$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b502c27-b722-427c-af11-f9048a06a1a5/36413b25-1d6c-34fc-a218-245b7e7991ae.roa File: 36413b25-1d6c-34fc-a218-245b7e7991ae.roa (raw, json) Hash identifier: FfKnViXleE5LWIet+Eiwbui8JsRTEogdCDbjYlD1qhg= Subject key identifier: 88:78:6C:2B:F9:18:E9:6E:8D:C8:4F:83:CF:E3:B4:D4:B5:45:E4:D3 Certificate issuer: /CN=9b502c27-b722-427c-af11-f9048a06a1a5 Certificate serial: 010D0C9F4328584D703FE14E75564B775C986E00 Authority key identifier: 96:08:82:21:79:62:80:AC:80:02:9B:E4:86:F6:AB:C9:64:1A:F2:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b502c27-b722-427c-af11-f9048a06a1a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b502c27-b722-427c-af11-f9048a06a1a5/36413b25-1d6c-34fc-a218-245b7e7991ae.roa Signing time: Wed 08 Apr 2026 13:00:33 +0000 ROA not before: Wed 08 Apr 2026 13:00:33 +0000 ROA not after: Tue 07 Jul 2026 13:00:33 +0000 asID: 21699 IP address blocks: 72.21.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b502c27-b722-427c-af11-f9048a06a1a5/9b502c27-b722-427c-af11-f9048a06a1a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b502c27-b722-427c-af11-f9048a06a1a5/9b502c27-b722-427c-af11-f9048a06a1a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b502c27-b722-427c-af11-f9048a06a1a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:70:3f:e1:4e:75:56:4b:77:5c:98:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b502c27-b722-427c-af11-f9048a06a1a5 Validity Not Before: Apr 8 13:00:33 2026 GMT Not After : Jul 7 13:00:33 2026 GMT Subject: CN=6b39532d-bc11-4567-bea1-8b384313ebbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:f5:a3:02:04:ab:59:32:d5:a4:8b:c8:5b:bd: 6a:ce:86:75:30:bb:e0:f2:bc:a0:a6:cb:f0:85:60: 2d:dc:90:c1:59:53:9c:b6:25:c3:d5:2d:db:ea:09: f2:2f:5b:2f:b1:3b:79:f8:92:0a:15:80:ea:39:c4: 71:ba:39:9a:a4:ef:95:0f:1a:d6:a2:0f:0f:74:eb: 0f:87:d0:71:5e:b6:8b:3b:77:61:27:5e:7c:dc:ef: ba:a3:0e:e4:03:57:92:38:96:44:58:ab:3e:9f:7c: 24:5a:9c:bb:43:dc:3e:8f:b1:28:cf:d9:eb:d1:88: 18:ad:75:13:18:f4:58:c2:74:7a:e8:69:28:59:6f: 9b:05:d2:7c:0e:48:27:8f:0d:00:0a:3d:64:2c:0d: 4c:80:c3:00:88:b1:4f:66:8e:46:9e:df:6e:49:99: bc:d2:01:d1:cc:33:83:25:53:10:93:c0:32:d3:63: e5:a8:c7:56:7d:13:e9:6f:29:7d:08:c2:15:29:e0: 16:92:8d:a0:5b:ac:00:a7:80:1e:d0:43:14:39:54: 4d:09:e4:ec:d5:04:41:a1:aa:97:82:75:fd:34:96: 02:c6:bb:a1:f0:31:58:a7:62:33:39:a3:e5:91:63: 46:7d:e7:7f:25:f7:4a:fb:b7:e9:51:58:4e:0e:9c: 24:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:78:6C:2B:F9:18:E9:6E:8D:C8:4F:83:CF:E3:B4:D4:B5:45:E4:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b502c27-b722-427c-af11-f9048a06a1a5/36413b25-1d6c-34fc-a218-245b7e7991ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b502c27-b722-427c-af11-f9048a06a1a5/9b502c27-b722-427c-af11-f9048a06a1a5.crl X509v3 Authority Key Identifier: keyid:96:08:82:21:79:62:80:AC:80:02:9B:E4:86:F6:AB:C9:64:1A:F2:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b502c27-b722-427c-af11-f9048a06a1a5.cer sbgp-ipAddrBlock: critical IPv4: 72.21.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:7d:78:4d:6a:70:26:c6:d0:c2:55:32:6c:d6:4c:c6:37:05: 92:96:ed:33:9d:04:25:8e:16:c2:f7:0c:fc:fd:0e:97:9b:b8: 52:44:af:ef:58:7f:de:08:83:f5:0e:06:ef:27:8c:b9:a9:d9: dd:60:52:e8:66:fe:7f:46:87:62:0c:b8:2e:94:44:6c:4a:07: 74:dc:0c:0e:b7:37:ff:05:4a:0b:af:0a:d6:de:ea:c4:a1:60: 05:ab:c5:ab:79:ba:b8:ad:07:05:01:4c:98:18:d6:1d:0e:13: 78:78:35:fc:ae:39:c0:36:a5:fa:32:8a:3d:9a:0a:46:a9:f2: 32:59:ac:84:35:61:6a:fa:a1:1e:54:8b:cd:1b:51:90:65:aa: 63:ed:c1:cc:a7:e8:cd:74:6c:77:fe:af:3d:db:50:df:f6:d2: 86:a2:78:36:e8:8b:51:b2:6d:0e:c7:b1:ed:ca:d8:79:66:a6: c4:87:65:a2:2b:91:e9:bf:9b:37:d3:8d:c0:19:07:c6:d7:27: 5c:e7:5b:0e:1d:c8:75:dc:6c:35:1a:0f:36:ab:f1:4b:3a:53: 85:fa:57:59:34:f2:4a:87:39:ae:b5:66:09:6b:34:34:c2:01: af:4a:d9:9a:a4:2c:c3:af:ec:38:32:8c:5f:c5:65:41:65:bf: 58:17:98:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1wP+FOdVZLd1yYbgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWI1MDJjMjctYjcyMi00MjdjLWFmMTEtZjkwNDhhMDZh MWE1MB4XDTI2MDQwODEzMDAzM1oXDTI2MDcwNzEzMDAzM1owLzEtMCsGA1UEAxMk NmIzOTUzMmQtYmMxMS00NTY3LWJlYTEtOGIzODQzMTNlYmJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgfWjAgSrWTLVpIvIW71qzoZ1MLvg8rygpsvw hWAt3JDBWVOctiXD1S3b6gnyL1svsTt5+JIKFYDqOcRxujmapO+VDxrWog8PdOsP h9BxXraLO3dhJ1583O+6ow7kA1eSOJZEWKs+n3wkWpy7Q9w+j7Eoz9nr0YgYrXUT GPRYwnR66GkoWW+bBdJ8Dkgnjw0ACj1kLA1MgMMAiLFPZo5Gnt9uSZm80gHRzDOD JVMQk8Ay02PlqMdWfRPpbyl9CMIVKeAWko2gW6wAp4Ae0EMUOVRNCeTs1QRBoaqX gnX9NJYCxruh8DFYp2IzOaPlkWNGfed/JfdK+7fpUVhODpwkPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIh4bCv5GOlujchPg8/jtNS1ReTTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85YjUw MmMyNy1iNzIyLTQyN2MtYWYxMS1mOTA0OGEwNmExYTUvMzY0MTNiMjUtMWQ2Yy0z NGZjLWEyMTgtMjQ1YjdlNzk5MWFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOWI1MDJjMjctYjcyMi00MjdjLWFm MTEtZjkwNDhhMDZhMWE1LzliNTAyYzI3LWI3MjItNDI3Yy1hZjExLWY5MDQ4YTA2 YTFhNS5jcmwwHwYDVR0jBBgwFoAUlgiCIXligKyAApvkhvaryWQa8lIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy85YjUwMmMyNy1iNzIyLTQyN2MtYWYxMS1mOTA0 OGEwNmExYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBUcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACV9eE1qcCbG0MJVMmzWTMY3BZKW7TOdBCWOFsL3DPz9DpebuFJEr+9Y f94Ig/UOBu8njLmp2d1gUuhm/n9Gh2IMuC6URGxKB3TcDA63N/8FSguvCtbe6sSh YAWrxat5uritBwUBTJgY1h0OE3h4NfyuOcA2pfoyij2aCkap8jJZrIQ1YWr6oR5U i80bUZBlqmPtwcyn6M10bHf+rz3bUN/20oaieDboi1GybQ7Hse3K2HlmpsSHZaIr kem/mzfTjcAZB8bXJ1znWw4dyHXcbDUaDzar8Us6U4X6V1k08kqHOa61ZglrNDTC Aa9K2ZqkLMOv7DgyjF/FZUFlv1gXmBA= -----END CERTIFICATE-----Generated at Wed Apr 15 22:51:24 2026 by rpki-client