$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/f920aa5a-1977-33fa-9434-afde31a0d21c.roa File: f920aa5a-1977-33fa-9434-afde31a0d21c.roa (raw, json) Hash identifier: CBRrvSFO4bXQfVn72EMjsm6hwnLl0VYDjI6FYfEFqtE= Subject key identifier: 78:F4:AB:3E:BE:1C:55:CA:40:20:41:A2:E1:5B:28:53:26:B2:F4:EB Certificate issuer: /CN=36ee0355-1d23-4ead-8858-b26a81c6add0 Certificate serial: 010D0C9F4328584FA2C87ED0F74DA408062581C0 Authority key identifier: A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/f920aa5a-1977-33fa-9434-afde31a0d21c.roa Signing time: Tue 27 Oct 2026 01:00:14 +0000 ROA not before: Tue 27 Oct 2026 01:00:14 +0000 ROA not after: Mon 25 Jan 2027 02:00:14 +0000 asID: 4186 IP address blocks: 2602:fbdc:12::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a2:c8:7e:d0:f7:4d:a4:08:06:25:81:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36ee0355-1d23-4ead-8858-b26a81c6add0 Validity Not Before: Oct 27 01:00:14 2026 GMT Not After : Jan 25 02:00:14 2027 GMT Subject: CN=153392b0-b3b7-4e25-9bc2-90cf3361b540 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:cf:bd:0a:70:61:af:30:ea:41:a6:81:1c:ae: c8:27:90:3d:51:ef:39:0b:f9:5b:a4:bb:5c:b8:d6: 86:30:ae:4b:31:34:99:68:f1:62:8c:8a:39:ab:f2: 4c:0c:e0:78:06:a8:bb:df:fd:e5:85:0b:63:71:ed: 9b:cd:ce:80:4a:74:91:91:78:5d:0b:69:4e:25:47: 60:73:30:ea:5a:b1:34:f8:c0:4f:e2:3d:97:2b:25: 2a:2d:35:49:81:98:9f:5d:c5:7c:d3:11:46:5a:57: f8:2f:c1:3a:97:67:b6:80:4d:64:74:14:a5:dd:f1: e7:c5:be:36:ce:22:e1:df:9e:08:0d:da:93:b9:d6: ed:ab:1d:7b:74:28:0b:80:9a:c1:16:c6:c8:88:4d: 14:d5:6c:94:88:3a:93:41:8e:92:42:91:b5:a3:4c: 38:fa:e4:23:b4:ac:57:58:5f:51:db:53:52:46:c7: e9:d5:86:4e:6e:55:db:5c:d3:c0:05:fd:4d:00:88: 19:6e:98:9f:33:ba:ce:91:61:6d:2f:24:84:2f:5e: 88:9e:b2:d6:01:e5:cf:43:85:21:bf:ad:5d:33:b0: bd:46:73:2f:07:b8:72:ef:e7:4d:ef:8b:ec:24:13: 88:a6:aa:d8:61:60:24:da:d0:6f:10:40:de:04:7b: 1a:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:F4:AB:3E:BE:1C:55:CA:40:20:41:A2:E1:5B:28:53:26:B2:F4:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/f920aa5a-1977-33fa-9434-afde31a0d21c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl X509v3 Authority Key Identifier: keyid:A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer sbgp-ipAddrBlock: critical IPv6: 2602:fbdc:12::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d0:12:90:fa:04:f9:87:e5:bf:6a:0d:14:b0:bd:9f:b8:e1:1d: 1d:1a:f6:b3:b5:8a:dd:99:04:c6:ce:f2:d6:11:16:e2:ec:40: b5:bd:44:0b:b5:90:5a:bc:68:a1:be:4d:a9:cc:29:49:43:eb: bb:bc:33:ee:d9:4e:b5:c4:8a:b1:ed:2a:2d:ad:af:90:59:50: 51:c9:87:97:2a:a4:54:47:21:5c:29:54:d4:dd:cf:13:8b:e3: 33:ea:e7:04:d3:f8:f8:ca:19:b1:97:47:03:30:b4:e3:f2:3e: a2:07:5e:8b:24:91:89:31:79:a0:59:42:bb:fe:18:a8:c8:2b: d9:fd:33:78:f0:74:ef:ed:e8:8a:34:b0:42:fd:55:af:a7:d3: cb:cf:93:72:1e:33:07:aa:4d:2c:b0:a3:52:17:73:aa:8f:af: df:90:52:1d:cf:b4:2a:92:9c:ed:94:bf:b3:f6:47:62:f2:ff: 44:03:df:eb:0d:5b:4d:fb:d0:e9:a9:76:46:04:5a:29:81:cf: 85:19:9d:05:bf:e1:18:f3:a4:2a:6f:f1:2a:6f:dc:ec:42:22: a9:0c:76:66:29:6b:cb:18:3e:8a:5b:4d:a9:55:71:e7:38:8f: 44:27:7d:88:35:c2:f3:cb:5f:76:6a:9c:7f:84:8a:69:6c:ff: 9a:f8:10:bc -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE+iyH7Q902kCAYlgcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzZlZTAzNTUtMWQyMy00ZWFkLTg4NTgtYjI2YTgxYzZh ZGQwMB4XDTI2MTAyNzAxMDAxNFoXDTI3MDEyNTAyMDAxNFowLzEtMCsGA1UEAxMk MTUzMzkyYjAtYjNiNy00ZTI1LTliYzItOTBjZjMzNjFiNTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAns+9CnBhrzDqQaaBHK7IJ5A9Ue85C/lbpLtc uNaGMK5LMTSZaPFijIo5q/JMDOB4Bqi73/3lhQtjce2bzc6ASnSRkXhdC2lOJUdg czDqWrE0+MBP4j2XKyUqLTVJgZifXcV80xFGWlf4L8E6l2e2gE1kdBSl3fHnxb42 ziLh354IDdqTudbtqx17dCgLgJrBFsbIiE0U1WyUiDqTQY6SQpG1o0w4+uQjtKxX WF9R21NSRsfp1YZOblXbXNPABf1NAIgZbpifM7rOkWFtLySEL16InrLWAeXPQ4Uh v61dM7C9RnMvB7hy7+dN74vsJBOIpqrYYWAk2tBvEEDeBHsawQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHj0qz6+HFXKQCBBouFbKFMmsvTrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zNmVl MDM1NS0xZDIzLTRlYWQtODg1OC1iMjZhODFjNmFkZDAvZjkyMGFhNWEtMTk3Ny0z M2ZhLTk0MzQtYWZkZTMxYTBkMjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzZlZTAzNTUtMWQyMy00ZWFkLTg4 NTgtYjI2YTgxYzZhZGQwLzM2ZWUwMzU1LTFkMjMtNGVhZC04ODU4LWIyNmE4MWM2 YWRkMC5jcmwwHwYDVR0jBBgwFoAUo7u6I6BDs3ssyq/gqkQQqxGTcJUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zNmVlMDM1NS0xZDIzLTRlYWQtODg1OC1iMjZh ODFjNmFkZDAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL73AAS MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBANASkPoE+Yflv2oNFLC9n7jhHR0a9rO1it2ZBMbO8tYRFuLsQLW9 RAu1kFq8aKG+TanMKUlD67u8M+7ZTrXEirHtKi2tr5BZUFHJh5cqpFRHIVwpVNTd zxOL4zPq5wTT+PjKGbGXRwMwtOPyPqIHXoskkYkxeaBZQrv+GKjIK9n9M3jwdO/t 6Io0sEL9Va+n08vPk3IeMweqTSywo1IXc6qPr9+QUh3PtCqSnO2Uv7P2R2Ly/0QD 3+sNW0370OmpdkYEWimBz4UZnQW/4RjzpCpv8Spv3OxCIqkMdmYpa8sYPopbTalV cec4j0QnfYg1wvPLX3ZqnH+Eimls/5r4ELw= -----END CERTIFICATE-----Generated at Sat Oct 31 08:19:39 2026 by rpki-client