$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/04f3c97a-e40c-3f47-b00e-d00cb85b4144.roa File: 04f3c97a-e40c-3f47-b00e-d00cb85b4144.roa (raw, json) Hash identifier: XbhUMEKZU3VQcHMD6acIpeNkkJlA1WY5wBSEznV4lRg= Subject key identifier: A7:BC:7C:E2:D1:78:2E:AA:16:57:C1:55:6D:FB:36:9C:09:9F:AB:6B Certificate issuer: /CN=eead609d-afe6-45af-8409-34818e8450c5 Certificate serial: 010D0C9F4328584DCF2DEB5E9F15BF3E9981F740 Authority key identifier: 94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/04f3c97a-e40c-3f47-b00e-d00cb85b4144.roa Signing time: Tue 12 May 2026 13:06:26 +0000 ROA not before: Tue 12 May 2026 13:06:26 +0000 ROA not after: Mon 10 Aug 2026 13:06:26 +0000 asID: 399970 IP address blocks: 2602:fc3b:ff00:136::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cf:2d:eb:5e:9f:15:bf:3e:99:81:f7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eead609d-afe6-45af-8409-34818e8450c5 Validity Not Before: May 12 13:06:26 2026 GMT Not After : Aug 10 13:06:26 2026 GMT Subject: CN=894c4574-0adf-4087-ab68-3d74437dbec3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:78:d3:78:5b:d8:7b:cd:09:58:b7:1f:84:30: cd:e3:f3:25:6f:c6:de:44:80:6a:2f:b6:f1:8d:54: e6:10:3f:1a:75:97:c7:0d:ff:aa:24:1d:b5:2e:30: fd:db:be:cc:06:b1:58:fe:4a:b1:4b:74:8a:3f:eb: 0c:95:3d:78:7f:f6:73:15:e4:8c:6e:76:9f:09:23: 42:27:4e:40:1a:14:cf:d0:fa:6a:ec:8e:5e:2f:bc: 4c:95:00:85:8f:8e:8f:c9:45:de:7f:d5:94:2f:b9: 4a:e1:88:b5:3d:8f:e4:3a:fa:30:a1:0c:7a:01:d8: 2a:16:24:7b:9e:60:d6:df:77:9a:34:91:58:d5:22: 6c:8d:c2:1d:18:03:de:23:fa:63:e6:d4:25:c1:c7: b3:d2:06:93:d0:68:5c:43:08:6b:57:f1:fd:01:90: a6:5d:0a:02:b1:14:6b:17:c8:f5:dd:dc:8f:6a:ad: 48:84:e9:c7:00:9c:6c:f8:51:06:fa:6a:6a:6b:ca: 48:31:a3:d3:bc:6f:b9:77:6b:74:24:59:a9:18:06: 2c:29:74:98:00:8d:e3:42:2f:97:af:32:d8:9e:f3: c7:44:6a:8c:61:5d:d6:f8:6a:11:28:fb:a4:19:e2: 30:db:f1:14:0d:32:03:81:21:8c:19:e8:04:97:c6: ef:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:BC:7C:E2:D1:78:2E:AA:16:57:C1:55:6D:FB:36:9C:09:9F:AB:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/04f3c97a-e40c-3f47-b00e-d00cb85b4144.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl X509v3 Authority Key Identifier: keyid:94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer sbgp-ipAddrBlock: critical IPv6: 2602:fc3b:ff00:136::/64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:ef:ac:a4:f3:b3:1e:10:c2:64:8f:83:2b:af:a4:ab:e0:5d: 30:d8:9d:60:d5:a7:21:42:d1:ed:66:b6:62:7c:1e:3f:a3:e2: e6:be:31:d1:3e:c2:44:f0:38:ed:63:19:c8:55:31:64:7f:ec: 0e:39:89:a9:c4:88:3c:c8:15:8d:7e:7e:12:94:73:20:9b:41: df:18:1c:c5:33:da:a6:00:4f:fb:61:0f:40:13:26:8b:9c:a2: f8:97:0d:66:7f:19:40:60:4a:2d:83:c1:30:20:84:9e:24:9c: ac:5b:64:41:8d:2b:09:4f:9a:29:d5:1d:4b:bc:a9:79:09:0a: bb:93:16:d7:b4:3b:85:64:30:32:50:6d:4e:1a:4f:03:d3:26: c9:5b:67:76:4c:d8:9c:58:bd:53:d0:92:b4:81:8e:1a:1f:66: 5c:ec:7b:7e:18:03:d8:4f:d5:62:e9:af:12:60:b4:c5:bd:55: 10:87:59:5a:f8:1c:13:92:61:fa:50:41:42:ef:8a:cb:50:2d: 30:79:75:da:75:7e:4e:7c:b5:d9:c7:6e:79:d8:6d:60:33:0f: c3:50:8b:0f:e8:75:62:5d:5c:f7:ac:33:e8:d9:b1:07:4e:e4: c9:a7:4f:c2:3e:02:37:f4:da:80:cc:f1:2c:a4:6a:04:7a:f3: 72:40:c5:8b -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE3PLetenxW/PpmB90AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWVhZDYwOWQtYWZlNi00NWFmLTg0MDktMzQ4MThlODQ1 MGM1MB4XDTI2MDUxMjEzMDYyNloXDTI2MDgxMDEzMDYyNlowLzEtMCsGA1UEAxMk ODk0YzQ1NzQtMGFkZi00MDg3LWFiNjgtM2Q3NDQzN2RiZWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXjTeFvYe80JWLcfhDDN4/Mlb8beRIBqL7bx jVTmED8adZfHDf+qJB21LjD9277MBrFY/kqxS3SKP+sMlT14f/ZzFeSMbnafCSNC J05AGhTP0Ppq7I5eL7xMlQCFj46PyUXef9WUL7lK4Yi1PY/kOvowoQx6AdgqFiR7 nmDW33eaNJFY1SJsjcIdGAPeI/pj5tQlwcez0gaT0GhcQwhrV/H9AZCmXQoCsRRr F8j13dyPaq1IhOnHAJxs+FEG+mpqa8pIMaPTvG+5d2t0JFmpGAYsKXSYAI3jQi+X rzLYnvPHRGqMYV3W+GoRKPukGeIw2/EUDTIDgSGMGegEl8bvWwIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFKe8fOLReC6qFlfBVW37NpwJn6trMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9lZWFk NjA5ZC1hZmU2LTQ1YWYtODQwOS0zNDgxOGU4NDUwYzUvMDRmM2M5N2EtZTQwYy0z ZjQ3LWIwMGUtZDAwY2I4NWI0MTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZWVhZDYwOWQtYWZlNi00NWFmLTg0 MDktMzQ4MThlODQ1MGM1L2VlYWQ2MDlkLWFmZTYtNDVhZi04NDA5LTM0ODE4ZTg0 NTBjNS5jcmwwHwYDVR0jBBgwFoAUlLfjG9MoedrUC407Be4h1zWUqsswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9lZWFkNjA5ZC1hZmU2LTQ1YWYtODQwOS0zNDgx OGU4NDUwYzUuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAJgL8O/8A ATYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEADe+spPOzHhDCZI+DK6+kq+BdMNidYNWnIULR7Wa2YnweP6Pi 5r4x0T7CRPA47WMZyFUxZH/sDjmJqcSIPMgVjX5+EpRzIJtB3xgcxTPapgBP+2EP QBMmi5yi+JcNZn8ZQGBKLYPBMCCEniScrFtkQY0rCU+aKdUdS7ypeQkKu5MW17Q7 hWQwMlBtThpPA9MmyVtndkzYnFi9U9CStIGOGh9mXOx7fhgD2E/VYumvEmC0xb1V EIdZWvgcE5Jh+lBBQu+Ky1AtMHl12nV+Tny12cduedhtYDMPw1CLD+h1Yl1c96wz 6NmxB07kyadPwj4CN/TagMzxLKRqBHrzckDFiw== -----END CERTIFICATE-----Generated at Tue May 12 21:47:56 2026 by rpki-client