$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/36b8a88b-fe04-4dc6-99a3-6622065e30cf/489d18c2-77b4-34e4-98d8-6e40539b7b57.roa File: 489d18c2-77b4-34e4-98d8-6e40539b7b57.roa (raw, json) Hash identifier: 7vWhsIhldwwdD/rmZzsJsUC7VPw5/nS4Zak5X0MDZus= Subject key identifier: 34:CD:0F:A8:EC:5D:97:90:2E:B0:E8:5A:9A:6F:C6:3C:E9:0C:20:71 Certificate issuer: /CN=36b8a88b-fe04-4dc6-99a3-6622065e30cf Certificate serial: 010D0C9F4328584EF717BAB876DF862AD3215380 Authority key identifier: 51:E2:FE:F9:1B:B5:1F:AC:C8:A8:D1:2E:E2:81:36:5A:E0:F9:AA:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/36b8a88b-fe04-4dc6-99a3-6622065e30cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/36b8a88b-fe04-4dc6-99a3-6622065e30cf/489d18c2-77b4-34e4-98d8-6e40539b7b57.roa Signing time: Wed 26 Aug 2026 13:00:12 +0000 ROA not before: Wed 26 Aug 2026 13:00:12 +0000 ROA not after: Tue 24 Nov 2026 14:00:12 +0000 asID: 16509 IP address blocks: 208.72.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/36b8a88b-fe04-4dc6-99a3-6622065e30cf/36b8a88b-fe04-4dc6-99a3-6622065e30cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/36b8a88b-fe04-4dc6-99a3-6622065e30cf/36b8a88b-fe04-4dc6-99a3-6622065e30cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/36b8a88b-fe04-4dc6-99a3-6622065e30cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f7:17:ba:b8:76:df:86:2a:d3:21:53:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36b8a88b-fe04-4dc6-99a3-6622065e30cf Validity Not Before: Aug 26 13:00:12 2026 GMT Not After : Nov 24 14:00:12 2026 GMT Subject: CN=114320dc-d549-4750-9bc6-a739cabdbb6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:8c:af:ad:69:f6:18:18:e9:ee:7a:28:97:70: cf:b3:0c:d6:82:28:89:53:97:0f:d8:81:c7:f8:c6: 72:d9:5a:58:55:cf:04:52:c3:f9:14:95:0c:65:c9: 76:65:75:1c:67:19:6c:de:e0:f2:42:84:d3:53:c1: 03:77:94:4b:a2:ba:13:5f:8e:9a:46:6f:7f:b1:46: 1a:a7:b3:ef:6d:f6:90:e2:8c:79:0c:b6:44:6d:ec: 73:a6:91:b7:80:8c:76:f6:b9:88:62:e7:85:fd:c3: b4:b2:8a:76:94:49:ef:1e:e1:fb:4d:ad:f4:23:6c: 59:5e:c6:84:69:5a:60:15:3b:53:a4:c1:56:55:bb: 30:f7:24:e8:38:0b:99:0b:4f:68:47:5e:67:df:04: dd:28:97:49:dc:51:df:6a:b7:d9:19:7e:73:f9:55: bc:69:7e:38:11:56:1a:03:0c:fe:a2:f0:37:cf:ec: 4d:c2:36:92:3b:6b:23:14:a2:d8:8d:65:8e:18:4b: 79:17:ce:98:ea:50:ab:8e:6e:8d:7f:d5:10:45:5f: fe:2d:b5:7c:7b:7d:20:d3:d2:6e:89:9d:5a:b6:cf: 9d:aa:5e:c6:7e:f4:2e:a5:b9:5c:c0:6a:cb:77:41: 33:ea:06:97:5d:4d:2b:86:51:e3:e6:12:47:24:82: cb:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:CD:0F:A8:EC:5D:97:90:2E:B0:E8:5A:9A:6F:C6:3C:E9:0C:20:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/36b8a88b-fe04-4dc6-99a3-6622065e30cf/489d18c2-77b4-34e4-98d8-6e40539b7b57.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/36b8a88b-fe04-4dc6-99a3-6622065e30cf/36b8a88b-fe04-4dc6-99a3-6622065e30cf.crl X509v3 Authority Key Identifier: keyid:51:E2:FE:F9:1B:B5:1F:AC:C8:A8:D1:2E:E2:81:36:5A:E0:F9:AA:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/36b8a88b-fe04-4dc6-99a3-6622065e30cf.cer sbgp-ipAddrBlock: critical IPv4: 208.72.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:54:3e:1a:30:1e:ff:28:a7:1f:5b:70:77:f4:a3:e0:29:46: 21:57:0e:a8:f1:8e:37:33:ff:8f:8a:78:77:9f:64:ec:75:af: b0:91:85:0f:5c:4a:c1:8a:4a:17:45:84:ac:c1:7b:f7:ef:ce: 5b:f6:c1:be:81:a5:1b:18:88:69:d6:1f:20:89:3e:02:c8:a5: c1:69:5c:c3:11:e5:65:8d:bc:8c:e2:8b:25:ab:8a:87:2a:4e: d2:77:8c:b1:9f:9d:cc:c7:b8:94:d4:5a:6f:76:b1:e0:64:0c: 23:83:17:e8:b7:ca:75:c9:2c:5e:cb:6e:43:29:4c:dc:42:10: e3:ca:5c:80:b2:68:47:72:29:05:b6:95:92:6f:99:ed:eb:dd: 1b:46:73:5e:8c:24:24:9e:6d:d3:7d:dc:10:45:45:49:22:32: ac:f6:68:63:ad:61:da:4d:c4:ef:e2:45:60:4e:0f:4b:27:1b: 5c:53:e7:50:63:d8:ed:f7:da:af:bc:4c:9f:9c:cf:03:4e:49: d0:4d:7b:09:53:36:91:03:6b:75:9e:63:06:ee:6e:ad:2e:51: 5b:02:b3:74:bb:6a:46:90:c4:46:42:e4:13:dc:b3:41:90:07: 74:75:06:ad:06:cd:0f:75:5a:4d:95:5f:c0:ca:3f:43:17:48: 19:59:65:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE73F7q4dt+GKtMhU4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzZiOGE4OGItZmUwNC00ZGM2LTk5YTMtNjYyMjA2NWUz MGNmMB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk MTE0MzIwZGMtZDU0OS00NzUwLTliYzYtYTczOWNhYmRiYjZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYyvrWn2GBjp7nool3DPswzWgiiJU5cP2IHH +MZy2VpYVc8EUsP5FJUMZcl2ZXUcZxls3uDyQoTTU8EDd5RLoroTX46aRm9/sUYa p7PvbfaQ4ox5DLZEbexzppG3gIx29rmIYueF/cO0sop2lEnvHuH7Ta30I2xZXsaE aVpgFTtTpMFWVbsw9yToOAuZC09oR15n3wTdKJdJ3FHfarfZGX5z+VW8aX44EVYa Awz+ovA3z+xNwjaSO2sjFKLYjWWOGEt5F86Y6lCrjm6Nf9UQRV/+LbV8e30g09Ju iZ1ats+dql7GfvQupblcwGrLd0Ez6gaXXU0rhlHj5hJHJILLgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDTND6jsXZeQLrDoWppvxjzpDCBxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNmI4 YTg4Yi1mZTA0LTRkYzYtOTlhMy02NjIyMDY1ZTMwY2YvNDg5ZDE4YzItNzdiNC0z NGU0LTk4ZDgtNmU0MDUzOWI3YjU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMzZiOGE4OGItZmUwNC00ZGM2LTk5 YTMtNjYyMjA2NWUzMGNmLzM2YjhhODhiLWZlMDQtNGRjNi05OWEzLTY2MjIwNjVl MzBjZi5jcmwwHwYDVR0jBBgwFoAUUeL++Ru1H6zIqNEu4oE2WuD5qiYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8zNmI4YTg4Yi1mZTA0LTRkYzYtOTlhMy02NjIy MDY1ZTMwY2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0EjAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD5UPhowHv8opx9bcHf0o+ApRiFXDqjxjjcz/4+KeHefZOx1r7CRhQ9c SsGKShdFhKzBe/fvzlv2wb6BpRsYiGnWHyCJPgLIpcFpXMMR5WWNvIziiyWriocq TtJ3jLGfnczHuJTUWm92seBkDCODF+i3ynXJLF7LbkMpTNxCEOPKXICyaEdyKQW2 lZJvme3r3RtGc16MJCSebdN93BBFRUkiMqz2aGOtYdpNxO/iRWBOD0snG1xT51Bj 2O332q+8TJ+czwNOSdBNewlTNpEDa3WeYwbubq0uUVsCs3S7akaQxEZC5BPcs0GQ B3R1Bq0GzQ91Wk2VX8DKP0MXSBlZZeM= -----END CERTIFICATE-----Generated at Tue Sep 22 13:58:35 2026 by rpki-client