$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e154c747-9125-3a61-99c4-3be4782201e7.roa File: e154c747-9125-3a61-99c4-3be4782201e7.roa (raw, json) Hash identifier: 17cIbI9KdGlPrG1wUba/9/XmN1gN9Tyn0t+buz5lUOg= Subject key identifier: B6:8D:D2:D3:AE:A5:2D:B5:4C:E8:96:24:58:0F:65:03:82:EE:42:34 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584D037CF494703028E9E7BA4700 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e154c747-9125-3a61-99c4-3be4782201e7.roa Signing time: Sat 28 Feb 2026 14:00:40 +0000 ROA not before: Sat 28 Feb 2026 14:00:40 +0000 ROA not after: Fri 29 May 2026 13:00:40 +0000 asID: 16591 IP address blocks: 136.51.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:03:7c:f4:94:70:30:28:e9:e7:ba:47:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Feb 28 14:00:40 2026 GMT Not After : May 29 13:00:40 2026 GMT Subject: CN=41b6992e-65c2-44c8-8a03-4605aa0fec11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:12:a7:c6:a8:e4:92:4c:79:7a:78:2b:8e:16: 58:63:70:e6:1a:b3:ca:b0:f9:41:21:82:9e:a7:0c: 45:1b:f4:47:74:2d:35:db:1f:45:40:e6:29:9d:cc: aa:15:e8:41:d7:50:dc:1e:9c:02:af:02:48:48:d2: f9:f6:9c:d6:42:16:a0:bd:36:a7:97:c4:04:11:4e: 7a:a3:07:80:c9:30:75:44:f5:ad:f2:6e:1b:67:02: e9:2a:3c:68:d9:f0:cf:f0:e4:fe:8f:41:94:aa:5c: 01:25:91:e4:ae:50:03:97:c0:4f:0b:da:5e:0a:38: 1e:27:43:3c:08:9d:bc:6f:4c:6d:b7:6b:22:5c:30: 03:16:32:b1:84:7c:6e:2c:a4:cd:60:b3:8b:a1:12: 3b:2f:54:e8:e1:04:89:a1:85:93:cc:d2:2d:61:89: 4b:7c:83:fc:4c:1f:a8:ac:73:2c:c0:dd:af:cf:80: a1:c5:8d:94:0f:5d:07:fb:2c:c6:e3:37:29:a6:8a: 33:71:b3:fa:76:38:59:67:69:34:86:14:85:da:12: 9f:20:20:ab:8d:e3:f8:27:33:89:bf:23:96:80:c7: f6:e8:d3:d0:c9:04:8e:d3:e6:6a:56:3f:f4:e1:f2: 98:b6:43:81:7e:79:33:42:a4:c6:e8:da:f3:d9:37: 1f:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:8D:D2:D3:AE:A5:2D:B5:4C:E8:96:24:58:0F:65:03:82:EE:42:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e154c747-9125-3a61-99c4-3be4782201e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.51.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:6f:fa:cf:2c:ac:51:ae:5f:f7:52:05:f1:ed:17:77:e9:eb: a6:a6:0d:a3:6a:75:38:3c:ad:24:96:af:98:f5:51:2d:88:d0: 0d:7f:17:b5:6e:0d:a7:1c:79:02:3f:d4:51:ac:30:6c:50:01: 33:16:18:67:ae:7e:8c:d6:95:ec:a3:2b:15:7d:68:d4:0d:70: d3:ad:76:cf:79:db:1d:e4:79:ac:75:6c:8b:fb:36:e8:af:f7: 62:90:a1:e5:3a:3b:b5:e4:31:65:eb:e5:21:3c:06:d7:61:38: 65:cd:a3:68:46:33:7d:cd:ad:62:82:e4:e3:fa:3e:17:96:3b: 30:ee:56:04:ec:ad:99:ec:8a:4f:96:6f:d7:21:20:f7:49:00: ed:47:06:e2:a1:73:ce:3d:af:69:24:47:14:0b:54:b8:2b:ea: 25:27:00:42:a7:6a:ad:15:b1:09:d8:c3:6d:13:1d:66:f2:5c: 51:83:7e:33:1f:78:1d:b9:33:d1:4e:76:6f:11:d5:69:a8:da: df:bc:0f:aa:ad:a2:ce:9f:bc:ec:2c:61:04:9c:fb:c9:8b:04: 17:f3:c4:c8:57:0c:f1:2a:e7:bb:6d:e8:93:91:3f:da:4e:e7: f1:78:27:25:09:72:98:33:76:84:ca:25:c6:96:08:2a:1c:5a: e3:78:5a:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0DfPSUcDAo6ee6RwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDIyODE0MDA0MFoXDTI2MDUyOTEzMDA0MFowLzEtMCsGA1UEAxMk NDFiNjk5MmUtNjVjMi00NGM4LThhMDMtNDYwNWFhMGZlYzExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRKnxqjkkkx5engrjhZYY3DmGrPKsPlBIYKe pwxFG/RHdC012x9FQOYpncyqFehB11DcHpwCrwJISNL59pzWQhagvTanl8QEEU56 oweAyTB1RPWt8m4bZwLpKjxo2fDP8OT+j0GUqlwBJZHkrlADl8BPC9peCjgeJ0M8 CJ28b0xtt2siXDADFjKxhHxuLKTNYLOLoRI7L1To4QSJoYWTzNItYYlLfIP8TB+o rHMswN2vz4ChxY2UD10H+yzG4zcppoozcbP6djhZZ2k0hhSF2hKfICCrjeP4JzOJ vyOWgMf26NPQyQSO0+ZqVj/04fKYtkOBfnkzQqTG6Nrz2TcfBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLaN0tOupS21TOiWJFgPZQOC7kI0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvZTE1NGM3NDctOTEyNS0z YTYxLTk5YzQtM2JlNDc4MjIwMWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDMgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEtv+s8srFGuX/dSBfHtF3fp66amDaNqdTg8rSSWr5j1US2I0A1/F7Vu DacceQI/1FGsMGxQATMWGGeufozWleyjKxV9aNQNcNOtds952x3keax1bIv7Nuiv 92KQoeU6O7XkMWXr5SE8BtdhOGXNo2hGM33NrWKC5OP6PheWOzDuVgTsrZnsik+W b9chIPdJAO1HBuKhc849r2kkRxQLVLgr6iUnAEKnaq0VsQnYw20THWbyXFGDfjMf eB25M9FOdm8R1Wmo2t+8D6qtos6fvOwsYQSc+8mLBBfzxMhXDPEq57tt6JORP9pO 5/F4JyUJcpgzdoTKJcaWCCocWuN4Wqs= -----END CERTIFICATE-----Generated at Mon Mar 2 11:40:20 2026 by rpki-client