$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/78e0cc6e-cf18-3067-bcf0-01e9fa6b26e7.roa File: 78e0cc6e-cf18-3067-bcf0-01e9fa6b26e7.roa (raw, json) Hash identifier: ou/ALdomLtIIRnwpzLmi0HrWDbAcZQ/VmizvAmc9mGU= Subject key identifier: 36:E4:D1:CE:18:35:BF:85:7B:23:FC:28:0A:7D:BE:BC:5C:D1:39:CB Certificate issuer: /CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c Certificate serial: 010D0C9F4328584DC8304DAD7EFED661D1966582 Authority key identifier: AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/78e0cc6e-cf18-3067-bcf0-01e9fa6b26e7.roa Signing time: Sun 10 May 2026 01:00:24 +0000 ROA not before: Sun 10 May 2026 01:00:24 +0000 ROA not after: Sat 08 Aug 2026 01:00:24 +0000 asID: 36231 IP address blocks: 2600:3500:c25::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c8:30:4d:ad:7e:fe:d6:61:d1:96:65:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c Validity Not Before: May 10 01:00:24 2026 GMT Not After : Aug 8 01:00:24 2026 GMT Subject: CN=f69eb366-340b-4401-9e4a-7eaec9a2ca4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:be:6c:e0:c8:02:7c:37:32:de:6e:6f:11:0a: 5c:27:bb:50:d5:e1:06:c7:fe:f9:22:81:d9:8b:40: e5:fc:75:f2:5a:38:7b:77:33:bb:da:15:b2:cf:2d: 48:fd:0a:68:87:3a:ed:45:01:47:de:89:25:fa:e1: 25:b2:59:22:0e:d2:f5:62:97:70:4d:57:c4:5a:b0: ea:db:be:c2:27:ab:42:a6:26:10:8e:c1:a2:2e:d7: de:c7:02:42:80:95:a6:5d:cc:50:d2:c9:1a:78:e0: d3:ae:8d:5d:ae:0d:69:47:20:56:83:ee:52:69:e3: fd:8a:bc:90:92:bf:6a:87:3a:28:0a:81:4a:33:c1: c6:67:00:7b:c5:97:64:46:e1:db:07:de:b0:f2:2b: ae:b7:eb:e3:be:b9:61:b1:64:60:43:c3:f8:fc:30: 1b:8f:28:38:d3:36:5e:d1:1c:b5:2f:ef:a8:94:f5: f3:15:b0:89:b7:97:3d:58:a1:a9:17:7b:9d:e0:b4: 51:69:c1:e8:aa:12:33:34:1b:9a:1a:fd:3b:f4:da: 6c:59:54:76:92:8d:67:8e:e4:7b:cb:bd:5c:2c:c4: 93:fc:97:af:e8:f0:2d:46:8d:41:19:35:de:e0:31: be:7e:dd:42:3f:82:4e:69:bf:43:97:02:ee:d7:0c: 6c:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:E4:D1:CE:18:35:BF:85:7B:23:FC:28:0A:7D:BE:BC:5C:D1:39:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/78e0cc6e-cf18-3067-bcf0-01e9fa6b26e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.crl X509v3 Authority Key Identifier: keyid:AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer sbgp-ipAddrBlock: critical IPv6: 2600:3500:c25::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:f3:db:f5:f5:f0:68:54:b8:e8:ab:0e:6a:de:96:4d:3d:a1: 93:54:8d:2a:1b:01:c2:0e:32:bf:3e:00:53:ad:d7:ff:07:5d: 23:b1:c8:e1:90:ae:3c:ec:97:67:4d:54:73:dc:62:29:66:20: 71:42:5b:38:60:84:c1:62:59:8a:00:d7:02:ee:e1:e6:78:ac: f1:36:11:07:62:cd:3e:63:66:6c:b1:8f:0c:f5:b0:5c:c5:c1: c4:0b:df:8b:b3:74:b6:ec:40:4d:7a:48:6b:dd:92:fd:3a:03: 23:7d:17:d2:c8:ed:4a:d3:f4:79:af:a1:00:5d:19:c4:15:e0: b6:89:03:ad:7a:7e:f2:66:d5:95:41:c3:ba:81:ca:82:9f:cf: 0d:35:80:ac:47:cc:7b:0c:ff:05:93:4c:c3:dd:b3:98:2a:7b: 9e:ab:7e:d6:0a:5d:7e:0c:4c:7d:a4:98:aa:82:be:d7:ed:cf: 57:ad:3c:f1:3e:a7:e6:df:d6:e7:08:d9:0b:a9:bc:72:0d:cc: 0b:19:e4:6f:3e:02:4f:7c:f0:36:74:be:6a:f7:4b:0c:48:c3: 3c:8a:28:c4:5f:35:5e:1c:59:02:f0:62:73:42:db:e3:f7:64: d8:3d:2f:bd:c4:db:28:17:19:82:49:ab:72:f1:fd:73:c5:95: 30:66:9d:21 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3IME2tfv7WYdGWZYIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk2YjI0YzQtYjY5Mi00Yjk0LTgzZjUtMWRhNTQ5MGI4 ZjNjMB4XDTI2MDUxMDAxMDAyNFoXDTI2MDgwODAxMDAyNFowLzEtMCsGA1UEAxMk ZjY5ZWIzNjYtMzQwYi00NDAxLTllNGEtN2VhZWM5YTJjYTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAib5s4MgCfDcy3m5vEQpcJ7tQ1eEGx/75IoHZ i0Dl/HXyWjh7dzO72hWyzy1I/QpohzrtRQFH3okl+uElslkiDtL1YpdwTVfEWrDq 277CJ6tCpiYQjsGiLtfexwJCgJWmXcxQ0skaeODTro1drg1pRyBWg+5SaeP9iryQ kr9qhzooCoFKM8HGZwB7xZdkRuHbB96w8iuut+vjvrlhsWRgQ8P4/DAbjyg40zZe 0Ry1L++olPXzFbCJt5c9WKGpF3ud4LRRacHoqhIzNBuaGv079NpsWVR2ko1njuR7 y71cLMST/Jev6PAtRo1BGTXe4DG+ft1CP4JOab9DlwLu1wxsJQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDbk0c4YNb+FeyP8KAp9vrxc0TnLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lOTZi MjRjNC1iNjkyLTRiOTQtODNmNS0xZGE1NDkwYjhmM2MvNzhlMGNjNmUtY2YxOC0z MDY3LWJjZjAtMDFlOWZhNmIyNmU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTk2YjI0YzQtYjY5Mi00Yjk0LTgz ZjUtMWRhNTQ5MGI4ZjNjL2U5NmIyNGM0LWI2OTItNGI5NC04M2Y1LTFkYTU0OTBi OGYzYy5jcmwwHwYDVR0jBBgwFoAUq7bjkDZGS9ALmtUiWl6jYHyd1XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9lOTZiMjRjNC1iNjkyLTRiOTQtODNmNS0xZGE1 NDkwYjhmM2MuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgA1AAwl MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA/z2/X18GhUuOirDmrelk09oZNUjSobAcIOMr8+AFOt1/8HXSOx yOGQrjzsl2dNVHPcYilmIHFCWzhghMFiWYoA1wLu4eZ4rPE2EQdizT5jZmyxjwz1 sFzFwcQL34uzdLbsQE16SGvdkv06AyN9F9LI7UrT9HmvoQBdGcQV4LaJA616fvJm 1ZVBw7qByoKfzw01gKxHzHsM/wWTTMPds5gqe56rftYKXX4MTH2kmKqCvtftz1et PPE+p+bf1ucI2QupvHINzAsZ5G8+Ak988DZ0vmr3SwxIwzyKKMRfNV4cWQLwYnNC 2+P3ZNg9L73E2ygXGYJJq3Lx/XPFlTBmnSE= -----END CERTIFICATE-----Generated at Tue May 12 21:23:13 2026 by rpki-client