$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/ca6bdb6c-a22e-3805-87b8-55a8f7a83dff.roa File: ca6bdb6c-a22e-3805-87b8-55a8f7a83dff.roa (raw, json) Hash identifier: VDpuCzvHF66MDYEB4ui9InqQa5asyYFBtvUtpAOxxeY= Subject key identifier: 9E:52:8F:67:8C:2F:3E:AE:0D:41:66:37:FF:83:24:5A:57:07:CF:65 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584D037D4797DCC7776EE8B0B6D8 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/ca6bdb6c-a22e-3805-87b8-55a8f7a83dff.roa Signing time: Sat 28 Feb 2026 14:00:40 +0000 ROA not before: Sat 28 Feb 2026 14:00:40 +0000 ROA not after: Fri 29 May 2026 13:00:40 +0000 asID: 16591 IP address blocks: 136.35.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:03:7d:47:97:dc:c7:77:6e:e8:b0:b6:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Feb 28 14:00:40 2026 GMT Not After : May 29 13:00:40 2026 GMT Subject: CN=ab577331-4abc-4d4e-88e7-ee4daf164069 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:47:46:46:e5:1f:19:18:bb:4e:a9:b2:4b:4c: 25:74:ca:b3:ef:ae:08:d4:05:98:23:aa:86:4a:66: 0c:6d:3c:39:13:2d:07:34:57:24:eb:57:09:de:f4: a0:9b:90:e5:b2:e1:ce:35:cd:08:12:1b:b1:8e:ad: 02:7a:97:27:7c:78:02:6e:d8:f8:00:0d:78:c1:fb: 1a:4f:d8:09:80:4e:67:ad:fe:36:a2:d9:e2:ba:57: 00:01:80:b0:31:ec:c9:19:ec:1f:f8:33:bc:4b:21: 7e:fe:1e:97:54:f6:bf:7f:19:e5:de:5c:96:b8:4c: dc:e5:bc:de:08:c1:f2:e8:82:c1:a5:6f:5e:2d:ad: 43:b5:5a:2a:f4:be:fd:e4:0f:01:a9:76:7a:9c:60: b5:5f:a7:a1:ee:59:dc:27:19:44:21:ed:cb:a7:74: f8:da:1e:03:10:60:4c:ac:45:dc:bf:f9:f1:db:23: 88:a5:bf:d6:fc:d1:07:59:21:3d:00:94:e0:27:4c: 7b:29:86:56:a2:da:19:2b:77:b7:81:ce:d1:f0:a4: ed:01:6d:6f:fd:df:41:7c:94:47:9d:e9:06:1f:9c: e1:52:f1:2f:5a:bb:a7:a4:58:d3:9c:84:d4:a9:27: 27:c2:0c:2c:f8:ff:f0:75:4f:4f:e3:05:f6:23:b2: 99:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:52:8F:67:8C:2F:3E:AE:0D:41:66:37:FF:83:24:5A:57:07:CF:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/ca6bdb6c-a22e-3805-87b8-55a8f7a83dff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.35.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:43:40:aa:67:cc:52:b1:17:af:62:f5:af:00:22:9b:66:5c: d3:7f:62:b1:d0:77:b9:43:d6:bc:aa:1a:7a:6b:dd:b4:bb:7a: da:a7:c1:e0:a6:6f:95:9e:d9:25:33:dd:32:8e:55:fc:0d:de: a6:3c:cd:56:31:4d:3a:6f:84:9e:e3:71:15:d2:85:7d:b7:06: 37:c3:ee:e9:5c:fa:bf:14:f4:d7:0e:d2:8c:60:3e:7b:42:72: 1c:2a:f8:c3:9d:5e:72:36:af:ae:27:e4:00:31:2d:91:82:3d: e5:9b:d4:98:9d:97:f9:9d:b6:a5:3a:72:88:90:60:e8:21:b3: 0a:15:a1:01:62:0f:1c:12:b5:54:ae:71:ca:4a:4c:33:4e:8c: 32:56:5e:c6:d2:d1:36:fb:63:d3:fe:5e:a3:5d:a3:92:1b:38: ae:82:81:c9:88:9b:97:7a:87:12:3c:67:e7:41:36:fd:29:c5: 63:4f:e3:c4:48:4a:b0:9d:63:ba:b3:52:66:f1:c8:25:34:cd: c2:b2:7a:3e:1f:7c:c3:eb:ef:08:4a:81:08:8a:3e:b6:97:34: 1c:bd:e9:35:44:18:ec:d8:3a:2f:d3:fd:cc:73:f8:7e:e4:56: d1:44:6e:50:69:4c:c3:e7:17:92:71:e1:71:fe:6f:e3:dd:d7: 43:e2:57:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0DfUeX3Md3buiwttgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDIyODE0MDA0MFoXDTI2MDUyOTEzMDA0MFowLzEtMCsGA1UEAxMk YWI1NzczMzEtNGFiYy00ZDRlLTg4ZTctZWU0ZGFmMTY0MDY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUdGRuUfGRi7TqmyS0wldMqz764I1AWYI6qG SmYMbTw5Ey0HNFck61cJ3vSgm5DlsuHONc0IEhuxjq0CepcnfHgCbtj4AA14wfsa T9gJgE5nrf42otniulcAAYCwMezJGewf+DO8SyF+/h6XVPa/fxnl3lyWuEzc5bze CMHy6ILBpW9eLa1DtVoq9L795A8BqXZ6nGC1X6eh7lncJxlEIe3Lp3T42h4DEGBM rEXcv/nx2yOIpb/W/NEHWSE9AJTgJ0x7KYZWotoZK3e3gc7R8KTtAW1v/d9BfJRH nekGH5zhUvEvWrunpFjTnITUqScnwgws+P/wdU9P4wX2I7KZAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ5Sj2eMLz6uDUFmN/+DJFpXB89lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvY2E2YmRiNmMtYTIyZS0z ODA1LTg3YjgtNTVhOGY3YTgzZGZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFZDQKpnzFKxF69i9a8AIptmXNN/YrHQd7lD1ryqGnpr3bS7etqnweCm b5We2SUz3TKOVfwN3qY8zVYxTTpvhJ7jcRXShX23BjfD7ulc+r8U9NcO0oxgPntC chwq+MOdXnI2r64n5AAxLZGCPeWb1Jidl/mdtqU6coiQYOghswoVoQFiDxwStVSu ccpKTDNOjDJWXsbS0Tb7Y9P+XqNdo5IbOK6CgcmIm5d6hxI8Z+dBNv0pxWNP48RI SrCdY7qzUmbxyCU0zcKyej4ffMPr7whKgQiKPraXNBy96TVEGOzYOi/T/cxz+H7k VtFEblBpTMPnF5Jx4XH+b+Pd10PiVxE= -----END CERTIFICATE-----Generated at Mon Mar 2 09:46:25 2026 by rpki-client