$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/be468998-0ccd-30b7-9166-469ae59ced7d.roa File: be468998-0ccd-30b7-9166-469ae59ced7d.roa (raw, json) Hash identifier: RICZT4+DtUiev7Mn6drP/Irmxwh3ZrubffsHS51nYRk= Subject key identifier: 1D:18:49:CC:C4:8E:C6:07:96:B4:78:06:88:22:4A:2E:89:7F:E7:12 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584D037D159FE8B0C98AE87AF060 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/be468998-0ccd-30b7-9166-469ae59ced7d.roa Signing time: Sat 28 Feb 2026 14:00:40 +0000 ROA not before: Sat 28 Feb 2026 14:00:40 +0000 ROA not after: Fri 29 May 2026 13:00:40 +0000 asID: 16591 IP address blocks: 136.33.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:03:7d:15:9f:e8:b0:c9:8a:e8:7a:f0:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Feb 28 14:00:40 2026 GMT Not After : May 29 13:00:40 2026 GMT Subject: CN=7d310920-7508-408c-a13f-6e502a0b6883 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:16:fa:ad:64:c1:04:6b:f5:9a:0e:ca:17:d2: bb:54:1e:97:5b:2a:d0:ce:9f:a2:3a:c2:b8:8f:59: f6:c3:71:bb:31:ec:0a:34:f0:66:c5:27:08:84:9a: e2:db:63:7b:7a:b9:e0:3f:1c:55:81:6c:25:2b:7f: e4:26:8a:b5:d9:2e:3a:f5:7c:8e:4f:89:77:65:e6: 4b:d8:57:22:a5:22:80:76:ec:49:96:b1:90:b0:19: e6:88:79:d6:9b:8c:3e:7e:ec:9c:79:b6:9f:26:65: 34:46:bb:d1:60:1c:3d:92:f1:bd:1c:78:4d:69:3f: c9:14:ea:72:c9:9a:cb:a2:b2:53:73:d3:8e:e8:5a: 45:d3:cd:ef:b4:06:d2:3f:29:72:36:04:88:02:b1: db:3d:af:b9:a0:c1:09:47:5e:9e:d3:3e:a8:e4:30: 67:22:2a:7a:16:c9:b0:a6:af:10:29:ed:a8:63:51: fb:75:db:3f:33:09:01:fe:f1:77:8a:a3:1c:d8:9c: 26:b7:5c:74:5d:0e:17:bc:ef:87:db:38:51:48:87: 78:3e:56:43:69:02:b0:27:6a:13:9a:9a:4d:70:bf: c1:d1:5a:79:a6:11:de:0f:1a:98:83:9c:1d:49:be: 23:78:35:61:9e:92:05:0d:c1:23:a5:8a:23:0c:e6: d6:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:18:49:CC:C4:8E:C6:07:96:B4:78:06:88:22:4A:2E:89:7F:E7:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/be468998-0ccd-30b7-9166-469ae59ced7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.33.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:20:c9:50:bd:3a:17:f9:e1:d7:05:3d:dc:0b:e7:13:6e:bd: a2:fd:9a:8f:5e:d0:a0:e8:df:40:5f:18:48:4d:e7:05:27:4a: c5:c2:91:69:8a:23:ca:82:f5:62:2e:7b:3c:9e:ab:47:41:9e: 8a:35:ac:5d:f9:5e:51:89:98:39:d3:53:96:ef:45:f8:5b:22: 09:c8:c6:86:69:d1:89:bb:c9:f4:1a:35:e6:bc:f0:ad:a9:e9: 44:d5:64:68:13:72:c6:52:92:15:de:5a:16:3b:07:0b:fd:57: 01:1b:3b:ba:67:97:3d:a3:3a:de:80:7d:52:69:64:55:e9:94: cb:18:49:30:22:97:5e:4b:d0:1b:b1:23:e2:2d:45:84:24:c5: 64:bf:55:e1:89:ac:f1:5d:eb:4c:6c:83:3f:53:c6:17:18:97: eb:fb:dc:9c:6e:2c:b3:e4:e2:e5:93:59:42:cb:1d:c0:c1:00: 49:37:ee:7f:09:da:67:9a:06:36:0f:a6:74:fd:eb:8a:d2:37: 75:1e:e0:60:89:ab:58:07:a1:2a:df:54:dd:5f:bf:34:db:22: d5:ac:d1:43:af:77:fc:37:ba:7b:1f:05:7f:d2:ce:3e:7b:46: 62:be:f0:5c:ed:64:10:5e:14:bd:74:a0:97:4e:8a:e6:3f:b5: 84:df:aa:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0DfRWf6LDJiuh68GAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDIyODE0MDA0MFoXDTI2MDUyOTEzMDA0MFowLzEtMCsGA1UEAxMk N2QzMTA5MjAtNzUwOC00MDhjLWExM2YtNmU1MDJhMGI2ODgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRb6rWTBBGv1mg7KF9K7VB6XWyrQzp+iOsK4 j1n2w3G7MewKNPBmxScIhJri22N7erngPxxVgWwlK3/kJoq12S469XyOT4l3ZeZL 2FcipSKAduxJlrGQsBnmiHnWm4w+fuycebafJmU0RrvRYBw9kvG9HHhNaT/JFOpy yZrLorJTc9OO6FpF083vtAbSPylyNgSIArHbPa+5oMEJR16e0z6o5DBnIip6Fsmw pq8QKe2oY1H7dds/MwkB/vF3iqMc2Jwmt1x0XQ4XvO+H2zhRSId4PlZDaQKwJ2oT mppNcL/B0Vp5phHeDxqYg5wdSb4jeDVhnpIFDcEjpYojDObWbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB0YSczEjsYHlrR4BogiSi6Jf+cSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvYmU0Njg5OTgtMGNjZC0z MGI3LTkxNjYtNDY5YWU1OWNlZDdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCFAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIogyVC9Ohf54dcFPdwL5xNuvaL9mo9e0KDo30BfGEhN5wUnSsXCkWmK I8qC9WIuezyeq0dBnoo1rF35XlGJmDnTU5bvRfhbIgnIxoZp0Ym7yfQaNea88K2p 6UTVZGgTcsZSkhXeWhY7Bwv9VwEbO7pnlz2jOt6AfVJpZFXplMsYSTAil15L0Bux I+ItRYQkxWS/VeGJrPFd60xsgz9TxhcYl+v73JxuLLPk4uWTWULLHcDBAEk37n8J 2meaBjYPpnT964rSN3Ue4GCJq1gHoSrfVN1fvzTbItWs0UOvd/w3unsfBX/Szj57 RmK+8FztZBBeFL10oJdOiuY/tYTfqro= -----END CERTIFICATE-----Generated at Mon Mar 2 10:25:26 2026 by rpki-client