$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/df5747e3-08bc-31a5-b2e0-b086a894bfe7.roa File: df5747e3-08bc-31a5-b2e0-b086a894bfe7.roa (raw, json) Hash identifier: 5D2apgY+pVhcX0sCi2vsl40esG1Rynop7iANT6pGdug= Subject key identifier: 99:CE:F0:B3:E9:8E:E3:AD:C4:D7:B9:A0:E9:BB:D2:DE:A8:41:43:F0 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584D037CFC5D2F0D275F80A40170 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/df5747e3-08bc-31a5-b2e0-b086a894bfe7.roa Signing time: Sat 28 Feb 2026 14:00:40 +0000 ROA not before: Sat 28 Feb 2026 14:00:40 +0000 ROA not after: Fri 29 May 2026 13:00:40 +0000 asID: 16591 IP address blocks: 136.58.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:03:7c:fc:5d:2f:0d:27:5f:80:a4:01:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Feb 28 14:00:40 2026 GMT Not After : May 29 13:00:40 2026 GMT Subject: CN=7f997f72-6ecf-4744-8541-a7e01209879f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:74:c3:af:97:e4:ac:81:61:eb:14:cf:96:29: 28:f0:30:30:7b:b1:e7:e9:dd:5f:22:a4:27:5b:0a: 08:38:88:00:b5:a1:f3:c1:2b:ee:ad:68:85:0a:ae: 97:af:18:59:5e:88:d8:c2:4e:84:f8:05:63:9a:3a: 6c:80:d8:aa:06:8b:57:16:04:02:5b:42:6e:4e:07: 1a:17:64:09:23:88:56:7f:8d:8f:dc:8b:29:b8:fb: 64:7f:70:92:71:2c:b8:e0:04:4b:d1:ea:45:94:7e: 3a:bc:14:a4:cc:0e:8c:fc:48:53:0a:c1:fb:4b:df: c5:c4:19:e5:29:e9:2d:a5:56:56:8f:7e:56:18:97: e2:a0:fb:95:a0:1e:b0:6c:04:b0:a4:f7:13:90:59: f8:5c:22:59:cc:9d:0f:62:d3:0e:17:7e:02:2b:17: 7e:64:64:c4:d6:a7:99:54:0d:af:7c:03:2d:33:be: c3:df:64:97:5f:e7:c3:8f:d3:ad:81:f2:75:51:23: 0d:10:1e:5f:3c:ab:2e:67:9f:a9:03:eb:24:b7:c8: aa:e9:95:3a:c8:5f:91:67:93:42:7b:9a:bf:56:35: b1:9d:15:13:64:9d:19:da:97:54:37:9d:f8:9a:e9: c8:bd:ce:fb:3e:c7:a6:d8:0a:c3:d2:e4:61:7e:2c: 18:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:CE:F0:B3:E9:8E:E3:AD:C4:D7:B9:A0:E9:BB:D2:DE:A8:41:43:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/df5747e3-08bc-31a5-b2e0-b086a894bfe7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.58.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:91:9a:00:db:4a:9a:48:f3:01:1c:9b:5a:a3:14:18:c2:4d: 02:a0:57:a5:81:c4:77:5b:b3:f7:6a:6f:69:d7:d1:f2:e9:eb: 6d:35:bf:73:cc:61:69:0a:b5:97:80:d4:d8:65:27:91:4a:a7: 31:66:bf:8e:03:ec:27:c2:73:3c:c3:19:ec:99:26:10:87:bd: 39:0d:bf:9a:45:94:63:78:2c:bf:b3:39:06:bd:a8:70:9f:56: 6c:ac:f0:a8:0a:f6:6f:29:02:56:f6:ee:fb:33:2f:86:27:6d: b3:c4:51:75:d0:04:02:28:3c:db:72:3b:bc:ea:9c:8f:9c:aa: a0:c4:29:74:2c:a1:86:29:f3:4a:51:26:56:19:24:d2:1a:f9: 71:1f:49:2a:4b:c4:fa:24:27:b9:89:93:92:31:61:4d:33:d7: 48:0f:a1:9f:19:ce:63:c6:5b:12:53:e2:b5:d4:9d:0e:1b:33: b5:80:d1:f5:6d:22:c0:c6:83:94:46:d2:68:25:85:8c:82:f3: be:5b:df:8a:47:ec:59:89:ff:cc:0b:87:27:cf:e7:ac:df:e0: 2c:65:ae:46:ff:eb:06:5b:bc:f4:aa:4b:a4:62:50:81:0c:b8: 50:36:be:46:e1:6e:84:11:0f:d1:29:25:a0:ba:91:d4:aa:66: 1a:19:f5:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0DfPxdLw0nX4CkAXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDIyODE0MDA0MFoXDTI2MDUyOTEzMDA0MFowLzEtMCsGA1UEAxMk N2Y5OTdmNzItNmVjZi00NzQ0LTg1NDEtYTdlMDEyMDk4NzlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3TDr5fkrIFh6xTPliko8DAwe7Hn6d1fIqQn WwoIOIgAtaHzwSvurWiFCq6XrxhZXojYwk6E+AVjmjpsgNiqBotXFgQCW0JuTgca F2QJI4hWf42P3IspuPtkf3CScSy44ARL0epFlH46vBSkzA6M/EhTCsH7S9/FxBnl KektpVZWj35WGJfioPuVoB6wbASwpPcTkFn4XCJZzJ0PYtMOF34CKxd+ZGTE1qeZ VA2vfAMtM77D32SXX+fDj9OtgfJ1USMNEB5fPKsuZ5+pA+skt8iq6ZU6yF+RZ5NC e5q/VjWxnRUTZJ0Z2pdUN534munIvc77Psem2ArD0uRhfiwYQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJnO8LPpjuOtxNe5oOm70t6oQUPwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvZGY1NzQ3ZTMtMDhiYy0z MWE1LWIyZTAtYjA4NmE4OTRiZmU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDowMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHyRmgDbSppI8wEcm1qjFBjCTQKgV6WBxHdbs/dqb2nX0fLp6201v3PM YWkKtZeA1NhlJ5FKpzFmv44D7CfCczzDGeyZJhCHvTkNv5pFlGN4LL+zOQa9qHCf Vmys8KgK9m8pAlb27vszL4YnbbPEUXXQBAIoPNtyO7zqnI+cqqDEKXQsoYYp80pR JlYZJNIa+XEfSSpLxPokJ7mJk5IxYU0z10gPoZ8ZzmPGWxJT4rXUnQ4bM7WA0fVt IsDGg5RG0mglhYyC875b34pH7FmJ/8wLhyfP56zf4Cxlrkb/6wZbvPSqS6RiUIEM uFA2vkbhboQRD9EpJaC6kdSqZhoZ9aI= -----END CERTIFICATE-----Generated at Mon Mar 2 11:38:09 2026 by rpki-client