$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/3241a5da-c425-39b8-bdc4-236cdd661bfd.roa File: 3241a5da-c425-39b8-bdc4-236cdd661bfd.roa (raw, json) Hash identifier: mAElwip68vaY+uG5EHlKZy/Wbxy15H/2x0p1nA6owXM= Subject key identifier: CB:65:76:AA:F7:24:B7:A9:69:35:40:C5:0F:D5:2E:1A:D3:3C:57:94 Certificate issuer: /CN=eead609d-afe6-45af-8409-34818e8450c5 Certificate serial: 010D0C9F4328584DCF2E18B730A3B0665B3D5A40 Authority key identifier: 94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/3241a5da-c425-39b8-bdc4-236cdd661bfd.roa Signing time: Tue 12 May 2026 13:06:47 +0000 ROA not before: Tue 12 May 2026 13:06:47 +0000 ROA not after: Mon 10 Aug 2026 13:06:47 +0000 asID: 399970 IP address blocks: 2602:fc3b:ff00:3c9::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cf:2e:18:b7:30:a3:b0:66:5b:3d:5a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eead609d-afe6-45af-8409-34818e8450c5 Validity Not Before: May 12 13:06:47 2026 GMT Not After : Aug 10 13:06:47 2026 GMT Subject: CN=7a3e405b-7cd0-4d81-b47e-c313e21150b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:86:ef:4c:74:80:f7:0f:6e:a1:39:85:62:ec: 49:40:45:da:a0:a9:d2:d0:47:98:a8:f3:72:3b:ba: 12:00:14:25:76:50:d8:78:57:c0:0a:a7:a9:44:7b: 2d:b4:29:f7:4c:c7:66:fd:0f:a8:83:c1:66:ba:9b: 4e:55:0d:91:10:aa:9d:a0:df:12:8f:2d:a2:b3:30: bc:bb:de:76:ab:b7:e7:87:0d:4a:c4:55:34:31:aa: 9b:6a:5c:1d:fe:94:14:a1:aa:5d:1f:71:d2:9c:1f: 52:61:ce:7d:09:2c:9d:fd:31:3c:13:80:f2:bf:a1: 81:eb:5b:f1:56:57:95:e3:15:96:32:ae:23:7d:f4: 1b:2c:2b:0d:5b:bf:bb:8e:dd:a0:92:34:6b:d4:19: 56:96:ed:d9:3f:12:58:f9:e4:30:64:1f:13:59:51: 39:c6:19:e7:08:52:b0:87:0e:1f:7f:ce:1c:10:63: e8:e0:f9:3c:e1:10:af:bb:96:cb:04:1d:81:f2:42: 25:f9:16:35:52:cd:49:97:1a:7e:1b:97:67:9e:39: c8:51:48:f0:01:30:bf:5b:53:13:6d:67:1e:c4:18: eb:80:6f:b0:52:7e:0b:39:2f:c8:1f:4f:8b:64:89: 79:c0:f3:09:9d:4c:cf:20:00:a6:cc:cc:b4:20:52: fb:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:65:76:AA:F7:24:B7:A9:69:35:40:C5:0F:D5:2E:1A:D3:3C:57:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/3241a5da-c425-39b8-bdc4-236cdd661bfd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl X509v3 Authority Key Identifier: keyid:94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer sbgp-ipAddrBlock: critical IPv6: 2602:fc3b:ff00:3c9::/64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:05:68:82:ce:ac:fa:b6:45:d2:35:c8:14:e0:0b:51:58:ee: bb:16:25:0f:6f:5d:be:b4:1c:8e:1e:77:9c:c5:b2:2d:f7:1c: 14:e5:56:72:16:8f:0b:e0:7a:2c:39:8b:e0:97:0e:53:86:4f: 32:89:96:35:75:90:53:07:47:5d:23:a8:d7:17:fb:5e:74:4a: d4:43:9d:9e:d7:20:80:59:d1:a8:2f:c3:db:d8:25:d6:4b:3e: 7e:7c:7f:a8:f1:92:6f:50:db:21:2d:46:05:fc:17:c9:9f:8d: 73:b3:ae:42:9d:35:44:22:6e:06:79:1f:2c:93:a0:27:c0:f9: 31:d5:1b:cf:65:2f:8f:df:8f:37:b8:3e:51:e7:a9:a2:36:29: 9a:ec:3d:b8:c7:b0:30:18:47:a5:25:f4:22:27:07:42:3e:15: d7:27:10:1f:cd:13:cc:35:36:29:65:27:a8:59:50:3f:45:cf: 78:32:54:5e:fe:02:c6:99:5a:66:49:b6:12:fc:22:f9:a6:22: d7:37:36:79:db:62:b6:75:cc:13:14:d4:94:8e:9c:bb:d8:49: cc:ae:b0:bd:a0:a6:44:99:9a:67:ed:4b:ce:df:1a:23:94:ae: 23:61:5e:92:cd:1e:1c:01:3f:75:52:ed:d4:ad:c7:30:23:7e: 0e:ef:d0:e4 -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE3PLhi3MKOwZls9WkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWVhZDYwOWQtYWZlNi00NWFmLTg0MDktMzQ4MThlODQ1 MGM1MB4XDTI2MDUxMjEzMDY0N1oXDTI2MDgxMDEzMDY0N1owLzEtMCsGA1UEAxMk N2EzZTQwNWItN2NkMC00ZDgxLWI0N2UtYzMxM2UyMTE1MGI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYbvTHSA9w9uoTmFYuxJQEXaoKnS0EeYqPNy O7oSABQldlDYeFfACqepRHsttCn3TMdm/Q+og8FmuptOVQ2REKqdoN8Sjy2iszC8 u952q7fnhw1KxFU0Maqbalwd/pQUoapdH3HSnB9SYc59CSyd/TE8E4Dyv6GB61vx VleV4xWWMq4jffQbLCsNW7+7jt2gkjRr1BlWlu3ZPxJY+eQwZB8TWVE5xhnnCFKw hw4ff84cEGPo4Pk84RCvu5bLBB2B8kIl+RY1Us1Jlxp+G5dnnjnIUUjwATC/W1MT bWcexBjrgG+wUn4LOS/IH0+LZIl5wPMJnUzPIACmzMy0IFL7YwIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFMtldqr3JLepaTVAxQ/VLhrTPFeUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9lZWFk NjA5ZC1hZmU2LTQ1YWYtODQwOS0zNDgxOGU4NDUwYzUvMzI0MWE1ZGEtYzQyNS0z OWI4LWJkYzQtMjM2Y2RkNjYxYmZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZWVhZDYwOWQtYWZlNi00NWFmLTg0 MDktMzQ4MThlODQ1MGM1L2VlYWQ2MDlkLWFmZTYtNDVhZi04NDA5LTM0ODE4ZTg0 NTBjNS5jcmwwHwYDVR0jBBgwFoAUlLfjG9MoedrUC407Be4h1zWUqsswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9lZWFkNjA5ZC1hZmU2LTQ1YWYtODQwOS0zNDgx OGU4NDUwYzUuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAJgL8O/8A A8kwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAmwVogs6s+rZF0jXIFOALUVjuuxYlD29dvrQcjh53nMWyLfcc FOVWchaPC+B6LDmL4JcOU4ZPMomWNXWQUwdHXSOo1xf7XnRK1EOdntcggFnRqC/D 29gl1ks+fnx/qPGSb1DbIS1GBfwXyZ+Nc7OuQp01RCJuBnkfLJOgJ8D5MdUbz2Uv j9+PN7g+UeepojYpmuw9uMewMBhHpSX0IicHQj4V1ycQH80TzDU2KWUnqFlQP0XP eDJUXv4CxplaZkm2Evwi+aYi1zc2edtitnXMExTUlI6cu9hJzK6wvaCmRJmaZ+1L zt8aI5SuI2Feks0eHAE/dVLt1K3HMCN+Du/Q5A== -----END CERTIFICATE-----Generated at Wed May 13 12:25:18 2026 by rpki-client