$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/1f402786-4e49-330e-85c2-c75a4cba8dc8.roa File: 1f402786-4e49-330e-85c2-c75a4cba8dc8.roa (raw, json) Hash identifier: /jAoN4ETXmTIoC/GdMCUc38PpX0SBldra1/XtsDjxY0= Subject key identifier: 71:DF:41:16:4F:2D:AB:61:E7:39:52:6A:6B:D2:19:8D:7B:F1:C3:21 Certificate issuer: /CN=eead609d-afe6-45af-8409-34818e8450c5 Certificate serial: 010D0C9F4328584DCF2DDA108F3C73A54B7DBD18 Authority key identifier: 94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/1f402786-4e49-330e-85c2-c75a4cba8dc8.roa Signing time: Tue 12 May 2026 13:06:17 +0000 ROA not before: Tue 12 May 2026 13:06:17 +0000 ROA not after: Mon 10 Aug 2026 13:06:17 +0000 asID: 399970 IP address blocks: 2602:fc3b:ff00:5::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cf:2d:da:10:8f:3c:73:a5:4b:7d:bd:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eead609d-afe6-45af-8409-34818e8450c5 Validity Not Before: May 12 13:06:17 2026 GMT Not After : Aug 10 13:06:17 2026 GMT Subject: CN=444287f0-1057-4fd8-9370-bdb8307d0f7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:86:0c:c6:23:ee:46:7f:24:e8:5f:93:2d:bd: 36:a9:9e:83:78:c6:42:dc:d7:74:47:a1:21:4b:e4: 6b:ed:67:eb:a7:96:0a:d3:6d:c1:08:e6:8f:d0:d1: b3:64:7e:e1:c7:24:3c:3c:84:fa:65:f2:72:21:cc: 8c:a0:96:e3:16:d0:3d:a1:2d:4e:69:5a:65:a0:90: 43:05:ba:36:3b:58:6b:48:b7:5b:99:92:91:49:7d: 17:36:51:f9:67:99:69:c4:61:2c:9c:d5:e1:a1:92: 72:a7:3e:32:88:cd:9e:3b:d0:48:60:5f:35:52:34: 9f:f0:e7:99:72:8b:f8:68:5f:97:92:47:a6:bc:cf: 41:47:c1:60:4d:d5:6a:03:89:bd:39:25:8b:35:31: 25:df:a6:98:0a:2d:1d:b5:85:6d:33:6e:f0:91:50: 98:8e:e1:99:a9:10:04:bc:49:47:7b:66:52:34:c5: 55:6a:d6:71:c7:04:a8:23:4b:45:0c:01:7a:93:cc: 42:18:5f:72:9f:9c:c7:13:91:da:4a:9d:99:4c:4c: f4:4a:76:79:c2:75:e0:92:ca:9f:f5:0e:d9:c0:f5: 3a:ad:24:74:c0:23:bd:31:8a:e2:1e:03:89:5a:f9: 7d:aa:e1:4b:df:03:a5:1a:43:4a:1b:b7:58:e9:2a: e6:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:DF:41:16:4F:2D:AB:61:E7:39:52:6A:6B:D2:19:8D:7B:F1:C3:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/1f402786-4e49-330e-85c2-c75a4cba8dc8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl X509v3 Authority Key Identifier: keyid:94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer sbgp-ipAddrBlock: critical IPv6: 2602:fc3b:ff00:5::/64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:39:06:71:e3:e0:2f:e9:23:03:93:bf:42:f6:85:97:eb:dc: 31:d6:cd:6c:60:4e:4b:3b:d4:0e:94:11:15:2d:3e:b3:a5:c2: d1:c7:61:de:f0:c6:fc:27:f2:c1:63:d7:d1:7e:e5:8e:59:29: 2a:b2:06:d0:8f:19:a3:1e:17:cb:69:a8:c5:4b:41:67:93:8f: 14:b6:bb:50:49:26:ae:d5:61:13:6a:fb:4a:80:aa:e8:02:ee: 04:08:af:c0:27:11:e7:a8:d1:5a:8d:e4:7a:af:68:5d:fa:0a: 3d:fa:67:a0:56:0f:43:f9:3f:bf:fd:e6:f7:c1:e1:59:1b:46: 8e:ec:21:5c:79:fa:10:85:19:44:8d:03:58:15:d5:9a:8a:5c: 5a:b5:d2:45:cb:c8:af:c6:cc:90:c9:25:f1:5c:f1:32:59:c8: 49:a0:76:53:a9:fc:61:77:64:d9:e0:5c:dc:87:24:67:d6:ee: 3c:b2:d2:ab:40:af:4d:f7:0d:47:9e:ce:86:1c:d1:f4:2e:37: be:9c:75:db:68:79:ad:80:cb:49:b6:f7:26:56:7b:c7:4a:a7: ce:81:93:80:19:14:e1:b9:1c:b1:0a:89:9f:9d:6d:e6:fd:04: 98:04:b8:85:ad:55:12:ec:75:cb:95:20:5a:5c:2f:75:be:1c: 60:99:a2:d2 -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE3PLdoQjzxzpUt9vRgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWVhZDYwOWQtYWZlNi00NWFmLTg0MDktMzQ4MThlODQ1 MGM1MB4XDTI2MDUxMjEzMDYxN1oXDTI2MDgxMDEzMDYxN1owLzEtMCsGA1UEAxMk NDQ0Mjg3ZjAtMTA1Ny00ZmQ4LTkzNzAtYmRiODMwN2QwZjdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIYMxiPuRn8k6F+TLb02qZ6DeMZC3Nd0R6Eh S+Rr7Wfrp5YK023BCOaP0NGzZH7hxyQ8PIT6ZfJyIcyMoJbjFtA9oS1OaVploJBD Bbo2O1hrSLdbmZKRSX0XNlH5Z5lpxGEsnNXhoZJypz4yiM2eO9BIYF81UjSf8OeZ cov4aF+XkkemvM9BR8FgTdVqA4m9OSWLNTEl36aYCi0dtYVtM27wkVCYjuGZqRAE vElHe2ZSNMVVatZxxwSoI0tFDAF6k8xCGF9yn5zHE5HaSp2ZTEz0SnZ5wnXgksqf 9Q7ZwPU6rSR0wCO9MYriHgOJWvl9quFL3wOlGkNKG7dY6SrmewIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFHHfQRZPLath5zlSamvSGY178cMhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9lZWFk NjA5ZC1hZmU2LTQ1YWYtODQwOS0zNDgxOGU4NDUwYzUvMWY0MDI3ODYtNGU0OS0z MzBlLTg1YzItYzc1YTRjYmE4ZGM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZWVhZDYwOWQtYWZlNi00NWFmLTg0 MDktMzQ4MThlODQ1MGM1L2VlYWQ2MDlkLWFmZTYtNDVhZi04NDA5LTM0ODE4ZTg0 NTBjNS5jcmwwHwYDVR0jBBgwFoAUlLfjG9MoedrUC407Be4h1zWUqsswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9lZWFkNjA5ZC1hZmU2LTQ1YWYtODQwOS0zNDgx OGU4NDUwYzUuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAJgL8O/8A AAUwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEANDkGcePgL+kjA5O/QvaFl+vcMdbNbGBOSzvUDpQRFS0+s6XC 0cdh3vDG/CfywWPX0X7ljlkpKrIG0I8Zox4Xy2moxUtBZ5OPFLa7UEkmrtVhE2r7 SoCq6ALuBAivwCcR56jRWo3keq9oXfoKPfpnoFYPQ/k/v/3m98HhWRtGjuwhXHn6 EIUZRI0DWBXVmopcWrXSRcvIr8bMkMkl8VzxMlnISaB2U6n8YXdk2eBc3IckZ9bu PLLSq0CvTfcNR57OhhzR9C43vpx122h5rYDLSbb3JlZ7x0qnzoGTgBkU4bkcsQqJ n51t5v0EmAS4ha1VEux1y5UgWlwvdb4cYJmi0g== -----END CERTIFICATE-----Generated at Wed May 13 06:47:48 2026 by rpki-client