$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b502c27-b722-427c-af11-f9048a06a1a5/36413b25-1d6c-34fc-a218-245b7e7991ae.roa File: 36413b25-1d6c-34fc-a218-245b7e7991ae.roa (raw, json) Hash identifier: MxMXs6Dfk0x4cC8wJ58jdb1dCJivlX5724M5TEP3VJU= Subject key identifier: EC:CF:9D:86:A7:F7:9E:D5:D2:D8:9D:79:11:59:27:BA:25:D9:EB:C9 Certificate issuer: /CN=9b502c27-b722-427c-af11-f9048a06a1a5 Certificate serial: 010D0C9F4328584EF2E76AEBDEB1E894A901E480 Authority key identifier: 96:08:82:21:79:62:80:AC:80:02:9B:E4:86:F6:AB:C9:64:1A:F2:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b502c27-b722-427c-af11-f9048a06a1a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b502c27-b722-427c-af11-f9048a06a1a5/36413b25-1d6c-34fc-a218-245b7e7991ae.roa Signing time: Tue 25 Aug 2026 01:00:12 +0000 ROA not before: Tue 25 Aug 2026 01:00:12 +0000 ROA not after: Mon 23 Nov 2026 02:00:12 +0000 asID: 21699 IP address blocks: 72.21.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b502c27-b722-427c-af11-f9048a06a1a5/9b502c27-b722-427c-af11-f9048a06a1a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b502c27-b722-427c-af11-f9048a06a1a5/9b502c27-b722-427c-af11-f9048a06a1a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b502c27-b722-427c-af11-f9048a06a1a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f2:e7:6a:eb:de:b1:e8:94:a9:01:e4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b502c27-b722-427c-af11-f9048a06a1a5 Validity Not Before: Aug 25 01:00:12 2026 GMT Not After : Nov 23 02:00:12 2026 GMT Subject: CN=96f17142-becd-425a-a18a-0f7477b4432e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:31:b3:4d:e5:b8:8c:de:4a:38:c8:24:e2:d8: 46:ac:c0:70:f2:7c:e8:1f:44:10:da:30:ae:5f:8d: a9:3e:08:39:c2:46:94:e4:7d:c8:ee:0c:2f:ba:b5: d5:7e:c5:43:6b:7b:1f:32:a0:6d:70:c5:70:33:fa: bb:e5:79:f0:1b:c1:47:1b:c2:9b:aa:0b:10:ff:14: 01:98:b9:da:43:eb:38:1e:c4:cc:5e:6e:e9:04:bd: fe:50:0f:90:f7:c0:2c:1a:6c:21:ad:89:6d:26:8f: 1f:17:5c:48:a1:6e:68:f8:47:27:79:43:c2:ea:62: 6b:ee:11:dd:d8:26:d5:58:ba:f7:91:3b:65:bf:fa: 01:f1:d2:17:d6:3b:b7:3d:5b:46:b2:e4:f9:3b:c9: 98:68:00:54:e0:b9:9d:fb:5d:f7:88:07:1d:5c:db: d3:1b:df:9f:1f:fa:94:08:f7:81:d4:d0:12:e8:30: cf:6e:6a:2f:c5:3a:ef:d5:3e:60:33:5c:b2:a3:42: f2:a7:fb:43:35:c6:0e:c5:b5:11:2c:8b:d8:eb:22: fd:af:0f:65:da:08:8a:d9:e8:0b:50:79:77:ca:f1: a3:e2:5b:71:33:02:09:6a:9b:2d:92:53:00:e5:b9: 23:4d:a7:1d:2b:61:2b:80:ab:4f:ef:4c:42:bf:55: cf:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:CF:9D:86:A7:F7:9E:D5:D2:D8:9D:79:11:59:27:BA:25:D9:EB:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b502c27-b722-427c-af11-f9048a06a1a5/36413b25-1d6c-34fc-a218-245b7e7991ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b502c27-b722-427c-af11-f9048a06a1a5/9b502c27-b722-427c-af11-f9048a06a1a5.crl X509v3 Authority Key Identifier: keyid:96:08:82:21:79:62:80:AC:80:02:9B:E4:86:F6:AB:C9:64:1A:F2:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b502c27-b722-427c-af11-f9048a06a1a5.cer sbgp-ipAddrBlock: critical IPv4: 72.21.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:11:ac:c7:6f:75:8c:a7:87:ad:e8:56:f3:27:cd:56:0e:58: 3c:6a:e1:23:08:60:59:b9:fd:bb:9d:fc:c2:61:70:64:fe:c5: f6:bf:2d:71:02:f0:ce:dd:b5:bb:b0:e1:3c:64:b7:8e:8f:2f: 74:14:f0:4b:aa:5a:f1:33:98:e8:85:36:66:b5:cc:6b:59:4e: fc:03:cb:9b:2d:79:8d:4f:bb:52:64:82:01:3d:3b:78:c8:85: 92:25:34:ab:58:05:08:f1:9d:59:b5:e9:30:3a:02:93:59:cf: fb:05:98:09:1f:f3:7e:28:31:a9:80:2c:55:6b:e8:d9:da:9c: 8f:16:f0:0a:89:39:95:13:af:b8:fa:48:82:2f:ff:0f:bf:89: 13:81:b1:7d:da:0b:45:f5:fe:d6:56:b0:c1:40:29:83:2f:16: 77:19:e7:93:0c:a0:99:01:c4:2a:57:7d:87:70:2d:cb:c5:f3: 84:8c:48:d8:73:cf:39:57:8f:74:5d:71:56:88:90:f4:15:4c: 8e:b8:e9:9e:fe:05:b7:0b:1c:b2:78:04:6a:71:bd:c6:e0:32: 0c:6f:35:36:78:6d:a9:70:82:a2:b4:7f:e4:63:c7:72:87:f7: 96:c7:59:9b:69:65:e0:90:c4:e9:98:d8:7f:40:52:d3:c5:55: 5e:c6:0c:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7y52rr3rHolKkB5IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWI1MDJjMjctYjcyMi00MjdjLWFmMTEtZjkwNDhhMDZh MWE1MB4XDTI2MDgyNTAxMDAxMloXDTI2MTEyMzAyMDAxMlowLzEtMCsGA1UEAxMk OTZmMTcxNDItYmVjZC00MjVhLWExOGEtMGY3NDc3YjQ0MzJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDGzTeW4jN5KOMgk4thGrMBw8nzoH0QQ2jCu X42pPgg5wkaU5H3I7gwvurXVfsVDa3sfMqBtcMVwM/q75XnwG8FHG8KbqgsQ/xQB mLnaQ+s4HsTMXm7pBL3+UA+Q98AsGmwhrYltJo8fF1xIoW5o+EcneUPC6mJr7hHd 2CbVWLr3kTtlv/oB8dIX1ju3PVtGsuT5O8mYaABU4Lmd+133iAcdXNvTG9+fH/qU CPeB1NAS6DDPbmovxTrv1T5gM1yyo0Lyp/tDNcYOxbURLIvY6yL9rw9l2giK2egL UHl3yvGj4ltxMwIJapstklMA5bkjTacdK2ErgKtP70xCv1XPSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOzPnYan957V0tideRFZJ7ol2evJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85YjUw MmMyNy1iNzIyLTQyN2MtYWYxMS1mOTA0OGEwNmExYTUvMzY0MTNiMjUtMWQ2Yy0z NGZjLWEyMTgtMjQ1YjdlNzk5MWFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOWI1MDJjMjctYjcyMi00MjdjLWFm MTEtZjkwNDhhMDZhMWE1LzliNTAyYzI3LWI3MjItNDI3Yy1hZjExLWY5MDQ4YTA2 YTFhNS5jcmwwHwYDVR0jBBgwFoAUlgiCIXligKyAApvkhvaryWQa8lIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy85YjUwMmMyNy1iNzIyLTQyN2MtYWYxMS1mOTA0 OGEwNmExYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBUcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGURrMdvdYynh63oVvMnzVYOWDxq4SMIYFm5/bud/MJhcGT+xfa/LXEC 8M7dtbuw4Txkt46PL3QU8EuqWvEzmOiFNma1zGtZTvwDy5steY1Pu1JkggE9O3jI hZIlNKtYBQjxnVm16TA6ApNZz/sFmAkf834oMamALFVr6NnanI8W8AqJOZUTr7j6 SIIv/w+/iROBsX3aC0X1/tZWsMFAKYMvFncZ55MMoJkBxCpXfYdwLcvF84SMSNhz zzlXj3RdcVaIkPQVTI646Z7+BbcLHLJ4BGpxvcbgMgxvNTZ4balwgqK0f+Rjx3KH 95bHWZtpZeCQxOmY2H9AUtPFVV7GDK0= -----END CERTIFICATE-----Generated at Sat Sep 19 11:49:56 2026 by rpki-client