$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/bc24e59b-eee5-3721-b9e4-2847c23a1de1.roa File: bc24e59b-eee5-3721-b9e4-2847c23a1de1.roa (raw, json) Hash identifier: Z0g3eNIA47xJuoNGxwCTfUV7DLsMHLKy2voCQI8Pnwk= Subject key identifier: 40:C6:21:DB:3D:40:60:CE:5C:76:A8:86:1D:78:01:10:14:FE:36:F4 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584D4A8F88BCF9E406F7F3360940 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/bc24e59b-eee5-3721-b9e4-2847c23a1de1.roa Signing time: Thu 26 Mar 2026 01:00:32 +0000 ROA not before: Thu 26 Mar 2026 01:00:32 +0000 ROA not after: Wed 24 Jun 2026 01:00:32 +0000 asID: 16591 IP address blocks: 136.57.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:8f:88:bc:f9:e4:06:f7:f3:36:09:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Mar 26 01:00:32 2026 GMT Not After : Jun 24 01:00:32 2026 GMT Subject: CN=e9681070-72d0-4d38-b7a2-2bd7561b43f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:e5:cf:6c:c0:0d:54:f8:31:a2:40:10:1c:a1: ef:84:7f:dd:fe:16:ba:a1:81:32:e6:be:c0:df:72: f0:5d:ce:f9:ae:ae:cb:28:c0:39:15:42:e1:6f:ed: f6:5c:6b:df:7e:b4:1e:f6:c4:6b:c3:b7:18:57:47: 3d:4d:36:e8:6b:32:54:9b:7e:6c:83:bc:77:1a:ae: 28:de:15:ab:26:17:f0:f0:12:0e:96:f1:c6:bd:51: 3f:95:d2:ea:82:bf:9b:02:10:01:72:ee:47:a4:7c: 72:6c:8a:cf:2a:d2:06:f1:3a:0a:e7:ef:c7:73:95: cf:78:50:55:b4:e3:72:0c:32:89:d7:1a:a1:b4:2a: 09:6d:ef:52:af:8b:fc:88:00:d4:31:55:66:f7:39: 61:84:48:24:61:78:c0:11:0b:d5:ee:77:e1:79:0d: 5e:2e:5f:35:48:fc:2a:21:8c:8b:72:c9:cb:fe:f9: dc:c5:91:7e:38:c8:c1:d9:d7:bf:92:66:c8:68:eb: 07:8a:f6:5e:1e:4d:83:60:7d:53:3a:a2:b6:d6:16: c5:31:7f:5c:19:ef:6b:3d:64:f6:64:af:68:3f:70: c8:b0:95:c9:d0:87:93:4e:cc:3a:c1:18:ec:a7:07: f2:25:0f:a9:1d:37:fb:ab:00:36:6e:3d:b2:92:37: f1:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:C6:21:DB:3D:40:60:CE:5C:76:A8:86:1D:78:01:10:14:FE:36:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/bc24e59b-eee5-3721-b9e4-2847c23a1de1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.57.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:2a:d5:74:8d:53:98:7e:c2:41:08:36:02:29:07:4a:9f:b7: df:cb:5d:18:1f:8b:9c:ea:4c:f9:bc:97:b3:e2:d7:46:70:59: 49:8a:47:42:76:2b:78:f0:05:99:23:20:7e:93:65:ff:ef:e3: 76:d7:d4:70:31:89:d6:66:d1:85:80:7d:16:f8:e5:f6:eb:4e: 20:c6:d4:11:c7:c6:ef:b1:78:b1:01:14:8e:01:f3:63:75:1a: 3e:d3:b1:a8:4c:e0:5c:d3:55:63:83:bf:54:01:fa:e3:bd:e9: 48:89:5e:ba:16:4d:25:14:a0:c9:51:d6:48:0f:9b:88:73:2d: a1:11:f0:ae:f8:20:4b:96:91:f2:0b:d3:00:8a:e6:95:5d:17: 16:cc:e5:83:93:68:66:31:fc:2a:b5:1c:84:3d:76:b5:c9:22: 2d:bf:df:42:d0:8c:dc:62:f2:34:7a:38:af:33:17:d8:12:54: de:73:f4:65:2d:b8:ef:fd:3d:71:49:25:e0:87:f8:94:7b:e4: 99:e8:27:b1:5c:1c:c6:4a:b6:61:2b:20:0d:35:d1:5f:c8:11: 16:4a:1c:c0:43:88:b5:c7:3f:9a:9f:67:71:08:15:97:dc:06: 2d:38:57:35:9a:1f:60:d7:f6:72:fd:e1:20:70:43:1f:2c:57: 32:0d:17:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Kj4i8+eQG9/M2CUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDMyNjAxMDAzMloXDTI2MDYyNDAxMDAzMlowLzEtMCsGA1UEAxMk ZTk2ODEwNzAtNzJkMC00ZDM4LWI3YTItMmJkNzU2MWI0M2Y4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOXPbMANVPgxokAQHKHvhH/d/ha6oYEy5r7A 33LwXc75rq7LKMA5FULhb+32XGvffrQe9sRrw7cYV0c9TTboazJUm35sg7x3Gq4o 3hWrJhfw8BIOlvHGvVE/ldLqgr+bAhABcu5HpHxybIrPKtIG8ToK5+/Hc5XPeFBV tONyDDKJ1xqhtCoJbe9Sr4v8iADUMVVm9zlhhEgkYXjAEQvV7nfheQ1eLl81SPwq IYyLcsnL/vncxZF+OMjB2de/kmbIaOsHivZeHk2DYH1TOqK21hbFMX9cGe9rPWT2 ZK9oP3DIsJXJ0IeTTsw6wRjspwfyJQ+pHTf7qwA2bj2ykjfxAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEDGIds9QGDOXHaohh14ARAU/jb0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvYmMyNGU1OWItZWVlNS0z NzIxLWI5ZTQtMjg0N2MyM2ExZGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDngMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIYq1XSNU5h+wkEINgIpB0qft9/LXRgfi5zqTPm8l7Pi10ZwWUmKR0J2 K3jwBZkjIH6TZf/v43bX1HAxidZm0YWAfRb45fbrTiDG1BHHxu+xeLEBFI4B82N1 Gj7TsahM4FzTVWODv1QB+uO96UiJXroWTSUUoMlR1kgPm4hzLaER8K74IEuWkfIL 0wCK5pVdFxbM5YOTaGYx/Cq1HIQ9drXJIi2/30LQjNxi8jR6OK8zF9gSVN5z9GUt uO/9PXFJJeCH+JR75JnoJ7FcHMZKtmErIA010V/IERZKHMBDiLXHP5qfZ3EIFZfc Bi04VzWaH2DX9nL94SBwQx8sVzINF78= -----END CERTIFICATE-----Generated at Thu Mar 26 16:46:19 2026 by rpki-client