$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/98edf705-d568-3a9d-8a83-619621b2b369.roa File: 98edf705-d568-3a9d-8a83-619621b2b369.roa (raw, json) Hash identifier: Am5rfFPgCYZn88TkNeUhGzTgCykPoNGDYPCpmosj5pk= Subject key identifier: 23:75:C9:B5:57:F8:CD:C6:74:55:C1:2E:5E:9A:DF:0F:97:00:1F:D9 Certificate issuer: /CN=36ee0355-1d23-4ead-8858-b26a81c6add0 Certificate serial: 010D0C9F4328584FA42DD6B8D4FE06193DD55C00 Authority key identifier: A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/98edf705-d568-3a9d-8a83-619621b2b369.roa Signing time: Tue 27 Oct 2026 13:00:13 +0000 ROA not before: Tue 27 Oct 2026 13:00:13 +0000 ROA not after: Mon 25 Jan 2027 14:00:13 +0000 asID: 3423 IP address blocks: 2620:bf::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a4:2d:d6:b8:d4:fe:06:19:3d:d5:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36ee0355-1d23-4ead-8858-b26a81c6add0 Validity Not Before: Oct 27 13:00:13 2026 GMT Not After : Jan 25 14:00:13 2027 GMT Subject: CN=7f3020a9-f708-4c43-87a6-697be3e07711 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:f5:13:cf:68:2a:bf:f7:4b:80:8d:3f:f1:21: d5:2e:44:50:66:4b:e9:72:9b:a5:e3:e3:b8:bb:05: cd:2a:0d:8b:1b:68:f6:27:a1:1f:d5:1b:ba:32:02: 2b:46:93:b2:07:2b:c6:c5:e5:bc:d0:a8:a5:49:b7: 9a:e5:8e:b3:98:d3:bf:56:00:64:a4:17:5f:38:63: 97:c4:df:a9:26:2b:78:0e:08:38:5b:cb:be:3a:40: bc:c4:66:a3:b7:7a:e8:c9:8f:67:e2:b7:9d:17:a8: ef:ba:58:9e:75:3b:32:ec:f8:cc:a8:f4:b6:fa:ee: f8:ec:f2:c3:0e:c2:98:ff:a4:81:ff:4f:31:7f:56: 78:20:a1:7e:44:23:64:67:45:fa:0f:55:63:4c:28: 36:fd:4c:f8:1e:8b:ba:4c:53:e7:a4:b2:d7:6b:eb: b9:32:40:42:2a:1d:b5:f0:bc:7f:cb:49:1d:9d:6b: 79:6b:76:78:12:1f:62:f5:6b:ea:31:c8:79:88:ab: e1:b6:6c:f0:2a:63:f6:82:b9:80:8a:e6:2a:bf:0b: 56:2e:8f:4e:ac:5b:96:af:09:d0:ef:61:7a:f2:87: 1e:91:54:e0:bf:0b:5b:b0:55:53:f3:f3:a2:ee:9c: f2:8c:cf:e2:05:fe:e6:ef:35:ba:e6:52:08:02:75: bd:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:75:C9:B5:57:F8:CD:C6:74:55:C1:2E:5E:9A:DF:0F:97:00:1F:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/98edf705-d568-3a9d-8a83-619621b2b369.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl X509v3 Authority Key Identifier: keyid:A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer sbgp-ipAddrBlock: critical IPv6: 2620:bf::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:48:bb:9f:1a:4a:ce:85:90:05:e4:ba:33:20:28:c9:f2:08: cd:f9:5f:71:a0:c4:41:ba:03:f5:49:b9:69:ff:97:00:1b:c2: 21:74:63:69:a5:e0:ff:da:a6:0e:0d:09:f6:2f:ea:cc:37:83: d8:c0:13:7e:bf:90:fd:bf:a0:f9:30:64:5e:8b:75:71:d4:da: ec:01:3e:3d:4c:aa:54:4d:29:26:8d:fb:55:76:25:ff:ee:c6: 6d:48:2c:b2:a5:dc:be:95:2e:be:8f:57:9f:53:49:8c:a8:91: e8:17:a7:a0:69:7c:f3:5a:20:6e:0e:fa:05:c1:f1:1e:5a:99: b8:62:c7:3b:1c:34:ff:96:c9:b5:95:97:d2:50:9a:36:4d:1e: 77:34:fa:cf:d9:b4:04:17:01:c2:af:01:9e:44:53:b8:95:f2: 05:c8:7c:30:13:bc:ee:4a:22:f7:c3:a8:af:8c:62:98:41:ab: d0:81:b0:a6:f9:6a:6c:d4:cd:bd:cd:89:0c:b1:28:5c:42:f3: 07:a4:b6:65:03:38:35:84:0e:91:5a:3c:78:cb:96:61:af:f5: d0:b8:34:95:c1:3a:d4:1b:79:34:b0:1d:00:c4:63:77:9f:15: f5:d2:81:a5:2f:1c:b9:ff:cd:15:76:1c:b2:b5:77:2e:54:76: 90:b3:68:9d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE+kLda41P4GGT3VXAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzZlZTAzNTUtMWQyMy00ZWFkLTg4NTgtYjI2YTgxYzZh ZGQwMB4XDTI2MTAyNzEzMDAxM1oXDTI3MDEyNTE0MDAxM1owLzEtMCsGA1UEAxMk N2YzMDIwYTktZjcwOC00YzQzLTg3YTYtNjk3YmUzZTA3NzExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/UTz2gqv/dLgI0/8SHVLkRQZkvpcpul4+O4 uwXNKg2LG2j2J6Ef1Ru6MgIrRpOyByvGxeW80KilSbea5Y6zmNO/VgBkpBdfOGOX xN+pJit4Dgg4W8u+OkC8xGajt3royY9n4redF6jvuliedTsy7PjMqPS2+u747PLD DsKY/6SB/08xf1Z4IKF+RCNkZ0X6D1VjTCg2/Uz4Hou6TFPnpLLXa+u5MkBCKh21 8Lx/y0kdnWt5a3Z4Eh9i9WvqMch5iKvhtmzwKmP2grmAiuYqvwtWLo9OrFuWrwnQ 72F68ocekVTgvwtbsFVT8/Oi7pzyjM/iBf7m7zW65lIIAnW9ywIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCN1ybVX+M3GdFXBLl6a3w+XAB/ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zNmVl MDM1NS0xZDIzLTRlYWQtODg1OC1iMjZhODFjNmFkZDAvOThlZGY3MDUtZDU2OC0z YTlkLThhODMtNjE5NjIxYjJiMzY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzZlZTAzNTUtMWQyMy00ZWFkLTg4 NTgtYjI2YTgxYzZhZGQwLzM2ZWUwMzU1LTFkMjMtNGVhZC04ODU4LWIyNmE4MWM2 YWRkMC5jcmwwHwYDVR0jBBgwFoAUo7u6I6BDs3ssyq/gqkQQqxGTcJUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zNmVlMDM1NS0xZDIzLTRlYWQtODg1OC1iMjZh ODFjNmFkZDAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAvwAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJxIu58aSs6FkAXkujMgKMnyCM35X3GgxEG6A/VJuWn/lwAbwiF0 Y2ml4P/apg4NCfYv6sw3g9jAE36/kP2/oPkwZF6LdXHU2uwBPj1MqlRNKSaN+1V2 Jf/uxm1ILLKl3L6VLr6PV59TSYyokegXp6BpfPNaIG4O+gXB8R5ambhixzscNP+W ybWVl9JQmjZNHnc0+s/ZtAQXAcKvAZ5EU7iV8gXIfDATvO5KIvfDqK+MYphBq9CB sKb5amzUzb3NiQyxKFxC8wektmUDODWEDpFaPHjLlmGv9dC4NJXBOtQbeTSwHQDE Y3efFfXSgaUvHLn/zRV2HLK1dy5UdpCzaJ0= -----END CERTIFICATE-----Generated at Sat Oct 31 08:19:43 2026 by rpki-client