$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/cec7a1a6-72a6-3535-b74e-3962d0df9425.roa File: cec7a1a6-72a6-3535-b74e-3962d0df9425.roa (raw, json) Hash identifier: vt/5/MpPX5cQTFKAx0dKMRrYplbnH6hkdcJlsm988uI= Subject key identifier: E6:98:C1:21:25:5D:A9:2E:44:12:B9:92:AE:89:5A:33:E8:B5:75:C0 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584D037D0BA1BDBE03E131465980 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/cec7a1a6-72a6-3535-b74e-3962d0df9425.roa Signing time: Sat 28 Feb 2026 14:00:40 +0000 ROA not before: Sat 28 Feb 2026 14:00:40 +0000 ROA not after: Fri 29 May 2026 13:00:40 +0000 asID: 16591 IP address blocks: 136.62.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:03:7d:0b:a1:bd:be:03:e1:31:46:59:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Feb 28 14:00:40 2026 GMT Not After : May 29 13:00:40 2026 GMT Subject: CN=7644da2e-d64e-4081-96fc-79de372ef96e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:3a:b3:e9:b5:89:68:07:a4:9a:ea:e5:2b:2d: 66:1a:ef:b4:28:bb:28:33:db:32:ba:8f:ca:7e:67: e0:5e:f4:72:e2:8c:7e:ee:ef:55:a6:1a:9e:d7:eb: f6:e0:41:3b:8c:28:cb:85:f5:95:82:e5:2c:33:70: 40:95:d8:e5:81:88:df:b6:e7:e6:76:58:0f:dc:5a: ff:a0:5e:ab:46:26:97:b8:ae:47:84:38:d3:ff:ad: 9b:33:59:98:d5:cb:ab:ae:7d:e9:73:6c:c7:e2:52: af:35:0a:7c:24:7b:aa:09:cf:e6:d3:84:b0:bd:7d: d1:e3:cd:bf:a1:6b:7b:e6:21:b0:dc:ac:fe:93:be: 1f:e8:0e:23:ee:4b:21:2c:11:7a:7d:40:65:ae:5b: 62:05:d1:a7:c1:f3:21:8c:60:61:25:8b:09:db:76: 38:e2:6a:54:38:d0:30:cd:3d:7d:24:00:1f:5c:38: b5:e6:c8:70:37:6d:3d:a8:12:19:b6:6f:ff:bd:fd: 76:83:9a:ba:c7:4b:59:56:fa:3c:f7:23:c3:7f:a2: e2:8c:1d:85:c4:40:6a:d5:d5:12:4e:7d:5b:b9:48: 99:83:6f:71:13:68:78:6c:d6:67:4e:aa:87:6e:90: 6a:0c:ea:85:58:46:39:ce:a4:30:4e:4c:49:a4:7d: c3:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:98:C1:21:25:5D:A9:2E:44:12:B9:92:AE:89:5A:33:E8:B5:75:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/cec7a1a6-72a6-3535-b74e-3962d0df9425.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.62.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:f8:02:be:98:e3:2b:fe:a5:1b:9c:04:85:e4:e5:bb:b8:f8: fa:d4:b1:c1:2f:f3:49:44:ff:e3:8c:fb:96:74:39:a3:10:b4: 45:f1:f9:a5:8b:c7:ca:bc:ce:96:e9:ed:53:e3:19:34:fe:d5: a2:e0:a1:4e:35:ad:66:5d:ce:57:15:09:72:38:94:fe:39:52: 34:a0:86:ae:8e:42:64:44:d5:22:bb:37:f7:7c:58:29:b9:a3: 11:2a:01:27:ae:77:d0:83:df:2d:53:a0:28:72:d1:71:f3:88: 73:cd:ed:35:87:de:3d:3c:88:45:69:85:1a:25:2a:17:a7:b9: 30:ba:37:1c:56:67:ba:73:41:a4:d7:d7:54:ec:9d:81:dd:74: cf:9d:54:c8:10:2b:cc:02:96:a5:b1:e3:98:a4:c7:ff:e5:1e: 33:87:48:c3:07:1f:1a:1c:42:75:84:6e:f6:bb:08:f7:56:02: d5:16:14:ee:8b:20:16:de:79:38:09:4e:8f:81:e5:45:34:8f: 51:f8:3a:40:d0:35:bc:8f:d1:78:3b:0b:b2:76:6c:d7:43:cb: 39:5f:0d:d2:e8:28:b7:78:7c:dd:76:c2:23:e4:22:98:93:ec: 6e:96:79:3a:e0:82:cc:90:12:e5:2a:b5:db:3e:57:ba:cd:f7: 40:0c:ce:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0DfQuhvb4D4TFGWYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDIyODE0MDA0MFoXDTI2MDUyOTEzMDA0MFowLzEtMCsGA1UEAxMk NzY0NGRhMmUtZDY0ZS00MDgxLTk2ZmMtNzlkZTM3MmVmOTZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjqz6bWJaAekmurlKy1mGu+0KLsoM9syuo/K fmfgXvRy4ox+7u9Vphqe1+v24EE7jCjLhfWVguUsM3BAldjlgYjftufmdlgP3Fr/ oF6rRiaXuK5HhDjT/62bM1mY1currn3pc2zH4lKvNQp8JHuqCc/m04SwvX3R482/ oWt75iGw3Kz+k74f6A4j7kshLBF6fUBlrltiBdGnwfMhjGBhJYsJ23Y44mpUONAw zT19JAAfXDi15shwN209qBIZtm//vf12g5q6x0tZVvo89yPDf6LijB2FxEBq1dUS Tn1buUiZg29xE2h4bNZnTqqHbpBqDOqFWEY5zqQwTkxJpH3DrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOaYwSElXakuRBK5kq6JWjPotXXAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvY2VjN2ExYTYtNzJhNi0z NTM1LWI3NGUtMzk2MmQwZGY5NDI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiD7QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHj4Ar6Y4yv+pRucBIXk5bu4+PrUscEv80lE/+OM+5Z0OaMQtEXx+aWL x8q8zpbp7VPjGTT+1aLgoU41rWZdzlcVCXI4lP45UjSghq6OQmRE1SK7N/d8WCm5 oxEqASeud9CD3y1ToChy0XHziHPN7TWH3j08iEVphRolKhenuTC6NxxWZ7pzQaTX 11TsnYHddM+dVMgQK8wClqWx45ikx//lHjOHSMMHHxocQnWEbva7CPdWAtUWFO6L IBbeeTgJTo+B5UU0j1H4OkDQNbyP0Xg7C7J2bNdDyzlfDdLoKLd4fN12wiPkIpiT 7G6WeTrggsyQEuUqtds+V7rN90AMzjk= -----END CERTIFICATE-----Generated at Mon Mar 2 10:17:40 2026 by rpki-client