$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/3393adc5-01fa-3840-b10c-3a8f8595e846.roa File: 3393adc5-01fa-3840-b10c-3a8f8595e846.roa (raw, json) Hash identifier: E47NB9mD+Os8uK9XHsSBMsqZvYSuORLKcIMQbYqNcaY= Subject key identifier: 4A:8E:F7:DB:B3:23:74:46:04:2F:9D:26:F7:1F:65:D0:E0:E3:06:2F Certificate issuer: /CN=36cdb697-d20d-47e7-9f9e-c4174dbc0bf2 Certificate serial: 010D0C9F4328584D651520B0071C4F1A8B0A2700 Authority key identifier: E0:E9:57:15:8F:45:93:B6:EF:D9:C4:AD:3E:77:EA:A6:1F:EC:EA:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/3393adc5-01fa-3840-b10c-3a8f8595e846.roa Signing time: Sat 04 Apr 2026 13:00:29 +0000 ROA not before: Sat 04 Apr 2026 13:00:29 +0000 ROA not after: Fri 03 Jul 2026 13:00:29 +0000 asID: 202736 IP address blocks: 216.40.68.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:65:15:20:b0:07:1c:4f:1a:8b:0a:27:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36cdb697-d20d-47e7-9f9e-c4174dbc0bf2 Validity Not Before: Apr 4 13:00:29 2026 GMT Not After : Jul 3 13:00:29 2026 GMT Subject: CN=8640eb4f-24cd-4aeb-b1f4-819b71b616da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:39:13:89:af:a0:29:72:9b:eb:19:23:f4:ac: 8f:75:50:04:69:a6:5b:22:51:fa:34:54:28:75:e4: 23:6a:94:b2:8a:0e:72:98:df:e2:85:67:9e:ff:77: 43:15:e0:cf:0a:fc:b6:51:62:db:d1:07:05:f2:06: ef:97:5f:be:f3:52:7f:10:4c:2c:9d:8c:1e:f1:fc: e1:15:bd:2f:83:0b:a3:b7:14:84:c6:05:a3:d5:e9: f8:5b:12:55:e5:a3:2d:a4:c6:31:51:eb:6f:e7:40: df:bf:71:87:a5:3c:99:51:32:ba:c2:ef:40:07:c8: 53:3a:6a:38:4b:ff:eb:66:f1:16:80:59:96:e7:06: 2f:8b:20:93:49:14:f0:73:0f:75:7e:ab:b4:6e:5a: e6:c1:ae:25:97:52:e8:57:a1:21:e2:cc:1b:d5:ec: f3:c9:85:8c:92:9a:2c:97:b8:f1:52:f2:78:c6:4f: 4f:2d:cd:12:6a:15:61:c8:c9:06:1d:ea:67:6f:02: 31:e1:16:54:c5:12:e3:16:3e:57:f2:f2:d4:27:89: 67:17:61:f5:72:c1:81:23:28:b4:ee:30:13:3f:b3: 04:6b:5a:cb:3a:bc:92:94:e6:73:d0:f1:a1:b9:89: d1:8a:f3:b2:9a:c8:4f:e5:36:2e:33:9b:39:66:cf: e0:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:8E:F7:DB:B3:23:74:46:04:2F:9D:26:F7:1F:65:D0:E0:E3:06:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/3393adc5-01fa-3840-b10c-3a8f8595e846.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.crl X509v3 Authority Key Identifier: keyid:E0:E9:57:15:8F:45:93:B6:EF:D9:C4:AD:3E:77:EA:A6:1F:EC:EA:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.cer sbgp-ipAddrBlock: critical IPv4: 216.40.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:ba:a5:61:57:ad:2c:09:a1:d6:1a:3e:7b:f3:87:84:44:af: 50:35:3c:93:6b:11:ce:c5:60:99:97:4e:81:c5:dd:99:ac:ed: 62:36:db:bd:c5:0d:f3:f5:7a:08:c6:4f:ce:21:88:da:a8:95: 30:91:7f:c0:7e:c9:75:c7:62:db:bc:25:74:14:5a:02:ae:3f: ea:3d:9b:17:12:bb:57:d3:64:5b:d0:2c:67:56:f8:56:23:e9: 5e:8e:72:22:2d:48:d7:ab:c5:e7:94:e4:89:0a:da:3f:1f:b1: a8:70:ce:53:e3:11:48:f2:6c:82:8d:b1:62:8b:f6:4f:82:cd: bc:bc:a3:44:0e:31:8c:72:17:23:eb:f9:fa:1b:97:7c:de:36: f0:88:1e:f4:14:19:56:1e:a2:12:88:f3:f3:1b:9d:1a:e8:e9: 2f:ce:ff:2d:91:d1:d9:63:d0:9f:b2:27:5f:8b:b7:af:1d:e4: cf:cb:94:03:1b:9b:db:3a:ac:5e:5a:28:e7:54:ce:be:c8:77: 28:1c:55:7a:c3:26:08:89:4c:9e:f6:96:2a:8a:3f:6d:33:63: 70:6f:75:86:01:e2:34:34:a2:01:01:22:e6:17:96:fb:8e:60: d0:c4:ad:dd:5b:48:25:87:ae:c7:10:b1:3e:ba:2b:f9:8e:a3: 12:35:fd:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1lFSCwBxxPGosKJwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzZjZGI2OTctZDIwZC00N2U3LTlmOWUtYzQxNzRkYmMw YmYyMB4XDTI2MDQwNDEzMDAyOVoXDTI2MDcwMzEzMDAyOVowLzEtMCsGA1UEAxMk ODY0MGViNGYtMjRjZC00YWViLWIxZjQtODE5YjcxYjYxNmRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjkTia+gKXKb6xkj9KyPdVAEaaZbIlH6NFQo deQjapSyig5ymN/ihWee/3dDFeDPCvy2UWLb0QcF8gbvl1++81J/EEwsnYwe8fzh Fb0vgwujtxSExgWj1en4WxJV5aMtpMYxUetv50Dfv3GHpTyZUTK6wu9AB8hTOmo4 S//rZvEWgFmW5wYviyCTSRTwcw91fqu0blrmwa4ll1LoV6Eh4swb1ezzyYWMkpos l7jxUvJ4xk9PLc0SahVhyMkGHepnbwIx4RZUxRLjFj5X8vLUJ4lnF2H1csGBIyi0 7jATP7MEa1rLOrySlOZz0PGhuYnRivOymshP5TYuM5s5Zs/gywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEqO99uzI3RGBC+dJvcfZdDg4wYvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zNmNk YjY5Ny1kMjBkLTQ3ZTctOWY5ZS1jNDE3NGRiYzBiZjIvMzM5M2FkYzUtMDFmYS0z ODQwLWIxMGMtM2E4Zjg1OTVlODQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMzZjZGI2OTctZDIwZC00N2U3LTlm OWUtYzQxNzRkYmMwYmYyLzM2Y2RiNjk3LWQyMGQtNDdlNy05ZjllLWM0MTc0ZGJj MGJmMi5jcmwwHwYDVR0jBBgwFoAU4OlXFY9Fk7bv2cStPnfqph/s6jUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zNmNkYjY5Ny1kMjBkLTQ3ZTctOWY5ZS1jNDE3 NGRiYzBiZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2ChEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHG6pWFXrSwJodYaPnvzh4REr1A1PJNrEc7FYJmXToHF3Zms7WI2273F DfP1egjGT84hiNqolTCRf8B+yXXHYtu8JXQUWgKuP+o9mxcSu1fTZFvQLGdW+FYj 6V6OciItSNerxeeU5IkK2j8fsahwzlPjEUjybIKNsWKL9k+Czby8o0QOMYxyFyPr +fobl3zeNvCIHvQUGVYeohKI8/MbnRro6S/O/y2R0dlj0J+yJ1+Lt68d5M/LlAMb m9s6rF5aKOdUzr7IdygcVXrDJgiJTJ72liqKP20zY3BvdYYB4jQ0ogEBIuYXlvuO YNDErd1bSCWHrscQsT66K/mOoxI1/Uo= -----END CERTIFICATE-----Generated at Fri Apr 17 11:06:26 2026 by rpki-client