$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/b1e5cff4-08a1-35e5-8ed5-16a63aa07039.roa File: b1e5cff4-08a1-35e5-8ed5-16a63aa07039.roa (raw, json) Hash identifier: BomxHgMS9i10K5xCzVohkNu314jxgaWyjsJ2fmMOku4= Subject key identifier: 73:9F:D5:8D:B6:52:24:9F:C9:B3:27:C8:5D:B8:6A:CF:D7:80:6B:0C Certificate issuer: /CN=36ee0355-1d23-4ead-8858-b26a81c6add0 Certificate serial: 010D0C9F4328584D7CCFD66D62B267F3A21EFF00 Authority key identifier: A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/b1e5cff4-08a1-35e5-8ed5-16a63aa07039.roa Signing time: Mon 13 Apr 2026 01:00:24 +0000 ROA not before: Mon 13 Apr 2026 01:00:24 +0000 ROA not after: Sun 12 Jul 2026 01:00:24 +0000 asID: 3423 IP address blocks: 2602:fbdc:87::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7c:cf:d6:6d:62:b2:67:f3:a2:1e:ff:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36ee0355-1d23-4ead-8858-b26a81c6add0 Validity Not Before: Apr 13 01:00:24 2026 GMT Not After : Jul 12 01:00:24 2026 GMT Subject: CN=d0d9ced0-08b7-453e-86b6-8fdca0dca2ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a9:81:00:7d:a0:2d:d9:63:42:71:dd:65:2a: 13:0f:32:fc:a3:7f:d4:98:ca:44:94:f1:17:93:99: 38:6f:ce:32:c8:13:e9:c8:77:0d:59:0b:8b:6d:d2: 40:13:ac:24:7a:7a:93:b8:3e:2b:2c:07:16:2b:9d: d2:9c:a5:5d:c5:86:1f:b2:63:21:2e:49:fb:61:d1: a0:e1:c5:7e:59:d6:2c:97:2c:9b:6d:d7:68:55:f9: fe:69:6b:fb:51:32:58:62:3b:cf:da:43:83:cd:e9: 4a:a8:47:a4:7b:01:da:c1:35:1d:a1:c4:13:f4:82: e4:da:1e:ea:3b:8d:82:66:20:ae:f3:df:77:82:85: 72:37:71:99:0d:5f:3a:9e:f4:93:f3:77:31:97:a5: 67:96:15:e7:5b:84:0e:e6:8b:2b:1d:01:17:7f:95: dd:1c:52:fc:19:8a:14:ed:b1:50:30:71:c8:3e:76: 30:ae:2a:10:78:68:2e:85:e7:24:24:7d:96:9d:26: c1:21:53:d5:e6:39:12:32:9f:77:98:92:d3:52:d2: ca:05:76:c5:3b:70:0f:a2:bb:d4:c3:53:da:ec:31: 5b:f7:b0:2e:b2:08:0f:38:89:09:55:e0:29:5b:c3: da:44:57:6f:60:0f:f8:55:67:db:df:39:b2:c1:f7: 72:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:9F:D5:8D:B6:52:24:9F:C9:B3:27:C8:5D:B8:6A:CF:D7:80:6B:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/b1e5cff4-08a1-35e5-8ed5-16a63aa07039.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl X509v3 Authority Key Identifier: keyid:A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer sbgp-ipAddrBlock: critical IPv6: 2602:fbdc:87::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:9c:f5:db:ef:a7:68:8c:23:fa:19:5b:7c:d9:a9:13:02:c9: c2:6c:f7:69:19:bf:64:a3:c7:9e:da:20:a8:f4:3b:02:dc:14: dd:c3:56:dc:a0:8c:84:15:9b:de:82:f2:b9:d2:4f:e8:72:42: 8c:dc:52:16:85:4d:78:86:7d:fe:c6:49:7a:28:99:14:c5:c4: 6c:c4:1f:65:2e:a0:81:c3:a2:f0:ca:17:05:91:a4:91:ab:0b: 6c:bd:fd:03:6f:05:d2:13:24:06:c3:b2:4c:4a:3b:32:2e:c4: 89:83:1f:1d:45:f2:e5:49:37:a6:59:46:f5:21:89:b1:11:7d: c0:b9:d6:f2:23:9f:4a:89:37:22:8c:01:9b:bd:09:ce:fb:9b: ef:08:32:b0:32:42:70:d0:75:f4:56:25:7a:91:0b:fd:da:d7: a2:0a:75:ce:26:11:d1:9a:5d:43:29:b4:b9:b6:3f:a2:c0:2e: 84:6f:ed:a8:25:49:b0:ce:e5:63:f1:16:d8:2f:56:f4:42:a5: 15:ea:93:d6:e2:2a:4e:9e:38:ad:69:2e:a8:60:7a:9c:be:8c: ed:7d:0b:6e:21:7f:28:01:3e:ae:cb:58:28:bc:44:8a:5a:f7: 0c:d1:14:e4:f5:75:e6:69:3c:62:b9:42:a6:4d:71:73:4b:0b: 9d:40:77:db -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE18z9ZtYrJn86Ie/wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzZlZTAzNTUtMWQyMy00ZWFkLTg4NTgtYjI2YTgxYzZh ZGQwMB4XDTI2MDQxMzAxMDAyNFoXDTI2MDcxMjAxMDAyNFowLzEtMCsGA1UEAxMk ZDBkOWNlZDAtMDhiNy00NTNlLTg2YjYtOGZkY2EwZGNhMmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqmBAH2gLdljQnHdZSoTDzL8o3/UmMpElPEX k5k4b84yyBPpyHcNWQuLbdJAE6wkenqTuD4rLAcWK53SnKVdxYYfsmMhLkn7YdGg 4cV+WdYslyybbddoVfn+aWv7UTJYYjvP2kODzelKqEekewHawTUdocQT9ILk2h7q O42CZiCu8993goVyN3GZDV86nvST83cxl6VnlhXnW4QO5osrHQEXf5XdHFL8GYoU 7bFQMHHIPnYwrioQeGguheckJH2WnSbBIVPV5jkSMp93mJLTUtLKBXbFO3APorvU w1Pa7DFb97AusggPOIkJVeApW8PaRFdvYA/4VWfb3zmywfdyJwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHOf1Y22UiSfybMnyF24as/XgGsMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zNmVl MDM1NS0xZDIzLTRlYWQtODg1OC1iMjZhODFjNmFkZDAvYjFlNWNmZjQtMDhhMS0z NWU1LThlZDUtMTZhNjNhYTA3MDM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzZlZTAzNTUtMWQyMy00ZWFkLTg4 NTgtYjI2YTgxYzZhZGQwLzM2ZWUwMzU1LTFkMjMtNGVhZC04ODU4LWIyNmE4MWM2 YWRkMC5jcmwwHwYDVR0jBBgwFoAUo7u6I6BDs3ssyq/gqkQQqxGTcJUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zNmVlMDM1NS0xZDIzLTRlYWQtODg1OC1iMjZh ODFjNmFkZDAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL73ACH MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKmc9dvvp2iMI/oZW3zZqRMCycJs92kZv2Sjx57aIKj0OwLcFN3D VtygjIQVm96C8rnST+hyQozcUhaFTXiGff7GSXoomRTFxGzEH2UuoIHDovDKFwWR pJGrC2y9/QNvBdITJAbDskxKOzIuxImDHx1F8uVJN6ZZRvUhibERfcC51vIjn0qJ NyKMAZu9Cc77m+8IMrAyQnDQdfRWJXqRC/3a16IKdc4mEdGaXUMptLm2P6LALoRv 7aglSbDO5WPxFtgvVvRCpRXqk9biKk6eOK1pLqhgepy+jO19C24hfygBPq7LWCi8 RIpa9wzRFOT1deZpPGK5QqZNcXNLC51Ad9s= -----END CERTIFICATE-----Generated at Fri Apr 17 21:26:29 2026 by rpki-client