$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/2c1bf58a-ca7a-3c90-a0a2-5164e48b4186.roa File: 2c1bf58a-ca7a-3c90-a0a2-5164e48b4186.roa (raw, json) Hash identifier: Mc+es/+8ST4lmnfMLu5PvrD4F1q41APSImHUgEjFrh8= Subject key identifier: B1:AD:05:08:E9:74:31:ED:2E:3C:F2:EB:D3:9B:F6:B0:EE:B3:21:34 Certificate issuer: /CN=eead609d-afe6-45af-8409-34818e8450c5 Certificate serial: 010D0C9F4328584DCF2E055A31918CBF203DC690 Authority key identifier: 94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/2c1bf58a-ca7a-3c90-a0a2-5164e48b4186.roa Signing time: Tue 12 May 2026 13:06:38 +0000 ROA not before: Tue 12 May 2026 13:06:38 +0000 ROA not after: Mon 10 Aug 2026 13:06:38 +0000 asID: 399970 IP address blocks: 2602:fc3b:ff00:2c2::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cf:2e:05:5a:31:91:8c:bf:20:3d:c6:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eead609d-afe6-45af-8409-34818e8450c5 Validity Not Before: May 12 13:06:38 2026 GMT Not After : Aug 10 13:06:38 2026 GMT Subject: CN=32c88b68-acbe-4b3d-bbe5-310ea9a765c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:1e:3e:7a:9f:24:73:3c:0d:23:f7:98:65:a9: c3:62:57:7c:2d:38:8a:3c:b2:b3:b6:22:5a:62:8f: 86:2c:da:06:c8:1b:a0:70:05:34:0a:1b:6e:56:bd: 97:62:c9:d3:d4:80:08:0c:54:9b:60:c7:67:0b:71: 7d:2d:6b:59:db:97:53:f2:ff:a8:3e:9f:73:a8:6a: a3:0e:85:64:50:b4:ee:2d:6c:18:2d:f5:b2:19:8c: 54:fd:fd:13:b3:57:f1:74:10:5e:6b:8a:5c:bc:60: b3:ba:5f:d3:8c:be:6e:95:96:c6:9d:15:3e:49:a2: 54:90:52:40:f2:1d:b4:31:53:2d:7f:d7:c9:ba:e3: 68:66:f7:62:cb:09:36:d2:3e:4c:0a:64:7d:74:d2: aa:e5:a4:62:e8:7c:72:0a:e0:b9:05:17:d0:a9:6b: 6b:63:42:88:25:e3:51:9a:06:8b:af:cb:63:0c:5b: 93:aa:e8:7e:ca:9e:d3:bb:55:90:09:96:9d:a4:37: d6:1f:0d:1f:36:e2:45:63:83:49:72:11:ba:dd:53: 52:a5:6d:b3:7b:e6:d7:af:56:02:d2:24:26:70:56: 2d:fe:cf:cd:a4:e9:d3:ff:a5:08:65:32:66:dc:11: 80:36:45:cb:86:01:56:62:fe:17:14:82:a0:05:f8: 3c:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:AD:05:08:E9:74:31:ED:2E:3C:F2:EB:D3:9B:F6:B0:EE:B3:21:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/2c1bf58a-ca7a-3c90-a0a2-5164e48b4186.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl X509v3 Authority Key Identifier: keyid:94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer sbgp-ipAddrBlock: critical IPv6: 2602:fc3b:ff00:2c2::/64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:15:cc:33:99:10:8e:5c:e3:66:c7:8a:83:bf:0c:ca:77:9a: 03:eb:bf:86:46:94:01:2b:b2:06:01:0b:c7:b1:c2:79:89:87: e4:01:3f:e6:3d:4d:1a:65:6d:36:ad:35:3d:d7:4d:ba:09:80: 64:90:77:0f:70:d7:8f:0b:29:16:d5:c8:5b:44:fe:b5:02:bb: 89:8f:6f:ae:a5:17:c1:5d:b7:54:21:17:a6:2d:df:96:b3:67: db:cf:f9:3b:20:e3:3a:e7:d7:18:f1:34:eb:57:5c:8e:0d:77: 5f:35:01:37:00:7f:78:54:ca:7b:d1:6e:a6:db:4f:8a:82:42: 3d:ff:87:61:10:68:56:1f:26:23:44:48:ac:ce:59:77:9b:ff: c1:2a:44:08:65:ec:ca:79:b9:d5:d3:2f:cf:7f:03:df:f2:cc: a6:f4:ca:42:bf:24:8d:52:c8:34:51:65:3b:1f:40:3a:91:fa: 80:0a:49:59:93:72:22:7a:de:bf:23:b5:dd:32:4c:ad:3e:79: fe:d6:c0:bb:cc:4f:92:e4:50:e1:cf:8f:ce:ab:75:82:6c:8d: e6:a6:24:84:a1:05:99:b3:69:b3:d5:b2:01:16:82:c7:fb:fd: 94:a0:a5:e8:8d:e3:7f:c7:03:01:a8:2b:4e:66:92:d9:70:88: 80:29:b0:98 -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE3PLgVaMZGMvyA9xpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWVhZDYwOWQtYWZlNi00NWFmLTg0MDktMzQ4MThlODQ1 MGM1MB4XDTI2MDUxMjEzMDYzOFoXDTI2MDgxMDEzMDYzOFowLzEtMCsGA1UEAxMk MzJjODhiNjgtYWNiZS00YjNkLWJiZTUtMzEwZWE5YTc2NWM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqB4+ep8kczwNI/eYZanDYld8LTiKPLKztiJa Yo+GLNoGyBugcAU0ChtuVr2XYsnT1IAIDFSbYMdnC3F9LWtZ25dT8v+oPp9zqGqj DoVkULTuLWwYLfWyGYxU/f0Ts1fxdBBea4pcvGCzul/TjL5ulZbGnRU+SaJUkFJA 8h20MVMtf9fJuuNoZvdiywk20j5MCmR9dNKq5aRi6HxyCuC5BRfQqWtrY0KIJeNR mgaLr8tjDFuTquh+yp7Tu1WQCZadpDfWHw0fNuJFY4NJchG63VNSpW2ze+bXr1YC 0iQmcFYt/s/NpOnT/6UIZTJm3BGANkXLhgFWYv4XFIKgBfg8UwIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFLGtBQjpdDHtLjzy69Ob9rDusyE0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9lZWFk NjA5ZC1hZmU2LTQ1YWYtODQwOS0zNDgxOGU4NDUwYzUvMmMxYmY1OGEtY2E3YS0z YzkwLWEwYTItNTE2NGU0OGI0MTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZWVhZDYwOWQtYWZlNi00NWFmLTg0 MDktMzQ4MThlODQ1MGM1L2VlYWQ2MDlkLWFmZTYtNDVhZi04NDA5LTM0ODE4ZTg0 NTBjNS5jcmwwHwYDVR0jBBgwFoAUlLfjG9MoedrUC407Be4h1zWUqsswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9lZWFkNjA5ZC1hZmU2LTQ1YWYtODQwOS0zNDgx OGU4NDUwYzUuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAJgL8O/8A AsIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAwhXMM5kQjlzjZseKg78MyneaA+u/hkaUASuyBgELx7HCeYmH 5AE/5j1NGmVtNq01PddNugmAZJB3D3DXjwspFtXIW0T+tQK7iY9vrqUXwV23VCEX pi3flrNn28/5OyDjOufXGPE061dcjg13XzUBNwB/eFTKe9FupttPioJCPf+HYRBo Vh8mI0RIrM5Zd5v/wSpECGXsynm51dMvz38D3/LMpvTKQr8kjVLINFFlOx9AOpH6 gApJWZNyInrevyO13TJMrT55/tbAu8xPkuRQ4c+Pzqt1gmyN5qYkhKEFmbNps9Wy ARaCx/v9lKCl6I3jf8cDAagrTmaS2XCIgCmwmA== -----END CERTIFICATE-----Generated at Wed May 13 07:59:51 2026 by rpki-client