$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f89fd7d9-7938-3cf9-a6cc-fd8d7e9b566a.roa File: f89fd7d9-7938-3cf9-a6cc-fd8d7e9b566a.roa (raw, json) Hash identifier: LVocg8Tsnjr8nfVxjgcK5kAEBc9WlRI8nZHKX+gviI8= Subject key identifier: 90:AD:7D:1F:E3:DA:5C:85:01:47:43:64:84:0D:7A:F8:C4:DF:04:9D Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584D037D08997C6DF9615E8FB780 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f89fd7d9-7938-3cf9-a6cc-fd8d7e9b566a.roa Signing time: Sat 28 Feb 2026 14:00:40 +0000 ROA not before: Sat 28 Feb 2026 14:00:40 +0000 ROA not after: Fri 29 May 2026 13:00:40 +0000 asID: 16591 IP address blocks: 136.35.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:03:7d:08:99:7c:6d:f9:61:5e:8f:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Feb 28 14:00:40 2026 GMT Not After : May 29 13:00:40 2026 GMT Subject: CN=10171d2e-db14-4f7c-8d30-b5b7e5b87214 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:28:99:8e:2a:bc:ca:6e:fc:55:88:2e:c7:66: 79:19:f4:0d:bb:76:f2:1b:2d:c4:7b:e0:49:49:8c: fc:c4:15:0a:b2:2f:31:87:7a:49:0e:95:06:d8:f8: 8f:d4:d5:1e:82:04:0c:cd:6b:9b:4d:b2:5f:70:20: 1a:fd:b1:7d:71:ec:13:22:19:be:cc:ca:84:10:14: fd:89:f5:ba:f5:e5:ca:0e:f3:cb:be:01:87:3b:53: 76:df:5f:f8:09:0f:d1:da:89:11:fa:15:88:49:e2: 6f:83:e5:30:b5:99:37:dd:96:54:ab:d4:58:82:bf: 43:d4:47:be:20:14:6b:40:a2:42:8b:5d:c1:28:8d: 9f:bb:68:9a:d1:a9:5a:94:85:8c:f2:2e:8f:d3:fe: 88:73:21:56:10:e7:b6:07:46:3e:d0:d6:d6:e3:ea: 79:d4:30:d1:d7:aa:e5:a4:3a:dd:f1:10:88:2d:be: 80:cf:f7:b0:25:a8:97:8d:9d:41:19:32:83:79:ce: 29:c7:df:24:3c:f2:0d:eb:19:4e:55:9a:e5:33:26: 24:47:1b:80:65:f1:1e:be:2f:33:13:8a:19:6e:d1: 03:7d:f2:81:af:61:7b:80:13:64:ba:88:c7:73:87: 18:bb:68:e6:ea:b7:5c:1e:c0:c0:77:4c:46:f4:1e: 3a:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:AD:7D:1F:E3:DA:5C:85:01:47:43:64:84:0D:7A:F8:C4:DF:04:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f89fd7d9-7938-3cf9-a6cc-fd8d7e9b566a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.35.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:ea:a3:40:c3:2f:8c:b5:d2:f0:f2:e9:7f:30:78:f2:8b:28: 9c:9d:f4:3a:4e:07:1f:a5:3a:7d:fe:d2:e2:82:ed:65:f2:92: 19:ac:fa:f1:9d:ab:b9:13:c9:4f:d4:d3:12:6c:dd:43:7d:2a: e9:3e:26:7a:7d:82:46:04:d6:ed:04:50:de:6a:12:97:77:d8: f6:b2:57:de:70:00:e2:13:4a:a7:01:e2:5f:98:00:18:1f:9d: 25:0b:e3:15:35:81:ad:f1:a6:8e:24:a0:89:c8:4c:8c:92:00: 11:3a:02:bb:b4:83:4e:4d:a6:56:e0:48:fa:4f:09:ab:5f:40: 93:a0:a6:4a:ca:cf:19:01:72:40:4d:ab:f8:a0:04:9c:f1:69: 3a:80:06:98:47:4c:cc:d0:05:f2:03:f9:0b:c9:ce:16:dd:6a: 52:e7:d9:74:c3:75:89:55:c7:8b:2b:82:64:34:04:57:09:33: 8b:03:70:63:d4:85:51:9e:89:19:4d:39:02:a6:fe:97:f0:80: da:40:41:ed:8d:47:72:85:02:7c:8e:7e:8d:95:11:e8:c6:27: 49:b7:36:bd:89:a4:5d:da:bc:b4:d5:ce:6b:8d:84:f5:90:96: 42:0a:98:1a:db:c4:7d:9a:59:5a:4b:27:c1:58:dd:79:11:54: eb:02:ab:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0DfQiZfG35YV6Pt4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDIyODE0MDA0MFoXDTI2MDUyOTEzMDA0MFowLzEtMCsGA1UEAxMk MTAxNzFkMmUtZGIxNC00ZjdjLThkMzAtYjViN2U1Yjg3MjE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkyiZjiq8ym78VYgux2Z5GfQNu3byGy3Ee+BJ SYz8xBUKsi8xh3pJDpUG2PiP1NUeggQMzWubTbJfcCAa/bF9cewTIhm+zMqEEBT9 ifW69eXKDvPLvgGHO1N231/4CQ/R2okR+hWISeJvg+UwtZk33ZZUq9RYgr9D1Ee+ IBRrQKJCi13BKI2fu2ia0alalIWM8i6P0/6IcyFWEOe2B0Y+0NbW4+p51DDR16rl pDrd8RCILb6Az/ewJaiXjZ1BGTKDec4px98kPPIN6xlOVZrlMyYkRxuAZfEevi8z E4oZbtEDffKBr2F7gBNkuojHc4cYu2jm6rdcHsDAd0xG9B46MQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJCtfR/j2lyFAUdDZIQNevjE3wSdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvZjg5ZmQ3ZDktNzkzOC0z Y2Y5LWE2Y2MtZmQ4ZDdlOWI1NjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCPgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADDqo0DDL4y10vDy6X8wePKLKJyd9DpOBx+lOn3+0uKC7WXykhms+vGd q7kTyU/U0xJs3UN9Kuk+Jnp9gkYE1u0EUN5qEpd32PayV95wAOITSqcB4l+YABgf nSUL4xU1ga3xpo4koInITIySABE6Aru0g05NplbgSPpPCatfQJOgpkrKzxkBckBN q/igBJzxaTqABphHTMzQBfID+QvJzhbdalLn2XTDdYlVx4srgmQ0BFcJM4sDcGPU hVGeiRlNOQKm/pfwgNpAQe2NR3KFAnyOfo2VEejGJ0m3Nr2JpF3avLTVzmuNhPWQ lkIKmBrbxH2aWVpLJ8FY3XkRVOsCq/M= -----END CERTIFICATE-----Generated at Mon Mar 2 08:01:27 2026 by rpki-client