$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/21ea9f5c-10df-33db-bc81-54f595adda8c.roa File: 21ea9f5c-10df-33db-bc81-54f595adda8c.roa (raw, json) Hash identifier: +njRUBmZHvJcXWaydlNF++Fsw5wO8ClniDqkb3uCLTk= Subject key identifier: 74:68:48:30:B8:27:8E:7A:19:65:14:01:F5:C0:3B:2E:E7:87:89:FE Certificate issuer: /CN=eead609d-afe6-45af-8409-34818e8450c5 Certificate serial: 010D0C9F4328584DCF2E05E9E1229EC938CDD200 Authority key identifier: 94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/21ea9f5c-10df-33db-bc81-54f595adda8c.roa Signing time: Tue 12 May 2026 13:06:38 +0000 ROA not before: Tue 12 May 2026 13:06:38 +0000 ROA not after: Mon 10 Aug 2026 13:06:38 +0000 asID: 399970 IP address blocks: 2602:fc3b:ff00:2ca::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cf:2e:05:e9:e1:22:9e:c9:38:cd:d2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eead609d-afe6-45af-8409-34818e8450c5 Validity Not Before: May 12 13:06:38 2026 GMT Not After : Aug 10 13:06:38 2026 GMT Subject: CN=e0c79c0b-a604-48fe-bfe3-a530f163bb2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:55:ef:56:ff:97:86:62:33:e5:1b:e0:2a:bd: 3a:7c:01:88:1f:70:6f:7c:61:c9:e0:8a:33:7d:e1: 0e:39:c4:dd:1c:9b:e7:da:22:38:64:cd:53:9d:dd: 56:b4:54:0d:de:6a:33:19:4f:24:00:60:5a:68:f2: 1f:80:62:8f:96:77:dc:84:63:56:9b:c2:cb:ee:1a: ee:91:95:eb:c4:07:cc:7b:8a:eb:c4:d5:2e:06:37: 76:af:da:35:80:29:d1:34:de:de:d3:70:b3:e1:02: d3:52:34:a1:88:2a:22:d8:22:69:80:c4:b9:b8:4a: 59:ab:50:c2:13:33:df:f0:e7:84:3e:6b:6b:2d:b9: 6b:a1:da:a6:b2:39:79:d6:14:35:1d:29:7e:61:51: 18:d7:7f:40:67:a6:34:44:58:48:5e:fb:78:a4:7f: 59:23:7f:82:8b:52:57:1f:32:ce:c4:e1:cd:d1:7a: d4:8b:36:08:3f:b1:4e:de:e9:ea:58:89:f4:19:fb: d0:46:35:20:c1:9e:f0:96:67:da:a7:20:a9:1b:d8: 21:4a:c4:9f:af:61:50:cb:3d:81:0a:4e:10:69:54: 58:a7:14:46:e4:76:65:6e:d4:f3:94:29:6c:20:a1: 08:1b:80:5d:59:7e:db:9d:9d:0d:b1:bf:e1:ba:b4: 65:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:68:48:30:B8:27:8E:7A:19:65:14:01:F5:C0:3B:2E:E7:87:89:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/21ea9f5c-10df-33db-bc81-54f595adda8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl X509v3 Authority Key Identifier: keyid:94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer sbgp-ipAddrBlock: critical IPv6: 2602:fc3b:ff00:2ca::/64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:77:9d:c7:83:43:ff:18:48:dc:f7:59:db:79:8b:cd:2e:22: 43:e0:ea:58:4b:c6:53:a0:4c:6b:bc:fb:98:96:41:ca:0a:25: e1:3b:5d:55:75:1a:85:53:29:23:8d:6d:c1:a8:eb:9a:36:b8: 06:c0:d1:2f:b6:d4:fe:cd:4d:62:92:51:3d:29:10:40:3e:b3: f6:46:69:e9:e3:bc:de:be:9b:43:9f:4c:83:f4:2d:a6:ec:f8: 9f:be:b6:f5:58:59:82:af:df:d8:4c:00:65:6a:9b:e9:46:6f: 14:bc:29:f3:54:92:ca:94:b1:65:32:d0:d5:4b:80:26:54:7b: 4f:64:a1:dc:69:c4:a5:dd:76:0e:4d:0c:da:06:a7:50:76:dc: 4e:5e:8f:64:77:ed:f8:c3:2b:a5:6b:fe:47:88:b1:f9:19:7a: 17:5d:50:7d:22:73:dc:7f:a4:13:93:5f:5d:1c:71:71:fa:42: c1:fe:de:23:08:b2:0b:63:aa:07:93:a7:9c:72:bd:c3:a1:1b: 0a:73:70:56:45:5d:c1:29:15:6b:43:f7:27:be:36:34:db:13: 60:ca:8c:de:a5:45:a1:43:6b:5f:1d:16:5b:4d:e9:35:f7:e9: d4:ad:2b:0f:9b:0d:27:50:fa:31:6f:02:90:68:c6:25:41:ac: 16:ae:0c:db -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE3PLgXp4SKeyTjN0gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWVhZDYwOWQtYWZlNi00NWFmLTg0MDktMzQ4MThlODQ1 MGM1MB4XDTI2MDUxMjEzMDYzOFoXDTI2MDgxMDEzMDYzOFowLzEtMCsGA1UEAxMk ZTBjNzljMGItYTYwNC00OGZlLWJmZTMtYTUzMGYxNjNiYjJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFXvVv+XhmIz5RvgKr06fAGIH3BvfGHJ4Ioz feEOOcTdHJvn2iI4ZM1Tnd1WtFQN3mozGU8kAGBaaPIfgGKPlnfchGNWm8LL7hru kZXrxAfMe4rrxNUuBjd2r9o1gCnRNN7e03Cz4QLTUjShiCoi2CJpgMS5uEpZq1DC EzPf8OeEPmtrLblrodqmsjl51hQ1HSl+YVEY139AZ6Y0RFhIXvt4pH9ZI3+Ci1JX HzLOxOHN0XrUizYIP7FO3unqWIn0GfvQRjUgwZ7wlmfapyCpG9ghSsSfr2FQyz2B Ck4QaVRYpxRG5HZlbtTzlClsIKEIG4BdWX7bnZ0Nsb/hurRl0wIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFHRoSDC4J456GWUUAfXAOy7nh4n+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9lZWFk NjA5ZC1hZmU2LTQ1YWYtODQwOS0zNDgxOGU4NDUwYzUvMjFlYTlmNWMtMTBkZi0z M2RiLWJjODEtNTRmNTk1YWRkYThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZWVhZDYwOWQtYWZlNi00NWFmLTg0 MDktMzQ4MThlODQ1MGM1L2VlYWQ2MDlkLWFmZTYtNDVhZi04NDA5LTM0ODE4ZTg0 NTBjNS5jcmwwHwYDVR0jBBgwFoAUlLfjG9MoedrUC407Be4h1zWUqsswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9lZWFkNjA5ZC1hZmU2LTQ1YWYtODQwOS0zNDgx OGU4NDUwYzUuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAJgL8O/8A AsowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAv3edx4ND/xhI3PdZ23mLzS4iQ+DqWEvGU6BMa7z7mJZBygol 4TtdVXUahVMpI41twajrmja4BsDRL7bU/s1NYpJRPSkQQD6z9kZp6eO83r6bQ59M g/Qtpuz4n7629VhZgq/f2EwAZWqb6UZvFLwp81SSypSxZTLQ1UuAJlR7T2Sh3GnE pd12Dk0M2ganUHbcTl6PZHft+MMrpWv+R4ix+Rl6F11QfSJz3H+kE5NfXRxxcfpC wf7eIwiyC2OqB5OnnHK9w6EbCnNwVkVdwSkVa0P3J742NNsTYMqM3qVFoUNrXx0W W03pNffp1K0rD5sNJ1D6MW8CkGjGJUGsFq4M2w== -----END CERTIFICATE-----Generated at Wed May 13 05:46:56 2026 by rpki-client