$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/b1e5cff4-08a1-35e5-8ed5-16a63aa07039.roa File: b1e5cff4-08a1-35e5-8ed5-16a63aa07039.roa (raw, json) Hash identifier: JCoke6gxROd+2g+GGRxJ0A89byvQeyFGa++VuuKRwDI= Subject key identifier: 22:BD:5B:06:89:2B:0E:C8:18:5B:0C:B0:D3:CF:64:EB:36:3E:5E:47 Certificate issuer: /CN=36ee0355-1d23-4ead-8858-b26a81c6add0 Certificate serial: 010D0C9F4328584FA1632D8ED29367DBE653A500 Authority key identifier: A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/b1e5cff4-08a1-35e5-8ed5-16a63aa07039.roa Signing time: Mon 26 Oct 2026 13:00:14 +0000 ROA not before: Mon 26 Oct 2026 13:00:14 +0000 ROA not after: Sun 24 Jan 2027 14:00:14 +0000 asID: 3423 IP address blocks: 2602:fbdc:87::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a1:63:2d:8e:d2:93:67:db:e6:53:a5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36ee0355-1d23-4ead-8858-b26a81c6add0 Validity Not Before: Oct 26 13:00:14 2026 GMT Not After : Jan 24 14:00:14 2027 GMT Subject: CN=758ec25d-4c34-4578-9fcf-d241c18cd28f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c6:ec:87:31:51:2a:47:d0:8f:9c:83:00:1f: d3:3a:a3:0a:1b:93:df:b0:21:d0:6f:ec:54:a8:a3: c5:15:25:20:7c:45:34:20:b4:0a:a8:b4:5b:c6:81: 73:cc:ef:3c:f0:f2:1c:16:bf:a0:ab:5a:96:e0:90: 18:e8:ba:c3:52:a7:6f:17:1b:33:51:cb:51:6b:dd: ce:c4:59:45:bb:10:9d:ae:89:d1:26:c6:54:15:29: 76:fa:c2:40:7f:52:cb:0e:9b:8e:5e:ba:b6:b2:94: 09:cf:f1:69:c5:34:30:c5:c5:ac:8a:13:28:e4:eb: ed:61:75:81:6e:23:6d:8a:a0:c3:60:cb:41:29:8a: b6:7b:55:d8:32:37:f9:95:57:ae:02:f2:2e:9f:a1: 5c:80:30:83:72:8d:c4:4f:0e:42:34:1d:df:46:db: 8c:a6:b0:16:7b:d7:bd:e0:dc:b2:d4:23:ae:b4:6f: 61:9b:0d:fc:86:b5:88:85:f7:1d:d1:8e:b4:7e:73: 52:c2:1c:b0:ef:64:f5:16:ea:b5:34:ef:42:72:15: 8f:99:f4:eb:ed:10:d6:b0:63:dc:23:ad:d0:38:1f: 13:21:88:03:bf:d0:77:d9:88:cf:e8:24:90:a1:cc: 1a:bf:c8:7b:f3:20:06:5f:94:0f:7e:8e:09:ef:b6: 7e:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:BD:5B:06:89:2B:0E:C8:18:5B:0C:B0:D3:CF:64:EB:36:3E:5E:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/b1e5cff4-08a1-35e5-8ed5-16a63aa07039.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl X509v3 Authority Key Identifier: keyid:A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer sbgp-ipAddrBlock: critical IPv6: 2602:fbdc:87::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:a4:01:5f:6f:16:46:8c:74:5c:75:8c:a3:66:c8:ea:f1:8d: 40:2e:f2:19:a7:a1:ef:40:ab:5a:2d:1d:5e:3d:aa:fc:e9:72: 79:7f:64:c1:bd:ff:b7:39:00:23:67:11:4d:10:c3:27:16:fc: fc:46:cf:eb:e0:92:bb:77:08:7a:66:90:a3:15:9f:24:56:10: ce:19:b6:b6:77:70:a5:e5:99:cd:a8:2f:72:27:ef:48:2e:cf: 83:46:ce:b9:3b:e9:ee:97:d5:99:37:95:31:7e:4f:6a:ab:52: d0:e7:96:f3:d1:84:b9:c9:f0:60:8e:e6:b1:3e:a3:1f:cc:de: 2c:50:c3:2c:c7:51:7d:58:6d:07:dc:33:b9:12:ed:20:f2:cb: de:25:62:54:ad:10:2c:64:af:00:c9:86:a8:06:6c:0d:88:4e: 51:fd:f9:28:dd:3c:c9:af:a5:b6:a3:2f:2a:d5:d2:4e:d0:26: e2:d1:da:39:fb:0a:0f:2b:af:85:71:0a:f5:7f:39:30:df:a5: 5c:56:f3:65:95:2d:a1:c7:5a:69:1a:22:78:e5:fe:54:fd:29: 09:35:b6:3e:00:be:fc:de:2f:d9:25:be:ec:cc:05:c6:db:2b: ee:7e:85:c1:38:0b:21:f5:b4:83:13:3f:9f:69:80:a1:49:d8: 6a:a8:75:72 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE+hYy2O0pNn2+ZTpQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzZlZTAzNTUtMWQyMy00ZWFkLTg4NTgtYjI2YTgxYzZh ZGQwMB4XDTI2MTAyNjEzMDAxNFoXDTI3MDEyNDE0MDAxNFowLzEtMCsGA1UEAxMk NzU4ZWMyNWQtNGMzNC00NTc4LTlmY2YtZDI0MWMxOGNkMjhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMbshzFRKkfQj5yDAB/TOqMKG5PfsCHQb+xU qKPFFSUgfEU0ILQKqLRbxoFzzO888PIcFr+gq1qW4JAY6LrDUqdvFxszUctRa93O xFlFuxCdronRJsZUFSl2+sJAf1LLDpuOXrq2spQJz/FpxTQwxcWsihMo5OvtYXWB biNtiqDDYMtBKYq2e1XYMjf5lVeuAvIun6FcgDCDco3ETw5CNB3fRtuMprAWe9e9 4Nyy1COutG9hmw38hrWIhfcd0Y60fnNSwhyw72T1Fuq1NO9CchWPmfTr7RDWsGPc I63QOB8TIYgDv9B32YjP6CSQocwav8h78yAGX5QPfo4J77Z+BQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCK9WwaJKw7IGFsMsNPPZOs2Pl5HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zNmVl MDM1NS0xZDIzLTRlYWQtODg1OC1iMjZhODFjNmFkZDAvYjFlNWNmZjQtMDhhMS0z NWU1LThlZDUtMTZhNjNhYTA3MDM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzZlZTAzNTUtMWQyMy00ZWFkLTg4 NTgtYjI2YTgxYzZhZGQwLzM2ZWUwMzU1LTFkMjMtNGVhZC04ODU4LWIyNmE4MWM2 YWRkMC5jcmwwHwYDVR0jBBgwFoAUo7u6I6BDs3ssyq/gqkQQqxGTcJUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zNmVlMDM1NS0xZDIzLTRlYWQtODg1OC1iMjZh ODFjNmFkZDAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL73ACH MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADKkAV9vFkaMdFx1jKNmyOrxjUAu8hmnoe9Aq1otHV49qvzpcnl/ ZMG9/7c5ACNnEU0QwycW/PxGz+vgkrt3CHpmkKMVnyRWEM4ZtrZ3cKXlmc2oL3In 70guz4NGzrk76e6X1Zk3lTF+T2qrUtDnlvPRhLnJ8GCO5rE+ox/M3ixQwyzHUX1Y bQfcM7kS7SDyy94lYlStECxkrwDJhqgGbA2ITlH9+SjdPMmvpbajLyrV0k7QJuLR 2jn7Cg8rr4VxCvV/OTDfpVxW82WVLaHHWmkaInjl/lT9KQk1tj4AvvzeL9klvuzM BcbbK+5+hcE4CyH1tIMTP59pgKFJ2GqodXI= -----END CERTIFICATE-----Generated at Sat Oct 31 12:42:18 2026 by rpki-client