$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/3a6a8996-9c3f-30c7-ba0a-b63734e4dd0f.roa File: 3a6a8996-9c3f-30c7-ba0a-b63734e4dd0f.roa (raw, json) Hash identifier: SnyavGlj8Ka82jBV6T8WZrB8eg4Fw7oorVHjdvF2gW4= Subject key identifier: 89:7C:A4:1F:EB:3F:48:FA:20:84:C2:AC:22:4A:CC:43:5E:5C:2E:8B Certificate issuer: /CN=a6f26d75-0d3a-4bef-8d6a-36d16664307e Certificate serial: 010D0C9F4328584EE0C21BF361DD976B7D82A200 Authority key identifier: 95:63:35:33:47:05:5D:59:71:3A:DA:67:E9:EB:BB:5A:F5:DC:7D:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/3a6a8996-9c3f-30c7-ba0a-b63734e4dd0f.roa Signing time: Tue 18 Aug 2026 13:00:12 +0000 ROA not before: Tue 18 Aug 2026 13:00:12 +0000 ROA not after: Mon 16 Nov 2026 14:00:12 +0000 asID: 29 IP address blocks: 128.36.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/a6f26d75-0d3a-4bef-8d6a-36d16664307e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/a6f26d75-0d3a-4bef-8d6a-36d16664307e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e0:c2:1b:f3:61:dd:97:6b:7d:82:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6f26d75-0d3a-4bef-8d6a-36d16664307e Validity Not Before: Aug 18 13:00:12 2026 GMT Not After : Nov 16 14:00:12 2026 GMT Subject: CN=70f43ff3-9eae-4729-a192-84becf3e61dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:84:3a:56:bf:28:9a:03:14:0d:c2:3c:51:83: 4d:c7:c0:39:a1:0d:14:4e:49:e7:c5:65:a0:be:d0: 53:54:70:c0:2f:b5:61:b1:0f:28:34:44:ac:cc:39: 4b:23:8b:45:8d:fe:59:c1:3e:c7:6e:c9:c4:85:77: 9d:9f:6c:38:f3:30:e0:28:db:52:61:70:58:56:d3: e6:42:a8:2f:0c:af:e8:a3:b4:01:a5:87:0f:d9:3f: 59:c7:53:ea:9e:86:e5:54:bd:70:a5:27:e0:13:69: ed:96:27:e2:58:4e:e6:85:f1:63:46:5c:d4:a5:ba: c7:33:2a:12:7c:09:33:a3:e3:af:0a:4d:bc:9b:92: 1f:70:8e:cc:5b:e7:96:ba:14:75:fa:55:36:32:c8: 03:73:79:87:ec:85:4e:b5:d5:55:c8:03:7a:0f:91: b6:1b:7f:6f:0d:1a:c4:0f:f9:62:46:cc:35:99:dd: 3f:a0:f0:31:23:6b:ff:f4:90:e2:51:78:bd:6c:a6: c6:92:62:16:f3:bf:a8:49:fe:ec:72:70:44:7c:fd: d9:e3:eb:9a:a2:23:86:1f:b8:2e:1a:f3:ae:e3:ac: a6:c4:95:07:55:6e:f1:92:71:73:8c:39:1f:51:d0: ba:f6:bc:8b:ab:7b:8b:ac:83:02:16:d7:39:83:c8: e3:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:7C:A4:1F:EB:3F:48:FA:20:84:C2:AC:22:4A:CC:43:5E:5C:2E:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/3a6a8996-9c3f-30c7-ba0a-b63734e4dd0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/a6f26d75-0d3a-4bef-8d6a-36d16664307e.crl X509v3 Authority Key Identifier: keyid:95:63:35:33:47:05:5D:59:71:3A:DA:67:E9:EB:BB:5A:F5:DC:7D:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e.cer sbgp-ipAddrBlock: critical IPv4: 128.36.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:86:36:98:c1:c1:14:82:be:f7:bf:ba:99:8c:c7:07:d5:22: 6d:f6:42:57:88:5e:6b:52:fb:13:ef:d1:5b:d8:52:9b:28:e1: 08:0c:81:f4:f6:ce:e9:77:a8:ad:14:ef:5d:54:c4:2d:b7:b8: a4:1b:17:00:d6:f3:b6:c9:b4:f2:d0:10:f6:17:e4:ff:4d:ca: 9c:d6:bf:57:23:35:2f:21:2b:88:93:3a:9c:ca:49:bf:3f:d0: d8:57:2d:c2:8c:09:ea:37:f6:56:91:87:ee:d4:51:2a:37:cd: 7e:0a:38:2c:a3:61:70:3e:95:24:70:1b:aa:9b:46:a1:49:de: 0e:86:45:16:fb:62:f3:9d:61:f4:5f:ed:30:2a:83:cf:ff:d7: 15:9e:07:51:29:7f:95:d0:06:05:b9:39:21:68:27:be:43:27: 13:9f:43:1f:4f:a0:0f:d9:9a:58:07:da:b0:e6:ea:1b:1e:ba: 7e:3a:85:db:90:6a:44:d8:55:03:57:9a:6e:b9:a3:6f:d7:73: e2:7c:dc:7a:ae:91:ae:4a:24:c2:b7:03:21:d7:90:8a:ae:8c: 90:e8:92:ed:7c:c6:ad:38:18:b8:a2:37:ff:6a:b9:b0:6a:b0: bf:e8:c0:fd:b1:16:17:6e:b7:3c:27:fe:1f:9d:09:e5:81:f0: d4:18:f4:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7gwhvzYd2Xa32CogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTZmMjZkNzUtMGQzYS00YmVmLThkNmEtMzZkMTY2NjQz MDdlMB4XDTI2MDgxODEzMDAxMloXDTI2MTExNjE0MDAxMlowLzEtMCsGA1UEAxMk NzBmNDNmZjMtOWVhZS00NzI5LWExOTItODRiZWNmM2U2MWRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYQ6Vr8omgMUDcI8UYNNx8A5oQ0UTknnxWWg vtBTVHDAL7VhsQ8oNESszDlLI4tFjf5ZwT7HbsnEhXedn2w48zDgKNtSYXBYVtPm QqgvDK/oo7QBpYcP2T9Zx1PqnoblVL1wpSfgE2ntlifiWE7mhfFjRlzUpbrHMyoS fAkzo+OvCk28m5IfcI7MW+eWuhR1+lU2MsgDc3mH7IVOtdVVyAN6D5G2G39vDRrE D/liRsw1md0/oPAxI2v/9JDiUXi9bKbGkmIW87+oSf7scnBEfP3Z4+uaoiOGH7gu GvOu46ymxJUHVW7xknFzjDkfUdC69ryLq3uLrIMCFtc5g8jjaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIl8pB/rP0j6IITCrCJKzENeXC6LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hNmYy NmQ3NS0wZDNhLTRiZWYtOGQ2YS0zNmQxNjY2NDMwN2UvM2E2YTg5OTYtOWMzZi0z MGM3LWJhMGEtYjYzNzM0ZTRkZDBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTZmMjZkNzUtMGQzYS00YmVmLThk NmEtMzZkMTY2NjQzMDdlL2E2ZjI2ZDc1LTBkM2EtNGJlZi04ZDZhLTM2ZDE2NjY0 MzA3ZS5jcmwwHwYDVR0jBBgwFoAUlWM1M0cFXVlxOtpn6eu7WvXcfSswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hNmYyNmQ3NS0wZDNhLTRiZWYtOGQ2YS0zNmQx NjY2NDMwN2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgCQEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF2GNpjBwRSCvve/upmMxwfVIm32QleIXmtS+xPv0VvYUpso4QgMgfT2 zul3qK0U711UxC23uKQbFwDW87bJtPLQEPYX5P9NypzWv1cjNS8hK4iTOpzKSb8/ 0NhXLcKMCeo39laRh+7UUSo3zX4KOCyjYXA+lSRwG6qbRqFJ3g6GRRb7YvOdYfRf 7TAqg8//1xWeB1Epf5XQBgW5OSFoJ75DJxOfQx9PoA/ZmlgH2rDm6hseun46hduQ akTYVQNXmm65o2/Xc+J83Hquka5KJMK3AyHXkIqujJDoku18xq04GLiiN/9qubBq sL/owP2xFhdutzwn/h+dCeWB8NQY9E4= -----END CERTIFICATE-----Generated at Fri Sep 4 22:44:50 2026 by rpki-client