$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/43c7ebb2-a87f-3df2-9be6-3e20b0838390.roa File: 43c7ebb2-a87f-3df2-9be6-3e20b0838390.roa (raw, json) Hash identifier: lTg0qtq//g7dJCoyYrfQQ0NP4UYpcglY8WioufxydoY= Subject key identifier: 0E:50:56:BC:3B:4A:B0:BC:20:28:B0:49:DD:D1:54:52:7A:1C:E6:2F Certificate issuer: /CN=36ee0355-1d23-4ead-8858-b26a81c6add0 Certificate serial: 010D0C9F4328584BBCDADFB416AB127EB1851F40 Authority key identifier: A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/43c7ebb2-a87f-3df2-9be6-3e20b0838390.roa Signing time: Mon 03 Nov 2025 14:00:38 +0000 ROA not before: Mon 03 Nov 2025 14:00:38 +0000 ROA not after: Sun 01 Feb 2026 14:00:38 +0000 asID: 4473 IP address blocks: 2602:fbdc:10::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bc:da:df:b4:16:ab:12:7e:b1:85:1f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36ee0355-1d23-4ead-8858-b26a81c6add0 Validity Not Before: Nov 3 14:00:38 2025 GMT Not After : Feb 1 14:00:38 2026 GMT Subject: CN=c3f3ab85-b12c-4eb1-9392-7a421b82025d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c9:aa:8a:1a:bd:2e:8a:50:29:27:7f:e7:d9: d6:b1:7d:f4:ff:f9:f4:ee:e4:27:b2:ea:a1:a5:d5: aa:0d:98:ae:41:37:2e:c6:5a:f9:bb:62:9b:90:ee: 8c:5e:bb:cb:06:16:c9:fd:34:87:06:9e:f3:70:4c: 4b:8b:68:aa:00:7a:1f:3d:3a:ee:99:76:2c:a4:3f: 43:3b:cf:b5:71:87:ed:e2:22:7e:ea:d9:d9:79:a6: 5e:64:47:89:d6:e0:39:5a:4c:e4:f4:fd:45:d8:7e: 5e:93:ac:27:33:e0:05:67:4b:22:71:79:a1:1e:88: e6:a5:17:46:c6:b5:23:e7:cd:ae:03:82:13:03:5f: 71:2f:bb:e9:a9:03:49:0a:68:0d:93:39:c0:c4:2c: 6e:da:2d:23:67:4b:0d:4c:bf:07:67:91:6f:1b:52: e4:7a:7d:3e:59:18:77:5e:52:fb:1d:66:bf:4d:c8: 1b:45:35:17:e0:8e:d9:6f:42:77:fe:ad:d9:8d:5c: 58:0c:8e:fb:7d:d2:81:43:00:2c:25:16:bc:f3:d1: d5:32:c2:f7:51:d1:56:d0:8c:fb:d5:1f:6a:2e:95: b0:57:9c:87:b7:45:94:bb:7e:32:1d:46:15:a0:0a: 07:24:bc:72:be:3a:94:53:40:ae:37:f5:ee:ed:38: 6a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:50:56:BC:3B:4A:B0:BC:20:28:B0:49:DD:D1:54:52:7A:1C:E6:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/43c7ebb2-a87f-3df2-9be6-3e20b0838390.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl X509v3 Authority Key Identifier: keyid:A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer sbgp-ipAddrBlock: critical IPv6: 2602:fbdc:10::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:d1:33:4c:ff:cd:57:82:3e:45:82:cb:75:04:eb:7d:89:02: 99:b6:c0:3a:5c:86:c5:cf:11:96:de:96:0c:b2:c3:31:c3:de: 3b:f0:78:a4:a5:cb:8d:82:43:de:18:7f:0f:e8:57:1a:8d:b0: 99:a0:87:a5:61:5d:dc:07:96:ce:fc:6e:5a:4c:52:40:45:79: 1b:8e:06:4d:6e:d6:29:02:52:94:5f:6f:af:58:a3:b8:02:6f: 8c:c0:0c:8f:00:d9:42:b8:14:39:95:c5:27:21:e4:f8:c1:90: 09:e1:96:cc:75:59:85:1e:52:bc:35:de:28:36:08:3c:90:3c: 9f:e4:50:44:3b:4e:0d:6e:27:86:c6:e8:a8:44:62:71:e5:48: 39:f3:d9:56:55:0b:69:5c:ac:5d:1e:f9:86:94:b1:90:c2:db: 21:c1:67:44:9f:a5:1c:8b:9c:8c:fd:78:c5:8b:f8:dc:cd:7a: 57:43:46:f3:06:23:24:71:96:25:b7:97:24:83:ef:63:86:74: 35:a6:de:0a:a2:e6:e6:7a:0c:84:42:79:b2:8f:01:27:22:e0: ed:0a:76:ac:a8:4a:38:33:0f:1a:e6:86:5c:d1:a1:58:cc:f2: 81:36:e0:23:b7:fe:b6:76:f6:4f:6a:4b:3a:4c:a8:d5:74:7d: a1:27:82:39 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEu82t+0FqsSfrGFH0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzZlZTAzNTUtMWQyMy00ZWFkLTg4NTgtYjI2YTgxYzZh ZGQwMB4XDTI1MTEwMzE0MDAzOFoXDTI2MDIwMTE0MDAzOFowLzEtMCsGA1UEAxMk YzNmM2FiODUtYjEyYy00ZWIxLTkzOTItN2E0MjFiODIwMjVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsmqihq9LopQKSd/59nWsX30//n07uQnsuqh pdWqDZiuQTcuxlr5u2KbkO6MXrvLBhbJ/TSHBp7zcExLi2iqAHofPTrumXYspD9D O8+1cYft4iJ+6tnZeaZeZEeJ1uA5Wkzk9P1F2H5ek6wnM+AFZ0sicXmhHojmpRdG xrUj582uA4ITA19xL7vpqQNJCmgNkznAxCxu2i0jZ0sNTL8HZ5FvG1Lken0+WRh3 XlL7HWa/TcgbRTUX4I7Zb0J3/q3ZjVxYDI77fdKBQwAsJRa889HVMsL3UdFW0Iz7 1R9qLpWwV5yHt0WUu34yHUYVoAoHJLxyvjqUU0CuN/Xu7ThqIwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFA5QVrw7SrC8ICiwSd3RVFJ6HOYvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zNmVl MDM1NS0xZDIzLTRlYWQtODg1OC1iMjZhODFjNmFkZDAvNDNjN2ViYjItYTg3Zi0z ZGYyLTliZTYtM2UyMGIwODM4MzkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzZlZTAzNTUtMWQyMy00ZWFkLTg4 NTgtYjI2YTgxYzZhZGQwLzM2ZWUwMzU1LTFkMjMtNGVhZC04ODU4LWIyNmE4MWM2 YWRkMC5jcmwwHwYDVR0jBBgwFoAUo7u6I6BDs3ssyq/gqkQQqxGTcJUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zNmVlMDM1NS0xZDIzLTRlYWQtODg1OC1iMjZh ODFjNmFkZDAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL73AAQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJTRM0z/zVeCPkWCy3UE632JApm2wDpchsXPEZbelgyywzHD3jvw eKSly42CQ94Yfw/oVxqNsJmgh6VhXdwHls78blpMUkBFeRuOBk1u1ikCUpRfb69Y o7gCb4zADI8A2UK4FDmVxSch5PjBkAnhlsx1WYUeUrw13ig2CDyQPJ/kUEQ7Tg1u J4bG6KhEYnHlSDnz2VZVC2lcrF0e+YaUsZDC2yHBZ0SfpRyLnIz9eMWL+NzNeldD RvMGIyRxliW3lySD72OGdDWm3gqi5uZ6DIRCebKPASci4O0KdqyoSjgzDxrmhlzR oVjM8oE24CO3/rZ29k9qSzpMqNV0faEngjk= -----END CERTIFICATE-----Generated at Wed Nov 5 18:07:05 2025 by rpki-client