$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/2f36e6e7-6da4-3702-b527-81fda7f69f64.roa File: 2f36e6e7-6da4-3702-b527-81fda7f69f64.roa (raw, json) Hash identifier: noILBklX/sBnmzcjkxmuVIWTNPVs5Nzp1B/Ve84nNeM= Subject key identifier: 3E:38:BD:A9:AC:E6:66:20:04:33:2A:A5:E8:01:D2:4C:9A:04:B8:09 Certificate issuer: /CN=ae67d891-3b16-4302-bf8b-4adb69436dbe Certificate serial: 010D0C9F4328584E4AEF3F6EECB6BDEB60E8DF80 Authority key identifier: A9:04:D2:8D:FE:69:EA:93:AF:E4:50:87:50:B5:35:CD:BC:9D:90:28 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/2f36e6e7-6da4-3702-b527-81fda7f69f64.roa Signing time: Thu 25 Jun 2026 21:00:12 +0000 ROA not before: Thu 25 Jun 2026 21:00:12 +0000 ROA not after: Wed 23 Sep 2026 21:00:12 +0000 asID: 6939 IP address blocks: 67.59.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/ae67d891-3b16-4302-bf8b-4adb69436dbe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/ae67d891-3b16-4302-bf8b-4adb69436dbe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4a:ef:3f:6e:ec:b6:bd:eb:60:e8:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae67d891-3b16-4302-bf8b-4adb69436dbe Validity Not Before: Jun 25 21:00:12 2026 GMT Not After : Sep 23 21:00:12 2026 GMT Subject: CN=c282f2f1-e081-4247-a4c5-f6ddab1308e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5b:be:a8:59:b4:37:09:b9:ad:9e:ef:a0:c8: 92:e7:66:81:b5:fc:dc:6c:d7:ff:d3:c1:18:94:1e: e2:c5:43:22:66:a8:99:33:be:99:44:b3:9b:cd:22: a1:af:7b:28:8d:7a:53:c3:07:cd:20:5b:a1:51:e5: b7:0e:a3:26:14:6d:8d:d5:a0:5f:1b:fc:64:4a:e1: 5c:80:e4:8b:70:ef:a6:f4:4b:2e:b8:3f:95:80:ba: 1a:49:68:8d:ea:df:03:46:17:c2:fb:6d:b5:82:70: e9:c6:97:16:bf:d5:4d:02:7d:a7:f8:f7:16:14:56: 3d:ce:88:5b:01:bc:1a:35:f5:cc:06:2e:f4:13:e8: 7b:f5:90:8f:53:b2:9d:ad:c5:ef:19:07:27:5b:00: 70:7b:52:9d:5a:a2:d9:70:f6:2e:26:ef:0f:e8:02: 88:ee:13:cb:80:0c:ee:46:e8:be:86:4e:41:6f:d6: 68:27:2c:d6:8f:75:2d:e9:71:11:69:3e:25:88:2f: 4e:fa:cb:74:f3:14:2d:ee:72:41:15:95:04:a5:ee: f3:45:2e:6f:ab:f2:3f:14:65:1b:11:cf:a4:37:ee: 2e:4a:22:a0:28:5c:fc:75:4d:17:04:64:6b:e6:82: 72:37:a1:f2:56:ef:f3:4f:4c:ec:de:30:68:b0:21: a5:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:38:BD:A9:AC:E6:66:20:04:33:2A:A5:E8:01:D2:4C:9A:04:B8:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/2f36e6e7-6da4-3702-b527-81fda7f69f64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/ae67d891-3b16-4302-bf8b-4adb69436dbe.crl X509v3 Authority Key Identifier: keyid:A9:04:D2:8D:FE:69:EA:93:AF:E4:50:87:50:B5:35:CD:BC:9D:90:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe.cer sbgp-ipAddrBlock: critical IPv4: 67.59.106.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:53:74:a4:e6:d9:45:3a:3f:39:45:3e:99:99:e5:59:75:0b: dc:64:4b:a0:13:b7:b8:6d:50:39:82:62:7a:2b:28:25:d3:79: 93:82:75:e3:6c:29:07:82:d7:ee:ed:90:c3:49:93:c3:40:16: 9e:ec:04:d3:47:be:9c:05:54:ca:f5:23:a3:78:de:fe:55:fd: 5c:5b:2c:30:c8:46:91:b2:ae:e4:b2:89:1e:78:b8:1d:59:71: b6:8f:08:03:8c:f3:93:c5:6c:3d:2e:88:3b:e6:3d:6b:b2:a6: 07:f1:46:65:56:29:f6:86:5e:e1:c5:36:79:90:c2:1b:02:89: 81:29:9d:d0:f5:8f:42:15:6c:e2:2f:52:80:4f:26:37:47:0c: 12:b5:85:60:50:2a:96:f8:f4:3c:52:c1:9b:a4:e2:27:7a:52: 43:98:f2:5e:c2:fe:49:46:ba:27:a6:3e:70:eb:72:44:5b:1a: 40:0a:57:53:07:f1:18:25:f2:7b:d5:cb:96:cb:39:db:9d:b3: 90:9f:3f:74:03:20:e6:d1:6f:1b:1e:84:3a:84:dc:dc:8c:70: 7d:99:50:93:97:2e:dc:4c:01:80:4f:d3:af:95:48:c9:8e:e7: 97:8c:0a:0e:e8:92:3c:e7:e5:d1:9c:d9:b9:ad:12:c0:2c:a5: 19:4f:ac:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5K7z9u7La962Do34AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWU2N2Q4OTEtM2IxNi00MzAyLWJmOGItNGFkYjY5NDM2 ZGJlMB4XDTI2MDYyNTIxMDAxMloXDTI2MDkyMzIxMDAxMlowLzEtMCsGA1UEAxMk YzI4MmYyZjEtZTA4MS00MjQ3LWE0YzUtZjZkZGFiMTMwOGU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVu+qFm0Nwm5rZ7voMiS52aBtfzcbNf/08EY lB7ixUMiZqiZM76ZRLObzSKhr3sojXpTwwfNIFuhUeW3DqMmFG2N1aBfG/xkSuFc gOSLcO+m9EsuuD+VgLoaSWiN6t8DRhfC+221gnDpxpcWv9VNAn2n+PcWFFY9zohb AbwaNfXMBi70E+h79ZCPU7KdrcXvGQcnWwBwe1KdWqLZcPYuJu8P6AKI7hPLgAzu Rui+hk5Bb9ZoJyzWj3Ut6XERaT4liC9O+st08xQt7nJBFZUEpe7zRS5vq/I/FGUb Ec+kN+4uSiKgKFz8dU0XBGRr5oJyN6HyVu/zT0zs3jBosCGlbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD44vams5mYgBDMqpegB0kyaBLgJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hZTY3 ZDg5MS0zYjE2LTQzMDItYmY4Yi00YWRiNjk0MzZkYmUvMmYzNmU2ZTctNmRhNC0z NzAyLWI1MjctODFmZGE3ZjY5ZjY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWU2N2Q4OTEtM2IxNi00MzAyLWJm OGItNGFkYjY5NDM2ZGJlL2FlNjdkODkxLTNiMTYtNDMwMi1iZjhiLTRhZGI2OTQz NmRiZS5jcmwwHwYDVR0jBBgwFoAUqQTSjf5p6pOv5FCHULU1zbydkCgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hZTY3ZDg5MS0zYjE2LTQzMDItYmY4Yi00YWRi Njk0MzZkYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQztqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHFTdKTm2UU6PzlFPpmZ5Vl1C9xkS6ATt7htUDmCYnorKCXTeZOCdeNs KQeC1+7tkMNJk8NAFp7sBNNHvpwFVMr1I6N43v5V/VxbLDDIRpGyruSyiR54uB1Z cbaPCAOM85PFbD0uiDvmPWuypgfxRmVWKfaGXuHFNnmQwhsCiYEpndD1j0IVbOIv UoBPJjdHDBK1hWBQKpb49DxSwZuk4id6UkOY8l7C/klGuiemPnDrckRbGkAKV1MH 8Rgl8nvVy5bLOduds5CfP3QDIObRbxsehDqE3NyMcH2ZUJOXLtxMAYBP06+VSMmO 55eMCg7okjzn5dGc2bmtEsAspRlPrJE= -----END CERTIFICATE-----Generated at Fri Jul 24 09:06:20 2026 by rpki-client