$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/c49a928a-cb43-392e-8d6d-68e9dc73b3b3.roa File: c49a928a-cb43-392e-8d6d-68e9dc73b3b3.roa (raw, json) Hash identifier: ftEJqYPKoUP9GlCb9ljjWNCD+VRXduZJhHoDPenyucg= Subject key identifier: E7:83:96:F4:8C:EB:B1:1A:15:D6:CB:5D:86:F1:8D:CF:05:04:A7:A6 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584D037CFA81401D905C8EB0A180 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/c49a928a-cb43-392e-8d6d-68e9dc73b3b3.roa Signing time: Sat 28 Feb 2026 14:00:40 +0000 ROA not before: Sat 28 Feb 2026 14:00:40 +0000 ROA not after: Fri 29 May 2026 13:00:40 +0000 asID: 16591 IP address blocks: 136.32.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:03:7c:fa:81:40:1d:90:5c:8e:b0:a1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Feb 28 14:00:40 2026 GMT Not After : May 29 13:00:40 2026 GMT Subject: CN=5fbe4bc3-ebbd-4acf-94fe-bb7551a42586 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:81:0d:c0:06:a2:d3:42:aa:b1:97:14:91:28: b8:82:af:c9:53:04:29:d2:30:1b:32:9f:ba:4d:c9: 60:dc:90:4c:f6:d6:9d:36:d8:6f:9e:73:77:e2:fc: 91:1d:5e:00:8b:ef:11:af:59:c5:f3:cd:d2:53:db: 6e:6d:65:66:e9:c8:78:92:ac:80:a1:e9:39:03:1a: 05:27:eb:ad:57:27:ee:2b:5f:a8:d8:9f:f7:3c:cb: be:ab:2f:19:32:5d:0b:c0:1d:88:f7:64:6e:d3:d0: 63:a0:85:fe:5c:5f:51:6a:f4:db:69:8a:98:4f:4e: cc:4a:2c:d8:a3:d6:f4:e3:74:de:13:41:24:08:c8: 37:47:e5:2d:23:dd:a9:db:4f:ad:b7:e2:69:2f:ef: 6d:31:99:7e:9b:3d:db:da:63:b7:da:4a:14:b1:67: b0:5f:94:62:84:ce:86:99:22:ab:6c:af:8c:6f:a0: 7b:8b:c2:84:5a:b1:88:66:75:0e:f6:c4:bf:7d:b5: fe:db:6f:16:b4:7c:d9:1c:7d:bd:72:f1:9f:30:12: e5:80:55:2e:39:b9:fd:a3:48:45:34:2a:b2:62:e6: b3:e7:25:17:9e:39:c7:31:d8:22:99:16:ad:7c:1f: 6d:cb:99:a8:de:53:8f:8b:b1:3b:a4:45:8a:e9:4f: 02:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:83:96:F4:8C:EB:B1:1A:15:D6:CB:5D:86:F1:8D:CF:05:04:A7:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/c49a928a-cb43-392e-8d6d-68e9dc73b3b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.32.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:91:70:cf:a8:0f:53:c9:c4:a0:f1:bb:82:bc:b3:57:d4:81: 84:13:42:32:4b:00:3a:04:ba:83:57:ce:7d:88:d0:10:f9:7d: 51:d0:46:81:c3:cf:72:22:f2:aa:9a:b0:04:6c:43:b2:7a:8c: 2e:8d:06:44:c9:d3:8c:f7:89:09:78:a6:96:61:67:14:69:fc: a9:40:fd:47:cd:69:27:07:e5:73:d2:c7:db:28:e4:04:6e:25: 64:d4:49:11:c2:bb:ae:2f:d3:f7:ff:ad:9f:6d:f9:a8:f1:1a: 68:97:93:1d:14:34:d2:a7:5c:2a:fe:93:66:b7:c4:da:42:65: e1:56:6b:d5:57:3d:69:66:82:9a:1b:3e:5a:85:8c:0a:de:fb: ab:af:aa:7f:92:8c:3a:da:f9:4d:ca:a3:16:33:54:84:f7:30: db:4d:11:7d:e0:79:e2:d7:f9:6d:a7:23:52:1a:e5:c6:14:ba: 0d:e2:06:3a:ba:9e:a9:6e:9e:45:4d:08:39:a3:79:35:ef:f2: eb:cb:d9:21:2e:5d:36:ad:d9:c1:35:3b:f1:15:75:0e:83:f9: ab:c7:0a:a9:20:f1:43:dd:0e:c4:1f:f7:ad:e8:6c:41:1c:71: c2:37:c9:30:ea:5e:91:32:83:07:6a:17:a9:b8:ed:ec:ab:8a: a2:13:a1:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0DfPqBQB2QXI6woYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDIyODE0MDA0MFoXDTI2MDUyOTEzMDA0MFowLzEtMCsGA1UEAxMk NWZiZTRiYzMtZWJiZC00YWNmLTk0ZmUtYmI3NTUxYTQyNTg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA74ENwAai00KqsZcUkSi4gq/JUwQp0jAbMp+6 Tclg3JBM9tadNthvnnN34vyRHV4Ai+8Rr1nF883SU9tubWVm6ch4kqyAoek5AxoF J+utVyfuK1+o2J/3PMu+qy8ZMl0LwB2I92Ru09BjoIX+XF9RavTbaYqYT07MSizY o9b043TeE0EkCMg3R+UtI92p20+tt+JpL+9tMZl+mz3b2mO32koUsWewX5RihM6G mSKrbK+Mb6B7i8KEWrGIZnUO9sS/fbX+228WtHzZHH29cvGfMBLlgFUuObn9o0hF NCqyYuaz5yUXnjnHMdgimRatfB9ty5mo3lOPi7E7pEWK6U8CxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOeDlvSM67EaFdbLXYbxjc8FBKemMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvYzQ5YTkyOGEtY2I0My0z OTJlLThkNmQtNjhlOWRjNzNiM2IzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCBgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACaRcM+oD1PJxKDxu4K8s1fUgYQTQjJLADoEuoNXzn2I0BD5fVHQRoHD z3Ii8qqasARsQ7J6jC6NBkTJ04z3iQl4ppZhZxRp/KlA/UfNaScH5XPSx9so5ARu JWTUSRHCu64v0/f/rZ9t+ajxGmiXkx0UNNKnXCr+k2a3xNpCZeFWa9VXPWlmgpob PlqFjAre+6uvqn+SjDra+U3KoxYzVIT3MNtNEX3geeLX+W2nI1Ia5cYUug3iBjq6 nqlunkVNCDmjeTXv8uvL2SEuXTat2cE1O/EVdQ6D+avHCqkg8UPdDsQf963obEEc ccI3yTDqXpEygwdqF6m47eyriqIToXE= -----END CERTIFICATE-----Generated at Mon Mar 2 08:03:50 2026 by rpki-client