$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/bc01ea38-f371-3faa-acac-14ea10689699.roa File: bc01ea38-f371-3faa-acac-14ea10689699.roa (raw, json) Hash identifier: VvphSXc93fPWyiMeC+eNMQl4UFdtWNy0TYk19lPunS4= Subject key identifier: 09:46:BC:10:96:36:A3:FE:44:89:05:73:64:AF:1D:5A:F8:78:88:62 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584D037D5A1AF08782C1CF366C00 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/bc01ea38-f371-3faa-acac-14ea10689699.roa Signing time: Sat 28 Feb 2026 14:00:40 +0000 ROA not before: Sat 28 Feb 2026 14:00:40 +0000 ROA not after: Fri 29 May 2026 13:00:40 +0000 asID: 16591 IP address blocks: 136.57.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:03:7d:5a:1a:f0:87:82:c1:cf:36:6c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Feb 28 14:00:40 2026 GMT Not After : May 29 13:00:40 2026 GMT Subject: CN=a16d4a95-7d58-45db-a8c2-5d2cf34a1e0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:3c:e0:11:d0:11:9d:53:a4:c6:4d:f7:cf:ca: 61:7b:31:81:72:5d:28:60:d7:cb:56:2e:74:79:1b: 9d:19:83:94:82:c6:63:b3:d7:23:68:6d:a5:81:e9: 9f:35:02:08:f1:7b:e5:d7:bd:e3:ad:2f:e7:d6:15: 84:53:cc:52:54:7c:59:6b:91:9f:47:ff:9f:46:3b: 1f:e2:dd:71:0e:f1:c0:8a:81:b6:80:34:03:77:45: 4a:6b:1f:2f:43:10:10:0f:49:2a:90:40:68:a4:71: 22:fd:2d:2f:8d:ee:85:e2:b3:6a:fd:38:e4:bd:71: 99:c4:55:92:e6:69:97:7a:08:c6:37:84:0e:f0:34: a5:f6:b0:00:99:84:92:b1:95:28:6b:38:32:00:35: 92:5c:da:8a:71:9f:ff:57:5f:54:e8:2a:aa:14:64: 8f:17:95:bc:ce:c9:e4:65:bf:b5:84:47:c2:8e:93: 8e:cf:69:fb:bf:f4:fe:fc:45:e2:d0:5b:23:8e:80: 6d:2d:d5:a2:a3:2e:d0:14:d2:43:1b:0c:b9:d3:de: 36:49:70:66:cd:ac:ae:98:6d:27:ee:aa:c1:82:89: f5:b6:eb:b7:79:a5:e0:a5:b7:70:5e:5a:54:cd:34: 5d:4e:ac:c1:c4:0c:f2:dc:71:4d:28:14:e2:48:82: d7:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:46:BC:10:96:36:A3:FE:44:89:05:73:64:AF:1D:5A:F8:78:88:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/bc01ea38-f371-3faa-acac-14ea10689699.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.57.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:05:35:90:1a:7d:59:b1:b4:3f:c7:b0:58:43:77:bf:2f:7b: 90:6e:0d:08:d0:ea:0f:6b:df:72:0b:e6:3d:bf:99:cf:60:a3: 49:73:e2:df:da:5e:25:a0:1e:cd:b7:8d:f8:76:be:7a:51:0a: 84:5b:8c:93:67:2f:d9:b0:dd:4b:ba:79:bf:2f:c3:06:16:89: 55:4b:63:fd:b1:c7:f7:13:ff:30:2b:66:f9:74:2a:b1:6a:16: 9f:e5:c4:1a:81:4d:cb:e1:01:25:47:10:ff:9e:53:f0:0e:2c: 0f:c1:2a:86:44:d3:e6:c4:94:fd:cb:6c:47:28:08:3f:dd:fb: f9:f7:db:a9:03:8b:3f:5a:36:03:cd:ca:bb:fa:2f:39:2e:29: 06:ec:fb:c0:62:48:34:23:82:68:76:ee:de:d9:53:c8:86:80: 35:6f:d0:f8:98:4b:37:e4:08:0d:70:c6:d8:1a:f9:c4:07:56: f7:6a:35:20:23:51:93:7d:7a:cb:0a:cf:2f:8d:76:3d:fc:ca: 2f:08:50:6d:f7:0d:c7:be:5c:cf:b7:36:43:d5:14:c0:6d:8b: 50:b8:8d:4c:35:59:0a:95:d6:6b:da:40:ee:2d:b5:94:aa:3c: b2:77:77:15:7b:7a:12:b8:0f:57:04:27:d4:1d:49:4c:c2:82: c4:7e:e1:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0DfVoa8IeCwc82bAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDIyODE0MDA0MFoXDTI2MDUyOTEzMDA0MFowLzEtMCsGA1UEAxMk YTE2ZDRhOTUtN2Q1OC00NWRiLWE4YzItNWQyY2YzNGExZTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizzgEdARnVOkxk33z8phezGBcl0oYNfLVi50 eRudGYOUgsZjs9cjaG2lgemfNQII8Xvl173jrS/n1hWEU8xSVHxZa5GfR/+fRjsf 4t1xDvHAioG2gDQDd0VKax8vQxAQD0kqkEBopHEi/S0vje6F4rNq/TjkvXGZxFWS 5mmXegjGN4QO8DSl9rAAmYSSsZUoazgyADWSXNqKcZ//V19U6CqqFGSPF5W8zsnk Zb+1hEfCjpOOz2n7v/T+/EXi0FsjjoBtLdWioy7QFNJDGwy50942SXBmzayumG0n 7qrBgon1tuu3eaXgpbdwXlpUzTRdTqzBxAzy3HFNKBTiSILXPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAlGvBCWNqP+RIkFc2SvHVr4eIhiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvYmMwMWVhMzgtZjM3MS0z ZmFhLWFjYWMtMTRlYTEwNjg5Njk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDlwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABsFNZAafVmxtD/HsFhDd78ve5BuDQjQ6g9r33IL5j2/mc9go0lz4t/a XiWgHs23jfh2vnpRCoRbjJNnL9mw3Uu6eb8vwwYWiVVLY/2xx/cT/zArZvl0KrFq Fp/lxBqBTcvhASVHEP+eU/AOLA/BKoZE0+bElP3LbEcoCD/d+/n326kDiz9aNgPN yrv6LzkuKQbs+8BiSDQjgmh27t7ZU8iGgDVv0PiYSzfkCA1wxtga+cQHVvdqNSAj UZN9essKzy+Ndj38yi8IUG33Dce+XM+3NkPVFMBti1C4jUw1WQqV1mvaQO4ttZSq PLJ3dxV7ehK4D1cEJ9QdSUzCgsR+4UA= -----END CERTIFICATE-----Generated at Mon Mar 2 12:19:44 2026 by rpki-client