$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/d8016833-1a9f-3123-af81-bdd2ececb2bb.roa File: d8016833-1a9f-3123-af81-bdd2ececb2bb.roa (raw, json) Hash identifier: y1UqF7EEYt5MKBHKd91IjJpRIHLFu2foKYrslO2fB3Q= Subject key identifier: 16:F8:EE:97:80:D0:60:FD:0F:F0:E5:AA:0A:63:B3:E5:F2:D2:06:30 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584D037D01290C17478D69FD3D20 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/d8016833-1a9f-3123-af81-bdd2ececb2bb.roa Signing time: Sat 28 Feb 2026 14:00:40 +0000 ROA not before: Sat 28 Feb 2026 14:00:40 +0000 ROA not after: Fri 29 May 2026 13:00:40 +0000 asID: 16591 IP address blocks: 136.61.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:03:7d:01:29:0c:17:47:8d:69:fd:3d:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Feb 28 14:00:40 2026 GMT Not After : May 29 13:00:40 2026 GMT Subject: CN=4c191366-fb2e-42d0-bba8-f3c2c98a0805 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:8e:e9:66:c8:08:a8:14:47:07:02:10:87:df: 1f:1c:05:80:c8:3b:c2:fb:fb:51:97:37:f2:9a:d2: a0:c3:bf:82:2a:4c:16:33:85:a7:1b:2c:12:dc:fd: ab:60:bf:64:d0:78:db:2c:b8:de:db:92:88:8c:e1: 8d:62:0d:9b:b0:b5:80:6a:73:cd:61:5b:b6:93:a9: 04:d2:2f:12:d9:2e:d7:35:fa:69:bc:ad:be:50:5b: e2:c9:7a:49:6d:c4:30:62:17:e1:a6:d2:c4:76:99: 09:05:f1:5e:ba:50:60:82:ad:d7:d5:bd:fe:7d:64: a2:ea:50:6d:3a:f5:c1:8d:fd:fd:28:32:a4:c5:7f: 7d:bf:de:a2:e9:87:2e:53:bd:e8:cd:e0:1c:eb:1f: 07:9a:dd:68:3a:a1:eb:86:90:8a:f5:99:4e:03:d7: 0d:64:99:b6:0f:2c:cd:77:b5:f2:ae:d5:14:2d:83: 35:55:bd:3b:29:ef:06:f3:9c:a2:a2:de:30:ce:f3: 17:70:f5:a2:ac:6f:7a:99:fb:c1:80:33:b6:fd:da: 36:69:20:1d:ab:6c:89:33:b0:eb:48:50:f2:75:84: 62:a6:14:7c:99:ab:ce:17:08:84:9e:8f:12:bc:03: 73:2a:42:4f:25:dc:34:b5:99:aa:7e:4f:15:2e:94: 9c:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:F8:EE:97:80:D0:60:FD:0F:F0:E5:AA:0A:63:B3:E5:F2:D2:06:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/d8016833-1a9f-3123-af81-bdd2ececb2bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.61.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:06:ca:06:03:1e:2a:c2:d1:de:72:11:a8:82:6b:41:e8:40: 7c:2c:56:47:d6:e8:d3:5b:dd:64:d4:32:d2:1b:a8:9a:60:1d: ae:cd:bc:0d:32:4b:7e:f2:2c:01:81:19:ea:f5:42:8b:68:29: 95:d5:d5:15:72:4f:a5:c1:18:d3:a9:12:fb:e7:06:9c:ef:ce: 4f:44:df:77:12:4b:2a:70:4c:49:8e:5c:f2:81:9e:95:ef:d3: 75:44:74:64:1f:f3:eb:bf:05:25:12:8a:32:b7:a5:1c:bb:d6: b9:29:ee:44:8f:6d:73:c3:bb:31:d6:33:54:cf:33:30:2a:59: ed:da:c2:8c:54:99:60:22:31:9b:42:1f:be:80:d4:ed:a8:74: b5:b3:81:1d:c0:20:4b:de:16:32:82:0b:5d:1f:64:d1:3b:83: f7:46:c0:1e:58:18:9b:c4:59:f0:fe:f6:30:a4:a2:dd:1c:6c: c0:a7:c2:78:d5:2e:6e:ef:b3:73:b3:6b:74:9a:c3:0d:a6:73: 90:3b:7a:78:02:9a:fb:0b:9a:ec:f9:92:5d:90:3d:61:d3:bc: 8d:ea:21:f6:8d:fe:f1:ad:1b:2f:94:57:a9:55:fe:84:85:6e: 81:2a:14:f8:d1:a1:fa:dc:43:3a:bb:57:80:7b:88:e0:18:45: 71:2e:ea:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0DfQEpDBdHjWn9PSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDIyODE0MDA0MFoXDTI2MDUyOTEzMDA0MFowLzEtMCsGA1UEAxMk NGMxOTEzNjYtZmIyZS00MmQwLWJiYTgtZjNjMmM5OGEwODA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnI7pZsgIqBRHBwIQh98fHAWAyDvC+/tRlzfy mtKgw7+CKkwWM4WnGywS3P2rYL9k0HjbLLje25KIjOGNYg2bsLWAanPNYVu2k6kE 0i8S2S7XNfppvK2+UFviyXpJbcQwYhfhptLEdpkJBfFeulBggq3X1b3+fWSi6lBt OvXBjf39KDKkxX99v96i6YcuU73ozeAc6x8Hmt1oOqHrhpCK9ZlOA9cNZJm2DyzN d7XyrtUULYM1Vb07Ke8G85yiot4wzvMXcPWirG96mfvBgDO2/do2aSAdq2yJM7Dr SFDydYRiphR8mavOFwiEno8SvANzKkJPJdw0tZmqfk8VLpScywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBb47peA0GD9D/Dlqgpjs+Xy0gYwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvZDgwMTY4MzMtMWE5Zi0z MTIzLWFmODEtYmRkMmVjZWNiMmJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiD1AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIcGygYDHirC0d5yEaiCa0HoQHwsVkfW6NNb3WTUMtIbqJpgHa7NvA0y S37yLAGBGer1QotoKZXV1RVyT6XBGNOpEvvnBpzvzk9E33cSSypwTEmOXPKBnpXv 03VEdGQf8+u/BSUSijK3pRy71rkp7kSPbXPDuzHWM1TPMzAqWe3awoxUmWAiMZtC H76A1O2odLWzgR3AIEveFjKCC10fZNE7g/dGwB5YGJvEWfD+9jCkot0cbMCnwnjV Lm7vs3Oza3Saww2mc5A7engCmvsLmuz5kl2QPWHTvI3qIfaN/vGtGy+UV6lV/oSF boEqFPjRofrcQzq7V4B7iOAYRXEu6jA= -----END CERTIFICATE-----Generated at Mon Mar 2 09:44:10 2026 by rpki-client