$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/0994ff44-b5e8-34eb-af1d-240a9e07d382.roa File: 0994ff44-b5e8-34eb-af1d-240a9e07d382.roa (raw, json) Hash identifier: SqSzivWx13lQXDic3Mq5Z6ysfx/dMcC96DOqIgj7gP4= Subject key identifier: 6E:EE:32:D9:38:8C:24:91:58:6A:5C:A7:35:40:46:76:66:9F:9F:73 Certificate issuer: /CN=a6f26d75-0d3a-4bef-8d6a-36d16664307e Certificate serial: 010D0C9F4328584EE0C21962EBB8972894501980 Authority key identifier: 95:63:35:33:47:05:5D:59:71:3A:DA:67:E9:EB:BB:5A:F5:DC:7D:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/0994ff44-b5e8-34eb-af1d-240a9e07d382.roa Signing time: Tue 18 Aug 2026 13:00:12 +0000 ROA not before: Tue 18 Aug 2026 13:00:12 +0000 ROA not after: Mon 16 Nov 2026 14:00:12 +0000 asID: 29 IP address blocks: 128.36.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/a6f26d75-0d3a-4bef-8d6a-36d16664307e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/a6f26d75-0d3a-4bef-8d6a-36d16664307e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e0:c2:19:62:eb:b8:97:28:94:50:19:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6f26d75-0d3a-4bef-8d6a-36d16664307e Validity Not Before: Aug 18 13:00:12 2026 GMT Not After : Nov 16 14:00:12 2026 GMT Subject: CN=ffa8c78e-e69a-4b44-9745-a9e2240e4cf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:0c:88:93:61:43:25:6f:5b:69:fa:27:a7:3d: a7:23:60:88:00:53:9a:35:91:58:d7:d2:97:eb:da: da:d4:7f:9f:97:13:e5:52:a1:17:61:21:c1:08:fa: ab:1f:d5:08:a3:a0:99:f1:66:0a:c4:6d:7a:97:32: 27:da:f6:05:19:14:37:cc:d9:d7:84:e4:ab:4c:57: 1b:b3:d5:0d:d6:69:fd:dd:27:a9:30:a3:aa:45:dc: be:c6:54:93:c4:03:3d:f1:08:67:c7:8b:93:e5:eb: 64:03:b7:78:8d:6c:92:07:b0:83:9c:b9:b5:a5:ab: 0b:00:31:15:28:e5:45:ff:28:d5:5f:5d:e0:b5:08: bc:d2:6d:60:25:ad:d6:42:3c:b6:85:21:c8:3c:43: 59:02:5c:72:b4:ae:14:c0:03:28:52:7c:03:74:41: 1c:5b:c7:11:89:a2:e0:1f:2b:c1:1e:d5:b8:9e:9d: 7b:b0:37:2d:f1:df:6e:0f:e2:dc:96:80:64:e0:2c: fe:9a:f8:98:cd:aa:e9:12:20:53:b4:3e:5f:00:bc: 81:22:d4:06:5a:d5:a6:52:2f:ec:43:e6:46:2d:fc: ce:99:31:53:a2:84:04:ca:6f:ca:d9:09:35:f5:38: 83:91:47:7f:b8:22:3c:a7:6b:32:f4:ed:f1:88:e5: 5c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:EE:32:D9:38:8C:24:91:58:6A:5C:A7:35:40:46:76:66:9F:9F:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/0994ff44-b5e8-34eb-af1d-240a9e07d382.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/a6f26d75-0d3a-4bef-8d6a-36d16664307e.crl X509v3 Authority Key Identifier: keyid:95:63:35:33:47:05:5D:59:71:3A:DA:67:E9:EB:BB:5A:F5:DC:7D:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e.cer sbgp-ipAddrBlock: critical IPv4: 128.36.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:8c:08:04:a7:cd:39:e7:ea:70:1e:07:d6:c9:3e:a3:40:20: 0b:c4:d2:7f:32:fb:40:23:a6:b2:5c:07:76:b6:d6:e5:01:c6: f1:b0:9e:36:bd:40:90:4a:96:fc:35:68:b9:0a:fc:27:7b:5e: 82:37:97:e3:75:22:e3:4b:69:ca:be:4e:b0:bf:89:6c:31:1f: 38:09:c6:e2:1b:66:c0:b0:04:95:42:52:8b:ba:28:01:da:fc: e7:4c:9b:8f:cc:01:38:b2:9a:de:e7:27:1c:08:f9:5d:78:da: be:36:3c:27:82:4e:5e:a0:21:11:7a:49:15:47:11:fc:41:e6: 44:3b:74:67:1c:43:21:5c:c8:81:bd:d4:05:d5:c8:b7:4e:64: b0:38:f4:27:27:1d:c3:86:d8:60:b6:91:f6:c0:30:e2:b3:29: 92:87:ec:44:b3:e8:e9:be:09:39:55:a0:91:17:df:89:ac:f2: d3:68:48:94:b0:0c:3f:49:ef:6f:71:f9:47:7b:1c:33:b1:2f: 99:e4:1b:fe:62:2b:69:c0:8a:07:b8:a5:7b:62:30:85:3c:d2: 61:8f:e5:d9:57:58:25:83:b2:11:cf:35:d2:de:5f:31:57:c5: cc:37:5f:89:73:31:f0:6a:67:a9:3a:76:c6:39:58:75:a2:e0: 41:9d:d0:04 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE7gwhli67iXKJRQGYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTZmMjZkNzUtMGQzYS00YmVmLThkNmEtMzZkMTY2NjQz MDdlMB4XDTI2MDgxODEzMDAxMloXDTI2MTExNjE0MDAxMlowLzEtMCsGA1UEAxMk ZmZhOGM3OGUtZTY5YS00YjQ0LTk3NDUtYTllMjI0MGU0Y2Y2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3gyIk2FDJW9bafonpz2nI2CIAFOaNZFY19KX 69ra1H+flxPlUqEXYSHBCPqrH9UIo6CZ8WYKxG16lzIn2vYFGRQ3zNnXhOSrTFcb s9UN1mn93SepMKOqRdy+xlSTxAM98Qhnx4uT5etkA7d4jWySB7CDnLm1pasLADEV KOVF/yjVX13gtQi80m1gJa3WQjy2hSHIPENZAlxytK4UwAMoUnwDdEEcW8cRiaLg HyvBHtW4np17sDct8d9uD+LcloBk4Cz+mviYzarpEiBTtD5fALyBItQGWtWmUi/s Q+ZGLfzOmTFTooQEym/K2Qk19TiDkUd/uCI8p2sy9O3xiOVcFQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFG7uMtk4jCSRWGpcpzVARnZmn59zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hNmYy NmQ3NS0wZDNhLTRiZWYtOGQ2YS0zNmQxNjY2NDMwN2UvMDk5NGZmNDQtYjVlOC0z NGViLWFmMWQtMjQwYTllMDdkMzgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTZmMjZkNzUtMGQzYS00YmVmLThk NmEtMzZkMTY2NjQzMDdlL2E2ZjI2ZDc1LTBkM2EtNGJlZi04ZDZhLTM2ZDE2NjY0 MzA3ZS5jcmwwHwYDVR0jBBgwFoAUlWM1M0cFXVlxOtpn6eu7WvXcfSswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hNmYyNmQ3NS0wZDNhLTRiZWYtOGQ2YS0zNmQx NjY2NDMwN2UuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgCQwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAqYwIBKfNOefqcB4H1sk+o0AgC8TSfzL7QCOmslwHdrbW5QHG8bCeNr1A kEqW/DVouQr8J3tegjeX43Ui40tpyr5OsL+JbDEfOAnG4htmwLAElUJSi7ooAdr8 50ybj8wBOLKa3ucnHAj5XXjavjY8J4JOXqAhEXpJFUcR/EHmRDt0ZxxDIVzIgb3U BdXIt05ksDj0Jycdw4bYYLaR9sAw4rMpkofsRLPo6b4JOVWgkRffiazy02hIlLAM P0nvb3H5R3scM7EvmeQb/mIracCKB7ile2IwhTzSYY/l2VdYJYOyEc810t5fMVfF zDdfiXMx8GpnqTp2xjlYdaLgQZ3QBA== -----END CERTIFICATE-----Generated at Sat Sep 5 00:48:28 2026 by rpki-client