$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/a99aac20-52c3-35c6-b3fd-8b4b1f78e48d.roa File: a99aac20-52c3-35c6-b3fd-8b4b1f78e48d.roa (raw, json) Hash identifier: vyJs1xrzx8a2vsO7SFyOsd8jfkdVAuMLXM9L2xRBhu0= Subject key identifier: BF:F0:F3:5A:0C:6A:FA:D3:18:2F:78:E6:78:2B:27:5E:56:58:A8:01 Certificate issuer: /CN=36ee0355-1d23-4ead-8858-b26a81c6add0 Certificate serial: 010D0C9F4328584BBB758EE2AE6E75C2C8F3B580 Authority key identifier: A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/a99aac20-52c3-35c6-b3fd-8b4b1f78e48d.roa Signing time: Mon 03 Nov 2025 02:00:31 +0000 ROA not before: Mon 03 Nov 2025 02:00:31 +0000 ROA not after: Sun 01 Feb 2026 02:00:31 +0000 asID: 3423 IP address blocks: 2602:fbdc:85::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bb:75:8e:e2:ae:6e:75:c2:c8:f3:b5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36ee0355-1d23-4ead-8858-b26a81c6add0 Validity Not Before: Nov 3 02:00:31 2025 GMT Not After : Feb 1 02:00:31 2026 GMT Subject: CN=cc780322-b7f3-4beb-b7fa-eec8c992645e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:e6:ba:9f:79:c4:de:26:4d:54:8e:82:1f:62: 00:92:91:ac:4b:a4:af:a3:72:3a:92:c3:61:b3:c4: f7:90:eb:84:fe:78:bc:19:9c:60:fd:94:0c:0a:3d: 17:6c:24:4c:26:2e:52:c7:a2:42:29:71:1b:0b:cb: ac:47:51:c6:a7:3e:db:cc:3d:ae:7d:24:76:10:f9: 61:e4:87:08:0c:7d:16:8c:12:d8:9b:89:71:88:da: 3d:01:98:b0:9d:84:e6:7f:45:ce:db:90:d2:d0:32: 76:5f:37:fd:bc:71:5c:7f:58:63:0e:f7:ca:01:e1: 47:c5:45:e9:9b:d4:97:f1:ad:f7:f6:98:a8:d8:a8: 9c:0b:1d:e4:eb:4d:2b:e1:ea:59:4b:0e:cb:39:50: 1f:61:3b:7e:56:ff:70:9e:fb:0e:e1:55:a9:6a:da: 29:f1:80:69:be:1e:6d:99:1c:54:8a:6a:4d:a0:16: ec:d5:4a:3c:f6:ca:f9:91:32:3e:b1:2b:e8:64:22: 16:bc:86:7a:95:e0:ed:f1:4e:03:2e:e5:5b:55:7b: 21:27:d9:1c:89:a6:22:39:27:47:d5:4e:3e:f9:63: 6d:5e:c5:b1:3f:28:7d:ee:1c:d6:76:c0:c5:6c:9f: e9:e7:87:0e:4d:c4:d4:b4:26:2e:31:2f:de:89:28: 88:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:F0:F3:5A:0C:6A:FA:D3:18:2F:78:E6:78:2B:27:5E:56:58:A8:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/a99aac20-52c3-35c6-b3fd-8b4b1f78e48d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl X509v3 Authority Key Identifier: keyid:A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer sbgp-ipAddrBlock: critical IPv6: 2602:fbdc:85::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:39:59:19:1f:ce:e2:48:2e:9a:bf:0c:a1:d9:c4:08:e8:0b: 64:28:c9:f8:27:7f:76:3b:83:a2:9c:31:73:20:a1:f5:30:cb: f7:2d:e9:2e:6e:74:12:24:ab:fc:3a:1a:39:01:23:0b:10:2e: 16:16:26:98:7f:68:d3:6a:46:00:44:0f:47:f3:05:ae:2b:c0: 17:a5:8d:10:2c:ac:05:66:d8:01:d0:89:c7:6c:c2:34:83:37: 96:0d:2e:f1:83:16:88:c2:cc:67:5c:28:b9:69:e0:d8:cd:2e: 36:d0:84:c8:6d:90:be:e4:c6:3d:4d:1d:f0:ad:63:65:38:00: 26:67:8d:b1:2c:9b:1d:99:38:70:0b:8a:26:fa:67:14:4a:1f: b0:1b:76:c7:68:0d:66:9a:10:03:01:e8:9e:70:16:72:fe:96: f4:47:0a:ad:8e:4c:e9:1b:83:d7:63:56:68:cc:ea:49:a7:2d: c8:32:bc:3e:bd:0d:24:74:1c:bd:d6:66:ff:cc:32:57:53:f3: 5e:d4:d3:c0:a3:cf:32:1b:d5:19:ce:be:cf:27:27:62:99:f5: b9:b4:4d:48:39:67:66:fc:1e:13:a4:bf:c2:58:1b:6e:6a:85: a7:1f:8a:5b:17:e8:e0:a6:5e:74:15:ce:85:ac:70:5a:0d:f0: a5:56:26:f6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEu7dY7irm51wsjztYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzZlZTAzNTUtMWQyMy00ZWFkLTg4NTgtYjI2YTgxYzZh ZGQwMB4XDTI1MTEwMzAyMDAzMVoXDTI2MDIwMTAyMDAzMVowLzEtMCsGA1UEAxMk Y2M3ODAzMjItYjdmMy00YmViLWI3ZmEtZWVjOGM5OTI2NDVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOa6n3nE3iZNVI6CH2IAkpGsS6Svo3I6ksNh s8T3kOuE/ni8GZxg/ZQMCj0XbCRMJi5Sx6JCKXEbC8usR1HGpz7bzD2ufSR2EPlh 5IcIDH0WjBLYm4lxiNo9AZiwnYTmf0XO25DS0DJ2Xzf9vHFcf1hjDvfKAeFHxUXp m9SX8a339pio2KicCx3k600r4epZSw7LOVAfYTt+Vv9wnvsO4VWpatop8YBpvh5t mRxUimpNoBbs1Uo89sr5kTI+sSvoZCIWvIZ6leDt8U4DLuVbVXshJ9kciaYiOSdH 1U4++WNtXsWxPyh97hzWdsDFbJ/p54cOTcTUtCYuMS/eiSiIvQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFL/w81oMavrTGC945ngrJ15WWKgBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zNmVl MDM1NS0xZDIzLTRlYWQtODg1OC1iMjZhODFjNmFkZDAvYTk5YWFjMjAtNTJjMy0z NWM2LWIzZmQtOGI0YjFmNzhlNDhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzZlZTAzNTUtMWQyMy00ZWFkLTg4 NTgtYjI2YTgxYzZhZGQwLzM2ZWUwMzU1LTFkMjMtNGVhZC04ODU4LWIyNmE4MWM2 YWRkMC5jcmwwHwYDVR0jBBgwFoAUo7u6I6BDs3ssyq/gqkQQqxGTcJUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zNmVlMDM1NS0xZDIzLTRlYWQtODg1OC1iMjZh ODFjNmFkZDAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL73ACF MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJQ5WRkfzuJILpq/DKHZxAjoC2Qoyfgnf3Y7g6KcMXMgofUwy/ct 6S5udBIkq/w6GjkBIwsQLhYWJph/aNNqRgBED0fzBa4rwBeljRAsrAVm2AHQicds wjSDN5YNLvGDFojCzGdcKLlp4NjNLjbQhMhtkL7kxj1NHfCtY2U4ACZnjbEsmx2Z OHALiib6ZxRKH7AbdsdoDWaaEAMB6J5wFnL+lvRHCq2OTOkbg9djVmjM6kmnLcgy vD69DSR0HL3WZv/MMldT817U08CjzzIb1RnOvs8nJ2KZ9bm0TUg5Z2b8HhOkv8JY G25qhacfilsX6OCmXnQVzoWscFoN8KVWJvY= -----END CERTIFICATE-----Generated at Wed Nov 5 13:23:56 2025 by rpki-client