$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/eab971f4-114c-3798-a9f4-6c0ad419f866.roa File: eab971f4-114c-3798-a9f4-6c0ad419f866.roa (raw, json) Hash identifier: FakkGR2RPZHSgrbo+y4IR03lIWjp5QUnfT/2g488FeQ= Subject key identifier: DA:45:CC:1D:46:26:89:46:A9:44:64:2F:4A:9C:13:58:6D:15:67:93 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584D037D4F4AF5D3359295DFD340 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/eab971f4-114c-3798-a9f4-6c0ad419f866.roa Signing time: Sat 28 Feb 2026 14:00:40 +0000 ROA not before: Sat 28 Feb 2026 14:00:40 +0000 ROA not after: Fri 29 May 2026 13:00:40 +0000 asID: 16591 IP address blocks: 136.61.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:03:7d:4f:4a:f5:d3:35:92:95:df:d3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Feb 28 14:00:40 2026 GMT Not After : May 29 13:00:40 2026 GMT Subject: CN=09d16d92-d1af-4127-a703-bb331b4091c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:73:b6:f3:62:3a:29:ec:d6:19:ed:3d:fd:df: 88:bd:e4:67:43:56:1d:b7:ef:d7:7c:39:de:52:25: 0d:e7:2e:7b:45:d2:b5:34:7e:b2:cd:79:f4:02:44: 36:da:8c:c4:18:0d:fe:49:9d:22:e5:7a:cd:1e:c4: 21:bf:6d:49:15:d2:cb:53:f5:e4:7e:ad:1d:bd:d2: a0:a9:f7:fa:08:b9:d7:08:c1:d7:2e:1c:80:5f:58: 28:27:4b:7e:ce:c9:5f:93:b3:cd:68:8a:49:15:a4: 69:54:5b:8e:83:17:fc:64:0f:e5:79:b9:c3:72:28: c2:01:99:5f:15:00:8f:7b:07:16:b1:55:12:4f:a5: 5f:cb:00:16:64:e1:bd:9e:ce:01:5e:bd:be:ba:cb: 37:fc:54:97:d5:38:34:ba:b2:f5:94:14:ec:5e:33: fe:dd:7f:66:49:82:a8:08:5a:c7:05:0c:5e:53:d4: e9:1e:e5:bd:91:84:c0:54:9c:3a:2c:c7:fa:8f:3b: a2:70:3b:47:c8:a5:a6:b3:ac:31:80:e5:e3:4d:52: a2:51:ad:bd:66:e7:2a:9c:22:4b:cf:b8:e9:ae:12: ba:72:c4:bd:c4:af:d6:26:6f:fb:1a:7f:1a:02:bb: 5d:90:50:2a:c0:2e:e1:a5:7e:a6:b1:04:82:10:4e: f0:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:45:CC:1D:46:26:89:46:A9:44:64:2F:4A:9C:13:58:6D:15:67:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/eab971f4-114c-3798-a9f4-6c0ad419f866.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.61.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:d1:2a:2d:f7:bd:75:0c:2f:e7:78:9c:b6:68:56:58:3c:84: c2:80:89:16:6b:88:02:d6:92:d4:70:c4:14:53:c9:f8:d1:cb: d7:c9:05:eb:41:6a:11:5e:3a:70:0e:d7:b9:40:fb:a0:27:bb: 4c:0a:c6:43:6a:b3:b0:16:b1:55:ea:a9:e7:29:4e:a8:7e:c4: 49:3b:45:91:30:ec:d9:da:30:7f:56:8b:98:14:9c:b3:e5:a2: c5:fb:36:de:fc:52:17:11:9a:69:e9:cd:df:87:3c:0d:fc:a7: 54:25:cc:50:96:18:28:5b:f1:3a:11:f7:4e:c8:ad:52:90:c1: 9a:f9:36:5b:b8:47:1b:cf:f6:9c:d8:98:06:d0:d8:1c:51:79: 96:b7:f5:b6:24:f9:29:89:df:c6:5f:9c:33:6a:4d:a4:4f:3e: a4:a5:48:73:2b:e2:71:fa:ad:2d:54:6b:95:f2:63:2c:47:0b: 18:b6:53:0d:bc:0e:8c:6b:5c:e3:a4:81:1f:e2:b4:3b:30:d7: 1c:57:11:10:cb:8e:76:3d:5d:fd:b5:72:dc:04:ce:20:46:0a: 06:f8:e6:77:bd:9d:09:0a:c0:88:ad:3d:80:c3:67:af:0c:5f: e8:e3:98:d9:83:ac:a0:c2:1b:66:ca:00:af:f3:23:0b:03:e6: 6e:0e:2f:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0DfU9K9dM1kpXf00AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDIyODE0MDA0MFoXDTI2MDUyOTEzMDA0MFowLzEtMCsGA1UEAxMk MDlkMTZkOTItZDFhZi00MTI3LWE3MDMtYmIzMzFiNDA5MWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3O282I6KezWGe09/d+IveRnQ1Ydt+/XfDne UiUN5y57RdK1NH6yzXn0AkQ22ozEGA3+SZ0i5XrNHsQhv21JFdLLU/Xkfq0dvdKg qff6CLnXCMHXLhyAX1goJ0t+zslfk7PNaIpJFaRpVFuOgxf8ZA/lebnDcijCAZlf FQCPewcWsVUST6VfywAWZOG9ns4BXr2+uss3/FSX1Tg0urL1lBTsXjP+3X9mSYKo CFrHBQxeU9TpHuW9kYTAVJw6LMf6jzuicDtHyKWms6wxgOXjTVKiUa29ZucqnCJL z7jprhK6csS9xK/WJm/7Gn8aArtdkFAqwC7hpX6msQSCEE7wCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNpFzB1GJolGqURkL0qcE1htFWeTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvZWFiOTcxZjQtMTE0Yy0z Nzk4LWE5ZjQtNmMwYWQ0MTlmODY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiD1gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEbRKi33vXUML+d4nLZoVlg8hMKAiRZriALWktRwxBRTyfjRy9fJBetB ahFeOnAO17lA+6Anu0wKxkNqs7AWsVXqqecpTqh+xEk7RZEw7NnaMH9Wi5gUnLPl osX7Nt78UhcRmmnpzd+HPA38p1QlzFCWGChb8ToR907IrVKQwZr5Nlu4RxvP9pzY mAbQ2BxReZa39bYk+SmJ38ZfnDNqTaRPPqSlSHMr4nH6rS1Ua5XyYyxHCxi2Uw28 DoxrXOOkgR/itDsw1xxXERDLjnY9Xf21ctwEziBGCgb45ne9nQkKwIitPYDDZ68M X+jjmNmDrKDCG2bKAK/zIwsD5m4OL6Y= -----END CERTIFICATE-----Generated at Mon Mar 2 14:07:19 2026 by rpki-client