$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/36b8a88b-fe04-4dc6-99a3-6622065e30cf/5c74a917-ac58-3444-9e86-e55e55b9947b.roa File: 5c74a917-ac58-3444-9e86-e55e55b9947b.roa (raw, json) Hash identifier: F9FH83jx0UREFOquhy7er1hC0MGZtnFSZWT6kl/0648= Subject key identifier: DF:47:3C:27:99:36:D5:2B:FC:28:45:CD:F1:9F:00:E4:3A:2F:F9:F9 Certificate issuer: /CN=36b8a88b-fe04-4dc6-99a3-6622065e30cf Certificate serial: 010D0C9F4328584E54C891810D46509F1D98A600 Authority key identifier: 51:E2:FE:F9:1B:B5:1F:AC:C8:A8:D1:2E:E2:81:36:5A:E0:F9:AA:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/36b8a88b-fe04-4dc6-99a3-6622065e30cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/36b8a88b-fe04-4dc6-99a3-6622065e30cf/5c74a917-ac58-3444-9e86-e55e55b9947b.roa Signing time: Mon 29 Jun 2026 09:40:32 +0000 ROA not before: Mon 29 Jun 2026 09:40:32 +0000 ROA not after: Sun 27 Sep 2026 09:40:32 +0000 asID: 14618 IP address blocks: 2620:0:b20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/36b8a88b-fe04-4dc6-99a3-6622065e30cf/36b8a88b-fe04-4dc6-99a3-6622065e30cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/36b8a88b-fe04-4dc6-99a3-6622065e30cf/36b8a88b-fe04-4dc6-99a3-6622065e30cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/36b8a88b-fe04-4dc6-99a3-6622065e30cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:54:c8:91:81:0d:46:50:9f:1d:98:a6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36b8a88b-fe04-4dc6-99a3-6622065e30cf Validity Not Before: Jun 29 09:40:32 2026 GMT Not After : Sep 27 09:40:32 2026 GMT Subject: CN=70805352-116b-40b7-a24e-e025fcad1bca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:2c:cf:cf:3c:61:85:e8:37:3b:a7:bd:67:12: 35:59:79:c3:30:f3:5c:62:26:eb:5c:dd:42:b8:f0: 20:a2:6f:36:77:8b:bd:39:d3:f3:b4:9d:d4:b1:85: 22:d6:a8:05:27:61:e0:86:e3:62:af:96:43:b3:17: e1:32:04:23:6c:76:ee:6e:21:f5:ec:7e:64:75:21: 5a:06:05:0f:c0:be:8b:48:89:af:ac:2d:2a:e7:a6: 43:be:17:78:b3:de:ab:66:d2:60:7e:7b:2a:27:86: f9:6b:de:6a:77:b5:41:af:07:56:65:7a:4a:ce:32: f9:3e:c9:55:47:c0:b9:7b:11:90:97:ce:5f:f3:fe: 02:3d:07:35:f6:c7:65:3f:00:7a:e8:40:28:0f:11: de:63:e4:9c:2f:e9:79:d5:e1:ff:80:78:d2:80:5c: 99:46:17:12:6c:78:51:25:5b:38:cb:22:4c:03:df: e5:31:62:e4:11:aa:c7:63:5d:0e:3f:75:57:20:74: 9b:c6:a0:39:89:1c:28:ee:f7:86:49:dd:91:5f:98: 7e:46:f7:c9:c6:8d:42:f8:35:24:69:e4:48:9f:f8: d9:ad:42:33:19:83:2b:8b:30:9e:8b:99:41:cf:b8: d2:80:2f:0a:ee:94:fd:07:f6:82:0f:56:86:be:30: 3f:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:47:3C:27:99:36:D5:2B:FC:28:45:CD:F1:9F:00:E4:3A:2F:F9:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/36b8a88b-fe04-4dc6-99a3-6622065e30cf/5c74a917-ac58-3444-9e86-e55e55b9947b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/36b8a88b-fe04-4dc6-99a3-6622065e30cf/36b8a88b-fe04-4dc6-99a3-6622065e30cf.crl X509v3 Authority Key Identifier: keyid:51:E2:FE:F9:1B:B5:1F:AC:C8:A8:D1:2E:E2:81:36:5A:E0:F9:AA:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/36b8a88b-fe04-4dc6-99a3-6622065e30cf.cer sbgp-ipAddrBlock: critical IPv6: 2620:0:b20::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:e0:79:08:fd:96:b2:bf:ad:7b:37:78:d5:db:4d:af:0f:a9: 4e:f9:16:4e:82:95:7b:88:46:fc:08:da:86:42:21:c9:1d:85: 3c:b3:51:dd:6e:a1:e6:dc:71:25:f8:84:d9:b6:74:18:4c:10: 28:31:f8:f1:54:a9:2d:f8:d0:a6:9c:b7:2e:02:60:1e:8c:00: 85:5a:86:cb:9f:fd:55:66:95:60:b7:43:f2:16:3a:36:86:37: 94:db:13:14:02:f8:59:18:30:a0:e7:aa:1d:63:41:9b:76:bb: 22:4b:c8:5c:10:0d:7f:0c:c6:29:4f:48:6e:db:62:be:a6:8f: bb:0e:2f:6e:2d:d0:85:0c:63:44:14:2a:84:6e:2a:b7:96:83: dd:e5:2e:4a:02:a4:49:da:af:15:b6:45:fd:a6:e8:79:76:64: fc:ed:5a:19:f5:77:d7:aa:42:6b:90:d2:37:48:62:07:4d:8d: 76:30:62:b5:5a:93:c6:fa:90:c1:83:c5:0b:46:03:fa:e6:fa: 43:04:bf:a5:d5:62:ac:b6:3e:dc:b1:5b:01:45:2b:5d:d2:c2: cf:ef:47:e5:e6:c5:14:90:e1:a1:6c:b8:46:1b:f7:9f:38:80: 5b:27:dd:5a:07:11:d0:27:09:28:27:b0:c2:fd:3c:ff:10:74: 8e:08:a7:8f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5UyJGBDUZQnx2YpgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzZiOGE4OGItZmUwNC00ZGM2LTk5YTMtNjYyMjA2NWUz MGNmMB4XDTI2MDYyOTA5NDAzMloXDTI2MDkyNzA5NDAzMlowLzEtMCsGA1UEAxMk NzA4MDUzNTItMTE2Yi00MGI3LWEyNGUtZTAyNWZjYWQxYmNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSzPzzxhheg3O6e9ZxI1WXnDMPNcYibrXN1C uPAgom82d4u9OdPztJ3UsYUi1qgFJ2HghuNir5ZDsxfhMgQjbHbubiH17H5kdSFa BgUPwL6LSImvrC0q56ZDvhd4s96rZtJgfnsqJ4b5a95qd7VBrwdWZXpKzjL5PslV R8C5exGQl85f8/4CPQc19sdlPwB66EAoDxHeY+ScL+l51eH/gHjSgFyZRhcSbHhR JVs4yyJMA9/lMWLkEarHY10OP3VXIHSbxqA5iRwo7veGSd2RX5h+RvfJxo1C+DUk aeRIn/jZrUIzGYMrizCei5lBz7jSgC8K7pT9B/aCD1aGvjA/+wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFN9HPCeZNtUr/ChFzfGfAOQ6L/n5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNmI4 YTg4Yi1mZTA0LTRkYzYtOTlhMy02NjIyMDY1ZTMwY2YvNWM3NGE5MTctYWM1OC0z NDQ0LTllODYtZTU1ZTU1Yjk5NDdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMzZiOGE4OGItZmUwNC00ZGM2LTk5 YTMtNjYyMjA2NWUzMGNmLzM2YjhhODhiLWZlMDQtNGRjNi05OWEzLTY2MjIwNjVl MzBjZi5jcmwwHwYDVR0jBBgwFoAUUeL++Ru1H6zIqNEu4oE2WuD5qiYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8zNmI4YTg4Yi1mZTA0LTRkYzYtOTlhMy02NjIy MDY1ZTMwY2YuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAAAsg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFbgeQj9lrK/rXs3eNXbTa8PqU75Fk6ClXuIRvwI2oZCIckdhTyz Ud1uoebccSX4hNm2dBhMECgx+PFUqS340Kacty4CYB6MAIVahsuf/VVmlWC3Q/IW OjaGN5TbExQC+FkYMKDnqh1jQZt2uyJLyFwQDX8MxilPSG7bYr6mj7sOL24t0IUM Y0QUKoRuKreWg93lLkoCpEnarxW2Rf2m6Hl2ZPztWhn1d9eqQmuQ0jdIYgdNjXYw YrVak8b6kMGDxQtGA/rm+kMEv6XVYqy2PtyxWwFFK13Sws/vR+XmxRSQ4aFsuEYb 9584gFsn3VoHEdAnCSgnsML9PP8QdI4Ip48= -----END CERTIFICATE-----Generated at Mon Jul 6 18:15:47 2026 by rpki-client