$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/36746d5e-b777-3090-864b-cc36fff7cc3f.roa File: 36746d5e-b777-3090-864b-cc36fff7cc3f.roa (raw, json) Hash identifier: UQbkDSs2kV+fFTSV60s8UZP50dksQ/fxaxU8AHMS7Uc= Subject key identifier: 29:59:F0:81:10:F4:66:40:89:A2:D0:52:FC:EF:6A:84:5A:D3:35:F5 Certificate issuer: /CN=4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7 Certificate serial: 010D0C9F4328584F9E987BA92F75B15E2771BE00 Authority key identifier: F7:C8:46:F1:D6:FE:04:68:EA:AC:40:E7:0B:41:CA:28:F8:25:DA:59 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/36746d5e-b777-3090-864b-cc36fff7cc3f.roa Signing time: Sun 25 Oct 2026 13:00:13 +0000 ROA not before: Sun 25 Oct 2026 13:00:13 +0000 ROA not after: Sat 23 Jan 2027 14:00:13 +0000 asID: 53589 IP address blocks: 2605:2900::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Nov 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9e:98:7b:a9:2f:75:b1:5e:27:71:be:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7 Validity Not Before: Oct 25 13:00:13 2026 GMT Not After : Jan 23 14:00:13 2027 GMT Subject: CN=445ab9ca-7bf2-4cf3-a56e-e50e600d98f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:cc:2c:86:5f:c7:62:d8:31:0d:3b:c0:9a:20: 52:97:09:40:f9:4c:53:1e:35:28:cd:e8:5c:c9:cd: be:c3:aa:f3:66:5c:fc:b2:1f:40:43:cc:de:9a:e4: da:9b:61:ac:94:d0:8d:b0:ff:9f:68:c2:25:98:4d: 13:b3:98:3d:a8:22:53:bb:1c:1d:dc:cf:eb:bd:8e: da:bb:cd:d5:23:16:89:c2:4c:11:c7:1e:0f:e9:4b: c6:fe:23:2f:04:ec:44:36:e1:dd:28:99:9c:eb:c2: 1e:ac:cd:3b:b4:ce:2a:29:d3:bd:15:88:41:de:ae: ef:3f:90:46:77:cb:9b:41:7e:af:44:29:93:12:95: 19:85:d3:95:54:fb:35:6f:13:6f:c9:0b:12:20:bf: 98:2c:b7:8b:2c:07:4c:88:b7:e7:84:3e:a0:69:9f: a8:e3:1d:7b:9e:83:fb:e3:90:61:0a:fb:59:36:d4: 17:d9:83:b9:6e:2e:e6:b2:da:90:ba:80:aa:66:e0: e9:3f:cc:6c:77:e0:9c:a0:98:a2:e6:75:5b:1f:1d: 51:31:2f:29:a6:e8:af:04:8a:a4:0a:df:b4:cc:2e: aa:26:03:07:99:4e:7a:78:25:79:bc:fb:34:63:d0: 2a:61:9a:7f:52:30:3b:b5:ac:9c:a8:85:db:ac:8d: 7d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:59:F0:81:10:F4:66:40:89:A2:D0:52:FC:EF:6A:84:5A:D3:35:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/36746d5e-b777-3090-864b-cc36fff7cc3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.crl X509v3 Authority Key Identifier: keyid:F7:C8:46:F1:D6:FE:04:68:EA:AC:40:E7:0B:41:CA:28:F8:25:DA:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.cer sbgp-ipAddrBlock: critical IPv6: 2605:2900::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:0f:c1:f3:c8:92:b0:e3:77:97:22:42:a2:c8:27:61:3b:50: 41:45:5d:96:11:64:72:4f:29:b3:b0:2c:fd:d3:54:21:c7:ea: 86:d5:f2:ca:14:94:2b:49:4c:41:2a:2e:62:5c:08:eb:7d:14: e4:02:13:82:be:9a:dc:f9:af:36:90:f9:62:bf:69:4b:53:24: da:fe:2a:a6:b1:df:70:94:f5:c8:18:0a:5b:c3:09:c2:d9:c1: 03:c0:6d:b9:e6:15:c3:35:f2:51:c3:42:de:14:29:92:91:15: 64:da:c0:c5:12:d9:b8:62:b2:db:de:8a:3c:bd:04:ff:c9:a0: 1a:9d:ef:21:ef:87:07:1d:90:a1:14:d4:6c:44:13:e3:1c:c4: f6:0b:db:6a:7a:d2:24:97:b0:8b:8b:e5:4c:37:33:90:03:6d: 43:f4:71:59:5f:cf:4c:7e:0a:d5:52:da:c8:20:e0:c9:ac:a5: a8:94:00:06:e5:17:14:d9:01:44:72:bb:df:57:c9:10:a4:bb: f0:a3:64:cf:ef:d7:5d:69:72:f9:0a:1b:77:fa:67:b5:b1:9c: 65:2d:78:eb:06:f6:4e:f9:8d:1a:e5:11:87:d6:03:a4:19:27: e8:de:aa:58:4f:74:60:7a:6a:45:dc:da:0e:f5:82:1d:8b:8c: 7a:c1:d0:6a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE+emHupL3WxXidxvgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGJlNTFlODItN2NjNS00NTAwLWEwZmYtY2MzYTlkNWUz ZmI3MB4XDTI2MTAyNTEzMDAxM1oXDTI3MDEyMzE0MDAxM1owLzEtMCsGA1UEAxMk NDQ1YWI5Y2EtN2JmMi00Y2YzLWE1NmUtZTUwZTYwMGQ5OGY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncwshl/HYtgxDTvAmiBSlwlA+UxTHjUozehc yc2+w6rzZlz8sh9AQ8zemuTam2GslNCNsP+faMIlmE0Ts5g9qCJTuxwd3M/rvY7a u83VIxaJwkwRxx4P6UvG/iMvBOxENuHdKJmc68IerM07tM4qKdO9FYhB3q7vP5BG d8ubQX6vRCmTEpUZhdOVVPs1bxNvyQsSIL+YLLeLLAdMiLfnhD6gaZ+o4x17noP7 45BhCvtZNtQX2YO5bi7mstqQuoCqZuDpP8xsd+CcoJii5nVbHx1RMS8ppuivBIqk Ct+0zC6qJgMHmU56eCV5vPs0Y9AqYZp/UjA7taycqIXbrI193QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFClZ8IEQ9GZAiaLQUvzvaoRa0zX1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YmU1 MWU4Mi03Y2M1LTQ1MDAtYTBmZi1jYzNhOWQ1ZTNmYjcvMzY3NDZkNWUtYjc3Ny0z MDkwLTg2NGItY2MzNmZmZjdjYzNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNGJlNTFlODItN2NjNS00NTAwLWEw ZmYtY2MzYTlkNWUzZmI3LzRiZTUxZTgyLTdjYzUtNDUwMC1hMGZmLWNjM2E5ZDVl M2ZiNy5jcmwwHwYDVR0jBBgwFoAU98hG8db+BGjqrEDnC0HKKPgl2lkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80YmU1MWU4Mi03Y2M1LTQ1MDAtYTBmZi1jYzNh OWQ1ZTNmYjcuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgUpADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB3D8HzyJKw43eXIkKiyCdhO1BBRV2WEWRyTymzsCz901Qhx+qG1fLK FJQrSUxBKi5iXAjrfRTkAhOCvprc+a82kPliv2lLUyTa/iqmsd9wlPXIGApbwwnC 2cEDwG255hXDNfJRw0LeFCmSkRVk2sDFEtm4YrLb3oo8vQT/yaAane8h74cHHZCh FNRsRBPjHMT2C9tqetIkl7CLi+VMNzOQA21D9HFZX89MfgrVUtrIIODJrKWolAAG 5RcU2QFEcrvfV8kQpLvwo2TP79ddaXL5Cht3+me1sZxlLXjrBvZO+Y0a5RGH1gOk GSfo3qpYT3RgempF3NoO9YIdi4x6wdBq -----END CERTIFICATE-----Generated at Sat Oct 31 22:51:48 2026 by rpki-client