$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/36b8a88b-fe04-4dc6-99a3-6622065e30cf/23e162e8-2d43-3f82-bdd0-27b57943ae9f.roa File: 23e162e8-2d43-3f82-bdd0-27b57943ae9f.roa (raw, json) Hash identifier: 1/JGk+gGDHjqOJsU973H+QDGsA1vVw1SDUVWglLLMiE= Subject key identifier: BD:1D:5F:AE:71:A3:32:9A:97:CA:7F:E7:84:B5:40:F3:6D:47:50:1F Certificate issuer: /CN=36b8a88b-fe04-4dc6-99a3-6622065e30cf Certificate serial: 010D0C9F4328584EF717BAA1AC45494A4D6788A0 Authority key identifier: 51:E2:FE:F9:1B:B5:1F:AC:C8:A8:D1:2E:E2:81:36:5A:E0:F9:AA:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/36b8a88b-fe04-4dc6-99a3-6622065e30cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/36b8a88b-fe04-4dc6-99a3-6622065e30cf/23e162e8-2d43-3f82-bdd0-27b57943ae9f.roa Signing time: Wed 26 Aug 2026 13:00:12 +0000 ROA not before: Wed 26 Aug 2026 13:00:12 +0000 ROA not after: Tue 24 Nov 2026 14:00:12 +0000 asID: 16509 IP address blocks: 2620:0:b20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/36b8a88b-fe04-4dc6-99a3-6622065e30cf/36b8a88b-fe04-4dc6-99a3-6622065e30cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/36b8a88b-fe04-4dc6-99a3-6622065e30cf/36b8a88b-fe04-4dc6-99a3-6622065e30cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/36b8a88b-fe04-4dc6-99a3-6622065e30cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f7:17:ba:a1:ac:45:49:4a:4d:67:88:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36b8a88b-fe04-4dc6-99a3-6622065e30cf Validity Not Before: Aug 26 13:00:12 2026 GMT Not After : Nov 24 14:00:12 2026 GMT Subject: CN=d9eec877-22dc-4e5b-a66e-6bd74f30747b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:72:f8:fb:ab:bd:de:1c:69:00:78:bd:4a:86: 9e:2a:08:5b:a8:4e:1e:d1:7b:41:18:7d:86:fc:1d: 0b:af:73:1a:0c:7a:61:dc:37:f2:84:0e:10:1c:5a: 72:6c:de:f0:f8:04:e3:1b:db:2e:e5:92:31:54:56: 7a:b2:88:7c:e9:2d:ba:79:65:b9:91:63:88:ec:10: d9:7e:24:5d:d1:3f:aa:02:45:3d:43:5a:5a:f1:7e: 05:c4:5e:85:e3:c1:b8:31:ad:68:25:3d:79:c9:d8: 32:c8:6e:16:d0:49:42:45:49:96:d7:ef:f7:de:dd: 1d:93:eb:be:1b:d4:b5:1b:8c:82:18:31:2d:1d:93: 82:74:48:4a:7a:09:3e:03:c5:81:fc:cf:40:a1:2e: 17:d1:04:32:ce:31:b9:77:55:df:a8:5d:ac:8d:20: 9c:c6:db:59:9e:09:5f:b2:86:c6:e6:13:32:50:15: 83:2a:9d:58:3c:84:77:d1:78:45:60:af:9e:01:61: 8f:68:ae:68:ac:f2:7b:8a:93:38:ce:4b:e6:47:a3: 81:1e:98:65:0b:41:86:1c:91:a4:14:6f:cb:d2:86: c6:89:81:be:45:c0:97:f5:04:d4:77:81:8f:63:40: fc:57:f4:3f:5f:7d:e0:8a:41:b1:f6:95:66:27:19: 8d:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:1D:5F:AE:71:A3:32:9A:97:CA:7F:E7:84:B5:40:F3:6D:47:50:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/36b8a88b-fe04-4dc6-99a3-6622065e30cf/23e162e8-2d43-3f82-bdd0-27b57943ae9f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/36b8a88b-fe04-4dc6-99a3-6622065e30cf/36b8a88b-fe04-4dc6-99a3-6622065e30cf.crl X509v3 Authority Key Identifier: keyid:51:E2:FE:F9:1B:B5:1F:AC:C8:A8:D1:2E:E2:81:36:5A:E0:F9:AA:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/36b8a88b-fe04-4dc6-99a3-6622065e30cf.cer sbgp-ipAddrBlock: critical IPv6: 2620:0:b20::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:5a:37:6a:db:1f:63:54:52:27:26:80:c6:72:a6:64:aa:5d: 02:4b:91:54:43:f0:19:2f:50:ad:f0:52:f8:a0:1a:32:d0:65: 96:c7:77:50:da:8f:fa:7a:50:06:e8:42:9c:16:53:2e:bb:75: 47:d9:9c:13:19:94:52:94:da:6a:73:f5:38:a4:a1:75:3d:94: 75:a6:3a:1c:9f:b3:c3:c5:9c:3d:65:8b:15:bf:63:2f:94:15: e2:3a:df:c0:6d:26:75:85:f8:f5:b7:5f:c5:77:e4:13:99:22: 94:58:4e:ee:54:78:f0:f9:75:cd:11:ca:ca:35:87:26:56:46: e2:b9:69:b3:90:f8:f1:72:68:9f:2f:36:9b:45:df:fa:1d:6c: b6:30:b2:17:a0:f7:76:03:ad:c7:09:b4:a0:3d:8d:0d:dc:28: f9:ce:49:81:00:24:e3:a6:e6:24:0e:05:f5:bb:17:53:01:59: ec:c7:5a:66:b2:2c:72:04:ba:cc:8d:0a:16:d9:5c:86:46:ec: a0:23:37:20:38:66:ba:fa:55:3d:17:14:66:90:f0:54:41:93: 02:d1:35:15:39:1d:3e:db:35:fa:dc:c4:87:10:19:8b:94:d0: 2c:16:ba:c8:39:03:19:21:6c:c4:d5:4c:8d:5b:4d:4c:d6:1e: aa:d2:73:d9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE73F7qhrEVJSk1niKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzZiOGE4OGItZmUwNC00ZGM2LTk5YTMtNjYyMjA2NWUz MGNmMB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk ZDllZWM4NzctMjJkYy00ZTViLWE2NmUtNmJkNzRmMzA3NDdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3L4+6u93hxpAHi9SoaeKghbqE4e0XtBGH2G /B0Lr3MaDHph3DfyhA4QHFpybN7w+ATjG9su5ZIxVFZ6soh86S26eWW5kWOI7BDZ fiRd0T+qAkU9Q1pa8X4FxF6F48G4Ma1oJT15ydgyyG4W0ElCRUmW1+/33t0dk+u+ G9S1G4yCGDEtHZOCdEhKegk+A8WB/M9AoS4X0QQyzjG5d1XfqF2sjSCcxttZnglf sobG5hMyUBWDKp1YPIR30XhFYK+eAWGPaK5orPJ7ipM4zkvmR6OBHphlC0GGHJGk FG/L0obGiYG+RcCX9QTUd4GPY0D8V/Q/X33gikGx9pVmJxmNbwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFL0dX65xozKal8p/54S1QPNtR1AfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNmI4 YTg4Yi1mZTA0LTRkYzYtOTlhMy02NjIyMDY1ZTMwY2YvMjNlMTYyZTgtMmQ0My0z ZjgyLWJkZDAtMjdiNTc5NDNhZTlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMzZiOGE4OGItZmUwNC00ZGM2LTk5 YTMtNjYyMjA2NWUzMGNmLzM2YjhhODhiLWZlMDQtNGRjNi05OWEzLTY2MjIwNjVl MzBjZi5jcmwwHwYDVR0jBBgwFoAUUeL++Ru1H6zIqNEu4oE2WuD5qiYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8zNmI4YTg4Yi1mZTA0LTRkYzYtOTlhMy02NjIy MDY1ZTMwY2YuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAAAsg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEVaN2rbH2NUUicmgMZypmSqXQJLkVRD8BkvUK3wUvigGjLQZZbH d1Daj/p6UAboQpwWUy67dUfZnBMZlFKU2mpz9TikoXU9lHWmOhyfs8PFnD1lixW/ Yy+UFeI638BtJnWF+PW3X8V35BOZIpRYTu5UePD5dc0Ryso1hyZWRuK5abOQ+PFy aJ8vNptF3/odbLYwsheg93YDrccJtKA9jQ3cKPnOSYEAJOOm5iQOBfW7F1MBWezH WmayLHIEusyNChbZXIZG7KAjNyA4Zrr6VT0XFGaQ8FRBkwLRNRU5HT7bNfrcxIcQ GYuU0CwWusg5AxkhbMTVTI1bTUzWHqrSc9k= -----END CERTIFICATE-----Generated at Sat Sep 26 13:40:31 2026 by rpki-client