$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/85f8e7c0-a1d8-3f74-be49-04dc913622f0.roa File: 85f8e7c0-a1d8-3f74-be49-04dc913622f0.roa (raw, json) Hash identifier: l6ZE1MDB4sTMWC7IUtjTQnhh02Cl9xag2jlUS8d9bFE= Subject key identifier: 23:2A:E2:07:3D:DD:E8:E6:F1:FB:A6:D4:B7:3E:AA:F5:1D:E5:01:31 Certificate issuer: /CN=36ee0355-1d23-4ead-8858-b26a81c6add0 Certificate serial: 010D0C9F4328584FA1632DEFD6926931EFC104C0 Authority key identifier: A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/85f8e7c0-a1d8-3f74-be49-04dc913622f0.roa Signing time: Mon 26 Oct 2026 13:00:14 +0000 ROA not before: Mon 26 Oct 2026 13:00:14 +0000 ROA not after: Sun 24 Jan 2027 14:00:14 +0000 asID: 3423 IP address blocks: 2602:fbdc:8e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a1:63:2d:ef:d6:92:69:31:ef:c1:04:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36ee0355-1d23-4ead-8858-b26a81c6add0 Validity Not Before: Oct 26 13:00:14 2026 GMT Not After : Jan 24 14:00:14 2027 GMT Subject: CN=82c17add-ba83-4805-9ff6-c14425fdb24f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:0f:bc:0f:a8:e6:ba:2c:83:af:11:89:8e:fd: 74:3c:96:59:0a:03:71:5f:99:7d:55:3f:3c:f5:44: 37:07:db:7b:c9:07:16:a3:b0:77:6d:c5:7c:a6:90: 38:15:3c:37:4c:0f:b1:53:5c:28:7e:c5:27:77:90: 6a:32:13:3b:06:59:e4:c7:17:ac:4d:09:7a:5c:23: de:94:8b:0b:36:f2:4f:d7:f1:39:b6:85:c3:de:61: 46:9c:ce:31:6d:c3:3c:7e:93:97:28:94:55:6f:7a: a8:cc:0c:85:2a:08:c0:34:96:a2:f7:08:f1:e8:5e: 30:97:16:21:7f:34:d9:6c:4b:c6:0c:80:f4:0b:1a: 2d:4e:0f:e5:e4:1c:35:07:e1:e8:b9:c0:1f:8e:f1: 47:43:0b:bf:59:36:66:16:13:7a:dc:85:26:24:ac: f6:49:73:be:21:0d:27:48:cb:b5:b6:17:f5:64:16: bf:2b:8e:3a:25:6c:02:ed:b5:43:59:97:9d:16:14: e8:8e:05:48:da:b5:7e:d9:d0:1d:50:76:cb:6e:34: ea:82:60:f2:c5:b9:85:75:ea:9d:45:bb:a8:ad:49: 16:0a:43:78:f3:15:dd:af:e5:26:0e:9b:82:27:08: 05:ed:23:31:91:e0:2b:61:b7:1a:dc:ac:1f:be:2d: dc:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:2A:E2:07:3D:DD:E8:E6:F1:FB:A6:D4:B7:3E:AA:F5:1D:E5:01:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/85f8e7c0-a1d8-3f74-be49-04dc913622f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl X509v3 Authority Key Identifier: keyid:A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer sbgp-ipAddrBlock: critical IPv6: 2602:fbdc:8e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ea:35:c9:4c:fe:92:ee:0a:f8:2a:4b:ae:a4:89:8f:d7:31:f6: c9:de:e7:e7:2c:de:9f:2f:2e:86:55:d0:dc:ed:03:83:d5:e7: 08:24:02:9a:06:38:3b:ec:4c:b1:17:fe:56:16:dc:2f:d8:f2: 40:15:e0:86:bf:cb:11:ad:12:2f:3b:eb:7e:5b:8f:5c:c7:fd: e5:f6:6a:1e:8c:5c:6b:7d:cd:91:60:00:b1:68:0d:1c:f3:cc: 8f:f2:c8:40:b8:db:1c:be:e4:e7:85:7f:0a:f5:10:2a:79:27: 85:fd:69:a5:e7:64:d2:56:8a:32:c8:ae:96:c9:5d:0a:32:ea: e5:26:ad:7f:88:27:7b:b7:4c:96:e3:fa:ec:e7:b3:8b:8d:c5: 8f:01:d6:2f:94:85:b9:e8:40:c0:6b:0c:3e:68:23:df:cd:2f: d1:09:13:e4:f1:59:55:73:d7:59:10:36:25:a9:11:83:19:15: 06:23:2c:b7:4a:1e:39:e5:9e:35:43:a9:d6:6f:77:7d:25:36: 65:c6:da:6b:e7:d6:ae:92:ab:31:f3:f2:ba:68:85:90:60:7d: 49:3c:24:68:38:46:52:e4:c8:1b:98:58:dc:7a:93:51:8b:af: d0:0d:26:62:5e:cf:34:df:ac:20:6b:c1:df:96:8c:9f:11:2f: 37:0e:a1:ae -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE+hYy3v1pJpMe/BBMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzZlZTAzNTUtMWQyMy00ZWFkLTg4NTgtYjI2YTgxYzZh ZGQwMB4XDTI2MTAyNjEzMDAxNFoXDTI3MDEyNDE0MDAxNFowLzEtMCsGA1UEAxMk ODJjMTdhZGQtYmE4My00ODA1LTlmZjYtYzE0NDI1ZmRiMjRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQ+8D6jmuiyDrxGJjv10PJZZCgNxX5l9VT88 9UQ3B9t7yQcWo7B3bcV8ppA4FTw3TA+xU1wofsUnd5BqMhM7BlnkxxesTQl6XCPe lIsLNvJP1/E5toXD3mFGnM4xbcM8fpOXKJRVb3qozAyFKgjANJai9wjx6F4wlxYh fzTZbEvGDID0CxotTg/l5Bw1B+HoucAfjvFHQwu/WTZmFhN63IUmJKz2SXO+IQ0n SMu1thf1ZBa/K446JWwC7bVDWZedFhTojgVI2rV+2dAdUHbLbjTqgmDyxbmFdeqd RbuorUkWCkN48xXdr+UmDpuCJwgF7SMxkeArYbca3Kwfvi3czwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCMq4gc93ejm8fum1Lc+qvUd5QExMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zNmVl MDM1NS0xZDIzLTRlYWQtODg1OC1iMjZhODFjNmFkZDAvODVmOGU3YzAtYTFkOC0z Zjc0LWJlNDktMDRkYzkxMzYyMmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzZlZTAzNTUtMWQyMy00ZWFkLTg4 NTgtYjI2YTgxYzZhZGQwLzM2ZWUwMzU1LTFkMjMtNGVhZC04ODU4LWIyNmE4MWM2 YWRkMC5jcmwwHwYDVR0jBBgwFoAUo7u6I6BDs3ssyq/gqkQQqxGTcJUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zNmVlMDM1NS0xZDIzLTRlYWQtODg1OC1iMjZh ODFjNmFkZDAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL73ACO MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAOo1yUz+ku4K+CpLrqSJj9cx9sne5+cs3p8vLoZV0NztA4PV5wgk ApoGODvsTLEX/lYW3C/Y8kAV4Ia/yxGtEi87635bj1zH/eX2ah6MXGt9zZFgALFo DRzzzI/yyEC42xy+5OeFfwr1ECp5J4X9aaXnZNJWijLIrpbJXQoy6uUmrX+IJ3u3 TJbj+uzns4uNxY8B1i+UhbnoQMBrDD5oI9/NL9EJE+TxWVVz11kQNiWpEYMZFQYj LLdKHjnlnjVDqdZvd30lNmXG2mvn1q6SqzHz8rpohZBgfUk8JGg4RlLkyBuYWNx6 k1GLr9ANJmJezzTfrCBrwd+WjJ8RLzcOoa4= -----END CERTIFICATE-----Generated at Sat Oct 31 12:42:09 2026 by rpki-client