$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/2027f2ae-853f-3917-886e-21754d6f9154.roa File: 2027f2ae-853f-3917-886e-21754d6f9154.roa (raw, json) Hash identifier: DDCoYkhUDxlU2sja284J68ZBfXWm5VL5wtVepIbdZmY= Subject key identifier: FA:70:BA:70:3C:48:27:AD:75:E5:75:2D:E4:D6:F8:8D:0C:92:58:D3 Certificate issuer: /CN=36ee0355-1d23-4ead-8858-b26a81c6add0 Certificate serial: 010D0C9F4328584B0FA6B8A0D25E073DB6FE0580 Authority key identifier: A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/2027f2ae-853f-3917-886e-21754d6f9154.roa Signing time: Tue 02 Sep 2025 13:00:42 +0000 ROA not before: Tue 02 Sep 2025 13:00:42 +0000 ROA not after: Mon 01 Dec 2025 14:00:42 +0000 asID: 11873 IP address blocks: 2620:bf::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0f:a6:b8:a0:d2:5e:07:3d:b6:fe:05:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36ee0355-1d23-4ead-8858-b26a81c6add0 Validity Not Before: Sep 2 13:00:42 2025 GMT Not After : Dec 1 14:00:42 2025 GMT Subject: CN=5dc4e328-3d28-4ef6-880a-2fef30ad4480 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:99:d6:a6:35:fb:60:22:ec:6b:56:79:53:87: 8a:62:5c:24:ea:49:e0:43:a6:17:3c:28:05:58:70: cc:80:a2:9e:87:0e:d2:5c:e1:79:0a:a2:75:63:42: 4f:92:4e:61:bb:06:e7:3b:b6:5c:f0:48:e0:8a:62: 7e:93:5c:ee:a6:e5:65:7a:f4:41:5b:5a:39:fd:90: 35:bb:c5:9c:50:ff:f8:52:8e:ce:b0:60:bb:f9:2c: eb:ca:ef:d2:35:85:de:45:aa:ed:42:8d:66:a3:8a: f3:c6:5a:aa:1e:15:f8:06:30:d0:dd:85:bc:18:04: 1a:55:99:a6:20:f3:5d:cb:3f:ef:18:c0:6e:0d:20: 2b:1c:a2:a9:0a:4d:ab:7a:6b:1c:50:03:32:12:85: ce:6c:9e:52:e9:5a:b6:ab:85:88:a1:2f:04:34:8c: 16:61:00:32:5c:b1:cd:b6:38:6b:be:9c:3f:8f:37: 1c:c2:23:e0:02:71:e4:a4:f8:76:03:41:83:18:e5: 1c:ea:99:b4:9b:5a:17:7b:c7:40:1d:5b:8d:1a:88: 1c:5b:a3:35:00:3c:30:91:e1:2c:21:1b:31:e0:e5: d3:c5:bd:e8:c3:ee:50:99:1b:7a:9b:8c:4d:3f:c4: 03:c8:22:d1:f5:71:e7:9d:e7:c2:81:ce:55:b5:42: ff:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:70:BA:70:3C:48:27:AD:75:E5:75:2D:E4:D6:F8:8D:0C:92:58:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/2027f2ae-853f-3917-886e-21754d6f9154.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl X509v3 Authority Key Identifier: keyid:A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer sbgp-ipAddrBlock: critical IPv6: 2620:bf::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:5b:6f:80:6a:d4:ef:f9:f2:37:ed:65:8e:15:c1:71:b5:8a: 8d:a6:ef:5b:67:81:1f:01:96:5c:60:61:80:8a:c3:41:4f:97: 92:b6:d7:ff:0c:80:b2:b5:fe:05:b5:67:0d:18:75:ea:97:54: 23:cd:ef:cd:b6:d9:3f:f0:57:87:7f:bf:3a:7d:61:1b:2d:ce: 0b:3f:9e:43:24:eb:e5:05:b0:af:89:5f:ec:d8:4e:21:bc:10: 79:4f:bc:99:7e:98:5f:c6:cf:da:85:b9:b9:77:83:7f:9c:eb: bc:bd:45:78:84:7e:85:7c:d2:3b:53:68:48:c8:dc:73:57:d0: 81:75:55:07:7f:d9:b9:a5:91:07:da:a9:d9:09:aa:2b:72:3e: 07:62:c4:09:20:8d:c8:fc:85:55:46:43:6e:c5:ac:f5:59:cd: 7e:01:74:a7:9e:eb:b4:b1:ee:5e:99:00:5c:f5:65:c0:9c:e5: e0:e7:fb:c1:85:18:04:ab:35:22:36:7c:03:7b:ff:13:8d:65: 1b:f8:26:be:eb:bc:77:0b:49:d9:84:52:33:56:ed:81:cb:c3: 8c:8b:37:79:d3:5d:14:13:47:2f:70:7a:b1:4e:a7:81:2b:4a: 55:e4:0d:c9:9d:b5:1b:9f:fd:09:61:5c:ad:fe:52:ef:13:c2: b7:0c:5a:62 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsPprig0l4HPbb+BYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzZlZTAzNTUtMWQyMy00ZWFkLTg4NTgtYjI2YTgxYzZh ZGQwMB4XDTI1MDkwMjEzMDA0MloXDTI1MTIwMTE0MDA0MlowLzEtMCsGA1UEAxMk NWRjNGUzMjgtM2QyOC00ZWY2LTg4MGEtMmZlZjMwYWQ0NDgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5nWpjX7YCLsa1Z5U4eKYlwk6kngQ6YXPCgF WHDMgKKehw7SXOF5CqJ1Y0JPkk5huwbnO7Zc8EjgimJ+k1zupuVlevRBW1o5/ZA1 u8WcUP/4Uo7OsGC7+Szryu/SNYXeRartQo1mo4rzxlqqHhX4BjDQ3YW8GAQaVZmm IPNdyz/vGMBuDSArHKKpCk2remscUAMyEoXObJ5S6Vq2q4WIoS8ENIwWYQAyXLHN tjhrvpw/jzccwiPgAnHkpPh2A0GDGOUc6pm0m1oXe8dAHVuNGogcW6M1ADwwkeEs IRsx4OXTxb3ow+5QmRt6m4xNP8QDyCLR9XHnnefCgc5VtUL/cQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPpwunA8SCetdeV1LeTW+I0MkljTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zNmVl MDM1NS0xZDIzLTRlYWQtODg1OC1iMjZhODFjNmFkZDAvMjAyN2YyYWUtODUzZi0z OTE3LTg4NmUtMjE3NTRkNmY5MTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzZlZTAzNTUtMWQyMy00ZWFkLTg4 NTgtYjI2YTgxYzZhZGQwLzM2ZWUwMzU1LTFkMjMtNGVhZC04ODU4LWIyNmE4MWM2 YWRkMC5jcmwwHwYDVR0jBBgwFoAUo7u6I6BDs3ssyq/gqkQQqxGTcJUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zNmVlMDM1NS0xZDIzLTRlYWQtODg1OC1iMjZh ODFjNmFkZDAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAvwAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADFbb4Bq1O/58jftZY4VwXG1io2m71tngR8BllxgYYCKw0FPl5K2 1/8MgLK1/gW1Zw0YdeqXVCPN78222T/wV4d/vzp9YRstzgs/nkMk6+UFsK+JX+zY TiG8EHlPvJl+mF/Gz9qFubl3g3+c67y9RXiEfoV80jtTaEjI3HNX0IF1VQd/2bml kQfaqdkJqityPgdixAkgjcj8hVVGQ27FrPVZzX4BdKee67Sx7l6ZAFz1ZcCc5eDn +8GFGASrNSI2fAN7/xONZRv4Jr7rvHcLSdmEUjNW7YHLw4yLN3nTXRQTRy9werFO p4ErSlXkDcmdtRuf/QlhXK3+Uu8TwrcMWmI= -----END CERTIFICATE-----Generated at Sat Oct 11 13:47:17 2025 by rpki-client