$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/98edf705-d568-3a9d-8a83-619621b2b369.roa File: 98edf705-d568-3a9d-8a83-619621b2b369.roa (raw, json) Hash identifier: sBZWOtzTkQN0ZsKYwdMXME4pz4fFKQeN7svfwXt8SZI= Subject key identifier: D6:E2:3B:70:19:8A:2C:D9:ED:20:3F:8A:5F:3B:83:A2:DA:53:B0:11 Certificate issuer: /CN=36ee0355-1d23-4ead-8858-b26a81c6add0 Certificate serial: 010D0C9F4328584D7F9A855138F9CECA3F236180 Authority key identifier: A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/98edf705-d568-3a9d-8a83-619621b2b369.roa Signing time: Tue 14 Apr 2026 01:00:24 +0000 ROA not before: Tue 14 Apr 2026 01:00:24 +0000 ROA not after: Mon 13 Jul 2026 01:00:24 +0000 asID: 3423 IP address blocks: 2620:bf::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7f:9a:85:51:38:f9:ce:ca:3f:23:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36ee0355-1d23-4ead-8858-b26a81c6add0 Validity Not Before: Apr 14 01:00:24 2026 GMT Not After : Jul 13 01:00:24 2026 GMT Subject: CN=8e78a23f-8538-448f-95fd-a2c79cc2284a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:27:45:c6:9d:ac:d7:f1:25:e7:e9:06:de:57: 3c:b5:c2:ae:b4:a5:e9:51:84:66:70:14:58:3d:2c: c1:96:eb:fd:4c:d3:44:6e:3c:a7:83:02:e7:83:d9: c0:4b:af:22:ad:e5:fd:d2:12:d8:27:43:0f:94:53: 40:bb:25:e1:f8:3f:29:e4:33:11:b0:0f:3e:1c:e0: 5c:ca:9e:a8:c6:38:fd:87:42:c9:03:22:ae:09:3e: 90:1d:34:18:36:08:62:d0:46:53:d2:1d:9a:53:fc: f1:5f:92:74:56:44:43:f5:0e:4f:a6:92:72:13:ef: dd:14:df:9a:f6:14:f8:62:c5:8e:2b:07:6d:53:9e: 4f:3f:a1:cb:b2:21:2b:ed:08:cd:a4:05:11:16:de: e5:70:5c:92:29:f7:98:c1:0b:18:cf:b9:e9:20:e7: 79:85:b1:3a:07:87:87:a1:39:f8:71:22:69:eb:46: d9:f0:06:1e:be:bb:75:fe:fd:cb:e1:b9:1e:ee:3c: 49:77:27:b3:cd:a5:56:cc:0d:54:f8:8f:8a:1d:bd: ab:fd:64:cb:56:78:66:f1:de:ec:c9:d0:ad:37:85: c3:dc:9b:b7:a2:f1:8a:f9:85:75:3f:04:2d:85:f9: d4:a1:88:a5:9e:a0:b2:3c:a3:0b:19:b8:d2:69:68: 14:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:E2:3B:70:19:8A:2C:D9:ED:20:3F:8A:5F:3B:83:A2:DA:53:B0:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/98edf705-d568-3a9d-8a83-619621b2b369.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl X509v3 Authority Key Identifier: keyid:A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer sbgp-ipAddrBlock: critical IPv6: 2620:bf::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:da:ea:b4:2c:f8:ec:99:2b:06:5d:40:d4:34:a6:da:7d:ea: 4a:ea:29:4a:ea:ba:4d:82:10:99:ed:b6:6f:c9:3c:29:1d:57: c6:82:d0:8b:d9:61:3a:2e:74:b5:66:fe:42:fe:82:9d:af:7c: 23:3e:5f:66:85:59:d7:2b:5d:f1:1f:fe:60:1c:08:7f:47:b6: 98:89:a9:95:f0:54:af:1d:c0:6d:e5:e3:d5:16:dd:9c:32:7d: 8a:47:c7:91:ce:8d:c8:fe:43:09:f4:0d:97:51:a4:20:c9:38: 66:00:64:55:02:43:72:dc:5f:01:5e:4d:a6:79:1d:c9:94:5d: d7:8b:25:11:d0:9f:a6:a0:0a:f1:de:22:8e:6d:6f:c1:6a:b8: 0b:cf:56:7e:86:f5:9a:5d:3a:5f:36:5b:01:5a:4c:e8:ba:e1: 1a:fe:52:2a:0f:24:d5:a9:a4:28:cc:5c:3e:9d:a4:ef:f0:83: 17:09:f4:62:39:8f:f9:ec:f9:36:17:6e:a5:02:f4:e5:de:1e: 70:10:24:09:0f:2f:b2:31:81:14:37:ad:89:98:61:bc:d9:6d: 79:b0:bc:d5:d2:91:58:03:13:50:b4:58:0c:4a:86:d2:ea:3e: ef:5a:48:05:a1:36:d6:e9:eb:f4:d8:94:20:32:e3:28:a2:8f: 56:9a:aa:ff -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1/moVROPnOyj8jYYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzZlZTAzNTUtMWQyMy00ZWFkLTg4NTgtYjI2YTgxYzZh ZGQwMB4XDTI2MDQxNDAxMDAyNFoXDTI2MDcxMzAxMDAyNFowLzEtMCsGA1UEAxMk OGU3OGEyM2YtODUzOC00NDhmLTk1ZmQtYTJjNzljYzIyODRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSdFxp2s1/El5+kG3lc8tcKutKXpUYRmcBRY PSzBluv9TNNEbjyngwLng9nAS68ireX90hLYJ0MPlFNAuyXh+D8p5DMRsA8+HOBc yp6oxjj9h0LJAyKuCT6QHTQYNghi0EZT0h2aU/zxX5J0VkRD9Q5PppJyE+/dFN+a 9hT4YsWOKwdtU55PP6HLsiEr7QjNpAURFt7lcFySKfeYwQsYz7npIOd5hbE6B4eH oTn4cSJp60bZ8AYevrt1/v3L4bke7jxJdyezzaVWzA1U+I+KHb2r/WTLVnhm8d7s ydCtN4XD3Ju3ovGK+YV1PwQthfnUoYilnqCyPKMLGbjSaWgU4wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNbiO3AZiizZ7SA/il87g6LaU7ARMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zNmVl MDM1NS0xZDIzLTRlYWQtODg1OC1iMjZhODFjNmFkZDAvOThlZGY3MDUtZDU2OC0z YTlkLThhODMtNjE5NjIxYjJiMzY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzZlZTAzNTUtMWQyMy00ZWFkLTg4 NTgtYjI2YTgxYzZhZGQwLzM2ZWUwMzU1LTFkMjMtNGVhZC04ODU4LWIyNmE4MWM2 YWRkMC5jcmwwHwYDVR0jBBgwFoAUo7u6I6BDs3ssyq/gqkQQqxGTcJUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zNmVlMDM1NS0xZDIzLTRlYWQtODg1OC1iMjZh ODFjNmFkZDAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAvwAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAMTa6rQs+OyZKwZdQNQ0ptp96krqKUrquk2CEJnttm/JPCkdV8aC 0IvZYToudLVm/kL+gp2vfCM+X2aFWdcrXfEf/mAcCH9HtpiJqZXwVK8dwG3l49UW 3ZwyfYpHx5HOjcj+Qwn0DZdRpCDJOGYAZFUCQ3LcXwFeTaZ5HcmUXdeLJRHQn6ag CvHeIo5tb8FquAvPVn6G9ZpdOl82WwFaTOi64Rr+UioPJNWppCjMXD6dpO/wgxcJ 9GI5j/ns+TYXbqUC9OXeHnAQJAkPL7IxgRQ3rYmYYbzZbXmwvNXSkVgDE1C0WAxK htLqPu9aSAWhNtbp6/TYlCAy4yiij1aaqv8= -----END CERTIFICATE-----Generated at Fri Apr 17 20:30:19 2026 by rpki-client