$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/0a855c33-44bb-3002-8d8e-455661227e81.roa File: 0a855c33-44bb-3002-8d8e-455661227e81.roa (raw, json) Hash identifier: 8spJOjgBCNWM/pa16lLfM9o69zmcElTLYOveWBQ2iAk= Subject key identifier: 20:49:E4:5C:B9:70:EA:6D:92:4B:88:FC:15:A1:C2:44:39:E6:F4:60 Certificate issuer: /CN=a6f26d75-0d3a-4bef-8d6a-36d16664307e Certificate serial: 010D0C9F4328584D5E1A7EE1B9E737614C72F900 Authority key identifier: 95:63:35:33:47:05:5D:59:71:3A:DA:67:E9:EB:BB:5A:F5:DC:7D:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/0a855c33-44bb-3002-8d8e-455661227e81.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 8075 IP address blocks: 128.36.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/a6f26d75-0d3a-4bef-8d6a-36d16664307e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/a6f26d75-0d3a-4bef-8d6a-36d16664307e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:7e:e1:b9:e7:37:61:4c:72:f9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6f26d75-0d3a-4bef-8d6a-36d16664307e Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=6e19bc93-27af-42de-8a42-699ab1ae81b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c3:fe:ca:33:41:ab:50:a5:0f:79:1e:69:f0: 83:29:55:d5:b9:49:4c:d9:ae:76:7c:59:ac:17:b1: db:3b:ab:13:37:17:d3:be:57:24:12:3d:07:00:d4: 6e:4a:07:59:bf:5e:8f:cf:dd:af:40:06:a2:37:01: fb:13:24:01:3b:b4:2a:8b:ac:99:3b:64:de:0f:e8: 50:f7:46:da:39:29:9d:56:92:39:c0:f8:0e:c1:04: b9:91:c9:61:bd:7f:28:c0:c4:22:0b:73:d8:86:d8: 73:0a:44:ca:32:42:87:08:b4:00:69:6c:37:28:2f: 14:07:81:d9:22:9a:4a:03:37:44:f9:db:e8:83:55: c1:d1:ab:64:63:2b:68:2c:20:48:24:6a:bd:44:cc: 0e:a1:6f:ec:89:0e:e7:d4:b1:3a:b9:d5:f1:6c:b6: 3a:13:18:cc:50:79:b7:d9:17:bc:65:51:b9:d2:dc: 8e:2d:60:7e:a2:02:9b:30:69:ee:35:29:76:69:fc: 0d:30:ca:ca:5e:4d:75:5e:9f:cf:43:8f:ee:2d:06: bf:04:6f:a6:28:b6:17:af:c3:53:fb:c0:3f:fa:44: 16:d2:1d:cb:e7:0c:12:b0:e6:5a:d6:33:ce:e4:d8: fa:a6:d7:bb:bf:ec:8d:0f:09:4c:d1:24:62:32:9b: fe:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:49:E4:5C:B9:70:EA:6D:92:4B:88:FC:15:A1:C2:44:39:E6:F4:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/0a855c33-44bb-3002-8d8e-455661227e81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/a6f26d75-0d3a-4bef-8d6a-36d16664307e.crl X509v3 Authority Key Identifier: keyid:95:63:35:33:47:05:5D:59:71:3A:DA:67:E9:EB:BB:5A:F5:DC:7D:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e.cer sbgp-ipAddrBlock: critical IPv4: 128.36.15.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:5d:9f:dc:20:f0:4f:10:d9:f8:51:93:94:be:ef:73:6d:18: 80:81:90:d5:13:ad:55:4c:6b:a3:03:0b:09:09:b2:6f:0c:86: c3:8a:1e:25:4f:8b:fb:0d:36:4c:24:d5:3c:c2:92:22:ee:54: 2d:09:7f:08:b8:e0:ef:05:41:d3:f5:11:2a:b3:33:c8:f0:e6: 91:d6:b5:f9:8d:b3:73:09:89:2e:11:3b:13:2c:33:eb:b1:1e: 40:e0:3b:d2:7a:24:3c:10:8b:86:cd:3a:3f:67:11:dd:46:b5: 3a:8e:40:a3:24:90:15:b5:5d:f3:b9:d8:c7:cd:b6:ab:d0:5e: 40:bf:d9:9a:a3:08:77:7e:a7:6d:67:5a:4c:cc:fe:86:4a:3f: e6:9f:bd:70:45:aa:60:f7:5f:97:6c:2e:4c:ee:ee:1c:42:5b: 5b:31:af:9b:9d:80:23:d4:be:89:97:c0:b5:d6:43:6e:d4:2f: 5c:48:2a:11:2d:f0:08:03:e3:ac:7c:4b:81:5c:06:02:03:ad: 37:52:24:02:2b:43:ad:94:ba:0d:6d:6c:99:5c:27:92:b8:9d: 8b:56:3b:0e:84:89:52:8d:e7:85:13:13:8e:5f:e6:46:4b:dd: 4c:fb:cb:59:4b:cd:2d:76:f8:4f:4d:04:f4:62:9e:b2:62:cf: a9:ec:8c:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1eGn7huec3YUxy+QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTZmMjZkNzUtMGQzYS00YmVmLThkNmEtMzZkMTY2NjQz MDdlMB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk NmUxOWJjOTMtMjdhZi00MmRlLThhNDItNjk5YWIxYWU4MWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMP+yjNBq1ClD3keafCDKVXVuUlM2a52fFms F7HbO6sTNxfTvlckEj0HANRuSgdZv16Pz92vQAaiNwH7EyQBO7Qqi6yZO2TeD+hQ 90baOSmdVpI5wPgOwQS5kclhvX8owMQiC3PYhthzCkTKMkKHCLQAaWw3KC8UB4HZ IppKAzdE+dvog1XB0atkYytoLCBIJGq9RMwOoW/siQ7n1LE6udXxbLY6ExjMUHm3 2Re8ZVG50tyOLWB+ogKbMGnuNSl2afwNMMrKXk11Xp/PQ4/uLQa/BG+mKLYXr8NT +8A/+kQW0h3L5wwSsOZa1jPO5Nj6pte7v+yNDwlM0SRiMpv+lQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCBJ5Fy5cOptkkuI/BWhwkQ55vRgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hNmYy NmQ3NS0wZDNhLTRiZWYtOGQ2YS0zNmQxNjY2NDMwN2UvMGE4NTVjMzMtNDRiYi0z MDAyLThkOGUtNDU1NjYxMjI3ZTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTZmMjZkNzUtMGQzYS00YmVmLThk NmEtMzZkMTY2NjQzMDdlL2E2ZjI2ZDc1LTBkM2EtNGJlZi04ZDZhLTM2ZDE2NjY0 MzA3ZS5jcmwwHwYDVR0jBBgwFoAUlWM1M0cFXVlxOtpn6eu7WvXcfSswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hNmYyNmQ3NS0wZDNhLTRiZWYtOGQ2YS0zNmQx NjY2NDMwN2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgCQPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIVdn9wg8E8Q2fhRk5S+73NtGICBkNUTrVVMa6MDCwkJsm8MhsOKHiVP i/sNNkwk1TzCkiLuVC0Jfwi44O8FQdP1ESqzM8jw5pHWtfmNs3MJiS4ROxMsM+ux HkDgO9J6JDwQi4bNOj9nEd1GtTqOQKMkkBW1XfO52MfNtqvQXkC/2ZqjCHd+p21n WkzM/oZKP+afvXBFqmD3X5dsLkzu7hxCW1sxr5udgCPUvomXwLXWQ27UL1xIKhEt 8AgD46x8S4FcBgIDrTdSJAIrQ62Uug1tbJlcJ5K4nYtWOw6EiVKN54UTE45f5kZL 3Uz7y1lLzS12+E9NBPRinrJiz6nsjBE= -----END CERTIFICATE-----Generated at Fri Apr 17 12:16:22 2026 by rpki-client