$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/3bd4e890-8cc4-34ef-ae75-20933977b663.roa File: 3bd4e890-8cc4-34ef-ae75-20933977b663.roa (raw, json) Hash identifier: QHeS/Txakct4MAWf8ZR8p2zMomORUi36agKrqKsXT9M= Subject key identifier: 10:1B:D9:82:F4:F2:14:97:96:57:E6:49:79:1E:31:4B:1D:B3:79:E8 Certificate issuer: /CN=36ee0355-1d23-4ead-8858-b26a81c6add0 Certificate serial: 010D0C9F4328584BBB758F7D373F00764B06A680 Authority key identifier: A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/3bd4e890-8cc4-34ef-ae75-20933977b663.roa Signing time: Mon 03 Nov 2025 02:00:31 +0000 ROA not before: Mon 03 Nov 2025 02:00:31 +0000 ROA not after: Sun 01 Feb 2026 02:00:31 +0000 asID: 3423 IP address blocks: 2602:fbdc:8d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bb:75:8f:7d:37:3f:00:76:4b:06:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36ee0355-1d23-4ead-8858-b26a81c6add0 Validity Not Before: Nov 3 02:00:31 2025 GMT Not After : Feb 1 02:00:31 2026 GMT Subject: CN=7860fd99-ed47-499e-a446-336ffc56fa4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:60:a0:45:c9:d2:42:2e:c1:e2:55:e4:81:0c: 1f:0a:b2:31:46:ed:b0:0c:ae:b4:f7:0d:4d:49:8f: 80:64:2d:51:a7:d1:dd:a8:7b:3c:30:b6:9b:8e:07: ad:2c:bf:08:52:6f:1c:0e:75:37:a3:32:68:4e:93: 14:37:e1:02:5e:31:1f:ad:bf:9d:06:18:49:98:67: f6:5b:01:be:17:50:15:41:13:eb:1f:ec:35:ae:c1: 9b:56:c9:15:e5:d3:a3:74:67:9f:43:08:59:c9:4a: f3:e4:49:e4:b1:ff:db:53:1d:b2:f1:7b:9c:e6:78: 0b:85:0a:2f:d1:fd:79:cc:a2:0f:cf:bc:75:bd:a8: 49:3e:6a:d9:e3:65:7d:a7:3e:32:b4:5a:be:20:06: dc:6d:f7:e8:16:f1:94:54:30:2f:93:e0:66:37:62: 7d:71:19:bb:4b:41:28:2a:b5:69:8d:99:31:9e:14: c1:4b:e6:30:b0:cb:ad:67:af:dc:52:70:15:7e:65: 3b:d4:86:9e:3a:02:30:26:43:28:83:c8:0c:4c:b3: a6:bf:91:3b:b9:b2:3e:b2:f9:bf:af:10:8a:16:6a: b2:13:92:ec:a3:0a:eb:56:96:57:d3:2b:61:b3:c1: 1c:e7:b8:5b:c6:0f:5b:a2:4d:59:66:37:96:02:15: 8c:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:1B:D9:82:F4:F2:14:97:96:57:E6:49:79:1E:31:4B:1D:B3:79:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/3bd4e890-8cc4-34ef-ae75-20933977b663.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl X509v3 Authority Key Identifier: keyid:A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer sbgp-ipAddrBlock: critical IPv6: 2602:fbdc:8d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:03:ec:74:dc:9d:2e:b8:7b:4e:b3:da:6e:a3:69:23:de:85: 15:31:ff:1d:b0:e9:3f:9d:fd:71:c6:1d:08:b4:51:97:b4:6b: 42:10:55:64:bc:29:f3:28:5a:cb:8b:e8:18:54:37:e9:48:3e: de:39:40:d5:b5:f9:e8:f0:05:6f:3c:8b:09:e6:4c:90:10:af: 48:76:3d:fd:a6:2a:36:66:cb:ea:76:ad:a6:b9:99:aa:cd:d7: 55:b6:7b:02:f6:eb:3e:43:e9:e4:69:fb:8d:6e:ff:dd:98:03: 28:eb:5a:26:b4:d4:45:b4:a8:4d:2e:51:ce:8f:a4:a1:f4:f5: 05:7d:f4:30:65:0b:de:34:27:6f:2f:85:d3:80:94:dd:16:90: e4:fe:03:3b:1d:4f:5f:ab:10:de:61:3d:d9:3e:c5:b0:cf:75: c5:c9:96:28:04:a0:51:d4:3a:ca:59:f9:8e:a2:e7:47:30:3d: 2b:7c:e3:a5:ac:d0:46:f7:b9:55:0a:ea:70:e7:ee:14:d1:9f: 4c:ac:a7:fe:61:4f:bc:68:e9:d4:2e:58:a6:d3:f3:f2:19:3a: e3:48:3c:e6:34:38:f2:1c:77:51:e1:fc:d3:b4:94:86:45:98: db:9c:fc:d4:97:a6:47:ff:32:2a:92:a5:d7:97:69:05:03:15: 1f:d4:0c:93 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEu7dY99Nz8AdksGpoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzZlZTAzNTUtMWQyMy00ZWFkLTg4NTgtYjI2YTgxYzZh ZGQwMB4XDTI1MTEwMzAyMDAzMVoXDTI2MDIwMTAyMDAzMVowLzEtMCsGA1UEAxMk Nzg2MGZkOTktZWQ0Ny00OTllLWE0NDYtMzM2ZmZjNTZmYTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2CgRcnSQi7B4lXkgQwfCrIxRu2wDK609w1N SY+AZC1Rp9HdqHs8MLabjgetLL8IUm8cDnU3ozJoTpMUN+ECXjEfrb+dBhhJmGf2 WwG+F1AVQRPrH+w1rsGbVskV5dOjdGefQwhZyUrz5Enksf/bUx2y8Xuc5ngLhQov 0f15zKIPz7x1vahJPmrZ42V9pz4ytFq+IAbcbffoFvGUVDAvk+BmN2J9cRm7S0Eo KrVpjZkxnhTBS+YwsMutZ6/cUnAVfmU71IaeOgIwJkMog8gMTLOmv5E7ubI+svm/ rxCKFmqyE5LsowrrVpZX0yths8Ec57hbxg9bok1ZZjeWAhWMpQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBAb2YL08hSXllfmSXkeMUsds3noMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zNmVl MDM1NS0xZDIzLTRlYWQtODg1OC1iMjZhODFjNmFkZDAvM2JkNGU4OTAtOGNjNC0z NGVmLWFlNzUtMjA5MzM5NzdiNjYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzZlZTAzNTUtMWQyMy00ZWFkLTg4 NTgtYjI2YTgxYzZhZGQwLzM2ZWUwMzU1LTFkMjMtNGVhZC04ODU4LWIyNmE4MWM2 YWRkMC5jcmwwHwYDVR0jBBgwFoAUo7u6I6BDs3ssyq/gqkQQqxGTcJUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zNmVlMDM1NS0xZDIzLTRlYWQtODg1OC1iMjZh ODFjNmFkZDAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL73ACN MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAE0D7HTcnS64e06z2m6jaSPehRUx/x2w6T+d/XHGHQi0UZe0a0IQ VWS8KfMoWsuL6BhUN+lIPt45QNW1+ejwBW88iwnmTJAQr0h2Pf2mKjZmy+p2raa5 marN11W2ewL26z5D6eRp+41u/92YAyjrWia01EW0qE0uUc6PpKH09QV99DBlC940 J28vhdOAlN0WkOT+AzsdT1+rEN5hPdk+xbDPdcXJligEoFHUOspZ+Y6i50cwPSt8 46Ws0Eb3uVUK6nDn7hTRn0ysp/5hT7xo6dQuWKbT8/IZOuNIPOY0OPIcd1Hh/NO0 lIZFmNuc/NSXpkf/MiqSpdeXaQUDFR/UDJM= -----END CERTIFICATE-----Generated at Wed Nov 5 14:30:57 2025 by rpki-client