$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/6abf1f1b-4057-350a-89c0-69571a8a0f1e.roa File: 6abf1f1b-4057-350a-89c0-69571a8a0f1e.roa (raw, json) Hash identifier: ASU46yvUzxAMt5qKI0KWVvlAI0OzfzmowCg17gQW6Pw= Subject key identifier: 92:85:29:02:0C:F7:D6:98:43:A0:0A:09:6A:71:2D:E4:EB:BF:B6:FA Certificate issuer: /CN=36ee0355-1d23-4ead-8858-b26a81c6add0 Certificate serial: 010D0C9F4328584ADA9BC45540CB28AA5A1B0BC0 Authority key identifier: A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/6abf1f1b-4057-350a-89c0-69571a8a0f1e.roa Signing time: Thu 14 Aug 2025 13:00:41 +0000 ROA not before: Thu 14 Aug 2025 13:00:41 +0000 ROA not after: Wed 12 Nov 2025 14:00:41 +0000 asID: 3423 IP address blocks: 2602:fbdc:84::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:da:9b:c4:55:40:cb:28:aa:5a:1b:0b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36ee0355-1d23-4ead-8858-b26a81c6add0 Validity Not Before: Aug 14 13:00:41 2025 GMT Not After : Nov 12 14:00:41 2025 GMT Subject: CN=c41e9700-017a-4da8-99d1-b560d310ec84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b9:b0:9d:80:c6:bb:59:fb:bd:ee:03:9a:6a: 24:9b:a1:ba:07:54:36:68:8c:d0:35:3f:9f:9b:dd: ee:ed:41:28:bc:c7:07:71:e6:78:b5:65:2c:7a:5b: 40:6e:c8:23:e3:0c:8c:69:6f:8c:25:8f:81:7e:ee: f7:55:73:52:44:1c:b4:ee:82:0b:dd:89:27:16:72: 49:35:cf:a9:31:9e:ec:84:51:7c:03:3d:64:9b:47: 3d:25:9b:6b:06:7f:8c:c0:25:78:de:10:7e:b7:0a: a5:03:ae:6f:5e:e5:80:24:a9:1c:1f:c1:0e:3a:b2: eb:ac:f3:69:d4:e8:32:bd:7e:4d:1d:54:e9:7b:a0: ed:27:e8:22:52:97:10:47:01:fa:b2:8a:13:d9:ad: b5:01:48:3d:dd:2a:81:f2:02:b6:cd:0d:5f:90:a5: da:25:af:ac:e7:75:91:c0:69:c9:f6:b7:34:fd:a1: 7f:44:f2:61:d5:d7:cd:e3:6a:40:38:70:20:1f:2f: d1:ef:dc:c0:bf:d8:b6:f4:4a:ca:9c:7e:e9:dd:0c: 80:8a:fe:1c:12:8d:2c:33:71:99:bc:9d:32:03:36: ce:78:03:3a:91:d2:0e:bf:a1:9a:1b:ca:bb:12:e9: 1b:6a:84:f5:9b:4b:6b:ce:db:30:fd:1d:2f:d0:83: 65:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:85:29:02:0C:F7:D6:98:43:A0:0A:09:6A:71:2D:E4:EB:BF:B6:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/6abf1f1b-4057-350a-89c0-69571a8a0f1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl X509v3 Authority Key Identifier: keyid:A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer sbgp-ipAddrBlock: critical IPv6: 2602:fbdc:84::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption e2:69:d7:c9:af:3f:81:e4:52:94:3e:20:f5:3f:37:ef:43:ee: fe:26:f1:f0:c7:23:4c:1b:3a:c9:32:1a:7e:d2:dd:7d:b2:13: 75:75:3e:d8:0f:53:2c:d0:60:b6:59:1b:6c:1a:52:7e:1e:f2: 96:66:24:ed:d3:c7:0e:96:ca:8e:13:04:23:16:d1:4a:73:57: f8:4c:04:68:6f:9c:68:1e:96:12:ff:65:a7:08:60:63:8a:6a: c4:79:05:ba:b3:8f:3d:02:e3:5f:47:9b:04:89:f8:e5:83:aa: 6b:02:54:a2:95:c5:df:14:6a:53:65:c2:f8:1e:9e:08:42:5a: 81:d3:74:24:57:75:14:1b:2c:b2:49:8c:20:19:27:fe:fc:6d: 63:67:0e:ac:a1:bc:04:15:a4:e0:ac:bd:f2:6d:63:6f:a1:7c: d3:cf:d1:4a:91:b8:c2:4f:86:ff:0c:cc:b0:0f:a4:13:80:b7: 8f:46:5f:72:6c:25:b2:51:a9:30:05:5f:4d:42:1f:16:bc:a8: 08:eb:42:e3:b0:b4:8b:92:c1:6f:11:fb:21:bf:d1:37:65:6f: 72:ec:35:8f:38:be:a3:f1:49:0a:d1:fc:d1:60:34:e0:29:ab: 9a:1d:39:d9:64:40:c4:82:c0:5e:14:78:ef:0a:71:ea:8b:b0: c0:14:29:45 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEram8RVQMsoqlobC8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzZlZTAzNTUtMWQyMy00ZWFkLTg4NTgtYjI2YTgxYzZh ZGQwMB4XDTI1MDgxNDEzMDA0MVoXDTI1MTExMjE0MDA0MVowLzEtMCsGA1UEAxMk YzQxZTk3MDAtMDE3YS00ZGE4LTk5ZDEtYjU2MGQzMTBlYzg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrmwnYDGu1n7ve4Dmmokm6G6B1Q2aIzQNT+f m93u7UEovMcHceZ4tWUseltAbsgj4wyMaW+MJY+Bfu73VXNSRBy07oIL3YknFnJJ Nc+pMZ7shFF8Az1km0c9JZtrBn+MwCV43hB+twqlA65vXuWAJKkcH8EOOrLrrPNp 1OgyvX5NHVTpe6DtJ+giUpcQRwH6sooT2a21AUg93SqB8gK2zQ1fkKXaJa+s53WR wGnJ9rc0/aF/RPJh1dfN42pAOHAgHy/R79zAv9i29ErKnH7p3QyAiv4cEo0sM3GZ vJ0yAzbOeAM6kdIOv6GaG8q7EukbaoT1m0trztsw/R0v0INldQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJKFKQIM99aYQ6AKCWpxLeTrv7b6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zNmVl MDM1NS0xZDIzLTRlYWQtODg1OC1iMjZhODFjNmFkZDAvNmFiZjFmMWItNDA1Ny0z NTBhLTg5YzAtNjk1NzFhOGEwZjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzZlZTAzNTUtMWQyMy00ZWFkLTg4 NTgtYjI2YTgxYzZhZGQwLzM2ZWUwMzU1LTFkMjMtNGVhZC04ODU4LWIyNmE4MWM2 YWRkMC5jcmwwHwYDVR0jBBgwFoAUo7u6I6BDs3ssyq/gqkQQqxGTcJUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zNmVlMDM1NS0xZDIzLTRlYWQtODg1OC1iMjZh ODFjNmFkZDAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL73ACE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAOJp18mvP4HkUpQ+IPU/N+9D7v4m8fDHI0wbOskyGn7S3X2yE3V1 PtgPUyzQYLZZG2waUn4e8pZmJO3Txw6Wyo4TBCMW0UpzV/hMBGhvnGgelhL/ZacI YGOKasR5Bbqzjz0C419HmwSJ+OWDqmsCVKKVxd8UalNlwvgenghCWoHTdCRXdRQb LLJJjCAZJ/78bWNnDqyhvAQVpOCsvfJtY2+hfNPP0UqRuMJPhv8MzLAPpBOAt49G X3JsJbJRqTAFX01CHxa8qAjrQuOwtIuSwW8R+yG/0Tdlb3LsNY84vqPxSQrR/NFg NOApq5odOdlkQMSCwF4UeO8KceqLsMAUKUU= -----END CERTIFICATE-----Generated at Sun Aug 24 06:24:49 2025 by rpki-client