$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/3c900b67-1d99-32dc-857b-856cecf8fac7.roa File: 3c900b67-1d99-32dc-857b-856cecf8fac7.roa (raw, json) Hash identifier: mHacyNEJ8sHtSGw891bSIgGgiasH5M/qN1qckHWRkfw= Subject key identifier: 76:BE:7E:C8:2C:ED:0C:B8:6E:8E:29:D6:E2:95:F0:7F:C3:56:32:D7 Certificate issuer: /CN=36cdb697-d20d-47e7-9f9e-c4174dbc0bf2 Certificate serial: 010D0C9F4328584CED278A0D88F06F5658B58EC0 Authority key identifier: E0:E9:57:15:8F:45:93:B6:EF:D9:C4:AD:3E:77:EA:A6:1F:EC:EA:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/3c900b67-1d99-32dc-857b-856cecf8fac7.roa Signing time: Fri 20 Feb 2026 14:00:41 +0000 ROA not before: Fri 20 Feb 2026 14:00:41 +0000 ROA not after: Thu 21 May 2026 13:00:41 +0000 asID: 10103 IP address blocks: 216.40.68.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ed:27:8a:0d:88:f0:6f:56:58:b5:8e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36cdb697-d20d-47e7-9f9e-c4174dbc0bf2 Validity Not Before: Feb 20 14:00:41 2026 GMT Not After : May 21 13:00:41 2026 GMT Subject: CN=08333bf5-1082-492e-b531-6593c70aa2d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ef:5b:63:cb:17:de:45:6c:c4:36:58:d6:bf: 25:08:c8:4b:3e:f0:8c:1b:36:e4:24:af:e9:10:c4: 3e:ab:bb:9b:f4:3d:37:07:6c:a2:f0:57:1a:3f:8f: 7b:55:79:58:9b:2f:80:74:95:cc:b0:6c:cc:71:23: cd:a8:62:97:5f:ee:b3:cd:9d:2a:f4:52:2d:78:8e: 3b:6c:06:c5:98:f9:f0:ca:07:e1:5f:dc:88:82:49: 33:d9:f4:37:9b:d2:0a:b5:e8:6a:66:af:b8:b0:76: 9a:f3:08:34:19:ea:01:2b:8f:47:6b:13:46:79:76: ef:46:22:53:31:13:ae:2c:fe:55:ce:75:1a:b0:10: 48:69:cb:f4:99:88:83:00:8e:9d:02:fb:2b:66:42: 95:5d:b2:12:23:5a:c5:73:93:95:39:e2:0d:ca:d5: 66:ee:11:73:bd:f9:03:9b:0b:6a:28:4b:0d:3b:d2: 68:62:17:6f:26:bd:7f:d9:71:ab:6b:c7:6a:4d:5c: aa:0f:d4:42:0f:7a:19:df:2a:af:d4:c8:e2:70:78: 8b:5a:b5:cc:64:38:76:27:a5:d3:3d:22:9b:45:02: 80:46:e1:66:67:e1:f9:9e:fb:58:f7:04:c2:27:7c: 4c:a5:83:f9:6d:7c:e6:0f:1e:79:9e:19:9e:9d:62: 90:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:BE:7E:C8:2C:ED:0C:B8:6E:8E:29:D6:E2:95:F0:7F:C3:56:32:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/3c900b67-1d99-32dc-857b-856cecf8fac7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.crl X509v3 Authority Key Identifier: keyid:E0:E9:57:15:8F:45:93:B6:EF:D9:C4:AD:3E:77:EA:A6:1F:EC:EA:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.cer sbgp-ipAddrBlock: critical IPv4: 216.40.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:70:60:18:26:0e:7a:16:c6:40:1e:ff:7e:0b:42:af:f7:cc: f9:fc:4f:6a:be:fc:43:09:3a:5e:ee:b8:36:7c:f6:8d:83:ef: e4:cb:e4:26:af:f5:41:43:0e:c2:06:0b:10:c9:ed:57:52:72: 68:7f:e4:29:db:dd:6a:c5:0f:34:da:fa:d9:10:7f:53:cb:7c: c8:fc:cb:66:c5:d3:4e:27:f4:d6:d9:2c:9e:b8:d5:5a:d8:b5: 49:6b:3f:68:1a:02:b8:1d:ce:0b:bc:43:71:56:5c:a1:5e:b4: eb:71:c2:8d:f2:bc:6f:44:da:05:36:8c:aa:99:f1:ce:44:31: 63:53:34:b5:10:42:40:49:56:bb:2d:41:75:db:39:ab:01:42: a9:2c:32:0c:a4:67:6d:f1:c4:76:2f:39:f6:b6:4c:b8:ce:46: 1d:e3:20:15:f2:2b:74:e4:92:27:d5:2f:f0:6c:80:a7:a8:98: d7:8c:41:e0:57:c6:73:81:83:94:1b:93:83:96:57:b2:3d:48: 6b:59:0a:bc:d3:53:b3:1d:53:07:30:0e:52:77:78:6f:54:93: e5:67:5b:43:13:c8:80:72:0e:48:f9:bb:bc:38:88:04:6a:c9: d0:10:b9:63:96:f3:44:93:7a:43:82:54:9c:c1:34:c4:77:85: 58:40:d1:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEztJ4oNiPBvVli1jsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzZjZGI2OTctZDIwZC00N2U3LTlmOWUtYzQxNzRkYmMw YmYyMB4XDTI2MDIyMDE0MDA0MVoXDTI2MDUyMTEzMDA0MVowLzEtMCsGA1UEAxMk MDgzMzNiZjUtMTA4Mi00OTJlLWI1MzEtNjU5M2M3MGFhMmQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmO9bY8sX3kVsxDZY1r8lCMhLPvCMGzbkJK/p EMQ+q7ub9D03B2yi8FcaP497VXlYmy+AdJXMsGzMcSPNqGKXX+6zzZ0q9FIteI47 bAbFmPnwygfhX9yIgkkz2fQ3m9IKtehqZq+4sHaa8wg0GeoBK49HaxNGeXbvRiJT MROuLP5VznUasBBIacv0mYiDAI6dAvsrZkKVXbISI1rFc5OVOeINytVm7hFzvfkD mwtqKEsNO9JoYhdvJr1/2XGra8dqTVyqD9RCD3oZ3yqv1MjicHiLWrXMZDh2J6XT PSKbRQKARuFmZ+H5nvtY9wTCJ3xMpYP5bXzmDx55nhmenWKQkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHa+fsgs7Qy4bo4p1uKV8H/DVjLXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zNmNk YjY5Ny1kMjBkLTQ3ZTctOWY5ZS1jNDE3NGRiYzBiZjIvM2M5MDBiNjctMWQ5OS0z MmRjLTg1N2ItODU2Y2VjZjhmYWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMzZjZGI2OTctZDIwZC00N2U3LTlm OWUtYzQxNzRkYmMwYmYyLzM2Y2RiNjk3LWQyMGQtNDdlNy05ZjllLWM0MTc0ZGJj MGJmMi5jcmwwHwYDVR0jBBgwFoAU4OlXFY9Fk7bv2cStPnfqph/s6jUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zNmNkYjY5Ny1kMjBkLTQ3ZTctOWY5ZS1jNDE3 NGRiYzBiZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2ChEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEJwYBgmDnoWxkAe/34LQq/3zPn8T2q+/EMJOl7uuDZ89o2D7+TL5Cav 9UFDDsIGCxDJ7VdScmh/5Cnb3WrFDzTa+tkQf1PLfMj8y2bF004n9NbZLJ641VrY tUlrP2gaArgdzgu8Q3FWXKFetOtxwo3yvG9E2gU2jKqZ8c5EMWNTNLUQQkBJVrst QXXbOasBQqksMgykZ23xxHYvOfa2TLjORh3jIBXyK3TkkifVL/BsgKeomNeMQeBX xnOBg5Qbk4OWV7I9SGtZCrzTU7MdUwcwDlJ3eG9Uk+VnW0MTyIByDkj5u7w4iARq ydAQuWOW80STekOCVJzBNMR3hVhA0Qc= -----END CERTIFICATE-----Generated at Sun Mar 1 23:27:13 2026 by rpki-client