$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/d5af2629-6142-348d-a1e2-7787336c8706.roa File: d5af2629-6142-348d-a1e2-7787336c8706.roa (raw, json) Hash identifier: rnEAUV6VEdOM9NRQ+w7/ujs3QrclbYVT1gvJ6B6XEEg= Subject key identifier: B0:91:15:D8:D1:31:19:03:BB:1F:C7:94:C1:D3:85:44:16:FC:BE:B8 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584D037D114CF45BE59D2ADC2EC0 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/d5af2629-6142-348d-a1e2-7787336c8706.roa Signing time: Sat 28 Feb 2026 14:00:40 +0000 ROA not before: Sat 28 Feb 2026 14:00:40 +0000 ROA not after: Fri 29 May 2026 13:00:40 +0000 asID: 16591 IP address blocks: 136.35.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:03:7d:11:4c:f4:5b:e5:9d:2a:dc:2e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Feb 28 14:00:40 2026 GMT Not After : May 29 13:00:40 2026 GMT Subject: CN=6709895c-5902-49f3-a689-180b01fc227e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:c8:29:5b:a4:ab:ed:9e:a6:9d:c1:e6:d2:96: c2:66:57:6a:56:51:d8:df:04:d2:98:91:52:09:64: 64:dd:cf:a6:30:34:c6:e5:45:7c:7f:13:e4:23:10: 5a:35:7d:d0:b8:76:e1:f6:99:9b:8c:8f:c1:4e:5b: fe:4e:9d:c1:c6:73:41:e3:51:22:14:08:74:d8:f9: 09:f8:12:ce:4c:fd:67:94:e7:f1:7e:c9:f1:38:89: 6a:94:ed:8f:13:27:42:68:01:11:18:a0:f8:8e:3c: 59:ee:71:e2:28:3f:45:02:b3:6e:e0:72:62:15:4c: ca:73:bd:62:d4:2e:04:af:88:af:52:3c:87:a5:be: 92:6b:5c:77:5e:9c:25:8e:0b:20:9e:8c:25:96:89: 3b:06:38:e3:e1:bb:49:36:83:05:9c:5d:fb:2a:4e: 66:42:75:ed:15:62:a4:e5:02:1b:f5:f6:8e:72:df: 0d:74:12:04:96:10:65:50:bc:e1:26:1a:2a:a3:a5: bc:5a:4a:17:e2:d6:73:db:63:d4:de:e3:4d:ba:d3: 2d:d9:44:3d:16:02:31:f4:8a:ac:7d:ee:3e:4a:65: 87:fe:aa:ea:88:3f:26:d1:ca:32:c5:ae:5d:8b:81: e0:49:d4:a9:ae:07:e6:da:8e:06:cf:26:4d:f5:96: 7e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:91:15:D8:D1:31:19:03:BB:1F:C7:94:C1:D3:85:44:16:FC:BE:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/d5af2629-6142-348d-a1e2-7787336c8706.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.35.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:d2:b0:52:0b:fd:15:97:61:33:5a:ad:f3:09:3d:d4:87:86: 42:f3:9f:ce:1f:53:08:9c:53:25:16:b2:0d:80:ae:9a:d7:01: 96:dc:2b:30:90:6c:32:9f:6f:8d:74:4f:28:cf:b3:73:e8:f6: 09:37:e0:15:f8:e1:34:24:24:43:c9:ff:2b:0a:19:28:81:0c: 4c:a6:32:37:ef:9e:51:8b:53:19:82:7b:d0:e3:20:2b:49:2e: 43:2f:96:c1:87:7f:88:18:87:6d:4b:9f:88:92:ca:51:51:47: 62:80:d5:7e:08:4e:0c:50:6c:f3:93:2a:69:dc:5a:be:82:55: e1:fa:2e:b5:da:c2:06:64:4c:84:af:2e:5f:f3:60:bb:a2:3a: 09:63:c6:8b:19:62:17:01:7b:87:c6:12:9b:2e:b0:9c:7e:72: 52:fa:06:ce:c4:21:7a:60:57:44:3f:fa:a1:e9:53:c4:dc:38: 3d:b7:86:c4:20:28:89:e0:c1:7f:b7:d7:3b:55:42:7d:c1:e8: 82:47:73:f8:33:26:9c:7e:4a:cf:9d:ae:f1:8a:ef:1c:86:23: 66:d2:b9:a9:49:a7:b8:b6:b4:76:63:9a:30:f3:4f:40:52:0e: a0:0a:bf:d9:05:68:ec:a9:b7:41:5d:d2:c5:98:3c:e0:90:e5: 82:de:f4:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0DfRFM9FvlnSrcLsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDIyODE0MDA0MFoXDTI2MDUyOTEzMDA0MFowLzEtMCsGA1UEAxMk NjcwOTg5NWMtNTkwMi00OWYzLWE2ODktMTgwYjAxZmMyMjdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA28gpW6Sr7Z6mncHm0pbCZldqVlHY3wTSmJFS CWRk3c+mMDTG5UV8fxPkIxBaNX3QuHbh9pmbjI/BTlv+Tp3BxnNB41EiFAh02PkJ +BLOTP1nlOfxfsnxOIlqlO2PEydCaAERGKD4jjxZ7nHiKD9FArNu4HJiFUzKc71i 1C4Er4ivUjyHpb6Sa1x3Xpwljgsgnowllok7Bjjj4btJNoMFnF37Kk5mQnXtFWKk 5QIb9faOct8NdBIElhBlULzhJhoqo6W8WkoX4tZz22PU3uNNutMt2UQ9FgIx9Iqs fe4+SmWH/qrqiD8m0coyxa5di4HgSdSprgfm2o4GzyZN9ZZ+BwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLCRFdjRMRkDux/HlMHThUQW/L64MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvZDVhZjI2MjktNjE0Mi0z NDhkLWExZTItNzc4NzMzNmM4NzA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCMgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH7SsFIL/RWXYTNarfMJPdSHhkLzn84fUwicUyUWsg2ArprXAZbcKzCQ bDKfb410TyjPs3Po9gk34BX44TQkJEPJ/ysKGSiBDEymMjfvnlGLUxmCe9DjICtJ LkMvlsGHf4gYh21Ln4iSylFRR2KA1X4ITgxQbPOTKmncWr6CVeH6LrXawgZkTISv Ll/zYLuiOgljxosZYhcBe4fGEpsusJx+clL6Bs7EIXpgV0Q/+qHpU8TcOD23hsQg KIngwX+31ztVQn3B6IJHc/gzJpx+Ss+drvGK7xyGI2bSualJp7i2tHZjmjDzT0BS DqAKv9kFaOypt0Fd0sWYPOCQ5YLe9Hk= -----END CERTIFICATE-----Generated at Mon Mar 2 11:38:49 2026 by rpki-client