$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/dcae33fd-e11c-3f20-b0fb-871292b97aa8.roa File: dcae33fd-e11c-3f20-b0fb-871292b97aa8.roa (raw, json) Hash identifier: 54EwigxDL+M5qlXVqoYYdRSNayn18KNzJSLyE712gGs= Subject key identifier: B2:13:A3:26:70:C0:E2:21:9B:E2:A9:06:2A:6A:D2:3F:21:99:33:B9 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584D037D144AF2A51B2155C96B80 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/dcae33fd-e11c-3f20-b0fb-871292b97aa8.roa Signing time: Sat 28 Feb 2026 14:00:40 +0000 ROA not before: Sat 28 Feb 2026 14:00:40 +0000 ROA not after: Fri 29 May 2026 13:00:40 +0000 asID: 16591 IP address blocks: 136.34.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:03:7d:14:4a:f2:a5:1b:21:55:c9:6b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Feb 28 14:00:40 2026 GMT Not After : May 29 13:00:40 2026 GMT Subject: CN=a448c3b6-ddba-4e36-bbb4-4b3555a34404 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:74:ef:9a:ce:9f:53:15:30:76:3f:1b:3c:6f: 08:9e:a4:ac:1d:e3:28:ac:36:ed:8c:f8:b5:4c:49: 42:77:17:87:9b:7d:8b:8e:07:ff:20:a0:cf:2b:3a: 0d:c3:25:36:b5:1f:1c:c7:3b:fd:dd:93:30:bc:fa: df:c8:b4:5d:9d:31:89:d9:9f:98:9a:b4:db:02:64: 85:05:64:ee:29:7b:ec:af:69:de:a6:0e:60:7d:f1: 95:d7:f1:7d:cd:4f:c5:5b:59:8d:e8:7a:f1:6a:5b: a0:3c:c2:51:07:a5:02:9e:1b:b7:76:fc:fc:55:33: 55:9d:a9:f8:37:73:70:8d:a0:bf:df:f9:be:79:e0: a2:eb:b8:8c:9e:2e:f5:af:68:84:9a:75:63:d8:19: b9:a1:09:1b:dd:8b:86:c2:f6:f1:59:cc:30:c2:2c: a6:29:4b:6b:e3:ca:fe:66:7d:32:e5:f5:21:71:0f: 29:5f:79:41:49:b5:cd:f7:72:b9:61:9a:b6:ae:ae: 82:37:84:9f:43:bf:fd:e6:ab:f0:54:b8:2b:dc:f0: ea:fd:c6:bf:18:8e:a2:df:01:e8:23:19:0f:c2:f8: 8a:2c:eb:8d:06:cf:ad:ae:8f:5a:a7:31:fb:63:90: 5f:bc:6f:71:99:7a:ec:d5:3c:3e:32:78:cd:ec:fb: 7e:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:13:A3:26:70:C0:E2:21:9B:E2:A9:06:2A:6A:D2:3F:21:99:33:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/dcae33fd-e11c-3f20-b0fb-871292b97aa8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.34.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:a4:8b:b5:40:18:e4:9d:2c:ec:49:3a:b5:2f:7e:ba:1f:b3: a4:c4:78:cb:f0:32:24:2c:dc:06:23:eb:c4:39:3b:f4:96:4c: 39:c8:65:ee:30:ec:84:54:f9:65:be:30:b1:8d:0c:14:fa:25: 66:ed:1a:55:59:6e:3d:85:a3:87:3a:97:70:68:e9:c1:d6:96: cf:4a:39:b0:8c:ec:f7:17:f8:52:0e:2b:70:39:14:9e:a7:b5: f6:b3:1f:d1:23:b9:20:18:b9:af:c2:4a:f6:62:90:b0:ee:95: 56:08:10:bf:17:88:f2:07:77:81:6d:75:3f:dd:81:bd:69:80: a1:0a:2a:dd:ad:ac:db:24:75:3f:13:df:b0:25:f1:8b:64:08: 25:d6:7a:5c:45:dd:09:a8:d6:75:8f:1a:a1:8d:ec:54:29:d5: be:e5:c6:b6:f5:13:49:50:21:06:b0:dc:1b:d7:ff:ef:56:b4: 5c:61:4f:46:a9:18:6b:b2:83:34:06:bb:cc:28:e7:cc:b6:d1: 41:11:a0:3b:db:8d:f4:25:f3:0f:ec:4e:28:11:87:1b:00:c1: ac:33:9a:06:28:2f:f1:c9:b7:62:2f:4e:3b:5b:7a:fb:90:f9: 77:8a:24:d1:03:ad:c1:32:d0:3d:21:f3:2b:ce:95:8c:25:32: 17:a8:61:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0DfRRK8qUbIVXJa4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDIyODE0MDA0MFoXDTI2MDUyOTEzMDA0MFowLzEtMCsGA1UEAxMk YTQ0OGMzYjYtZGRiYS00ZTM2LWJiYjQtNGIzNTU1YTM0NDA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXTvms6fUxUwdj8bPG8InqSsHeMorDbtjPi1 TElCdxeHm32Ljgf/IKDPKzoNwyU2tR8cxzv93ZMwvPrfyLRdnTGJ2Z+YmrTbAmSF BWTuKXvsr2nepg5gffGV1/F9zU/FW1mN6HrxalugPMJRB6UCnhu3dvz8VTNVnan4 N3NwjaC/3/m+eeCi67iMni71r2iEmnVj2Bm5oQkb3YuGwvbxWcwwwiymKUtr48r+ Zn0y5fUhcQ8pX3lBSbXN93K5YZq2rq6CN4SfQ7/95qvwVLgr3PDq/ca/GI6i3wHo IxkPwviKLOuNBs+tro9apzH7Y5BfvG9xmXrs1Tw+MnjN7Pt+UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLIToyZwwOIhm+KpBipq0j8hmTO5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvZGNhZTMzZmQtZTExYy0z ZjIwLWIwZmItODcxMjkyYjk3YWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCLgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADGki7VAGOSdLOxJOrUvfrofs6TEeMvwMiQs3AYj68Q5O/SWTDnIZe4w 7IRU+WW+MLGNDBT6JWbtGlVZbj2Fo4c6l3Bo6cHWls9KObCM7PcX+FIOK3A5FJ6n tfazH9EjuSAYua/CSvZikLDulVYIEL8XiPIHd4FtdT/dgb1pgKEKKt2trNskdT8T 37Al8YtkCCXWelxF3Qmo1nWPGqGN7FQp1b7lxrb1E0lQIQaw3BvX/+9WtFxhT0ap GGuygzQGu8wo58y20UERoDvbjfQl8w/sTigRhxsAwawzmgYoL/HJt2IvTjtbevuQ +XeKJNEDrcEy0D0h8yvOlYwlMheoYbM= -----END CERTIFICATE-----Generated at Mon Mar 2 09:40:26 2026 by rpki-client