$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/0994ff44-b5e8-34eb-af1d-240a9e07d382.roa File: 0994ff44-b5e8-34eb-af1d-240a9e07d382.roa (raw, json) Hash identifier: nkOfzWV1C/bmWfRLFsnAHWVGWceXwTUKLy/dSDAL1o8= Subject key identifier: 60:C1:33:C7:32:C4:BB:58:95:E4:BD:A1:A3:DE:F9:1E:01:D9:9E:98 Certificate issuer: /CN=a6f26d75-0d3a-4bef-8d6a-36d16664307e Certificate serial: 010D0C9F4328584D5E1A7A213BD69930BA71937C Authority key identifier: 95:63:35:33:47:05:5D:59:71:3A:DA:67:E9:EB:BB:5A:F5:DC:7D:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/0994ff44-b5e8-34eb-af1d-240a9e07d382.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 29 IP address blocks: 128.36.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/a6f26d75-0d3a-4bef-8d6a-36d16664307e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/a6f26d75-0d3a-4bef-8d6a-36d16664307e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:7a:21:3b:d6:99:30:ba:71:93:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6f26d75-0d3a-4bef-8d6a-36d16664307e Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=18fff5f6-b812-4b49-9416-609a3507ba52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ee:b8:d2:5a:56:be:ff:91:ca:bb:56:37:18: 51:ff:b4:2a:e6:6f:f8:6e:51:cc:0d:f3:fb:6d:79: 39:4c:30:f5:7d:c5:47:d4:6c:e4:d1:87:ad:23:45: bf:e6:fe:a0:3c:d6:e4:d9:13:6d:80:75:30:08:8e: 3d:e7:f7:16:41:b6:56:09:d0:9b:b0:b0:90:74:1c: 24:4d:d2:42:c8:d7:f8:d8:81:94:0c:f5:3a:02:a5: ab:ed:ac:0f:6f:bc:a6:82:43:af:ad:00:33:a7:c0: fc:b6:e5:9d:70:3f:3d:32:30:79:1f:f3:9f:41:fb: 81:3e:19:ff:90:97:ba:f2:fe:35:35:e1:32:5a:33: 59:03:8c:45:e9:20:30:c0:32:03:44:e5:e3:bf:9c: 92:aa:87:0c:6d:13:10:81:28:eb:af:48:cf:8e:38: 86:97:e4:ee:13:eb:5e:23:14:1d:35:66:43:51:92: b6:2b:6e:a4:f0:73:e3:13:fc:49:aa:35:ef:f8:b9: 65:01:84:bc:8d:cc:bf:60:92:e7:d5:97:8f:fa:a2: 79:9e:9a:78:b3:5a:7a:c8:3c:e5:e2:de:c5:60:62: 07:ce:89:0a:18:71:04:76:a7:fa:e7:49:af:37:01: 6c:fe:23:92:db:7a:a2:79:60:4f:49:40:b8:a3:30: b8:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:C1:33:C7:32:C4:BB:58:95:E4:BD:A1:A3:DE:F9:1E:01:D9:9E:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/0994ff44-b5e8-34eb-af1d-240a9e07d382.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/a6f26d75-0d3a-4bef-8d6a-36d16664307e.crl X509v3 Authority Key Identifier: keyid:95:63:35:33:47:05:5D:59:71:3A:DA:67:E9:EB:BB:5A:F5:DC:7D:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e.cer sbgp-ipAddrBlock: critical IPv4: 128.36.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:f7:40:ee:bb:70:4c:d3:32:3f:b1:8a:1d:bc:ad:df:39:5d: 9a:7f:fe:6a:b6:2c:b9:49:e1:22:31:8d:83:54:e1:d4:8e:62: f2:af:50:b0:73:ce:b1:22:74:ac:bf:ed:1c:97:9e:8c:c5:7d: 5c:34:f9:45:ae:8e:c6:ae:fe:e6:d6:30:0c:71:8e:be:a2:4c: 30:eb:47:5f:0b:cb:b6:04:20:86:2a:2d:f9:b6:89:63:4f:aa: 4e:2d:7e:c6:94:13:5e:30:f0:a0:a8:60:67:42:12:82:8d:6b: 42:75:80:97:aa:36:f4:d9:85:58:83:6e:85:6f:da:66:a5:2d: 01:cb:71:d9:bc:1b:66:6c:37:79:fa:db:fd:1c:ff:9d:54:71: ef:55:dc:ac:2c:b1:9c:e0:f0:2c:53:6e:a7:33:c9:80:80:e5: 8c:8e:6f:cb:a5:51:68:21:a1:ae:c8:25:04:27:bb:5c:2f:64: 55:5a:15:b4:0e:56:5d:1f:c5:16:ee:d9:34:92:71:24:31:7c: b5:67:30:9b:45:71:2c:f4:c1:6d:5c:86:64:76:36:38:9d:52: cd:20:07:d8:61:de:69:e4:f5:81:7c:2f:26:a1:08:09:69:4e: 46:65:c6:04:44:81:0d:00:ea:52:84:6c:bf:39:02:4d:95:6b: 10:2e:82:3b -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE1eGnohO9aZMLpxk3wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTZmMjZkNzUtMGQzYS00YmVmLThkNmEtMzZkMTY2NjQz MDdlMB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk MThmZmY1ZjYtYjgxMi00YjQ5LTk0MTYtNjA5YTM1MDdiYTUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxu640lpWvv+RyrtWNxhR/7Qq5m/4blHMDfP7 bXk5TDD1fcVH1Gzk0YetI0W/5v6gPNbk2RNtgHUwCI495/cWQbZWCdCbsLCQdBwk TdJCyNf42IGUDPU6AqWr7awPb7ymgkOvrQAzp8D8tuWdcD89MjB5H/OfQfuBPhn/ kJe68v41NeEyWjNZA4xF6SAwwDIDROXjv5ySqocMbRMQgSjrr0jPjjiGl+TuE+te IxQdNWZDUZK2K26k8HPjE/xJqjXv+LllAYS8jcy/YJLn1ZeP+qJ5npp4s1p6yDzl 4t7FYGIHzokKGHEEdqf650mvNwFs/iOS23qieWBPSUC4ozC4QwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFGDBM8cyxLtYleS9oaPe+R4B2Z6YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hNmYy NmQ3NS0wZDNhLTRiZWYtOGQ2YS0zNmQxNjY2NDMwN2UvMDk5NGZmNDQtYjVlOC0z NGViLWFmMWQtMjQwYTllMDdkMzgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTZmMjZkNzUtMGQzYS00YmVmLThk NmEtMzZkMTY2NjQzMDdlL2E2ZjI2ZDc1LTBkM2EtNGJlZi04ZDZhLTM2ZDE2NjY0 MzA3ZS5jcmwwHwYDVR0jBBgwFoAUlWM1M0cFXVlxOtpn6eu7WvXcfSswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hNmYyNmQ3NS0wZDNhLTRiZWYtOGQ2YS0zNmQx NjY2NDMwN2UuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgCQwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAwPdA7rtwTNMyP7GKHbyt3zldmn/+arYsuUnhIjGNg1Th1I5i8q9QsHPO sSJ0rL/tHJeejMV9XDT5Ra6Oxq7+5tYwDHGOvqJMMOtHXwvLtgQghiot+baJY0+q Ti1+xpQTXjDwoKhgZ0ISgo1rQnWAl6o29NmFWINuhW/aZqUtActx2bwbZmw3efrb /Rz/nVRx71XcrCyxnODwLFNupzPJgIDljI5vy6VRaCGhrsglBCe7XC9kVVoVtA5W XR/FFu7ZNJJxJDF8tWcwm0VxLPTBbVyGZHY2OJ1SzSAH2GHeaeT1gXwvJqEICWlO RmXGBESBDQDqUoRsvzkCTZVrEC6COw== -----END CERTIFICATE-----Generated at Sat Apr 18 05:49:52 2026 by rpki-client