$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414cb704-0d20-4248-bc5a-2b33ce66329d/36f08754-6d7e-3d01-9dbb-aa438925ebae.roa File: 36f08754-6d7e-3d01-9dbb-aa438925ebae.roa (raw, json) Hash identifier: +wsDQhwBT1wpHHVC93c54IVUzj9aJv69cP/emszWe5w= Subject key identifier: F7:ED:B5:1E:B6:56:C2:8E:52:21:04:8B:52:90:5E:DE:7C:55:00:C1 Certificate issuer: /CN=414cb704-0d20-4248-bc5a-2b33ce66329d Certificate serial: 010D0C9F4328584D1B1A046AD09D40016025C140 Authority key identifier: 05:D3:B2:0E:01:77:B3:F0:76:0F:60:53:A5:55:70:7E:68:70:2F:43 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414cb704-0d20-4248-bc5a-2b33ce66329d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414cb704-0d20-4248-bc5a-2b33ce66329d/36f08754-6d7e-3d01-9dbb-aa438925ebae.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 32181 IP address blocks: 2607:adc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414cb704-0d20-4248-bc5a-2b33ce66329d/414cb704-0d20-4248-bc5a-2b33ce66329d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414cb704-0d20-4248-bc5a-2b33ce66329d/414cb704-0d20-4248-bc5a-2b33ce66329d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414cb704-0d20-4248-bc5a-2b33ce66329d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:1a:04:6a:d0:9d:40:01:60:25:c1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=414cb704-0d20-4248-bc5a-2b33ce66329d Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=3a9bd850-7f7e-4b74-90e2-69754d54fece Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:20:a8:dd:5c:5a:26:98:e4:48:fb:c4:83:5d: ef:14:8b:bc:da:ec:8b:75:aa:73:73:16:44:24:2e: f9:c7:fd:1f:32:9f:10:79:3f:c6:7c:b7:e2:ec:ba: 8d:b1:63:ca:17:37:92:bb:3b:31:3e:3f:54:43:7a: b2:be:5c:79:3d:a3:4f:2a:9c:cf:b7:77:e0:31:16: 39:52:d8:0d:a7:1f:62:4a:e0:a3:54:01:86:d3:71: 36:60:b1:a6:b4:74:31:15:52:73:30:03:34:16:df: fa:bd:34:d2:1d:24:5c:20:be:f1:41:41:53:25:59: d2:76:48:cb:7d:2f:4d:09:f3:0b:14:cf:0e:cb:69: bd:f1:d0:5a:4d:00:a1:d8:d3:d6:4e:6d:a5:04:50: 0e:f7:8d:21:c5:96:89:9c:35:af:00:a4:eb:73:0f: bd:68:52:5c:7e:ed:fb:f0:dd:c1:68:e7:b4:96:95: 53:4b:a8:5b:39:c3:82:ab:a2:cc:bb:59:36:6d:65: d0:ae:33:3c:4d:7c:a9:2e:16:7f:b7:7f:c2:6b:2f: 82:eb:39:e4:e7:52:97:aa:8a:b6:cc:2a:cf:9a:75: 2d:32:73:72:4b:75:9f:7e:4f:bd:4c:6a:f7:1b:34: ce:a2:45:5e:90:1e:22:35:81:d7:31:86:34:be:6a: 37:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:ED:B5:1E:B6:56:C2:8E:52:21:04:8B:52:90:5E:DE:7C:55:00:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414cb704-0d20-4248-bc5a-2b33ce66329d/36f08754-6d7e-3d01-9dbb-aa438925ebae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414cb704-0d20-4248-bc5a-2b33ce66329d/414cb704-0d20-4248-bc5a-2b33ce66329d.crl X509v3 Authority Key Identifier: keyid:05:D3:B2:0E:01:77:B3:F0:76:0F:60:53:A5:55:70:7E:68:70:2F:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414cb704-0d20-4248-bc5a-2b33ce66329d.cer sbgp-ipAddrBlock: critical IPv6: 2607:adc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:55:f0:f4:d2:0f:e8:fd:2c:dd:fe:81:56:14:c3:33:a9:59: e5:63:bc:34:45:16:49:b1:84:6d:9e:e8:d5:16:00:27:16:fb: 32:37:7d:bc:f7:fc:17:6f:19:0c:3f:b3:12:5e:46:11:75:01: 32:20:a5:ee:2e:71:d3:a7:c0:4e:cc:a9:14:dd:27:b9:15:de: 70:91:66:97:ce:f4:5f:0c:c4:46:d4:55:1b:ac:93:04:a8:00: 64:43:76:d8:79:09:94:ff:4e:a1:61:53:af:18:3c:9e:65:d7: 42:99:98:32:1e:5a:1a:22:e6:a9:d9:61:8e:2b:c9:f0:8a:18: d0:7b:59:01:d6:42:af:3c:ba:52:e1:42:f9:a9:24:77:50:5e: a4:97:84:39:2c:87:c6:6e:36:37:ec:ca:f4:40:47:e1:ff:e0: ac:db:f7:63:0c:39:4b:59:84:45:7b:60:4f:5f:0b:1c:e4:b0: 1b:81:f9:3b:2c:c4:6f:bc:e5:39:09:83:6e:67:5a:10:31:ac: 8b:a7:7e:86:90:32:e3:c2:08:e8:ac:82:6f:43:15:b7:ae:26: 38:fb:70:22:b2:1d:62:4b:0f:22:3a:77:b3:57:ca:9c:8b:ae: a5:80:ed:46:92:09:e5:27:b3:5e:da:f9:5c:cf:67:af:37:30: 90:6e:f8:fb -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0bGgRq0J1AAWAlwUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDE0Y2I3MDQtMGQyMC00MjQ4LWJjNWEtMmIzM2NlNjYz MjlkMB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk M2E5YmQ4NTAtN2Y3ZS00Yjc0LTkwZTItNjk3NTRkNTRmZWNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiiCo3VxaJpjkSPvEg13vFIu82uyLdapzcxZE JC75x/0fMp8QeT/GfLfi7LqNsWPKFzeSuzsxPj9UQ3qyvlx5PaNPKpzPt3fgMRY5 UtgNpx9iSuCjVAGG03E2YLGmtHQxFVJzMAM0Ft/6vTTSHSRcIL7xQUFTJVnSdkjL fS9NCfMLFM8Oy2m98dBaTQCh2NPWTm2lBFAO940hxZaJnDWvAKTrcw+9aFJcfu37 8N3BaOe0lpVTS6hbOcOCq6LMu1k2bWXQrjM8TXypLhZ/t3/Cay+C6znk51KXqoq2 zCrPmnUtMnNyS3Wffk+9TGr3GzTOokVekB4iNYHXMYY0vmo38wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPfttR62VsKOUiEEi1KQXt58VQDBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80MTRj YjcwNC0wZDIwLTQyNDgtYmM1YS0yYjMzY2U2NjMyOWQvMzZmMDg3NTQtNmQ3ZS0z ZDAxLTlkYmItYWE0Mzg5MjVlYmFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDE0Y2I3MDQtMGQyMC00MjQ4LWJj NWEtMmIzM2NlNjYzMjlkLzQxNGNiNzA0LTBkMjAtNDI0OC1iYzVhLTJiMzNjZTY2 MzI5ZC5jcmwwHwYDVR0jBBgwFoAUBdOyDgF3s/B2D2BTpVVwfmhwL0MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80MTRjYjcwNC0wZDIwLTQyNDgtYmM1YS0yYjMz Y2U2NjMyOWQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgetwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCVVfD00g/o/Szd/oFWFMMzqVnlY7w0RRZJsYRtnujVFgAnFvsyN328 9/wXbxkMP7MSXkYRdQEyIKXuLnHTp8BOzKkU3Se5Fd5wkWaXzvRfDMRG1FUbrJME qABkQ3bYeQmU/06hYVOvGDyeZddCmZgyHloaIuap2WGOK8nwihjQe1kB1kKvPLpS 4UL5qSR3UF6kl4Q5LIfGbjY37Mr0QEfh/+Cs2/djDDlLWYRFe2BPXwsc5LAbgfk7 LMRvvOU5CYNuZ1oQMayLp36GkDLjwgjorIJvQxW3riY4+3Aish1iSw8iOnezV8qc i66lgO1GkgnlJ7Ne2vlcz2evNzCQbvj7 -----END CERTIFICATE-----Generated at Thu Mar 26 14:13:24 2026 by rpki-client