$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/10bf42f3-a54c-3894-b779-2d4828dc1b62.roa File: 10bf42f3-a54c-3894-b779-2d4828dc1b62.roa (raw, json) Hash identifier: KrI7GoXG4tmvgYB5YvIPTuJTnNaPXxU4zsdMqKcyEuc= Subject key identifier: 97:BB:E2:D5:71:8B:F0:5A:8C:4A:94:42:8C:93:79:05:6F:B1:3C:1C Certificate issuer: /CN=eead609d-afe6-45af-8409-34818e8450c5 Certificate serial: 010D0C9F4328584DCF2DFDF057C768C9D7098700 Authority key identifier: 94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/10bf42f3-a54c-3894-b779-2d4828dc1b62.roa Signing time: Tue 12 May 2026 13:06:34 +0000 ROA not before: Tue 12 May 2026 13:06:34 +0000 ROA not after: Mon 10 Aug 2026 13:06:34 +0000 asID: 399970 IP address blocks: 2602:fc3b:ff00:257::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cf:2d:fd:f0:57:c7:68:c9:d7:09:87:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eead609d-afe6-45af-8409-34818e8450c5 Validity Not Before: May 12 13:06:34 2026 GMT Not After : Aug 10 13:06:34 2026 GMT Subject: CN=d22f9217-2ddd-41d1-af13-69bec6367b05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:82:fc:f4:e2:3e:1e:72:85:a1:8f:fd:c1:60: 33:f5:d1:97:45:68:fe:1f:1a:66:e9:c1:aa:a7:70: 64:82:b9:ef:d6:06:49:af:4f:82:c6:7b:f5:5a:e8: 10:01:86:52:5a:60:10:8a:be:b8:c9:29:3a:16:a1: d6:65:cc:02:20:f5:b2:50:0f:c3:7d:ec:b7:92:02: d7:7d:86:d5:1d:16:dd:5a:82:39:6d:a7:40:45:0f: 7d:80:82:8a:63:13:65:25:0e:13:dc:18:a4:1d:dd: ec:8d:ca:62:f9:3e:1a:51:f7:a8:42:9e:89:85:3e: 86:9c:c0:43:dd:58:72:62:ac:70:87:e4:ed:5d:f0: 92:e3:b0:0f:af:1f:27:c6:0f:5a:1f:ac:f5:f5:c6: 83:76:f5:ac:5c:f9:01:6d:aa:5a:15:c6:11:b9:7d: 00:40:ac:15:6f:a1:de:88:c8:ba:55:f2:28:bc:44: 9f:de:8d:44:6f:da:14:08:38:41:90:48:82:b1:ac: bd:56:80:73:4a:8b:32:c7:22:8c:d3:d0:2e:be:56: 29:78:80:3a:4d:41:71:53:3d:cd:a7:ec:a7:f9:8c: 73:75:9e:8c:46:93:58:af:2d:61:cc:1f:98:b6:b3: 41:37:33:b6:87:1d:66:7c:59:18:e4:ed:cb:cb:c3: 23:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:BB:E2:D5:71:8B:F0:5A:8C:4A:94:42:8C:93:79:05:6F:B1:3C:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/10bf42f3-a54c-3894-b779-2d4828dc1b62.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl X509v3 Authority Key Identifier: keyid:94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer sbgp-ipAddrBlock: critical IPv6: 2602:fc3b:ff00:257::/64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:9f:4a:25:ed:c5:ae:31:8f:57:c4:86:88:5d:42:82:b7:ac: ca:ed:0d:0d:ac:9e:74:97:0d:dc:37:cd:e7:ca:98:8f:d1:66: 14:96:ff:b4:44:0c:26:bd:06:72:5f:b5:f8:9c:cb:6a:b7:8a: ca:92:a8:e6:d0:3c:4b:12:bf:02:25:28:26:42:1f:ae:b5:30: b6:54:02:f8:91:17:46:cd:22:50:3b:6d:3e:e0:29:fe:83:a6: c1:d4:2d:e2:36:ea:3a:df:74:0f:ad:5d:44:0a:44:db:3b:d0: 9c:4d:66:f5:df:80:e1:31:b7:bd:11:c9:80:cb:7a:ff:10:f1: d2:d0:4f:eb:3c:13:df:e7:8c:66:2a:74:6b:62:40:30:79:0a: ac:aa:ca:97:99:29:cd:03:1a:76:1d:84:71:58:3f:1b:60:ab: f9:e7:46:d4:f7:27:7e:19:60:b4:c5:c5:2a:18:7e:9e:a9:80: 78:85:85:41:a7:ae:ed:60:e2:45:61:6c:ec:93:b8:95:ef:c6: 37:08:32:5e:f3:d3:10:88:67:83:67:b8:2e:d4:25:fd:40:b9: 58:97:bc:28:ab:d2:dd:41:81:12:48:a9:45:7f:47:9e:e3:05: cc:87:5b:31:6b:83:e7:30:62:d9:0a:6a:b0:cf:16:ea:38:f5: ad:4d:45:f4 -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE3PLf3wV8doydcJhwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWVhZDYwOWQtYWZlNi00NWFmLTg0MDktMzQ4MThlODQ1 MGM1MB4XDTI2MDUxMjEzMDYzNFoXDTI2MDgxMDEzMDYzNFowLzEtMCsGA1UEAxMk ZDIyZjkyMTctMmRkZC00MWQxLWFmMTMtNjliZWM2MzY3YjA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhIL89OI+HnKFoY/9wWAz9dGXRWj+Hxpm6cGq p3Bkgrnv1gZJr0+Cxnv1WugQAYZSWmAQir64ySk6FqHWZcwCIPWyUA/Dfey3kgLX fYbVHRbdWoI5badARQ99gIKKYxNlJQ4T3BikHd3sjcpi+T4aUfeoQp6JhT6GnMBD 3VhyYqxwh+TtXfCS47APrx8nxg9aH6z19caDdvWsXPkBbapaFcYRuX0AQKwVb6He iMi6VfIovESf3o1Eb9oUCDhBkEiCsay9VoBzSosyxyKM09AuvlYpeIA6TUFxUz3N p+yn+YxzdZ6MRpNYry1hzB+YtrNBNzO2hx1mfFkY5O3Ly8Mj+wIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFJe74tVxi/BajEqUQoyTeQVvsTwcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9lZWFk NjA5ZC1hZmU2LTQ1YWYtODQwOS0zNDgxOGU4NDUwYzUvMTBiZjQyZjMtYTU0Yy0z ODk0LWI3NzktMmQ0ODI4ZGMxYjYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZWVhZDYwOWQtYWZlNi00NWFmLTg0 MDktMzQ4MThlODQ1MGM1L2VlYWQ2MDlkLWFmZTYtNDVhZi04NDA5LTM0ODE4ZTg0 NTBjNS5jcmwwHwYDVR0jBBgwFoAUlLfjG9MoedrUC407Be4h1zWUqsswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9lZWFkNjA5ZC1hZmU2LTQ1YWYtODQwOS0zNDgx OGU4NDUwYzUuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAJgL8O/8A AlcwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAtp9KJe3FrjGPV8SGiF1Cgresyu0NDayedJcN3DfN58qYj9Fm FJb/tEQMJr0Gcl+1+JzLareKypKo5tA8SxK/AiUoJkIfrrUwtlQC+JEXRs0iUDtt PuAp/oOmwdQt4jbqOt90D61dRApE2zvQnE1m9d+A4TG3vRHJgMt6/xDx0tBP6zwT 3+eMZip0a2JAMHkKrKrKl5kpzQMadh2EcVg/G2Cr+edG1PcnfhlgtMXFKhh+nqmA eIWFQaeu7WDiRWFs7JO4le/GNwgyXvPTEIhng2e4LtQl/UC5WJe8KKvS3UGBEkip RX9HnuMFzIdbMWuD5zBi2QpqsM8W6jj1rU1F9A== -----END CERTIFICATE-----Generated at Wed May 13 12:05:28 2026 by rpki-client