$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/66d28256-cbf5-3b31-910e-e10623aa8600.roa File: 66d28256-cbf5-3b31-910e-e10623aa8600.roa (raw, json) Hash identifier: yBsrLVg1eMnfNlPRu8LgrzdKzwnnWL4KkOJuf1QpbqE= Subject key identifier: 10:9C:4A:5E:1F:14:68:A1:59:B7:87:4A:A3:2A:27:97:32:30:68:05 Certificate issuer: /CN=36cdb697-d20d-47e7-9f9e-c4174dbc0bf2 Certificate serial: 010D0C9F4328584F2957C7A1FEA2E0A725BC1140 Authority key identifier: E0:E9:57:15:8F:45:93:B6:EF:D9:C4:AD:3E:77:EA:A6:1F:EC:EA:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/66d28256-cbf5-3b31-910e-e10623aa8600.roa Signing time: Sun 13 Sep 2026 13:00:11 +0000 ROA not before: Sun 13 Sep 2026 13:00:11 +0000 ROA not after: Sat 12 Dec 2026 14:00:11 +0000 asID: 7018 IP address blocks: 216.40.68.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:29:57:c7:a1:fe:a2:e0:a7:25:bc:11:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36cdb697-d20d-47e7-9f9e-c4174dbc0bf2 Validity Not Before: Sep 13 13:00:11 2026 GMT Not After : Dec 12 14:00:11 2026 GMT Subject: CN=e423fabd-50fe-46be-abcf-b9d06a08a482 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:89:ba:fb:a8:a9:a7:3a:fb:6d:c8:7f:cd:f8: 16:46:fd:b7:92:74:20:75:ef:39:ef:de:3b:5d:cc: 13:c6:e4:74:15:60:26:51:da:03:55:58:19:02:bb: 16:c5:e6:7d:f6:89:5b:4e:1f:48:50:ba:0e:d9:3d: b4:9c:cc:f3:3c:a7:cf:2c:f8:de:b5:11:45:a0:8e: a2:05:0a:53:49:f2:81:66:23:fc:91:d0:13:fc:b7: 4f:a4:2d:ef:fc:eb:4f:07:5b:14:b6:1d:76:a0:8d: 77:bc:59:64:9b:7e:c9:fe:f3:22:c9:a4:19:58:1a: 7a:00:ef:85:56:73:89:1d:46:3b:b1:63:a0:02:89: c9:d8:a8:00:2d:bd:22:07:21:c5:82:fc:31:ed:14: ab:ce:4e:1f:a6:ea:ea:5e:a6:9c:aa:a2:87:3f:17: b9:d3:3a:c9:92:24:d7:47:e3:5b:c1:05:0f:7c:ef: fe:1e:05:f7:4c:c8:2f:7a:61:22:22:68:f8:58:d8: c9:7d:61:5c:5e:c9:81:5d:c6:60:92:8c:d4:c9:c8: ba:0a:46:a6:12:eb:7f:58:8a:70:b3:33:1a:b8:10: fc:d0:ea:81:1f:d8:c2:4b:56:ee:b2:6a:48:5c:d6: fe:93:db:d1:4d:b5:86:a4:5e:3d:81:73:c6:77:a1: 32:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:9C:4A:5E:1F:14:68:A1:59:B7:87:4A:A3:2A:27:97:32:30:68:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/66d28256-cbf5-3b31-910e-e10623aa8600.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.crl X509v3 Authority Key Identifier: keyid:E0:E9:57:15:8F:45:93:B6:EF:D9:C4:AD:3E:77:EA:A6:1F:EC:EA:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.cer sbgp-ipAddrBlock: critical IPv4: 216.40.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:5a:d5:cb:b0:d8:51:7a:f6:b4:b6:65:d0:c0:b9:b8:24:ef: 2d:31:26:57:76:18:4e:85:33:38:0e:d1:c3:e4:da:d1:d7:de: 0c:8e:33:16:00:da:72:6c:54:d7:ad:ac:a9:4b:5c:85:6d:e8: 94:ef:c9:50:97:43:2f:17:27:5b:c5:8e:97:b3:d0:b7:15:55: ab:fa:f4:27:8b:24:b8:23:9c:14:7e:f1:58:02:06:c2:28:c7: 66:c0:da:79:a9:78:49:4c:4d:8e:f9:2c:5b:dc:45:56:e6:b9: 18:79:c4:4d:87:06:8a:1d:09:9a:a4:44:b4:84:c4:2a:c6:f4: 31:c7:0c:0e:2e:51:5c:6e:24:9e:9a:f5:2f:f6:4d:e6:07:76: a2:bf:c5:9b:59:46:44:65:a4:af:9e:6b:3b:46:62:ba:6f:98: e5:57:e0:e5:d1:ad:b1:4a:ef:69:7c:be:3a:24:77:ae:f6:da: df:86:53:95:68:3b:2b:44:5c:9a:15:30:36:24:d5:00:04:8e: a6:9c:84:3a:53:86:8e:d9:16:91:bb:23:d0:54:9f:97:9f:df: 3b:a9:68:93:f2:4f:19:dc:d2:a8:87:b0:64:53:52:f7:01:b1: 44:64:45:97:41:86:37:1e:dc:d0:0b:c2:2d:5b:6d:e0:63:22: 43:8f:ba:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8pV8eh/qLgpyW8EUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzZjZGI2OTctZDIwZC00N2U3LTlmOWUtYzQxNzRkYmMw YmYyMB4XDTI2MDkxMzEzMDAxMVoXDTI2MTIxMjE0MDAxMVowLzEtMCsGA1UEAxMk ZTQyM2ZhYmQtNTBmZS00NmJlLWFiY2YtYjlkMDZhMDhhNDgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApom6+6ippzr7bch/zfgWRv23knQgde857947 XcwTxuR0FWAmUdoDVVgZArsWxeZ99olbTh9IULoO2T20nMzzPKfPLPjetRFFoI6i BQpTSfKBZiP8kdAT/LdPpC3v/OtPB1sUth12oI13vFlkm37J/vMiyaQZWBp6AO+F VnOJHUY7sWOgAonJ2KgALb0iByHFgvwx7RSrzk4fpurqXqacqqKHPxe50zrJkiTX R+NbwQUPfO/+HgX3TMgvemEiImj4WNjJfWFcXsmBXcZgkozUyci6CkamEut/WIpw szMauBD80OqBH9jCS1busmpIXNb+k9vRTbWGpF49gXPGd6EyTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBCcSl4fFGihWbeHSqMqJ5cyMGgFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zNmNk YjY5Ny1kMjBkLTQ3ZTctOWY5ZS1jNDE3NGRiYzBiZjIvNjZkMjgyNTYtY2JmNS0z YjMxLTkxMGUtZTEwNjIzYWE4NjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMzZjZGI2OTctZDIwZC00N2U3LTlm OWUtYzQxNzRkYmMwYmYyLzM2Y2RiNjk3LWQyMGQtNDdlNy05ZjllLWM0MTc0ZGJj MGJmMi5jcmwwHwYDVR0jBBgwFoAU4OlXFY9Fk7bv2cStPnfqph/s6jUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zNmNkYjY5Ny1kMjBkLTQ3ZTctOWY5ZS1jNDE3 NGRiYzBiZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2ChEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF9a1cuw2FF69rS2ZdDAubgk7y0xJld2GE6FMzgO0cPk2tHX3gyOMxYA 2nJsVNetrKlLXIVt6JTvyVCXQy8XJ1vFjpez0LcVVav69CeLJLgjnBR+8VgCBsIo x2bA2nmpeElMTY75LFvcRVbmuRh5xE2HBoodCZqkRLSExCrG9DHHDA4uUVxuJJ6a 9S/2TeYHdqK/xZtZRkRlpK+eaztGYrpvmOVX4OXRrbFK72l8vjokd6722t+GU5Vo OytEXJoVMDYk1QAEjqachDpTho7ZFpG7I9BUn5ef3zupaJPyTxnc0qiHsGRTUvcB sURkRZdBhjce3NALwi1bbeBjIkOPujk= -----END CERTIFICATE-----Generated at Sat Sep 19 02:33:52 2026 by rpki-client