$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/36b8a88b-fe04-4dc6-99a3-6622065e30cf/5c74a917-ac58-3444-9e86-e55e55b9947b.roa File: 5c74a917-ac58-3444-9e86-e55e55b9947b.roa (raw, json) Hash identifier: Jnbn/YrksdJmhKIWWbWgkAvHADgXup/XuBHc5/wKrJM= Subject key identifier: 90:36:3E:CE:7D:BF:4E:80:BF:94:65:D5:08:74:32:F3:99:70:CF:2C Certificate issuer: /CN=36b8a88b-fe04-4dc6-99a3-6622065e30cf Certificate serial: 010D0C9F4328584EF717BAAD113C89CBE86FF940 Authority key identifier: 51:E2:FE:F9:1B:B5:1F:AC:C8:A8:D1:2E:E2:81:36:5A:E0:F9:AA:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/36b8a88b-fe04-4dc6-99a3-6622065e30cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/36b8a88b-fe04-4dc6-99a3-6622065e30cf/5c74a917-ac58-3444-9e86-e55e55b9947b.roa Signing time: Wed 26 Aug 2026 13:00:12 +0000 ROA not before: Wed 26 Aug 2026 13:00:12 +0000 ROA not after: Tue 24 Nov 2026 14:00:12 +0000 asID: 14618 IP address blocks: 2620:0:b20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/36b8a88b-fe04-4dc6-99a3-6622065e30cf/36b8a88b-fe04-4dc6-99a3-6622065e30cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/36b8a88b-fe04-4dc6-99a3-6622065e30cf/36b8a88b-fe04-4dc6-99a3-6622065e30cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/36b8a88b-fe04-4dc6-99a3-6622065e30cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f7:17:ba:ad:11:3c:89:cb:e8:6f:f9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36b8a88b-fe04-4dc6-99a3-6622065e30cf Validity Not Before: Aug 26 13:00:12 2026 GMT Not After : Nov 24 14:00:12 2026 GMT Subject: CN=22fe71c3-9f34-45db-8292-26d15be128e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:45:60:9b:95:97:e7:e6:6a:f3:ee:a5:f5:22: c9:30:b2:5e:43:82:73:ce:53:63:37:8a:6c:9e:d2: de:36:fd:d3:da:28:7e:c2:79:06:16:d7:32:98:ec: 7f:44:f8:8c:9d:bb:e8:98:0f:8a:9b:a5:98:bc:66: bb:14:3e:b6:0e:62:6d:58:46:33:be:45:41:77:c0: 5c:1c:79:16:56:02:c7:d2:c2:50:c8:34:fd:18:6a: d9:f7:d3:09:d1:e4:23:c2:5c:9d:be:ca:c0:23:df: fb:f0:a9:6a:95:a9:4b:87:c0:6e:d9:d4:f9:33:59: fd:ad:52:85:f2:55:9e:ca:de:ff:79:39:af:4d:e7: 67:c7:15:83:43:94:b8:2c:7d:be:45:8d:86:f9:e7: e4:1e:74:f5:46:0a:ba:ba:06:dd:c3:f8:77:2f:70: b2:f7:dd:32:4a:3c:5d:41:ea:b7:e0:e8:2c:95:25: 58:a5:41:17:93:1e:50:79:67:e3:56:ef:cc:30:de: 84:be:a1:a8:2a:ec:27:c9:97:e5:4d:7a:e9:c7:f2: cd:7e:0c:72:e0:e5:e2:4d:4e:79:f3:af:f5:f4:9e: c1:b8:a4:79:47:13:13:64:82:99:35:8b:7c:6b:3a: 00:22:91:47:f4:20:e2:b3:c1:9e:66:52:ca:74:d2: 6b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:36:3E:CE:7D:BF:4E:80:BF:94:65:D5:08:74:32:F3:99:70:CF:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/36b8a88b-fe04-4dc6-99a3-6622065e30cf/5c74a917-ac58-3444-9e86-e55e55b9947b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/36b8a88b-fe04-4dc6-99a3-6622065e30cf/36b8a88b-fe04-4dc6-99a3-6622065e30cf.crl X509v3 Authority Key Identifier: keyid:51:E2:FE:F9:1B:B5:1F:AC:C8:A8:D1:2E:E2:81:36:5A:E0:F9:AA:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/36b8a88b-fe04-4dc6-99a3-6622065e30cf.cer sbgp-ipAddrBlock: critical IPv6: 2620:0:b20::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:f5:55:94:fd:40:45:18:dd:47:1e:41:43:c4:0d:37:0f:98: e7:d2:8a:cd:9b:a9:04:2b:34:c9:43:82:f7:55:44:21:4d:06: 8f:a3:b2:58:34:1b:7a:fc:0e:0e:6c:09:fe:3d:47:07:2f:c7: b8:3c:b5:b0:4f:e9:e3:72:22:51:9e:31:54:e7:3e:7e:2c:8c: e1:2d:84:d5:63:45:03:9c:07:de:32:15:2a:f7:2f:6a:25:fd: fb:bb:60:e5:13:70:99:9b:ba:fb:08:6c:21:e4:76:fd:99:32: 89:4d:6c:c4:43:39:48:1d:5b:1a:a3:1e:61:88:78:ee:66:31: 72:6e:e3:f6:31:99:bb:b4:5a:78:a1:bc:d5:5d:25:a5:d9:e2: 73:58:c2:09:6a:d7:2e:5c:b1:27:75:ab:d0:f8:f2:ef:28:b5: 9b:55:61:81:35:d0:ca:8f:59:52:3a:31:71:b9:c8:ef:7f:13: 83:d2:bf:8b:ce:3d:8e:58:4d:12:f9:35:c0:60:4b:a1:da:0b: c9:42:a5:d7:01:35:a1:da:c9:ee:7d:ff:f1:83:47:c8:a0:9f: 53:d8:32:cb:ab:35:aa:9f:f5:3e:4d:39:30:47:6d:d0:47:dc: fd:68:38:bc:0c:a8:1b:b5:09:f4:20:ba:e3:30:24:c3:11:5d: 5a:cc:0a:70 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE73F7qtETyJy+hv+UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzZiOGE4OGItZmUwNC00ZGM2LTk5YTMtNjYyMjA2NWUz MGNmMB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk MjJmZTcxYzMtOWYzNC00NWRiLTgyOTItMjZkMTViZTEyOGU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskVgm5WX5+Zq8+6l9SLJMLJeQ4JzzlNjN4ps ntLeNv3T2ih+wnkGFtcymOx/RPiMnbvomA+Km6WYvGa7FD62DmJtWEYzvkVBd8Bc HHkWVgLH0sJQyDT9GGrZ99MJ0eQjwlydvsrAI9/78KlqlalLh8Bu2dT5M1n9rVKF 8lWeyt7/eTmvTednxxWDQ5S4LH2+RY2G+efkHnT1Rgq6ugbdw/h3L3Cy990ySjxd Qeq34OgslSVYpUEXkx5QeWfjVu/MMN6EvqGoKuwnyZflTXrpx/LNfgxy4OXiTU55 86/19J7BuKR5RxMTZIKZNYt8azoAIpFH9CDis8GeZlLKdNJrZwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJA2Ps59v06Av5Rl1Qh0MvOZcM8sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNmI4 YTg4Yi1mZTA0LTRkYzYtOTlhMy02NjIyMDY1ZTMwY2YvNWM3NGE5MTctYWM1OC0z NDQ0LTllODYtZTU1ZTU1Yjk5NDdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMzZiOGE4OGItZmUwNC00ZGM2LTk5 YTMtNjYyMjA2NWUzMGNmLzM2YjhhODhiLWZlMDQtNGRjNi05OWEzLTY2MjIwNjVl MzBjZi5jcmwwHwYDVR0jBBgwFoAUUeL++Ru1H6zIqNEu4oE2WuD5qiYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8zNmI4YTg4Yi1mZTA0LTRkYzYtOTlhMy02NjIy MDY1ZTMwY2YuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAAAsg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGz1VZT9QEUY3UceQUPEDTcPmOfSis2bqQQrNMlDgvdVRCFNBo+j slg0G3r8Dg5sCf49Rwcvx7g8tbBP6eNyIlGeMVTnPn4sjOEthNVjRQOcB94yFSr3 L2ol/fu7YOUTcJmbuvsIbCHkdv2ZMolNbMRDOUgdWxqjHmGIeO5mMXJu4/Yxmbu0 WnihvNVdJaXZ4nNYwglq1y5csSd1q9D48u8otZtVYYE10MqPWVI6MXG5yO9/E4PS v4vOPY5YTRL5NcBgS6HaC8lCpdcBNaHaye59//GDR8ign1PYMsurNaqf9T5NOTBH bdBH3P1oOLwMqBu1CfQguuMwJMMRXVrMCnA= -----END CERTIFICATE-----Generated at Thu Sep 24 23:47:12 2026 by rpki-client