:DC:FD:39 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584D037D4FFEF2ECE83D81A06D80 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/ae1103be-198c-3199-8f4f-aa8f9f3b939b.roa Signing time: Sat 28 Feb 2026 14:00:40 +0000 ROA not before: Sat 28 Feb 2026 14:00:40 +0000 ROA not after: Fri 29 May 2026 13:00:40 +0000 asID: 16591 IP address blocks: 136.34.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:03:7d:4f:fe:f2:ec:e8:3d:81:a0:6d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Feb 28 14:00:40 2026 GMT Not After : May 29 13:00:40 2026 GMT Subject: CN=52ec690c-250d-4349-bfa3-ea6ec1e59d48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:52:d6:e3:c4:aa:08:4f:cd:85:69:47:c1:6f: 62:89:d7:0a:c3:1e:20:73:ea:f1:38:36:04:2b:4a: 3a:55:15:55:23:db:7a:92:90:54:03:fa:bb:40:60: b0:7e:0f:84:6e:52:b4:be:f3:1e:d2:9d:0d:7d:af: ac:23:8e:5d:c5:56:07:5c:73:16:1c:a2:20:f2:0b: 30:5e:09:bd:b6:79:19:e2:9c:2f:d7:7f:48:2b:e0: ab:26:aa:74:b3:26:36:c5:27:da:86:2f:89:5b:5d: 81:d1:9d:b3:fe:7e:9c:13:82:e4:9d:c7:c9:76:e2: 0a:1c:19:fa:d7:24:c8:2a:66:21:44:91:3b:36:70: 8b:4b:9e:ec:c4:9e:48:4e:29:6f:3b:e5:72:2c:d9: 00:f7:2f:60:97:4c:9a:4d:d5:85:b3:f9:69:58:b9: ae:50:40:71:b1:75:9a:a5:0d:c8:0d:a4:7b:07:d3: bc:73:aa:4d:5b:cc:33:a1:db:63:81:b5:69:f9:1b: 5f:bb:39:53:f6:94:d5:65:6d:48:5e:6c:d0:22:26: 75:12:81:cb:7c:d9:02:50:03:e5:d9:72:3d:5d:9d: a1:2a:11:aa:b1:42:c6:77:64:bd:4e:42:5b:4f:2e: ae:d8:26:dd:1b:3a:65:ec:80:09:dd:b7:e6:62:61: 84:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:E3:C9:01:DE:C0:21:84:37:02:7C:18:56:0E:46:38:41:DC:FD:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/ae1103be-198c-3199-8f4f-aa8f9f3b939b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.34.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:dd:ce:ff:04:0e:2b:72:38:e4:b5:49:6c:a4:30:a8:b9:aa: 8e:c2:15:ab:06:24:2b:83:2f:f2:b2:0e:87:54:d2:0a:62:d6: 0f:41:34:8a:0b:96:1f:ac:d5:c0:ef:ae:eb:ed:88:ac:a7:32: e8:3d:6b:91:8d:7f:e5:9f:71:47:1f:ac:d0:3a:33:ac:3c:b7: bd:b8:2d:dd:5b:b5:49:e4:df:33:7b:41:ef:17:92:a1:5b:50: bf:df:b9:dc:74:2c:2d:7a:83:63:3c:97:8f:12:9e:a6:09:5e: 0c:97:2e:d7:f1:95:56:b2:44:13:c2:60:5e:f7:b1:40:e8:b3: e3:28:ae:97:a4:77:c2:d6:ef:4d:d0:59:f6:5a:8d:4e:7f:0f: 0d:0b:8a:0b:c3:94:11:8f:02:2d:14:00:2b:8c:c6:d3:eb:73: cb:80:47:ab:16:fb:54:6e:76:cc:73:09:4a:11:ff:bb:b5:dd: 2a:89:bf:bd:f2:e0:90:2f:b0:7d:02:43:0f:75:4b:49:c3:a4: e1:58:9f:fe:64:64:07:ab:f1:d7:9b:4c:00:3c:7d:75:22:e4: 37:f2:52:42:11:80:ae:55:52:7c:c7:b5:4b:77:0c:cb:52:79: 1b:20:0b:bf:43:43:25:47:63:0e:09:e7:c7:1e:ff:8b:9d:b7: e0:0e:58:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0DfU/+8uzoPYGgbYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDIyODE0MDA0MFoXDTI2MDUyOTEzMDA0MFowLzEtMCsGA1UEAxMk NTJlYzY5MGMtMjUwZC00MzQ5LWJmYTMtZWE2ZWMxZTU5ZDQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVLW48SqCE/NhWlHwW9iidcKwx4gc+rxODYE K0o6VRVVI9t6kpBUA/q7QGCwfg+EblK0vvMe0p0Nfa+sI45dxVYHXHMWHKIg8gsw Xgm9tnkZ4pwv139IK+CrJqp0syY2xSfahi+JW12B0Z2z/n6cE4LkncfJduIKHBn6 1yTIKmYhRJE7NnCLS57sxJ5ITilvO+VyLNkA9y9gl0yaTdWFs/lpWLmuUEBxsXWa pQ3IDaR7B9O8c6pNW8wzodtjgbVp+RtfuzlT9pTVZW1IXmzQIiZ1EoHLfNkCUAPl 2XI9XZ2hKhGqsULGd2S9TkJbTy6u2CbdGzpl7IAJ3bfmYmGEGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOXjyQHewCGENwJ8GFYORjhB3P05MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvYWUxMTAzYmUtMTk4Yy0z MTk5LThmNGYtYWE4ZjlmM2I5MzliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCKAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABDdzv8EDityOOS1SWykMKi5qo7CFasGJCuDL/KyDodU0gpi1g9BNIoL lh+s1cDvruvtiKynMug9a5GNf+WfcUcfrNA6M6w8t724Ld1btUnk3zN7Qe8XkqFb UL/fudx0LC16g2M8l48SnqYJXgyXLtfxlVayRBPCYF73sUDos+Morpekd8LW703Q WfZajU5/Dw0LigvDlBGPAi0UACuMxtPrc8uAR6sW+1RudsxzCUoR/7u13SqJv73y 4JAvsH0CQw91S0nDpOFYn/5kZAer8debTAA8fXUi5DfyUkIRgK5VUnzHtUt3DMtS eRsgC79DQyVHYw4J58ce/4udt+AOWBg= -----END CERTIFICATE-----Generated at Mon Mar 2 11:37:55 2026 by rpki-client