$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/a6e0a688-5f9c-343b-8f6c-1f88edfd36e9.roa File: a6e0a688-5f9c-343b-8f6c-1f88edfd36e9.roa (raw, json) Hash identifier: rlll9ywui3XOCd0h7xVuMOPwBohTdI5kHr6dprtA/6w= Subject key identifier: 36:14:79:C1:8D:08:CA:C8:CE:86:D5:45:87:A1:72:9F:0E:CD:94:93 Certificate issuer: /CN=36cdb697-d20d-47e7-9f9e-c4174dbc0bf2 Certificate serial: 010D0C9F4328584ECD371725A37FBDB653DB8C20 Authority key identifier: E0:E9:57:15:8F:45:93:B6:EF:D9:C4:AD:3E:77:EA:A6:1F:EC:EA:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/a6e0a688-5f9c-343b-8f6c-1f88edfd36e9.roa Signing time: Tue 11 Aug 2026 13:00:11 +0000 ROA not before: Tue 11 Aug 2026 13:00:11 +0000 ROA not after: Mon 09 Nov 2026 14:00:11 +0000 asID: 9304 IP address blocks: 216.40.68.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:cd:37:17:25:a3:7f:bd:b6:53:db:8c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36cdb697-d20d-47e7-9f9e-c4174dbc0bf2 Validity Not Before: Aug 11 13:00:11 2026 GMT Not After : Nov 9 14:00:11 2026 GMT Subject: CN=e2f76945-6d98-4300-af1c-aa80a4550821 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:0d:e1:fb:aa:c8:7b:d8:23:c5:0b:90:31:4f: e1:20:ba:50:8e:70:f4:ab:d7:71:f6:ad:9d:b0:2a: f1:33:19:66:c3:94:fc:56:8f:af:82:29:9a:c7:d8: b1:a3:c3:93:f8:4e:54:9d:10:5a:ab:9b:02:4c:76: 19:1b:41:63:45:36:f9:5b:63:98:5d:13:87:b6:fd: 44:90:6f:a7:db:22:e9:33:fb:50:fa:0c:45:73:ee: 6b:c8:90:28:2a:07:cd:f6:8f:0d:5c:ba:fe:ab:ae: d0:b6:e1:8d:9c:2c:14:09:ea:43:b9:20:17:4e:11: 57:05:6f:c8:5d:db:d2:47:e8:cb:ce:b5:d7:09:00: a4:0e:5d:16:b8:54:14:3d:a6:b3:e4:c0:98:d9:c7: c4:06:2d:51:a0:b5:be:46:e1:21:40:21:05:14:67: 3e:f7:2e:f0:6d:43:c7:2f:96:6f:e1:5a:33:08:f2: 22:60:35:82:c2:34:bc:d4:ec:63:ca:3a:25:6a:c2: ff:c4:ea:c5:13:ed:1a:3e:1a:0c:43:e5:c3:c5:5b: 7a:11:79:18:06:1d:a9:c7:da:b0:17:04:29:42:cc: 19:a9:ac:52:dc:9d:6c:29:f2:1a:1a:d3:77:ae:34: 69:53:d3:9e:08:4b:51:2c:8d:2f:07:a8:8d:ea:cc: 49:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:14:79:C1:8D:08:CA:C8:CE:86:D5:45:87:A1:72:9F:0E:CD:94:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/a6e0a688-5f9c-343b-8f6c-1f88edfd36e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.crl X509v3 Authority Key Identifier: keyid:E0:E9:57:15:8F:45:93:B6:EF:D9:C4:AD:3E:77:EA:A6:1F:EC:EA:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.cer sbgp-ipAddrBlock: critical IPv4: 216.40.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:a8:1c:40:ae:8d:7e:93:7c:3a:81:b0:c8:47:74:f3:c7:90: b4:af:c4:45:5e:7e:94:2d:02:f7:04:fd:8f:80:b2:27:b2:e4: 98:1f:bf:e7:44:ac:bd:f4:28:00:b2:eb:f1:04:c1:d0:1d:ee: f3:41:64:0a:cc:73:de:70:b1:1f:f4:10:a2:24:4b:ac:b8:9d: e0:d7:1f:b3:a0:c5:e9:50:b8:e3:d9:63:a7:6a:36:2d:0c:cb: 6f:65:8f:87:fc:3c:73:79:e3:d5:37:76:79:11:98:7a:50:b0: de:4e:4b:97:09:68:47:a9:92:97:b9:d0:8b:ef:35:57:52:05: 60:f1:0f:69:7f:34:e7:18:a3:4c:f7:6e:2c:38:a0:92:08:6d: 72:f0:b6:e5:ea:16:30:93:8d:03:38:c6:f2:4b:22:9c:fe:22: 1a:11:f2:d6:a9:84:ef:25:dd:19:5d:8b:47:0b:f7:c0:9d:97: 02:50:61:fd:bd:e9:7a:2c:0d:e4:bb:d0:bc:7e:99:df:d2:38: 0e:70:f6:e2:18:34:16:63:94:46:5e:ad:e8:5d:00:37:77:2a: f9:13:42:41:16:85:0e:b7:6f:c0:fd:0f:08:43:b6:c7:da:1e: bd:a0:7b:0a:fe:c0:94:d6:00:c2:d2:8e:8b:12:4a:4d:72:51: 95:ca:db:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7NNxclo3+9tlPbjCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzZjZGI2OTctZDIwZC00N2U3LTlmOWUtYzQxNzRkYmMw YmYyMB4XDTI2MDgxMTEzMDAxMVoXDTI2MTEwOTE0MDAxMVowLzEtMCsGA1UEAxMk ZTJmNzY5NDUtNmQ5OC00MzAwLWFmMWMtYWE4MGE0NTUwODIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjw3h+6rIe9gjxQuQMU/hILpQjnD0q9dx9q2d sCrxMxlmw5T8Vo+vgimax9ixo8OT+E5UnRBaq5sCTHYZG0FjRTb5W2OYXROHtv1E kG+n2yLpM/tQ+gxFc+5ryJAoKgfN9o8NXLr+q67QtuGNnCwUCepDuSAXThFXBW/I XdvSR+jLzrXXCQCkDl0WuFQUPaaz5MCY2cfEBi1RoLW+RuEhQCEFFGc+9y7wbUPH L5Zv4VozCPIiYDWCwjS81OxjyjolasL/xOrFE+0aPhoMQ+XDxVt6EXkYBh2px9qw FwQpQswZqaxS3J1sKfIaGtN3rjRpU9OeCEtRLI0vB6iN6sxJBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDYUecGNCMrIzobVRYehcp8OzZSTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zNmNk YjY5Ny1kMjBkLTQ3ZTctOWY5ZS1jNDE3NGRiYzBiZjIvYTZlMGE2ODgtNWY5Yy0z NDNiLThmNmMtMWY4OGVkZmQzNmU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMzZjZGI2OTctZDIwZC00N2U3LTlm OWUtYzQxNzRkYmMwYmYyLzM2Y2RiNjk3LWQyMGQtNDdlNy05ZjllLWM0MTc0ZGJj MGJmMi5jcmwwHwYDVR0jBBgwFoAU4OlXFY9Fk7bv2cStPnfqph/s6jUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zNmNkYjY5Ny1kMjBkLTQ3ZTctOWY5ZS1jNDE3 NGRiYzBiZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2ChEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEioHECujX6TfDqBsMhHdPPHkLSvxEVefpQtAvcE/Y+Asiey5Jgfv+dE rL30KACy6/EEwdAd7vNBZArMc95wsR/0EKIkS6y4neDXH7OgxelQuOPZY6dqNi0M y29lj4f8PHN549U3dnkRmHpQsN5OS5cJaEepkpe50IvvNVdSBWDxD2l/NOcYo0z3 biw4oJIIbXLwtuXqFjCTjQM4xvJLIpz+IhoR8taphO8l3Rldi0cL98CdlwJQYf29 6XosDeS70Lx+md/SOA5w9uIYNBZjlEZerehdADd3KvkTQkEWhQ63b8D9DwhDtsfa Hr2gewr+wJTWAMLSjosSSk1yUZXK2xQ= -----END CERTIFICATE-----Generated at Tue Sep 1 03:15:46 2026 by rpki-client