$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/36b8a88b-fe04-4dc6-99a3-6622065e30cf/23e162e8-2d43-3f82-bdd0-27b57943ae9f.roa File: 23e162e8-2d43-3f82-bdd0-27b57943ae9f.roa (raw, json) Hash identifier: QH2LvzEVf7D+YDamzvNmc18LNjwU4JVAdLJ+5yhsoqE= Subject key identifier: 9A:82:36:09:3C:B5:59:6B:42:EC:BC:15:15:F7:B7:9F:A0:01:4F:D4 Certificate issuer: /CN=36b8a88b-fe04-4dc6-99a3-6622065e30cf Certificate serial: 010D0C9F4328584E54C80FAD5E93DD7D90583C80 Authority key identifier: 51:E2:FE:F9:1B:B5:1F:AC:C8:A8:D1:2E:E2:81:36:5A:E0:F9:AA:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/36b8a88b-fe04-4dc6-99a3-6622065e30cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/36b8a88b-fe04-4dc6-99a3-6622065e30cf/23e162e8-2d43-3f82-bdd0-27b57943ae9f.roa Signing time: Mon 29 Jun 2026 09:39:31 +0000 ROA not before: Mon 29 Jun 2026 09:39:31 +0000 ROA not after: Sun 27 Sep 2026 09:39:31 +0000 asID: 16509 IP address blocks: 2620:0:b20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/36b8a88b-fe04-4dc6-99a3-6622065e30cf/36b8a88b-fe04-4dc6-99a3-6622065e30cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/36b8a88b-fe04-4dc6-99a3-6622065e30cf/36b8a88b-fe04-4dc6-99a3-6622065e30cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/36b8a88b-fe04-4dc6-99a3-6622065e30cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:54:c8:0f:ad:5e:93:dd:7d:90:58:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36b8a88b-fe04-4dc6-99a3-6622065e30cf Validity Not Before: Jun 29 09:39:31 2026 GMT Not After : Sep 27 09:39:31 2026 GMT Subject: CN=6c0be212-7746-483c-a3d3-e82e3decbd37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:39:9c:cf:fb:45:40:73:00:42:d0:86:84:cb: 11:b7:e3:ee:0e:8b:90:7c:62:6f:ac:25:3b:c5:72: 91:16:1a:40:86:27:9f:fa:65:95:af:c8:9f:bf:c7: ec:e2:05:eb:f2:c4:c3:fe:ed:af:e2:d7:18:64:16: f1:89:dd:1c:27:82:4b:f5:d5:b6:bd:e2:f4:e5:0e: 1f:4a:20:58:6b:5e:9d:bd:be:5c:b8:e7:aa:ff:2f: 77:8f:c9:22:e7:72:03:ac:21:e3:2e:ae:11:24:42: 2c:77:7b:2d:60:2b:0a:16:b8:3f:4f:d8:2a:49:9f: e3:05:fb:9e:f7:09:89:18:50:d6:6e:48:af:12:67: 94:e7:c2:2c:06:74:98:5d:01:09:ee:d1:e6:d2:e5: 2b:29:fd:b6:a5:46:66:a6:bb:b4:75:d3:98:97:13: 2a:14:eb:d3:ed:a2:cb:2b:c2:09:61:2d:a0:90:a4: d0:54:76:d1:4f:53:2f:5c:be:fe:2a:10:c9:47:e8: be:bf:86:c2:32:cb:c7:8b:ea:f3:d3:08:e2:43:d4: d3:cc:92:4b:1e:40:9b:28:bb:f1:9a:a7:78:b7:0f: 1a:ed:bb:96:0b:b5:6d:3c:fa:f1:1c:21:b6:25:6d: f1:be:86:53:90:ec:1b:24:35:b1:75:ab:04:ae:cf: 55:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:82:36:09:3C:B5:59:6B:42:EC:BC:15:15:F7:B7:9F:A0:01:4F:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/36b8a88b-fe04-4dc6-99a3-6622065e30cf/23e162e8-2d43-3f82-bdd0-27b57943ae9f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/36b8a88b-fe04-4dc6-99a3-6622065e30cf/36b8a88b-fe04-4dc6-99a3-6622065e30cf.crl X509v3 Authority Key Identifier: keyid:51:E2:FE:F9:1B:B5:1F:AC:C8:A8:D1:2E:E2:81:36:5A:E0:F9:AA:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/36b8a88b-fe04-4dc6-99a3-6622065e30cf.cer sbgp-ipAddrBlock: critical IPv6: 2620:0:b20::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:30:9c:b0:a7:05:1f:88:b7:a8:8e:21:15:35:d4:26:a2:51: 77:72:bb:00:30:39:08:d5:9b:f1:cd:22:e3:fd:c1:b5:b5:d7: 65:c5:85:3a:52:a2:72:e9:69:15:f9:01:92:b0:e9:8e:12:02: c9:da:51:b0:46:60:71:a1:f6:a5:9e:c8:22:4d:e2:f6:1e:cf: 6f:a8:cf:ab:db:dd:9e:1c:f2:b9:e6:8d:cb:1c:6b:e1:fb:fe: cd:a2:22:34:fb:91:a5:50:41:c6:a1:f5:cf:3b:e4:af:22:9d: 21:29:77:93:6e:f4:fb:86:16:af:d1:c7:df:7b:c8:c9:a5:46: 1e:c2:2d:0b:6a:76:4f:b2:17:67:a3:67:fe:98:7b:be:ad:0c: 22:31:20:9a:44:89:e3:c0:ac:9f:28:38:0e:7a:33:a0:01:4e: cd:be:59:15:73:e4:8a:ae:ac:d9:f7:97:ca:95:fe:3a:65:fb: 14:d4:e0:32:f5:22:31:95:ee:6b:ff:22:bb:40:98:88:a5:b6: fa:47:e0:64:3b:8c:2d:50:53:a3:2e:f8:af:69:69:7c:80:13: 77:75:36:b0:42:71:e0:cc:ad:2f:5a:a6:29:01:6c:19:a3:15: 7e:8f:7e:4f:80:8a:70:cc:54:9f:cb:60:c0:f6:7b:47:e7:52: 70:16:85:4f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5UyA+tXpPdfZBYPIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzZiOGE4OGItZmUwNC00ZGM2LTk5YTMtNjYyMjA2NWUz MGNmMB4XDTI2MDYyOTA5MzkzMVoXDTI2MDkyNzA5MzkzMVowLzEtMCsGA1UEAxMk NmMwYmUyMTItNzc0Ni00ODNjLWEzZDMtZTgyZTNkZWNiZDM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzmcz/tFQHMAQtCGhMsRt+PuDouQfGJvrCU7 xXKRFhpAhief+mWVr8ifv8fs4gXr8sTD/u2v4tcYZBbxid0cJ4JL9dW2veL05Q4f SiBYa16dvb5cuOeq/y93j8ki53IDrCHjLq4RJEIsd3stYCsKFrg/T9gqSZ/jBfue 9wmJGFDWbkivEmeU58IsBnSYXQEJ7tHm0uUrKf22pUZmpru0ddOYlxMqFOvT7aLL K8IJYS2gkKTQVHbRT1MvXL7+KhDJR+i+v4bCMsvHi+rz0wjiQ9TTzJJLHkCbKLvx mqd4tw8a7buWC7VtPPrxHCG2JW3xvoZTkOwbJDWxdasErs9VuwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJqCNgk8tVlrQuy8FRX3t5+gAU/UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNmI4 YTg4Yi1mZTA0LTRkYzYtOTlhMy02NjIyMDY1ZTMwY2YvMjNlMTYyZTgtMmQ0My0z ZjgyLWJkZDAtMjdiNTc5NDNhZTlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMzZiOGE4OGItZmUwNC00ZGM2LTk5 YTMtNjYyMjA2NWUzMGNmLzM2YjhhODhiLWZlMDQtNGRjNi05OWEzLTY2MjIwNjVl MzBjZi5jcmwwHwYDVR0jBBgwFoAUUeL++Ru1H6zIqNEu4oE2WuD5qiYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8zNmI4YTg4Yi1mZTA0LTRkYzYtOTlhMy02NjIy MDY1ZTMwY2YuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAAAsg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC8wnLCnBR+It6iOIRU11CaiUXdyuwAwOQjVm/HNIuP9wbW112XF hTpSonLpaRX5AZKw6Y4SAsnaUbBGYHGh9qWeyCJN4vYez2+oz6vb3Z4c8rnmjcsc a+H7/s2iIjT7kaVQQcah9c875K8inSEpd5Nu9PuGFq/Rx997yMmlRh7CLQtqdk+y F2ejZ/6Ye76tDCIxIJpEiePArJ8oOA56M6ABTs2+WRVz5IqurNn3l8qV/jpl+xTU 4DL1IjGV7mv/IrtAmIiltvpH4GQ7jC1QU6Mu+K9paXyAE3d1NrBCceDMrS9apikB bBmjFX6Pfk+AinDMVJ/LYMD2e0fnUnAWhU8= -----END CERTIFICATE-----Generated at Mon Jul 6 20:00:15 2026 by rpki-client