$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/3a6a8996-9c3f-30c7-ba0a-b63734e4dd0f.roa File: 3a6a8996-9c3f-30c7-ba0a-b63734e4dd0f.roa (raw, json) Hash identifier: N8D/9rpMSoeZLJ5V/RgPU3i43iw1djP/6ayRblB9/Zg= Subject key identifier: 06:58:6B:84:AD:43:2F:0F:75:3A:70:39:B7:51:07:99:2F:E4:A5:AC Certificate issuer: /CN=a6f26d75-0d3a-4bef-8d6a-36d16664307e Certificate serial: 010D0C9F4328584B9E07CA721C77D76D2AADB480 Authority key identifier: 95:63:35:33:47:05:5D:59:71:3A:DA:67:E9:EB:BB:5A:F5:DC:7D:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/3a6a8996-9c3f-30c7-ba0a-b63734e4dd0f.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 29 IP address blocks: 128.36.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/a6f26d75-0d3a-4bef-8d6a-36d16664307e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/a6f26d75-0d3a-4bef-8d6a-36d16664307e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:ca:72:1c:77:d7:6d:2a:ad:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6f26d75-0d3a-4bef-8d6a-36d16664307e Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=ffd27c16-01a9-4c7b-9b2f-b77b50947cbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:2e:ff:20:fe:be:7a:bd:99:82:99:cc:8e:4a: 8d:31:75:f9:ee:4c:fb:ca:f1:04:78:a8:65:d6:6e: 9d:22:a8:67:72:da:de:af:a0:fe:4d:65:cb:6a:87: 0e:ed:95:ad:22:d9:db:56:b5:92:47:a6:9e:a3:d0: 7a:a5:53:ce:37:5e:4a:aa:00:7b:1f:8f:3e:f6:4b: 1a:d2:40:2b:31:08:ce:7b:a4:cd:f2:bb:ee:31:92: ac:97:3b:59:28:16:21:8c:67:d3:d7:59:81:d5:bc: ea:bd:ce:9d:2b:7b:8c:52:84:76:5e:47:b6:d6:c0: bc:6a:34:4c:56:1f:31:ed:eb:cf:4a:8f:97:f3:48: b1:80:00:67:f8:1d:ee:c2:05:00:38:4c:31:89:07: b1:ed:3a:43:b0:75:9b:8d:05:1c:eb:36:af:ee:2c: 5b:6f:69:9e:8c:91:99:c3:81:ec:3d:44:6e:9f:c3: 2a:e6:31:00:f1:25:f6:96:c5:dd:3b:2b:a5:31:4d: 35:4e:5f:be:91:7b:9a:03:60:4c:34:0d:38:a9:98: 0e:f5:9d:1d:a9:20:b8:1d:8e:21:b9:69:39:3f:d0: d1:b7:88:26:cd:fc:eb:13:0c:cd:a0:92:92:15:fc: 17:8c:61:a6:bd:ec:8a:42:4f:5c:2f:fd:5c:e1:40: 56:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:58:6B:84:AD:43:2F:0F:75:3A:70:39:B7:51:07:99:2F:E4:A5:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/3a6a8996-9c3f-30c7-ba0a-b63734e4dd0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/a6f26d75-0d3a-4bef-8d6a-36d16664307e.crl X509v3 Authority Key Identifier: keyid:95:63:35:33:47:05:5D:59:71:3A:DA:67:E9:EB:BB:5A:F5:DC:7D:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e.cer sbgp-ipAddrBlock: critical IPv4: 128.36.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:dd:9a:da:f5:f1:00:07:00:16:5f:8c:15:30:ab:8e:29:7d: bc:5f:6e:fb:34:d7:bc:b1:d9:57:72:00:9b:f9:0c:4e:17:0d: c6:f2:4f:ef:a3:a9:a1:52:c8:34:18:f8:24:0c:d6:9b:14:6d: 26:c7:2c:3c:b3:60:4f:a8:bf:4b:21:d7:3f:d9:83:12:bf:0c: 93:e1:1e:05:16:6c:26:78:7d:16:33:71:d2:73:f1:ac:85:c3: d9:71:c9:99:32:a7:01:c9:65:a0:80:ca:7a:4d:7e:76:d6:6b: f7:ff:13:a5:3e:05:62:75:d3:f5:08:6a:c0:20:23:b7:66:88: 6b:7a:f8:97:3e:70:db:b1:de:3b:58:e3:7c:c3:e2:19:a1:ff: 70:d9:7a:47:a6:b9:b8:75:52:35:ad:d8:9b:cb:a3:a7:b0:19: eb:6b:a4:e7:f2:54:1d:48:bd:e8:f6:fc:d0:93:c8:5e:3e:9d: be:b9:b1:a1:e0:fb:3d:9e:23:75:92:79:1a:5d:5e:06:61:45: fc:0d:8a:87:44:31:2a:b6:7b:bc:f6:b9:41:27:d9:73:51:a5: 17:2d:3c:8d:ab:1f:7e:d3:ae:88:07:a9:f5:fd:8d:e7:71:45: a7:1b:15:9a:43:2a:fb:08:79:4e:fa:44:9e:22:b8:03:f5:c4: a5:a9:a3:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB8pyHHfXbSqttIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTZmMjZkNzUtMGQzYS00YmVmLThkNmEtMzZkMTY2NjQz MDdlMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk ZmZkMjdjMTYtMDFhOS00YzdiLTliMmYtYjc3YjUwOTQ3Y2JlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAki7/IP6+er2ZgpnMjkqNMXX57kz7yvEEeKhl 1m6dIqhnctrer6D+TWXLaocO7ZWtItnbVrWSR6aeo9B6pVPON15KqgB7H48+9ksa 0kArMQjOe6TN8rvuMZKslztZKBYhjGfT11mB1bzqvc6dK3uMUoR2Xke21sC8ajRM Vh8x7evPSo+X80ixgABn+B3uwgUAOEwxiQex7TpDsHWbjQUc6zav7ixbb2mejJGZ w4HsPURun8Mq5jEA8SX2lsXdOyulMU01Tl++kXuaA2BMNA04qZgO9Z0dqSC4HY4h uWk5P9DRt4gmzfzrEwzNoJKSFfwXjGGmveyKQk9cL/1c4UBWNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAZYa4StQy8PdTpwObdRB5kv5KWsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hNmYy NmQ3NS0wZDNhLTRiZWYtOGQ2YS0zNmQxNjY2NDMwN2UvM2E2YTg5OTYtOWMzZi0z MGM3LWJhMGEtYjYzNzM0ZTRkZDBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTZmMjZkNzUtMGQzYS00YmVmLThk NmEtMzZkMTY2NjQzMDdlL2E2ZjI2ZDc1LTBkM2EtNGJlZi04ZDZhLTM2ZDE2NjY0 MzA3ZS5jcmwwHwYDVR0jBBgwFoAUlWM1M0cFXVlxOtpn6eu7WvXcfSswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hNmYyNmQ3NS0wZDNhLTRiZWYtOGQ2YS0zNmQx NjY2NDMwN2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgCQEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAILdmtr18QAHABZfjBUwq44pfbxfbvs017yx2VdyAJv5DE4XDcbyT++j qaFSyDQY+CQM1psUbSbHLDyzYE+ov0sh1z/ZgxK/DJPhHgUWbCZ4fRYzcdJz8ayF w9lxyZkypwHJZaCAynpNfnbWa/f/E6U+BWJ10/UIasAgI7dmiGt6+Jc+cNux3jtY 43zD4hmh/3DZekemubh1UjWt2JvLo6ewGetrpOfyVB1Ivej2/NCTyF4+nb65saHg +z2eI3WSeRpdXgZhRfwNiodEMSq2e7z2uUEn2XNRpRctPI2rH37TrogHqfX9jedx RacbFZpDKvsIeU76RJ4iuAP1xKWpoz8= -----END CERTIFICATE-----Generated at Wed Nov 5 02:52:18 2025 by rpki-client