$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36d9917c-1061-4b0d-9db2-f1c82dcadd29/d2a082d0-19b1-32d7-91a3-222f02e26207.roa File: d2a082d0-19b1-32d7-91a3-222f02e26207.roa (raw, json) Hash identifier: KBV4AkeCVhQ1CDsZXuxcNmig0AmxYUFh4312atUAcN0= Subject key identifier: A3:34:49:66:8B:8C:5A:F1:A8:F3:25:EB:93:9B:F5:C5:9D:4C:EA:40 Certificate issuer: /CN=36d9917c-1061-4b0d-9db2-f1c82dcadd29 Certificate serial: 010D0C9F4328584B6A6203E2F7CADF7BF9D17AC0 Authority key identifier: 4A:A1:D5:64:07:70:76:F9:DB:55:C8:0E:9B:6B:44:B2:C0:27:46:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36d9917c-1061-4b0d-9db2-f1c82dcadd29.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36d9917c-1061-4b0d-9db2-f1c82dcadd29/d2a082d0-19b1-32d7-91a3-222f02e26207.roa Signing time: Sun 05 Oct 2025 01:00:32 +0000 ROA not before: Sun 05 Oct 2025 01:00:32 +0000 ROA not after: Sat 03 Jan 2026 02:00:32 +0000 asID: 398876 IP address blocks: 2602:f5d9::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36d9917c-1061-4b0d-9db2-f1c82dcadd29/36d9917c-1061-4b0d-9db2-f1c82dcadd29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36d9917c-1061-4b0d-9db2-f1c82dcadd29/36d9917c-1061-4b0d-9db2-f1c82dcadd29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36d9917c-1061-4b0d-9db2-f1c82dcadd29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6a:62:03:e2:f7:ca:df:7b:f9:d1:7a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36d9917c-1061-4b0d-9db2-f1c82dcadd29 Validity Not Before: Oct 5 01:00:32 2025 GMT Not After : Jan 3 02:00:32 2026 GMT Subject: CN=34acc4aa-63dc-41b2-ba9f-6a8446dcde07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:34:66:e6:67:52:26:6d:8b:68:89:3d:45:01: fe:a0:fd:0e:4c:ab:5f:6a:38:16:29:56:45:ea:b1: 92:c6:27:af:cb:9a:07:4d:4b:bc:0a:b8:5d:37:c3: 80:aa:a4:26:26:ff:d7:bf:0e:5d:37:46:99:65:97: a4:4c:11:95:b7:a3:c7:5b:01:84:8f:74:92:3a:24: 71:0a:d6:50:d3:48:2f:66:88:d3:04:2c:57:7b:06: 63:99:c9:cc:4c:32:53:86:8f:9c:e0:5f:12:db:d2: 38:d7:c6:1f:27:a3:bf:c0:b8:f7:ca:25:56:97:8d: 88:5b:e6:8b:b3:2f:ab:9e:04:ae:52:92:c1:5d:ee: b1:5b:60:d7:a5:b8:4b:ac:fd:ce:12:3e:ae:fc:b4: d5:0f:0d:9f:30:2b:20:4a:47:f9:2c:30:33:ca:6f: 8c:f7:a5:65:0c:1c:d1:3c:fb:8f:48:69:b6:ab:21: 06:c1:81:6b:f6:c3:e4:a8:3b:69:78:ff:32:4d:72: f3:0c:f2:b0:df:8f:25:b5:e4:33:d2:56:22:62:b3: 4d:5d:9e:03:11:51:a4:69:e5:e5:4a:c7:a3:c6:ad: ca:0f:8f:d6:45:5e:e0:fe:aa:88:04:fa:f5:e8:32: df:ea:21:aa:ae:89:6e:f5:9e:75:17:cb:b4:e1:d2: 46:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:34:49:66:8B:8C:5A:F1:A8:F3:25:EB:93:9B:F5:C5:9D:4C:EA:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36d9917c-1061-4b0d-9db2-f1c82dcadd29/d2a082d0-19b1-32d7-91a3-222f02e26207.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36d9917c-1061-4b0d-9db2-f1c82dcadd29/36d9917c-1061-4b0d-9db2-f1c82dcadd29.crl X509v3 Authority Key Identifier: keyid:4A:A1:D5:64:07:70:76:F9:DB:55:C8:0E:9B:6B:44:B2:C0:27:46:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36d9917c-1061-4b0d-9db2-f1c82dcadd29.cer sbgp-ipAddrBlock: critical IPv6: 2602:f5d9::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:d5:09:13:bf:85:d2:31:cd:0e:61:5d:21:c0:d9:79:da:ce: 18:ac:35:fe:fa:83:7b:5a:95:08:11:5f:98:78:cb:ce:9a:18: de:97:59:c0:6f:ae:31:dc:a9:33:8d:27:52:6c:96:01:8d:0b: 5d:6b:11:41:2b:90:bf:33:b4:e6:d9:9b:0b:61:82:70:3f:06: c3:2a:30:be:51:95:13:7a:11:19:17:71:e5:7b:07:a6:28:a6: d5:a1:15:0d:56:91:d9:1d:6e:17:2b:4f:7a:d6:ca:68:e0:09: 20:61:74:ae:f2:93:df:11:ec:99:02:39:5c:d9:40:bd:37:13: dd:9d:eb:81:a6:51:55:b2:4d:5a:c7:fb:87:90:79:3a:08:ce: f6:43:8a:5f:3d:b5:2d:49:a4:79:8a:7f:a3:9d:58:09:17:f4: d2:5f:db:f5:ca:9c:a8:23:70:59:99:27:77:0a:a8:cb:eb:c6: 13:ee:22:a6:04:1a:60:cd:13:8b:8c:95:ab:fa:65:72:47:63: 37:58:f2:8d:c2:60:6a:e0:06:cb:a4:eb:ca:5c:4b:e5:b4:ea: 9e:04:31:10:d2:63:e7:1b:66:07:a4:54:42:eb:c9:31:29:11: f3:cf:f6:d1:2b:75:94:1b:45:67:f8:6a:66:95:e6:ea:b5:79: f7:0b:f1:b4 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEtqYgPi98rfe/nResAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzZkOTkxN2MtMTA2MS00YjBkLTlkYjItZjFjODJkY2Fk ZDI5MB4XDTI1MTAwNTAxMDAzMloXDTI2MDEwMzAyMDAzMlowLzEtMCsGA1UEAxMk MzRhY2M0YWEtNjNkYy00MWIyLWJhOWYtNmE4NDQ2ZGNkZTA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0jRm5mdSJm2LaIk9RQH+oP0OTKtfajgWKVZF 6rGSxievy5oHTUu8CrhdN8OAqqQmJv/Xvw5dN0aZZZekTBGVt6PHWwGEj3SSOiRx CtZQ00gvZojTBCxXewZjmcnMTDJTho+c4F8S29I418YfJ6O/wLj3yiVWl42IW+aL sy+rngSuUpLBXe6xW2DXpbhLrP3OEj6u/LTVDw2fMCsgSkf5LDAzym+M96VlDBzR PPuPSGm2qyEGwYFr9sPkqDtpeP8yTXLzDPKw348lteQz0lYiYrNNXZ4DEVGkaeXl Ssejxq3KD4/WRV7g/qqIBPr16DLf6iGqrolu9Z51F8u04dJG1wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFKM0SWaLjFrxqPMl65Ob9cWdTOpAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zNmQ5 OTE3Yy0xMDYxLTRiMGQtOWRiMi1mMWM4MmRjYWRkMjkvZDJhMDgyZDAtMTliMS0z MmQ3LTkxYTMtMjIyZjAyZTI2MjA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzZkOTkxN2MtMTA2MS00YjBkLTlk YjItZjFjODJkY2FkZDI5LzM2ZDk5MTdjLTEwNjEtNGIwZC05ZGIyLWYxYzgyZGNh ZGQyOS5jcmwwHwYDVR0jBBgwFoAUSqHVZAdwdvnbVcgOm2tEssAnRrcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zNmQ5OTE3Yy0xMDYxLTRiMGQtOWRiMi1mMWM4 MmRjYWRkMjkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL12QAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAntUJE7+F0jHNDmFdIcDZedrOGKw1/vqDe1qVCBFfmHjLzpoY3pdZ wG+uMdypM40nUmyWAY0LXWsRQSuQvzO05tmbC2GCcD8GwyowvlGVE3oRGRdx5XsH piim1aEVDVaR2R1uFytPetbKaOAJIGF0rvKT3xHsmQI5XNlAvTcT3Z3rgaZRVbJN Wsf7h5B5OgjO9kOKXz21LUmkeYp/o51YCRf00l/b9cqcqCNwWZkndwqoy+vGE+4i pgQaYM0Ti4yVq/plckdjN1jyjcJgauAGy6TrylxL5bTqngQxENJj5xtmB6RUQuvJ MSkR88/20St1lBtFZ/hqZpXm6rV59wvxtA== -----END CERTIFICATE-----Generated at Wed Oct 22 04:35:04 2025 by rpki-client