$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e8914b03-849d-3163-ae1f-b3eeefbd6b82.roa File: e8914b03-849d-3163-ae1f-b3eeefbd6b82.roa (raw, json) Hash identifier: EBBdeVrkvPoWD+RKpg1u08fJ6EciltQdzgMW3At7G+M= Subject key identifier: 4D:58:9D:23:0C:F4:11:76:3C:C6:1B:3D:01:73:69:89:BA:74:FF:90 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584D037D4B8099956A35DD2F2BC0 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e8914b03-849d-3163-ae1f-b3eeefbd6b82.roa Signing time: Sat 28 Feb 2026 14:00:40 +0000 ROA not before: Sat 28 Feb 2026 14:00:40 +0000 ROA not after: Fri 29 May 2026 13:00:40 +0000 asID: 16591 IP address blocks: 136.47.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:03:7d:4b:80:99:95:6a:35:dd:2f:2b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Feb 28 14:00:40 2026 GMT Not After : May 29 13:00:40 2026 GMT Subject: CN=c8cee4cb-29ec-4ba8-98e0-15480afd8b40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ed:95:36:31:31:35:4c:e2:8d:37:70:39:d9: 67:9f:87:bc:57:36:1d:6f:cc:19:98:ea:09:f6:b3: af:ac:f8:a1:1f:f0:ba:a9:cb:a5:9e:71:78:11:92: 4f:33:d5:81:41:b0:78:f8:b0:80:39:83:5f:df:a8: 30:7d:5b:c2:90:26:ae:03:0d:48:bb:16:0d:a4:de: b5:72:83:ca:c4:cc:c6:3d:42:08:c0:63:8e:8b:59: 76:96:11:a1:3e:f4:72:30:cd:e3:d1:96:cf:5e:85: 0f:bc:3d:35:50:7d:6a:e8:47:5e:48:42:a1:03:08: 78:df:07:84:44:33:48:a5:c1:05:90:b2:81:59:02: 9b:93:ce:66:0a:de:c4:2e:47:2a:88:6f:53:63:15: 00:af:6e:aa:05:cb:21:f1:9d:d8:58:cf:61:0b:2f: 41:81:79:ca:12:e4:c6:b3:0e:16:51:7a:fa:62:95: bf:82:6e:04:b9:b3:f3:28:ed:d9:c3:e7:12:bc:d5: 38:19:52:8a:df:16:f3:40:19:ec:d7:d7:a2:b3:ca: 1e:4e:1f:64:a1:a9:68:5d:b2:ff:11:15:0c:67:5d: 99:ce:fc:8e:96:e5:b1:a2:f4:c0:6f:af:25:9c:55: 77:53:26:6a:06:5b:bf:46:4b:ca:3b:96:a2:5b:91: f3:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:58:9D:23:0C:F4:11:76:3C:C6:1B:3D:01:73:69:89:BA:74:FF:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e8914b03-849d-3163-ae1f-b3eeefbd6b82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.47.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:89:df:c1:e9:57:4b:e6:16:30:5f:c9:cc:58:8b:9d:c7:06: 89:45:7d:22:53:2a:8c:9a:c0:8b:45:d2:d7:7e:bb:4e:84:cd: cb:cf:89:2c:29:92:63:62:6f:54:23:75:ae:3a:87:af:f8:2c: 0a:86:80:ad:51:c5:c6:eb:34:53:9f:96:76:03:22:66:a0:1f: 0c:7b:ef:92:97:15:96:62:4a:93:15:c5:bd:87:3c:52:d9:e1: 16:91:1c:de:fb:a0:f1:26:ae:7e:29:f1:f8:d7:b1:f7:cd:a2: 57:3e:f3:4b:5b:4c:58:95:45:ba:fe:d8:33:5e:67:5d:bb:93: 79:e6:c0:cd:c3:6e:08:a6:0c:f6:13:e1:d0:23:fc:64:ac:0a: 05:c0:93:16:26:11:0f:1a:8a:f6:63:4a:ec:3c:8e:63:32:9d: 70:61:26:59:e2:b8:e3:c2:b6:15:40:30:64:16:8b:dc:57:71: 1e:7b:a5:06:44:f4:31:9f:81:71:76:28:5a:70:5e:99:22:84: ce:ae:6e:4c:c9:d4:9b:35:fe:91:ed:8e:25:c3:cb:32:c7:92: a8:a4:8f:05:1f:1f:4b:3b:c3:f2:7b:ae:c7:6b:b3:02:8d:84: 07:ca:e9:bc:44:dc:63:68:e9:d0:b0:21:b7:d0:21:4b:08:c9: 98:27:b7:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0DfUuAmZVqNd0vK8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDIyODE0MDA0MFoXDTI2MDUyOTEzMDA0MFowLzEtMCsGA1UEAxMk YzhjZWU0Y2ItMjllYy00YmE4LTk4ZTAtMTU0ODBhZmQ4YjQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApO2VNjExNUzijTdwOdlnn4e8VzYdb8wZmOoJ 9rOvrPihH/C6qculnnF4EZJPM9WBQbB4+LCAOYNf36gwfVvCkCauAw1IuxYNpN61 coPKxMzGPUIIwGOOi1l2lhGhPvRyMM3j0ZbPXoUPvD01UH1q6EdeSEKhAwh43weE RDNIpcEFkLKBWQKbk85mCt7ELkcqiG9TYxUAr26qBcsh8Z3YWM9hCy9BgXnKEuTG sw4WUXr6YpW/gm4EubPzKO3Zw+cSvNU4GVKK3xbzQBns19eis8oeTh9koaloXbL/ ERUMZ12ZzvyOluWxovTAb68lnFV3UyZqBlu/RkvKO5aiW5HznwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE1YnSMM9BF2PMYbPQFzaYm6dP+QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvZTg5MTRiMDMtODQ5ZC0z MTYzLWFlMWYtYjNlZWVmYmQ2YjgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiC+wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFeJ38HpV0vmFjBfycxYi53HBolFfSJTKoyawItF0td+u06EzcvPiSwp kmNib1Qjda46h6/4LAqGgK1RxcbrNFOflnYDImagHwx775KXFZZiSpMVxb2HPFLZ 4RaRHN77oPEmrn4p8fjXsffNolc+80tbTFiVRbr+2DNeZ127k3nmwM3DbgimDPYT 4dAj/GSsCgXAkxYmEQ8aivZjSuw8jmMynXBhJlniuOPCthVAMGQWi9xXcR57pQZE 9DGfgXF2KFpwXpkihM6ubkzJ1Js1/pHtjiXDyzLHkqikjwUfH0s7w/J7rsdrswKN hAfK6bxE3GNo6dCwIbfQIUsIyZgnt+E= -----END CERTIFICATE-----Generated at Mon Mar 2 09:45:52 2026 by rpki-client