$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/0994ff44-b5e8-34eb-af1d-240a9e07d382.roa File: 0994ff44-b5e8-34eb-af1d-240a9e07d382.roa (raw, json) Hash identifier: DYFNnHYsAu8Hit7pAp9PoVSOU2iyrsyex0ZkMjpaH9w= Subject key identifier: 84:BD:0C:67:55:64:4D:EA:A1:B2:74:4F:A0:74:D2:17:95:9F:F8:F0 Certificate issuer: /CN=a6f26d75-0d3a-4bef-8d6a-36d16664307e Certificate serial: 010D0C9F4328584F82ADCC4F3E00DBEADD2556C0 Authority key identifier: 95:63:35:33:47:05:5D:59:71:3A:DA:67:E9:EB:BB:5A:F5:DC:7D:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/0994ff44-b5e8-34eb-af1d-240a9e07d382.roa Signing time: Thu 15 Oct 2026 13:00:13 +0000 ROA not before: Thu 15 Oct 2026 13:00:13 +0000 ROA not after: Wed 13 Jan 2027 14:00:13 +0000 asID: 29 IP address blocks: 128.36.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/a6f26d75-0d3a-4bef-8d6a-36d16664307e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/a6f26d75-0d3a-4bef-8d6a-36d16664307e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 23 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:82:ad:cc:4f:3e:00:db:ea:dd:25:56:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6f26d75-0d3a-4bef-8d6a-36d16664307e Validity Not Before: Oct 15 13:00:13 2026 GMT Not After : Jan 13 14:00:13 2027 GMT Subject: CN=7de170d2-78bc-4c9f-82db-f083a68d249c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:31:9a:34:c8:e8:92:6b:6a:9b:b2:3b:91:ce: b3:a8:79:79:91:4e:33:44:30:e7:52:6f:9d:de:c3: 2a:88:fa:f0:da:f5:e6:02:db:16:33:3b:0c:ad:bd: 44:1e:8f:06:c8:e8:06:d5:c6:57:b2:91:73:3d:a7: fb:57:11:2d:d1:a7:31:59:67:0a:2b:13:42:ec:51: fe:f9:66:b8:f7:0d:d6:fd:3f:87:b5:df:03:46:99: 7d:ea:16:70:bb:e2:2e:49:61:3e:f9:3b:1d:55:23: 28:3c:56:22:fa:88:d9:f0:3b:cc:ab:5b:b0:c7:49: c2:f5:25:68:1d:61:d8:d4:6b:1d:59:32:8f:af:58: 3e:5d:88:29:a6:6f:a5:ec:47:fe:a8:36:e3:17:c9: 78:0e:e6:13:53:76:db:92:12:5e:93:9d:02:a5:b8: bf:7d:f2:69:83:1e:14:af:4a:b9:bd:43:92:98:a5: 67:d3:7e:4c:b5:d1:af:27:89:07:dc:ee:13:79:3d: 66:a4:5e:1d:26:7d:21:ef:3a:36:6d:45:44:74:6a: 3a:42:87:c8:28:15:55:9c:e4:b6:01:5c:51:22:bd: ac:6d:0a:2b:e2:be:ee:bc:79:7d:57:ef:b0:27:91: 19:3b:30:2c:ba:c8:98:ab:70:3e:e3:e7:92:49:e7: 2c:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:BD:0C:67:55:64:4D:EA:A1:B2:74:4F:A0:74:D2:17:95:9F:F8:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/0994ff44-b5e8-34eb-af1d-240a9e07d382.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/a6f26d75-0d3a-4bef-8d6a-36d16664307e.crl X509v3 Authority Key Identifier: keyid:95:63:35:33:47:05:5D:59:71:3A:DA:67:E9:EB:BB:5A:F5:DC:7D:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e.cer sbgp-ipAddrBlock: critical IPv4: 128.36.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:d8:4f:31:b3:88:9c:28:ca:31:35:11:78:33:11:70:61:6b: b3:c3:2f:ca:40:8e:00:e2:49:b5:3b:26:f6:7c:ce:b0:34:fe: 22:5e:7b:f5:f7:cb:9d:3a:8e:94:35:4c:b7:64:3b:1e:d0:78: dc:0f:49:01:3b:c9:76:3e:d0:a6:5b:b9:9e:9f:39:5e:44:90: 4a:a6:bf:0e:3e:ee:dc:77:bd:67:04:dd:ab:89:cd:62:26:79: 87:f0:3b:48:0f:00:85:79:00:98:bc:41:e9:77:43:e5:26:6d: d8:68:f0:b2:20:5b:ad:36:a5:7e:12:92:59:90:22:77:22:4f: 86:eb:b3:29:f1:8b:4e:f9:f2:11:ab:07:b3:2f:37:89:51:ce: fa:8e:b1:0f:7b:2f:7c:1f:d0:64:98:d5:e5:b5:64:d8:c3:15: 6c:62:0e:ed:99:a7:ba:5d:05:11:3b:dc:84:1c:41:b4:6c:02: 4f:f0:da:f3:5a:7f:a1:54:b9:2a:5e:83:6f:a9:8a:98:7f:43: 84:ee:7f:e7:5b:85:f2:df:e1:c2:38:73:c9:c6:85:88:37:cf: b7:f5:ed:bb:3d:d0:a5:49:ab:8e:71:64:6b:db:a3:a6:64:56: 1b:86:5a:db:12:57:79:d7:ee:0e:d1:50:ac:6a:73:b9:1a:03: 88:ce:6b:cd -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE+CrcxPPgDb6t0lVsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTZmMjZkNzUtMGQzYS00YmVmLThkNmEtMzZkMTY2NjQz MDdlMB4XDTI2MTAxNTEzMDAxM1oXDTI3MDExMzE0MDAxM1owLzEtMCsGA1UEAxMk N2RlMTcwZDItNzhiYy00YzlmLTgyZGItZjA4M2E2OGQyNDljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTGaNMjokmtqm7I7kc6zqHl5kU4zRDDnUm+d 3sMqiPrw2vXmAtsWMzsMrb1EHo8GyOgG1cZXspFzPaf7VxEt0acxWWcKKxNC7FH+ +Wa49w3W/T+Htd8DRpl96hZwu+IuSWE++TsdVSMoPFYi+ojZ8DvMq1uwx0nC9SVo HWHY1GsdWTKPr1g+XYgppm+l7Ef+qDbjF8l4DuYTU3bbkhJek50Cpbi/ffJpgx4U r0q5vUOSmKVn035MtdGvJ4kH3O4TeT1mpF4dJn0h7zo2bUVEdGo6QofIKBVVnOS2 AVxRIr2sbQor4r7uvHl9V++wJ5EZOzAsusiYq3A+4+eSSecskQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFIS9DGdVZE3qobJ0T6B00heVn/jwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hNmYy NmQ3NS0wZDNhLTRiZWYtOGQ2YS0zNmQxNjY2NDMwN2UvMDk5NGZmNDQtYjVlOC0z NGViLWFmMWQtMjQwYTllMDdkMzgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTZmMjZkNzUtMGQzYS00YmVmLThk NmEtMzZkMTY2NjQzMDdlL2E2ZjI2ZDc1LTBkM2EtNGJlZi04ZDZhLTM2ZDE2NjY0 MzA3ZS5jcmwwHwYDVR0jBBgwFoAUlWM1M0cFXVlxOtpn6eu7WvXcfSswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hNmYyNmQ3NS0wZDNhLTRiZWYtOGQ2YS0zNmQx NjY2NDMwN2UuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgCQwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEABthPMbOInCjKMTUReDMRcGFrs8MvykCOAOJJtTsm9nzOsDT+Il579ffL nTqOlDVMt2Q7HtB43A9JATvJdj7Qplu5np85XkSQSqa/Dj7u3He9ZwTdq4nNYiZ5 h/A7SA8AhXkAmLxB6XdD5SZt2GjwsiBbrTalfhKSWZAidyJPhuuzKfGLTvnyEasH sy83iVHO+o6xD3svfB/QZJjV5bVk2MMVbGIO7Zmnul0FETvchBxBtGwCT/Da81p/ oVS5Kl6Db6mKmH9DhO5/51uF8t/hwjhzycaFiDfPt/Xtuz3QpUmrjnFka9ujpmRW G4Za2xJXedfuDtFQrGpzuRoDiM5rzQ== -----END CERTIFICATE-----Generated at Thu Oct 22 08:34:28 2026 by rpki-client