$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/4a3b054d-330b-3eca-8b33-c7735374964e.roa File: 4a3b054d-330b-3eca-8b33-c7735374964e.roa (raw, json) Hash identifier: U45gehjiWtnNhujMRiYQdFPgE1GmCDI59SMxZH9dgYE= Subject key identifier: 30:C0:80:80:84:B8:9D:0E:29:01:0C:A8:04:5F:68:AF:C2:59:E0:E8 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584D290F4A04675D5A97D2D0CB20 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/4a3b054d-330b-3eca-8b33-c7735374964e.roa Signing time: Sat 14 Mar 2026 01:00:31 +0000 ROA not before: Sat 14 Mar 2026 01:00:31 +0000 ROA not after: Fri 12 Jun 2026 01:00:31 +0000 asID: 16591 IP address blocks: 136.54.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:29:0f:4a:04:67:5d:5a:97:d2:d0:cb:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Mar 14 01:00:31 2026 GMT Not After : Jun 12 01:00:31 2026 GMT Subject: CN=78949187-53e6-4abf-a2ed-cd0ca509eb12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f0:6c:29:04:f9:13:3f:87:22:d7:36:35:bf: d8:b4:06:9b:95:d3:35:54:98:d9:4a:49:ab:40:d8: 16:80:45:98:8c:26:14:75:20:6c:93:9d:2c:5d:76: 07:6b:33:7c:de:94:ca:58:f4:af:39:c8:dc:93:47: 77:36:1c:6f:95:ec:1b:04:43:55:07:2d:d9:07:6d: 6f:87:73:2c:c6:46:5f:2e:f7:34:f5:e0:5f:b6:63: 17:ed:5c:bd:3e:55:2d:93:5f:ca:6f:14:3e:ea:24: 7b:1b:1b:0b:96:b0:77:79:af:b7:5c:77:a1:73:bd: 39:5b:8f:96:37:9b:8b:6a:94:c0:64:3e:72:b5:bb: 29:a8:3f:b9:ee:14:0b:26:98:f1:fa:00:05:ed:7d: 31:39:5e:b4:a8:96:89:b3:2c:e6:ef:d3:a4:21:17: 5f:f3:71:a4:8a:a5:55:4b:f1:24:13:c5:66:20:03: dd:7a:06:03:8e:a7:4e:75:72:57:b4:af:49:e0:eb: d9:bc:ba:05:ce:99:af:9c:7e:76:e4:c1:9e:ac:06: 6a:ac:71:61:84:06:05:03:6e:d6:ca:c8:d9:36:81: e8:0c:14:f6:50:bb:c2:1b:79:34:b1:68:59:60:14: a3:90:52:4d:f8:ec:c1:9e:a5:22:68:3a:ff:3b:55: 3b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:C0:80:80:84:B8:9D:0E:29:01:0C:A8:04:5F:68:AF:C2:59:E0:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/4a3b054d-330b-3eca-8b33-c7735374964e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.54.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:cf:3c:0b:d9:99:34:98:ee:2e:7f:df:1f:d1:3d:59:73:67: d2:32:0d:16:b0:54:5e:8e:ad:b5:74:a8:f3:7a:41:71:07:d1: 3f:12:ec:6c:47:ef:05:6e:1d:7d:1f:c1:31:03:33:d7:ac:f3: e4:d0:9e:1a:25:77:c0:95:b7:34:69:ca:73:32:de:65:9e:7c: ca:02:f9:43:14:d8:2b:86:cf:9c:54:df:e5:4d:07:39:84:5d: ca:dc:4c:30:17:a3:f2:fe:cb:11:cf:1a:b2:49:fd:c3:34:cd: cb:1c:58:76:36:fc:5c:26:c5:3b:c2:8f:b2:55:7f:37:bb:44: 49:1c:4f:36:76:72:b5:13:14:98:e8:19:0e:8b:50:a4:fe:10: 63:56:5e:04:bb:58:60:71:04:45:09:d7:b9:2b:75:ec:f8:2c: 2a:51:35:44:71:64:50:1d:cf:8e:1a:31:26:c6:11:29:03:f8: 7f:30:d9:10:e5:f5:c5:be:ee:7c:23:44:05:7f:d3:92:47:de: 7e:38:36:25:d5:43:12:a5:23:0a:d4:d8:3e:a8:04:44:71:ab: 59:db:75:e1:6e:f0:94:95:ee:8d:3d:9e:e0:3f:48:65:6c:b6: 52:50:8c:67:bd:7d:76:87:de:67:af:9d:46:5f:37:0e:e3:9d: 3a:ae:8c:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0pD0oEZ11al9LQyyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDMxNDAxMDAzMVoXDTI2MDYxMjAxMDAzMVowLzEtMCsGA1UEAxMk Nzg5NDkxODctNTNlNi00YWJmLWEyZWQtY2QwY2E1MDllYjEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPBsKQT5Ez+HItc2Nb/YtAabldM1VJjZSkmr QNgWgEWYjCYUdSBsk50sXXYHazN83pTKWPSvOcjck0d3NhxvlewbBENVBy3ZB21v h3MsxkZfLvc09eBftmMX7Vy9PlUtk1/KbxQ+6iR7GxsLlrB3ea+3XHehc705W4+W N5uLapTAZD5ytbspqD+57hQLJpjx+gAF7X0xOV60qJaJsyzm79OkIRdf83GkiqVV S/EkE8VmIAPdegYDjqdOdXJXtK9J4OvZvLoFzpmvnH525MGerAZqrHFhhAYFA27W ysjZNoHoDBT2ULvCG3k0sWhZYBSjkFJN+OzBnqUiaDr/O1U75wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDDAgICEuJ0OKQEMqARfaK/CWeDoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvNGEzYjA1NGQtMzMwYi0z ZWNhLThiMzMtYzc3MzUzNzQ5NjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGDPPAvZmTSY7i5/3x/RPVlzZ9IyDRawVF6OrbV0qPN6QXEH0T8S7GxH 7wVuHX0fwTEDM9es8+TQnhold8CVtzRpynMy3mWefMoC+UMU2CuGz5xU3+VNBzmE XcrcTDAXo/L+yxHPGrJJ/cM0zcscWHY2/FwmxTvCj7JVfze7REkcTzZ2crUTFJjo GQ6LUKT+EGNWXgS7WGBxBEUJ17krdez4LCpRNURxZFAdz44aMSbGESkD+H8w2RDl 9cW+7nwjRAV/05JH3n44NiXVQxKlIwrU2D6oBERxq1nbdeFu8JSV7o09nuA/SGVs tlJQjGe9fXaH3mevnUZfNw7jnTqujA0= -----END CERTIFICATE-----Generated at Tue Mar 17 00:39:12 2026 by rpki-client