$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/cecc95c9-f1d1-342c-a2ff-3c03c32f838b.roa File: cecc95c9-f1d1-342c-a2ff-3c03c32f838b.roa (raw, json) Hash identifier: nWl7eM/eD0/jAYiewqcLFVP1RT8xj1p9vPcbJW+gbEs= Subject key identifier: 1E:0A:99:A9:C4:FC:F2:11:A4:0D:0F:B4:2C:09:37:7C:7A:09:8B:38 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584D037D50986186F59EE85E1780 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/cecc95c9-f1d1-342c-a2ff-3c03c32f838b.roa Signing time: Sat 28 Feb 2026 14:00:40 +0000 ROA not before: Sat 28 Feb 2026 14:00:40 +0000 ROA not after: Fri 29 May 2026 13:00:40 +0000 asID: 16591 IP address blocks: 136.32.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:03:7d:50:98:61:86:f5:9e:e8:5e:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Feb 28 14:00:40 2026 GMT Not After : May 29 13:00:40 2026 GMT Subject: CN=43f8ff1d-4bae-4e2e-a769-61df0c3b0389 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:19:b7:7a:1b:8d:13:80:8c:87:79:ca:47:a9: de:46:a7:a2:86:7e:c9:c4:ef:27:9d:f7:b3:ea:41: 7f:5b:93:fe:c3:e3:c0:7c:2c:85:1c:64:fa:81:ef: 8c:b4:c9:8c:4e:1d:af:0c:68:8d:34:0d:bb:93:7d: e5:0e:9b:b1:c1:c0:7e:21:61:a4:3f:e5:ba:e6:63: 6a:35:0e:31:fd:3a:06:c1:ff:8a:72:48:b9:c9:2a: 1b:70:03:49:e1:6b:1b:97:33:4f:6e:3e:af:72:9e: e0:81:50:7b:8c:a2:48:05:b9:82:85:d6:6b:5c:26: 5b:b6:5c:03:6f:54:cb:88:19:02:40:d5:00:cd:45: cd:37:66:37:ad:ef:13:87:01:47:db:36:f1:92:0c: 2e:9e:f9:f8:be:f4:03:1e:4b:97:cf:84:54:77:44: 73:72:16:63:f4:bc:13:73:28:d2:0e:5f:b2:73:eb: 42:45:37:c0:0a:be:ae:c5:81:43:1f:d1:b5:d8:dd: 16:a1:6e:18:59:46:6a:29:5a:b2:43:fa:45:e1:09: 46:2c:98:fb:94:6c:a4:19:7c:c9:a1:9c:ba:51:48: dd:b1:c0:06:28:dd:d1:bb:c6:8d:87:6d:1a:d8:44: 2f:09:f4:ce:39:a4:b4:40:43:39:9e:d7:f3:fa:f2: 1c:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:0A:99:A9:C4:FC:F2:11:A4:0D:0F:B4:2C:09:37:7C:7A:09:8B:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/cecc95c9-f1d1-342c-a2ff-3c03c32f838b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.32.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:fa:c0:46:13:eb:3f:65:70:d4:66:ef:3e:af:d9:c7:0d:42: e0:fb:92:15:fc:41:d0:60:d3:39:d5:91:ed:76:6c:1a:d0:3f: a7:cc:04:f7:8d:22:de:e8:df:ac:f7:1c:17:bf:e5:1a:bd:53: 9c:3f:3e:f6:34:30:a4:52:c4:d8:4d:13:f6:42:ba:6a:f0:68: 66:dd:a6:31:af:01:ee:01:94:53:cd:c3:a8:ee:63:85:5e:8c: ad:92:da:cf:44:a8:7a:37:cd:c9:af:1f:e6:60:6e:23:b7:3c: cc:45:df:09:e0:da:95:83:d6:80:51:5c:bc:4d:3c:4a:30:fa: 82:6a:4c:66:43:35:9f:ca:54:4a:eb:0f:6a:7a:e9:56:2a:9d: d3:a1:07:68:48:88:45:02:1d:44:73:75:aa:7f:2f:8f:11:dc: c7:82:23:e2:b9:5c:63:24:22:89:2e:7b:d6:aa:3d:7e:b2:a8: 83:3c:84:ec:1a:ae:bd:42:f3:f4:1e:9f:21:f9:53:ee:b9:42: 2a:49:ba:69:bf:dd:a3:19:d4:bf:d3:c2:52:ef:e1:32:97:b1: 87:ed:78:43:d0:84:4b:10:a8:a9:43:23:51:39:a4:84:67:dd: 58:aa:55:f9:1c:8f:0b:58:f4:56:f6:ca:32:a3:83:b8:f2:de: 4f:b9:96:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0DfVCYYYb1nuheF4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDIyODE0MDA0MFoXDTI2MDUyOTEzMDA0MFowLzEtMCsGA1UEAxMk NDNmOGZmMWQtNGJhZS00ZTJlLWE3NjktNjFkZjBjM2IwMzg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixm3ehuNE4CMh3nKR6neRqeihn7JxO8nnfez 6kF/W5P+w+PAfCyFHGT6ge+MtMmMTh2vDGiNNA27k33lDpuxwcB+IWGkP+W65mNq NQ4x/ToGwf+Kcki5ySobcANJ4WsblzNPbj6vcp7ggVB7jKJIBbmChdZrXCZbtlwD b1TLiBkCQNUAzUXNN2Y3re8ThwFH2zbxkgwunvn4vvQDHkuXz4RUd0RzchZj9LwT cyjSDl+yc+tCRTfACr6uxYFDH9G12N0WoW4YWUZqKVqyQ/pF4QlGLJj7lGykGXzJ oZy6UUjdscAGKN3Ru8aNh20a2EQvCfTOOaS0QEM5ntfz+vIc5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB4KmanE/PIRpA0PtCwJN3x6CYs4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvY2VjYzk1YzktZjFkMS0z NDJjLWEyZmYtM2MwM2MzMmY4MzhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCAQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEH6wEYT6z9lcNRm7z6v2ccNQuD7khX8QdBg0znVke12bBrQP6fMBPeN It7o36z3HBe/5Rq9U5w/PvY0MKRSxNhNE/ZCumrwaGbdpjGvAe4BlFPNw6juY4Ve jK2S2s9EqHo3zcmvH+ZgbiO3PMxF3wng2pWD1oBRXLxNPEow+oJqTGZDNZ/KVErr D2p66VYqndOhB2hIiEUCHURzdap/L48R3MeCI+K5XGMkIokue9aqPX6yqIM8hOwa rr1C8/QenyH5U+65QipJumm/3aMZ1L/TwlLv4TKXsYfteEPQhEsQqKlDI1E5pIRn 3ViqVfkcjwtY9Fb2yjKjg7jy3k+5ll0= -----END CERTIFICATE-----Generated at Mon Mar 2 09:32:39 2026 by rpki-client