$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/3e6da91c-60c5-3147-bb1e-5122a2ab04c6.roa File: 3e6da91c-60c5-3147-bb1e-5122a2ab04c6.roa (raw, json) Hash identifier: 2NSX+orV6gq8QW4lpXxo1OH5N2fyU37YSoZ5+NP/Fmk= Subject key identifier: 82:92:E2:74:61:FA:7D:91:C4:7C:E6:27:69:31:DA:36:4C:1C:AF:CD Certificate issuer: /CN=36ee0355-1d23-4ead-8858-b26a81c6add0 Certificate serial: 010D0C9F4328584FA16332A9D62EEE41F6B3C000 Authority key identifier: A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/3e6da91c-60c5-3147-bb1e-5122a2ab04c6.roa Signing time: Mon 26 Oct 2026 13:00:14 +0000 ROA not before: Mon 26 Oct 2026 13:00:14 +0000 ROA not after: Sun 24 Jan 2027 14:00:14 +0000 asID: 3423 IP address blocks: 2602:fbdc:14::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a1:63:32:a9:d6:2e:ee:41:f6:b3:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36ee0355-1d23-4ead-8858-b26a81c6add0 Validity Not Before: Oct 26 13:00:14 2026 GMT Not After : Jan 24 14:00:14 2027 GMT Subject: CN=b7d89263-562a-4045-9d2f-77f453d70661 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:e6:cb:ec:b9:35:6d:ab:ac:a2:51:c1:e3:22: f2:2a:83:6b:e9:07:87:a9:aa:25:93:89:45:8b:60: 9f:22:aa:19:4e:16:fe:58:d8:c6:4f:30:f8:89:37: 7d:95:3e:69:3b:c5:2c:3d:1d:36:c7:44:9b:7e:57: a7:e6:c1:61:05:4a:c1:58:50:8d:02:b7:94:2e:ae: 63:01:14:9e:43:44:fa:7b:a1:0f:51:ed:84:18:b7: 22:1c:b9:52:80:b1:02:83:5e:49:76:58:23:8a:47: 1a:be:76:1a:1e:d7:8a:9a:11:2c:30:32:79:0f:b1: 50:fa:04:f4:6e:09:3f:6f:c2:57:9a:c1:a0:43:17: 4d:f9:39:d8:e4:f8:50:c5:f7:b8:e9:66:50:28:85: fd:59:e4:8e:1b:5e:9b:17:40:27:0d:27:41:1a:ca: 90:3a:51:13:c3:97:ce:ed:a8:9c:83:cb:27:51:fe: 12:14:df:07:8a:85:f2:bf:a7:7c:ec:7f:a4:b7:82: e9:25:6c:41:da:1a:d6:3d:78:82:c5:11:02:48:82: 65:6b:f5:e8:d6:7d:18:e9:81:81:f4:c7:9d:dd:d5: a1:07:99:c7:93:ff:4b:34:d8:97:e2:af:78:1d:79: 66:57:99:2a:30:dd:4d:c7:d4:01:3c:4d:50:19:6d: dc:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:92:E2:74:61:FA:7D:91:C4:7C:E6:27:69:31:DA:36:4C:1C:AF:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/3e6da91c-60c5-3147-bb1e-5122a2ab04c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl X509v3 Authority Key Identifier: keyid:A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer sbgp-ipAddrBlock: critical IPv6: 2602:fbdc:14::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:7a:73:86:27:c7:19:60:0a:00:b7:3f:23:1d:84:8b:e9:7b: 0d:4b:fc:3a:3b:c5:e1:97:53:04:dd:a8:65:f3:0e:10:de:7d: 2e:48:af:29:ce:0b:19:9d:85:50:9b:e3:36:75:81:c2:c0:dd: 31:d8:cb:f3:77:04:0a:9c:7a:84:a0:95:b4:f0:61:2b:ee:08: c3:81:fe:c8:db:ef:48:94:6d:ac:f9:34:36:4f:40:56:e8:39: a0:1f:ff:3c:2b:29:f9:79:9f:9a:dd:9d:38:c2:da:96:6c:ab: cd:3b:64:9d:98:c8:ff:4d:f5:55:3c:60:c9:26:f3:6b:9d:85: d5:03:ed:32:63:08:25:a1:e4:75:a2:f9:53:c2:bd:8c:bd:bb: d8:f0:bb:4a:fa:42:6e:95:1e:0b:f7:6f:b2:98:93:79:dd:1a: 03:39:0e:64:32:75:17:35:b7:7c:e0:a3:f2:08:0d:75:30:95: 5a:d9:45:64:f0:d3:b4:bc:54:7f:fe:4e:c2:35:f0:be:0f:ef: ff:85:fb:4e:4b:60:6b:1b:b0:36:b9:4e:95:78:fd:a8:64:33: 59:06:7f:d5:53:55:98:85:7f:61:89:9b:07:45:1c:6b:07:16: b8:ad:70:c2:bf:cf:53:6b:e3:eb:a7:67:9d:52:f4:02:d3:0b: 08:c1:1a:59 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE+hYzKp1i7uQfazwAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzZlZTAzNTUtMWQyMy00ZWFkLTg4NTgtYjI2YTgxYzZh ZGQwMB4XDTI2MTAyNjEzMDAxNFoXDTI3MDEyNDE0MDAxNFowLzEtMCsGA1UEAxMk YjdkODkyNjMtNTYyYS00MDQ1LTlkMmYtNzdmNDUzZDcwNjYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ubL7Lk1bausolHB4yLyKoNr6QeHqaolk4lF i2CfIqoZThb+WNjGTzD4iTd9lT5pO8UsPR02x0Sbflen5sFhBUrBWFCNAreULq5j ARSeQ0T6e6EPUe2EGLciHLlSgLECg15JdlgjikcavnYaHteKmhEsMDJ5D7FQ+gT0 bgk/b8JXmsGgQxdN+TnY5PhQxfe46WZQKIX9WeSOG16bF0AnDSdBGsqQOlETw5fO 7aicg8snUf4SFN8HioXyv6d87H+kt4LpJWxB2hrWPXiCxRECSIJla/Xo1n0Y6YGB 9Med3dWhB5nHk/9LNNiX4q94HXlmV5kqMN1Nx9QBPE1QGW3cxQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIKS4nRh+n2RxHzmJ2kx2jZMHK/NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zNmVl MDM1NS0xZDIzLTRlYWQtODg1OC1iMjZhODFjNmFkZDAvM2U2ZGE5MWMtNjBjNS0z MTQ3LWJiMWUtNTEyMmEyYWIwNGM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzZlZTAzNTUtMWQyMy00ZWFkLTg4 NTgtYjI2YTgxYzZhZGQwLzM2ZWUwMzU1LTFkMjMtNGVhZC04ODU4LWIyNmE4MWM2 YWRkMC5jcmwwHwYDVR0jBBgwFoAUo7u6I6BDs3ssyq/gqkQQqxGTcJUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zNmVlMDM1NS0xZDIzLTRlYWQtODg1OC1iMjZh ODFjNmFkZDAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL73AAU MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJ16c4YnxxlgCgC3PyMdhIvpew1L/Do7xeGXUwTdqGXzDhDefS5I rynOCxmdhVCb4zZ1gcLA3THYy/N3BAqceoSglbTwYSvuCMOB/sjb70iUbaz5NDZP QFboOaAf/zwrKfl5n5rdnTjC2pZsq807ZJ2YyP9N9VU8YMkm82udhdUD7TJjCCWh 5HWi+VPCvYy9u9jwu0r6Qm6VHgv3b7KYk3ndGgM5DmQydRc1t3zgo/IIDXUwlVrZ RWTw07S8VH/+TsI18L4P7/+F+05LYGsbsDa5TpV4/ahkM1kGf9VTVZiFf2GJmwdF HGsHFritcMK/z1Nr4+unZ51S9ALTCwjBGlk= -----END CERTIFICATE-----Generated at Sat Oct 31 08:19:01 2026 by rpki-client