$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/3a6a8996-9c3f-30c7-ba0a-b63734e4dd0f.roa File: 3a6a8996-9c3f-30c7-ba0a-b63734e4dd0f.roa (raw, json) Hash identifier: tnp0YKCSmwE7xh69BxUc9mqbkp/dt1XcqSGtQMQhmlw= Subject key identifier: D6:B0:4A:EE:F5:8F:5C:01:0F:CD:F7:3A:0E:16:EE:54:26:FD:D4:23 Certificate issuer: /CN=a6f26d75-0d3a-4bef-8d6a-36d16664307e Certificate serial: 010D0C9F4328584D5E1A7CD60ADB331097684DA0 Authority key identifier: 95:63:35:33:47:05:5D:59:71:3A:DA:67:E9:EB:BB:5A:F5:DC:7D:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/3a6a8996-9c3f-30c7-ba0a-b63734e4dd0f.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 29 IP address blocks: 128.36.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/a6f26d75-0d3a-4bef-8d6a-36d16664307e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/a6f26d75-0d3a-4bef-8d6a-36d16664307e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:7c:d6:0a:db:33:10:97:68:4d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6f26d75-0d3a-4bef-8d6a-36d16664307e Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=760cfbc8-71e2-4365-af67-0e4d89843675 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:f5:9a:30:db:9f:c0:04:8e:73:6d:bc:58:5c: 92:a0:e4:9f:db:c9:ba:4d:dd:d3:13:99:f8:16:3e: 89:e7:3b:1e:56:93:e3:6d:60:9a:ad:a6:a0:90:eb: cc:64:ff:11:96:70:36:da:b3:34:3a:91:ce:2b:ed: 5b:7d:83:0f:e0:6a:a4:44:55:31:8a:f3:a2:c5:22: 77:7f:f3:ff:99:f3:90:30:92:45:b8:15:67:3d:83: f8:0d:74:e6:b0:6f:9c:f4:31:de:b2:e3:d2:94:82: 69:9a:51:3f:a9:5c:fa:96:86:88:3b:b8:27:5c:82: c7:84:ba:f8:c0:62:01:d8:57:2b:3f:ba:8b:b7:8e: c7:88:57:7d:dc:fa:4b:0f:f4:37:3d:ef:84:81:91: 7a:94:e1:c4:2a:1e:e2:be:1a:3b:0d:5b:a8:f3:47: 59:6d:42:fa:2c:75:62:18:34:84:4f:cd:dc:b7:5e: 94:5a:2e:25:f3:2e:3d:0d:ef:e0:24:f6:8c:fb:35: e9:32:39:ed:a4:55:d1:ac:7f:a2:1f:10:20:12:ce: 16:c3:f8:76:24:30:a3:2b:55:85:49:4b:a1:90:f9: 89:6b:8e:45:f3:2a:b4:48:d5:66:2d:31:77:93:30: 2c:14:56:77:c0:73:a0:a0:c8:51:01:95:29:39:25: 41:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:B0:4A:EE:F5:8F:5C:01:0F:CD:F7:3A:0E:16:EE:54:26:FD:D4:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/3a6a8996-9c3f-30c7-ba0a-b63734e4dd0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/a6f26d75-0d3a-4bef-8d6a-36d16664307e.crl X509v3 Authority Key Identifier: keyid:95:63:35:33:47:05:5D:59:71:3A:DA:67:E9:EB:BB:5A:F5:DC:7D:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e.cer sbgp-ipAddrBlock: critical IPv4: 128.36.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:76:5a:f9:3a:3c:b1:a0:00:f2:4d:74:26:4a:24:9c:9b:ab: 44:8b:e7:e0:9b:3e:06:4b:3c:16:b4:8d:47:38:a3:b4:39:48: cc:9d:83:9d:97:f2:1a:88:65:1b:d6:bc:f6:91:81:56:88:93: 6d:6e:67:4d:87:78:a8:0e:ff:c7:c4:92:a8:22:b1:b8:2a:0b: 86:3f:e2:4b:a7:a5:41:14:d8:8f:99:a8:0b:54:3b:7d:d5:ea: 69:6c:61:41:a5:eb:9a:83:81:40:41:0a:ac:b9:65:43:5d:6e: 44:c3:32:ff:75:1a:6b:cd:17:2f:77:4c:bd:1c:d5:13:35:be: 89:22:b6:65:ea:59:70:d9:ad:3a:f9:72:3c:88:68:76:c7:63: f5:e8:83:e0:c7:f8:ba:e6:f3:44:d9:6f:f1:2d:7b:41:7a:c6: a4:17:f6:17:e2:ed:ab:18:a8:f7:61:f3:5a:ff:36:ff:1c:ca: 75:c1:82:44:3e:57:f9:f4:92:ab:f6:d7:f8:ca:66:3a:91:96: 2b:a6:27:5f:5f:4f:2a:d7:ed:32:6a:9c:5b:e8:dc:e2:e5:bf: 8e:7c:0c:31:0c:c1:b7:66:25:9d:e8:0f:30:ec:2d:63:68:24: 52:82:fb:a1:c8:db:db:36:81:0a:a3:0d:af:8a:60:5a:a6:a3: 9b:ef:85:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1eGnzWCtszEJdoTaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTZmMjZkNzUtMGQzYS00YmVmLThkNmEtMzZkMTY2NjQz MDdlMB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk NzYwY2ZiYzgtNzFlMi00MzY1LWFmNjctMGU0ZDg5ODQzNjc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPWaMNufwASOc228WFySoOSf28m6Td3TE5n4 Fj6J5zseVpPjbWCaraagkOvMZP8RlnA22rM0OpHOK+1bfYMP4GqkRFUxivOixSJ3 f/P/mfOQMJJFuBVnPYP4DXTmsG+c9DHesuPSlIJpmlE/qVz6loaIO7gnXILHhLr4 wGIB2FcrP7qLt47HiFd93PpLD/Q3Pe+EgZF6lOHEKh7ivho7DVuo80dZbUL6LHVi GDSET83ct16UWi4l8y49De/gJPaM+zXpMjntpFXRrH+iHxAgEs4Ww/h2JDCjK1WF SUuhkPmJa45F8yq0SNVmLTF3kzAsFFZ3wHOgoMhRAZUpOSVBhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNawSu71j1wBD833Og4W7lQm/dQjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hNmYy NmQ3NS0wZDNhLTRiZWYtOGQ2YS0zNmQxNjY2NDMwN2UvM2E2YTg5OTYtOWMzZi0z MGM3LWJhMGEtYjYzNzM0ZTRkZDBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTZmMjZkNzUtMGQzYS00YmVmLThk NmEtMzZkMTY2NjQzMDdlL2E2ZjI2ZDc1LTBkM2EtNGJlZi04ZDZhLTM2ZDE2NjY0 MzA3ZS5jcmwwHwYDVR0jBBgwFoAUlWM1M0cFXVlxOtpn6eu7WvXcfSswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hNmYyNmQ3NS0wZDNhLTRiZWYtOGQ2YS0zNmQx NjY2NDMwN2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgCQEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGZ2Wvk6PLGgAPJNdCZKJJybq0SL5+CbPgZLPBa0jUc4o7Q5SMydg52X 8hqIZRvWvPaRgVaIk21uZ02HeKgO/8fEkqgisbgqC4Y/4kunpUEU2I+ZqAtUO33V 6mlsYUGl65qDgUBBCqy5ZUNdbkTDMv91GmvNFy93TL0c1RM1vokitmXqWXDZrTr5 cjyIaHbHY/Xog+DH+Lrm80TZb/Ete0F6xqQX9hfi7asYqPdh81r/Nv8cynXBgkQ+ V/n0kqv21/jKZjqRliumJ19fTyrX7TJqnFvo3OLlv458DDEMwbdmJZ3oDzDsLWNo JFKC+6HI29s2gQqjDa+KYFqmo5vvhb4= -----END CERTIFICATE-----Generated at Sat Apr 18 05:49:54 2026 by rpki-client