$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/bf8c75e5-8a48-3682-ba23-76245f3af041.roa File: bf8c75e5-8a48-3682-ba23-76245f3af041.roa (raw, json) Hash identifier: rr4gDB2qTcaYXR0YNGzq4SUjWI9I4ISMxlidiVbWFwo= Subject key identifier: BB:A5:5C:AE:6A:71:D4:63:7B:1A:11:FB:8F:E0:C6:B8:3B:73:85:DA Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584D037D53B911611BD8B10E6180 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/bf8c75e5-8a48-3682-ba23-76245f3af041.roa Signing time: Sat 28 Feb 2026 14:00:40 +0000 ROA not before: Sat 28 Feb 2026 14:00:40 +0000 ROA not after: Fri 29 May 2026 13:00:40 +0000 asID: 16591 IP address blocks: 136.60.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:03:7d:53:b9:11:61:1b:d8:b1:0e:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Feb 28 14:00:40 2026 GMT Not After : May 29 13:00:40 2026 GMT Subject: CN=48f4db54-0ce7-4598-8e90-36b464710a12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b7:a0:bb:18:37:85:23:54:45:1a:00:2e:69: 10:44:5f:f2:a8:20:c7:66:bc:1d:5d:e8:f1:de:17: bc:b9:54:bf:63:ee:a8:9f:7a:bd:2d:e0:f3:f6:cf: 01:46:97:d9:13:9b:34:b0:60:f5:90:e9:cf:24:3f: 68:a9:e4:01:4f:50:ce:c2:d4:ee:6a:4d:c6:6c:fa: 03:52:dd:ea:15:9f:af:8f:d7:f6:61:30:48:2a:91: bf:01:49:36:46:f2:45:09:dd:2c:74:95:98:ef:fd: 19:11:e3:de:80:e4:7f:af:a9:b4:4a:a2:31:b9:94: ed:d2:c3:75:aa:1a:49:e5:46:d9:89:19:9d:28:57: c9:2d:b6:e7:df:74:c8:52:e3:93:18:9b:c6:da:ac: aa:0c:99:31:fd:9e:40:a1:52:7c:08:a6:5b:cc:2a: 11:20:ff:cc:f1:5f:48:a7:62:71:3e:85:9f:e1:81: 39:a1:ae:61:d7:6e:06:55:8d:ca:a7:58:d0:b2:b8: 45:31:64:22:13:db:71:7c:f4:14:a1:d1:8c:3c:5c: 50:aa:e1:55:27:d7:95:3a:86:06:59:ab:fb:04:99: b2:8b:ee:57:95:51:af:0a:22:dc:6b:0f:5b:f9:9e: 8c:86:48:1d:fa:14:66:2c:e9:2b:ca:6b:ad:70:23: d7:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:A5:5C:AE:6A:71:D4:63:7B:1A:11:FB:8F:E0:C6:B8:3B:73:85:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/bf8c75e5-8a48-3682-ba23-76245f3af041.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.60.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:c7:6f:5c:71:b8:8f:90:b8:f2:e6:d3:66:3a:1d:44:07:c3: ba:01:b0:c3:8e:6e:f9:d0:cd:5e:5b:1f:ef:ab:a9:d3:8c:fa: 15:f3:bc:1c:05:c1:99:e0:a7:4a:42:c1:93:3f:7d:78:4e:a8: 3f:3c:31:37:72:03:f8:ba:3b:e4:b3:37:29:ad:a8:9a:7f:45: e4:b7:0b:0d:d5:a6:7a:e3:fd:d6:91:f0:14:ff:8e:bd:b6:6a: a5:b5:8b:85:45:ff:7f:c9:fd:49:c8:f1:5a:94:71:ef:13:cb: 65:c3:16:6c:29:90:b3:13:3c:41:64:bb:5f:f2:e1:12:3c:03: 15:90:65:ce:fe:37:58:d5:62:fc:c4:26:72:14:ee:03:0f:d8: fd:2c:37:be:c8:f4:a2:90:4b:1a:89:6d:b7:a0:86:c2:ac:b5: 02:92:be:c7:4a:3e:a6:5a:e2:9e:e8:7a:c5:33:6c:83:eb:6f: 05:9a:88:b3:74:bf:5a:6a:6d:f9:d8:69:c9:28:24:01:22:c5: 4a:43:c4:14:5a:ab:0a:6f:a8:dd:af:ce:99:09:e5:27:6a:d1: 2c:12:d2:17:89:bf:ba:49:2b:3a:0f:53:55:98:b3:1a:d9:5c: c3:f2:bf:40:22:7e:67:b8:d9:32:66:b0:d1:ff:31:1d:85:a3: 23:2a:db:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0DfVO5EWEb2LEOYYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDIyODE0MDA0MFoXDTI2MDUyOTEzMDA0MFowLzEtMCsGA1UEAxMk NDhmNGRiNTQtMGNlNy00NTk4LThlOTAtMzZiNDY0NzEwYTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbeguxg3hSNURRoALmkQRF/yqCDHZrwdXejx 3he8uVS/Y+6on3q9LeDz9s8BRpfZE5s0sGD1kOnPJD9oqeQBT1DOwtTuak3GbPoD Ut3qFZ+vj9f2YTBIKpG/AUk2RvJFCd0sdJWY7/0ZEePegOR/r6m0SqIxuZTt0sN1 qhpJ5UbZiRmdKFfJLbbn33TIUuOTGJvG2qyqDJkx/Z5AoVJ8CKZbzCoRIP/M8V9I p2JxPoWf4YE5oa5h124GVY3Kp1jQsrhFMWQiE9txfPQUodGMPFxQquFVJ9eVOoYG Wav7BJmyi+5XlVGvCiLcaw9b+Z6Mhkgd+hRmLOkrymutcCPX2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLulXK5qcdRjexoR+4/gxrg7c4XaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvYmY4Yzc1ZTUtOGE0OC0z NjgyLWJhMjMtNzYyNDVmM2FmMDQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDwQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHjHb1xxuI+QuPLm02Y6HUQHw7oBsMOObvnQzV5bH++rqdOM+hXzvBwF wZngp0pCwZM/fXhOqD88MTdyA/i6O+SzNymtqJp/ReS3Cw3Vpnrj/daR8BT/jr22 aqW1i4VF/3/J/UnI8VqUce8Ty2XDFmwpkLMTPEFku1/y4RI8AxWQZc7+N1jVYvzE JnIU7gMP2P0sN77I9KKQSxqJbbeghsKstQKSvsdKPqZa4p7oesUzbIPrbwWaiLN0 v1pqbfnYackoJAEixUpDxBRaqwpvqN2vzpkJ5Sdq0SwS0heJv7pJKzoPU1WYsxrZ XMPyv0Aifme42TJmsNH/MR2FoyMq20c= -----END CERTIFICATE-----Generated at Mon Mar 2 09:47:14 2026 by rpki-client