$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/c3ebf747-6ca8-3bab-a874-1da2e46ed947.roa File: c3ebf747-6ca8-3bab-a874-1da2e46ed947.roa (raw, json) Hash identifier: fVxbVt6sJNdTksD1e/JQAFcmGXxiCYETaLQr3pENVKY= Subject key identifier: 47:CB:23:CE:55:B2:4C:7E:B5:16:C2:15:F0:47:3F:14:0E:5B:C7:D2 Certificate issuer: /CN=36ee0355-1d23-4ead-8858-b26a81c6add0 Certificate serial: 010D0C9F4328584D7CCFD65FD36220E65D5B6D00 Authority key identifier: A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/c3ebf747-6ca8-3bab-a874-1da2e46ed947.roa Signing time: Mon 13 Apr 2026 01:00:24 +0000 ROA not before: Mon 13 Apr 2026 01:00:24 +0000 ROA not after: Sun 12 Jul 2026 01:00:24 +0000 asID: 3423 IP address blocks: 2602:fbdc:86::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7c:cf:d6:5f:d3:62:20:e6:5d:5b:6d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36ee0355-1d23-4ead-8858-b26a81c6add0 Validity Not Before: Apr 13 01:00:24 2026 GMT Not After : Jul 12 01:00:24 2026 GMT Subject: CN=f8f36e0e-7f3a-46cf-ad34-063dc6012bca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:8b:bc:19:5a:50:4b:5c:e6:d5:24:f4:25:bf: 19:ac:ee:67:3e:f8:36:e4:e5:6a:e7:95:2d:09:ab: b6:f0:06:be:cd:ca:0c:55:52:c2:d4:de:54:f0:fa: 02:70:75:93:ac:80:b1:6a:89:9e:cb:d9:ff:58:ca: f4:2f:46:71:93:69:b8:04:c8:9d:87:4d:e3:0c:3a: cc:44:52:cd:67:cb:0c:7b:e2:94:d9:2c:80:76:03: 5c:28:b4:93:11:e9:13:e6:54:c9:bc:f3:cd:59:b2: 37:b8:6b:00:98:10:ee:5c:a2:cd:d5:11:17:6e:01: c9:02:33:bd:01:c3:de:71:25:69:36:83:3e:23:c9: 87:4d:7a:5c:34:8d:21:e2:ce:e9:64:4a:01:6f:08: e2:34:38:6f:d9:e4:03:08:83:5e:d3:c9:8f:d6:ef: f0:84:cd:58:9b:08:be:68:32:12:95:5a:00:e8:d0: c2:08:98:ad:05:8b:eb:b6:6c:d3:72:b6:4c:59:b2: af:b9:a9:ff:75:37:bc:bb:cb:78:32:3b:fe:d0:a2: 46:7e:d1:ba:d3:15:25:09:fa:c6:00:07:88:d4:eb: ff:e1:a8:e3:db:49:c8:c3:f5:ca:b2:6f:51:2c:4f: 2f:43:3f:ac:00:22:d1:ff:89:bc:6e:ee:b7:ad:f7: 23:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:CB:23:CE:55:B2:4C:7E:B5:16:C2:15:F0:47:3F:14:0E:5B:C7:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/c3ebf747-6ca8-3bab-a874-1da2e46ed947.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl X509v3 Authority Key Identifier: keyid:A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer sbgp-ipAddrBlock: critical IPv6: 2602:fbdc:86::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:8d:ea:ad:0a:31:0e:3e:a2:e9:84:3e:bf:19:a6:a4:de:24: 4d:16:a9:f0:f0:5b:16:af:db:47:ac:5f:a1:4b:d3:ab:32:36: f2:b2:55:65:29:a5:90:8b:5f:db:68:4d:d5:56:e2:5c:19:45: 34:39:7a:a3:f8:5c:4c:23:51:f8:39:af:2a:25:6b:a7:fc:62: fa:12:31:8b:47:63:74:50:77:4c:ee:87:16:89:34:5b:e0:d3: 95:1e:e5:f1:17:b3:58:70:9d:8e:63:ba:91:66:fb:0c:5b:f5: a0:27:09:30:6d:c7:d4:1a:ba:34:13:f5:1b:c2:91:19:73:07: f8:da:59:e1:6e:06:14:c9:4d:50:86:ac:33:f9:8b:05:64:c6: 41:d3:11:11:c3:38:14:fa:d0:12:6f:95:6c:16:4a:98:4c:c5: b4:65:95:af:d9:15:53:ad:a4:5d:11:1e:0a:97:92:dc:01:97: 54:ba:e6:a4:0a:f7:f7:b5:a1:06:00:fc:d9:bf:8d:49:65:c3: b9:de:e5:da:b2:12:10:f0:50:7c:97:d0:80:41:60:a3:20:4a: b8:d4:93:74:b1:2f:06:45:88:b5:d5:91:51:64:fe:57:4f:ad: 4c:70:a2:dc:e5:5a:29:81:75:b1:34:44:48:f2:d7:ff:c1:89: c3:0d:2e:a1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE18z9Zf02Ig5l1bbQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzZlZTAzNTUtMWQyMy00ZWFkLTg4NTgtYjI2YTgxYzZh ZGQwMB4XDTI2MDQxMzAxMDAyNFoXDTI2MDcxMjAxMDAyNFowLzEtMCsGA1UEAxMk ZjhmMzZlMGUtN2YzYS00NmNmLWFkMzQtMDYzZGM2MDEyYmNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4u8GVpQS1zm1ST0Jb8ZrO5nPvg25OVq55Ut Cau28Aa+zcoMVVLC1N5U8PoCcHWTrICxaomey9n/WMr0L0Zxk2m4BMidh03jDDrM RFLNZ8sMe+KU2SyAdgNcKLSTEekT5lTJvPPNWbI3uGsAmBDuXKLN1REXbgHJAjO9 AcPecSVpNoM+I8mHTXpcNI0h4s7pZEoBbwjiNDhv2eQDCINe08mP1u/whM1Ymwi+ aDISlVoA6NDCCJitBYvrtmzTcrZMWbKvuan/dTe8u8t4Mjv+0KJGftG60xUlCfrG AAeI1Ov/4ajj20nIw/XKsm9RLE8vQz+sACLR/4m8bu63rfcjlQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEfLI85Vskx+tRbCFfBHPxQOW8fSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zNmVl MDM1NS0xZDIzLTRlYWQtODg1OC1iMjZhODFjNmFkZDAvYzNlYmY3NDctNmNhOC0z YmFiLWE4NzQtMWRhMmU0NmVkOTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzZlZTAzNTUtMWQyMy00ZWFkLTg4 NTgtYjI2YTgxYzZhZGQwLzM2ZWUwMzU1LTFkMjMtNGVhZC04ODU4LWIyNmE4MWM2 YWRkMC5jcmwwHwYDVR0jBBgwFoAUo7u6I6BDs3ssyq/gqkQQqxGTcJUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zNmVlMDM1NS0xZDIzLTRlYWQtODg1OC1iMjZh ODFjNmFkZDAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL73ACG MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAI2N6q0KMQ4+oumEPr8ZpqTeJE0WqfDwWxav20esX6FL06syNvKy VWUppZCLX9toTdVW4lwZRTQ5eqP4XEwjUfg5ryola6f8YvoSMYtHY3RQd0zuhxaJ NFvg05Ue5fEXs1hwnY5jupFm+wxb9aAnCTBtx9QaujQT9RvCkRlzB/jaWeFuBhTJ TVCGrDP5iwVkxkHTERHDOBT60BJvlWwWSphMxbRlla/ZFVOtpF0RHgqXktwBl1S6 5qQK9/e1oQYA/Nm/jUllw7ne5dqyEhDwUHyX0IBBYKMgSrjUk3SxLwZFiLXVkVFk /ldPrUxwotzlWimBdbE0REjy1//BicMNLqE= -----END CERTIFICATE-----Generated at Fri Apr 17 20:28:23 2026 by rpki-client