$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f4032855-3999-3acc-a472-e0f6cd12161b.roa File: f4032855-3999-3acc-a472-e0f6cd12161b.roa (raw, json) Hash identifier: f3CbZZ7ysU94IxSpqhgB1v48BntdLRRr35EmTyLj/2k= Subject key identifier: 73:92:B5:3A:D3:76:61:7D:F1:B3:73:65:25:57:04:13:4A:80:AC:EC Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584CAFBC7B15002F730F6E69E680 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f4032855-3999-3acc-a472-e0f6cd12161b.roa Signing time: Thu 29 Jan 2026 14:00:40 +0000 ROA not before: Thu 29 Jan 2026 14:00:40 +0000 ROA not after: Wed 29 Apr 2026 13:00:40 +0000 asID: 16591 IP address blocks: 136.53.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:af:bc:7b:15:00:2f:73:0f:6e:69:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jan 29 14:00:40 2026 GMT Not After : Apr 29 13:00:40 2026 GMT Subject: CN=6feb04df-38fe-4b9e-86ae-2941ca3f6ac5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:e7:64:13:50:10:a2:bf:46:11:29:ed:76:95: e0:8f:f3:a7:f3:6d:35:fa:2f:f5:9d:65:b6:6e:39: 56:2d:8e:dd:f2:46:8d:40:39:2b:4c:4a:c2:5a:a4: 77:e1:dc:1a:a0:76:c1:99:6f:55:63:35:de:6e:23: b3:b2:1b:f5:28:01:c3:9a:49:7e:68:ac:ba:e5:8d: 45:64:8e:c1:14:b8:97:ef:f9:d6:0b:4d:24:9f:4f: 87:73:2d:e1:5a:65:6e:8c:89:33:66:d0:c7:13:af: 4d:4a:2b:c2:b3:7f:f1:24:06:54:4a:cb:cf:f6:df: 6b:9d:de:d0:46:f5:88:37:8a:a5:9b:1a:eb:2a:5f: 84:30:ec:1a:e8:cc:2d:dc:ae:01:3c:8e:c3:5e:4e: 44:e1:ca:1f:cb:f4:cb:00:87:af:82:fc:19:f0:a1: 97:6e:43:51:78:2c:4e:2e:e1:86:d9:fc:90:e1:74: 5f:69:f5:60:15:ec:5f:68:02:b2:0e:af:8f:4e:a8: 1d:e1:6e:51:5a:d7:3c:71:13:7a:74:c7:0b:a6:97: 72:70:04:49:af:dc:d5:74:d3:cd:ad:cc:94:02:8f: 76:c1:25:8f:6b:78:0a:4a:60:64:6d:96:28:bc:cf: 8c:3f:7a:13:72:8c:9f:08:2f:33:29:19:77:0f:f8: a5:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:92:B5:3A:D3:76:61:7D:F1:B3:73:65:25:57:04:13:4A:80:AC:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f4032855-3999-3acc-a472-e0f6cd12161b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.53.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:38:e3:3b:f5:3c:7a:0d:bd:32:98:a2:22:e9:89:1e:ba:8b: 77:87:04:a2:57:00:ab:d2:f2:08:cc:79:99:5e:19:e4:3a:fa: 61:e9:2d:6a:33:6c:46:0c:65:75:29:af:84:69:92:60:3b:57: 3f:2d:ad:f4:8f:37:02:72:04:b9:5b:e8:b8:be:72:25:79:1f: 2a:db:2f:92:72:ea:2b:28:b3:65:6e:fc:1c:04:56:d3:17:22: 63:70:16:fc:a7:9b:3b:54:7b:bc:04:ad:2c:06:42:7b:61:d4: 1a:75:db:ee:43:50:d1:2e:2b:84:71:5e:a9:f3:96:d5:ad:dc: 41:e3:a4:94:7d:3d:84:57:f9:a1:d1:ff:0e:33:81:02:84:da: 82:7c:7e:f1:62:d3:0d:ec:40:3c:1f:aa:e3:e6:1f:b3:f5:9f: 91:5a:dc:18:7b:8e:76:47:af:2e:7d:07:bc:c0:8a:fc:3d:b2: b4:83:90:b5:3e:23:04:57:1d:3f:ff:9a:71:8d:1d:c9:b3:ed: fa:bc:e6:3a:a4:b0:7e:81:23:b7:c8:78:90:00:a9:07:9b:5d: d9:ab:18:1c:fe:84:18:19:2d:cb:9a:2b:32:08:61:a5:1d:f2: dd:47:8a:55:be:dd:e6:26:bd:d5:43:d1:18:1b:e9:0f:0f:da: 25:a3:8f:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyvvHsVAC9zD25p5oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDEyOTE0MDA0MFoXDTI2MDQyOTEzMDA0MFowLzEtMCsGA1UEAxMk NmZlYjA0ZGYtMzhmZS00YjllLTg2YWUtMjk0MWNhM2Y2YWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOdkE1AQor9GESntdpXgj/On8201+i/1nWW2 bjlWLY7d8kaNQDkrTErCWqR34dwaoHbBmW9VYzXebiOzshv1KAHDmkl+aKy65Y1F ZI7BFLiX7/nWC00kn0+Hcy3hWmVujIkzZtDHE69NSivCs3/xJAZUSsvP9t9rnd7Q RvWIN4qlmxrrKl+EMOwa6Mwt3K4BPI7DXk5E4cofy/TLAIevgvwZ8KGXbkNReCxO LuGG2fyQ4XRfafVgFexfaAKyDq+PTqgd4W5RWtc8cRN6dMcLppdycARJr9zVdNPN rcyUAo92wSWPa3gKSmBkbZYovM+MP3oTcoyfCC8zKRl3D/ilswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHOStTrTdmF98bNzZSVXBBNKgKzsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvZjQwMzI4NTUtMzk5OS0z YWNjLWE0NzItZTBmNmNkMTIxNjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDXAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGg44zv1PHoNvTKYoiLpiR66i3eHBKJXAKvS8gjMeZleGeQ6+mHpLWoz bEYMZXUpr4RpkmA7Vz8trfSPNwJyBLlb6Li+ciV5HyrbL5Jy6isos2Vu/BwEVtMX ImNwFvynmztUe7wErSwGQnth1Bp12+5DUNEuK4RxXqnzltWt3EHjpJR9PYRX+aHR /w4zgQKE2oJ8fvFi0w3sQDwfquPmH7P1n5Fa3Bh7jnZHry59B7zAivw9srSDkLU+ IwRXHT//mnGNHcmz7fq85jqksH6BI7fIeJAAqQebXdmrGBz+hBgZLcuaKzIIYaUd 8t1HilW+3eYmvdVD0Rgb6Q8P2iWjj9o= -----END CERTIFICATE-----Generated at Mon Mar 2 10:00:26 2026 by rpki-client