$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/ff8a5292-9f03-3043-b5f9-5a988e4eab8c.roa File: ff8a5292-9f03-3043-b5f9-5a988e4eab8c.roa (raw, json) Hash identifier: Skvbb+gSaoc8nvj50lE9SuEx4SQ253bTif+GeHyAnYY= Subject key identifier: 57:DA:D4:EA:1E:76:E1:BB:2A:31:D1:64:BA:63:76:20:6C:4C:E4:69 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584D037CFEA13D983324ED1442C0 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/ff8a5292-9f03-3043-b5f9-5a988e4eab8c.roa Signing time: Sat 28 Feb 2026 14:00:40 +0000 ROA not before: Sat 28 Feb 2026 14:00:40 +0000 ROA not after: Fri 29 May 2026 13:00:40 +0000 asID: 16591 IP address blocks: 136.52.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:03:7c:fe:a1:3d:98:33:24:ed:14:42:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Feb 28 14:00:40 2026 GMT Not After : May 29 13:00:40 2026 GMT Subject: CN=f0c26afc-8089-43fb-bc47-1bd08e11f6fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:e7:fb:ef:56:6d:3a:89:c9:b4:fd:1b:48:cd: fb:b0:9e:6c:bd:be:bb:2a:58:88:54:24:7c:0d:ad: a7:90:24:df:db:0e:00:c3:16:c9:d8:c7:d2:9a:55: f6:c4:a7:64:9d:1d:7f:c2:0e:c0:ed:ef:fd:25:16: c6:96:a1:9f:37:91:3a:0a:c1:10:60:20:f6:1c:4a: a2:bf:5f:ac:3c:4a:ce:98:d0:26:31:e8:d2:c3:51: a0:ab:e6:5f:31:d8:84:ea:a8:c5:bc:6e:66:55:f0: 0d:06:fb:2c:e3:43:32:05:5c:1b:f9:72:7f:6f:ec: 94:00:47:cd:1b:0e:2c:70:d3:72:c6:62:05:8d:70: 68:cf:54:d7:d0:5a:04:9d:79:0c:6b:a0:14:fd:73: 4a:86:53:db:01:5f:4e:24:8d:4e:a9:26:c6:60:f4: 14:6d:5e:7b:20:6a:cb:59:a8:c9:3d:e6:31:a8:39: 17:e8:b1:ab:08:93:12:2c:1b:46:08:a6:4d:97:68: df:98:22:22:0e:30:91:61:9b:86:00:35:6a:4a:a7: 5d:a7:05:28:a3:dd:55:ae:0e:76:aa:66:b1:35:a2: 6b:86:94:2f:f2:96:94:81:1c:d6:17:de:f5:59:3b: d2:2a:1f:dc:8b:b1:11:f4:03:89:57:93:81:33:a7: 51:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:DA:D4:EA:1E:76:E1:BB:2A:31:D1:64:BA:63:76:20:6C:4C:E4:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/ff8a5292-9f03-3043-b5f9-5a988e4eab8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.52.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:cc:58:90:15:f0:48:0c:4e:b8:fd:61:56:6a:32:f8:76:c6: f4:a4:03:2b:1c:0a:48:51:30:ba:58:c2:a6:8b:35:39:f6:d7: 06:85:3d:8d:a9:30:38:1f:b9:c1:46:b4:57:3f:69:87:72:34: ca:f6:dd:1a:04:16:6c:23:45:44:96:e9:09:ab:52:99:60:c8: e6:ca:6f:94:a6:91:46:17:41:f6:f1:ff:b5:da:0e:bb:62:be: 6e:6c:5e:87:28:fe:e8:9a:3f:0c:50:76:89:ec:01:8e:66:9d: c9:fc:6b:af:bd:7c:33:8a:df:d7:7c:2d:68:e9:0f:64:68:65: 09:c5:20:a9:f9:5c:40:9c:62:64:84:cc:6a:a5:f7:06:7d:e8: 8c:6b:8d:ff:8d:cb:ee:18:40:c8:7e:3e:d2:0e:aa:63:f9:77: f6:89:8a:9b:92:8a:85:83:da:5e:24:b6:73:14:f8:17:ef:e9: e2:96:30:26:28:69:bc:2a:c6:02:00:b1:12:02:b7:8f:a1:da: e2:1d:6a:4a:8e:80:19:d4:d7:b4:a1:bf:dd:60:ed:ca:67:c4: 06:2f:aa:32:25:54:0a:0e:7b:25:7c:03:c1:50:c3:06:9e:01: dd:6c:1a:30:2c:79:a6:22:0c:3b:4f:dd:4b:80:c5:1e:f7:39: b6:f1:d0:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0DfP6hPZgzJO0UQsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDIyODE0MDA0MFoXDTI2MDUyOTEzMDA0MFowLzEtMCsGA1UEAxMk ZjBjMjZhZmMtODA4OS00M2ZiLWJjNDctMWJkMDhlMTFmNmZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Of771ZtOonJtP0bSM37sJ5svb67KliIVCR8 Da2nkCTf2w4AwxbJ2MfSmlX2xKdknR1/wg7A7e/9JRbGlqGfN5E6CsEQYCD2HEqi v1+sPErOmNAmMejSw1Ggq+ZfMdiE6qjFvG5mVfANBvss40MyBVwb+XJ/b+yUAEfN Gw4scNNyxmIFjXBoz1TX0FoEnXkMa6AU/XNKhlPbAV9OJI1OqSbGYPQUbV57IGrL WajJPeYxqDkX6LGrCJMSLBtGCKZNl2jfmCIiDjCRYZuGADVqSqddpwUoo91Vrg52 qmaxNaJrhpQv8paUgRzWF971WTvSKh/ci7ER9AOJV5OBM6dRNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFfa1OoeduG7KjHRZLpjdiBsTORpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvZmY4YTUyOTItOWYwMy0z MDQzLWI1ZjktNWE5ODhlNGVhYjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDQwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEDMWJAV8EgMTrj9YVZqMvh2xvSkAyscCkhRMLpYwqaLNTn21waFPY2p MDgfucFGtFc/aYdyNMr23RoEFmwjRUSW6QmrUplgyObKb5SmkUYXQfbx/7XaDrti vm5sXoco/uiaPwxQdonsAY5mncn8a6+9fDOK39d8LWjpD2RoZQnFIKn5XECcYmSE zGql9wZ96Ixrjf+Ny+4YQMh+PtIOqmP5d/aJipuSioWD2l4ktnMU+Bfv6eKWMCYo abwqxgIAsRICt4+h2uIdakqOgBnU17Shv91g7cpnxAYvqjIlVAoOeyV8A8FQwwae Ad1sGjAseaYiDDtP3UuAxR73Obbx0P0= -----END CERTIFICATE-----Generated at Mon Mar 2 08:00:52 2026 by rpki-client