$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/32d3fff9-96b7-3f79-85ab-e2a48d913385.roa File: 32d3fff9-96b7-3f79-85ab-e2a48d913385.roa (raw, json) Hash identifier: r0zuc+gLbr5FlNc6n4CVm7gl1XpK0yuubyJEAoIK1b4= Subject key identifier: AC:CE:1E:F4:2D:8B:54:53:F6:E9:DC:C5:5D:FE:34:7C:E2:C6:16:2B Certificate issuer: /CN=eead609d-afe6-45af-8409-34818e8450c5 Certificate serial: 010D0C9F4328584DCF2E09A1D29A39C14091BB80 Authority key identifier: 94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/32d3fff9-96b7-3f79-85ab-e2a48d913385.roa Signing time: Tue 12 May 2026 13:06:40 +0000 ROA not before: Tue 12 May 2026 13:06:40 +0000 ROA not after: Mon 10 Aug 2026 13:06:40 +0000 asID: 399970 IP address blocks: 2602:fc3b:ff00:2ff::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cf:2e:09:a1:d2:9a:39:c1:40:91:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eead609d-afe6-45af-8409-34818e8450c5 Validity Not Before: May 12 13:06:40 2026 GMT Not After : Aug 10 13:06:40 2026 GMT Subject: CN=b2cb926a-408c-434a-a3d5-475519ba26af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:be:cb:fb:43:27:82:87:59:ad:b0:4c:76:4d: 3d:66:5c:5b:30:99:dd:38:9d:1a:75:0a:60:44:e3: e3:41:25:9f:86:e4:db:0c:eb:ec:d3:28:f9:ed:42: e5:72:04:50:2a:b2:7b:b5:62:c7:82:2a:aa:2e:68: d8:70:44:c4:69:e0:17:78:0a:a0:c8:a7:30:ea:f1: 6f:39:45:3a:47:6d:f2:06:61:f6:36:81:22:43:c0: eb:b8:da:d4:bb:b3:da:ab:76:38:20:e8:39:ef:da: 31:bb:d9:d3:d2:03:e8:24:2f:ed:e8:34:39:3e:75: c7:7f:70:ac:98:69:19:7d:cc:23:07:30:6d:7a:27: 10:bc:48:4a:1d:4b:44:05:e2:cd:1c:87:2b:f3:0f: b9:8a:91:90:3a:0f:d9:0e:49:e7:79:fb:2f:10:c2: a7:33:da:1e:1e:53:2a:9a:04:58:ff:cb:bf:38:af: db:da:7e:f7:ad:0e:3f:43:c3:7b:9f:d7:63:a9:c6: 57:6f:23:f2:79:c8:88:b4:c9:3c:61:0b:e6:21:36: 5c:85:e7:6c:af:0e:ce:b6:62:bc:9c:f8:84:6d:16: 1a:05:41:3b:9f:38:b1:38:79:fc:2b:b7:e8:7b:c5: a4:6c:a0:9a:ed:cc:db:11:9e:11:8c:02:ab:02:83: 6f:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:CE:1E:F4:2D:8B:54:53:F6:E9:DC:C5:5D:FE:34:7C:E2:C6:16:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/32d3fff9-96b7-3f79-85ab-e2a48d913385.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl X509v3 Authority Key Identifier: keyid:94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer sbgp-ipAddrBlock: critical IPv6: 2602:fc3b:ff00:2ff::/64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:42:15:28:16:cf:9e:c9:bc:e3:68:56:59:bd:95:dc:c9:a1: 15:70:d4:1d:71:00:57:79:16:52:f1:7e:86:cc:71:75:d9:5a: f8:8e:4e:ed:fb:a7:a2:43:8e:28:71:1f:cc:93:4b:ea:61:62: ed:22:c3:10:e3:16:a2:bb:84:b3:b6:cc:a4:7b:76:e7:f8:62: f7:63:89:aa:11:d7:7b:50:8d:52:00:4d:0a:60:bd:40:d3:b9: 89:c3:93:21:59:a7:f7:32:b4:0d:1e:b9:5c:37:cd:b7:d5:c9: da:14:d7:11:ea:45:09:d9:c3:ef:5f:f7:6d:29:96:ea:72:41: de:dc:89:29:d9:41:32:a0:b5:7c:46:71:7b:a6:ff:a4:12:27: ec:72:27:44:c4:9d:6a:a0:f8:96:78:50:a9:4d:68:36:7c:e2: 0a:21:ff:4b:b4:9c:76:90:36:22:16:a7:59:68:7c:11:a9:1c: ad:85:fd:4e:bd:f5:a8:f1:8a:8a:ef:08:a0:f2:35:cb:49:be: f4:b2:2e:3c:cd:87:7d:ea:58:b3:f8:70:98:b8:cd:98:d6:4b: 28:3a:1f:85:aa:38:cc:87:57:47:96:ac:34:f8:d2:6b:4a:fb: ca:3d:4e:36:ce:cf:a5:48:00:ef:3a:78:b8:8b:31:73:1a:b4: 4a:1f:c0:e4 -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE3PLgmh0po5wUCRu4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWVhZDYwOWQtYWZlNi00NWFmLTg0MDktMzQ4MThlODQ1 MGM1MB4XDTI2MDUxMjEzMDY0MFoXDTI2MDgxMDEzMDY0MFowLzEtMCsGA1UEAxMk YjJjYjkyNmEtNDA4Yy00MzRhLWEzZDUtNDc1NTE5YmEyNmFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvb7L+0MngodZrbBMdk09ZlxbMJndOJ0adQpg ROPjQSWfhuTbDOvs0yj57ULlcgRQKrJ7tWLHgiqqLmjYcETEaeAXeAqgyKcw6vFv OUU6R23yBmH2NoEiQ8DruNrUu7Paq3Y4IOg579oxu9nT0gPoJC/t6DQ5PnXHf3Cs mGkZfcwjBzBteicQvEhKHUtEBeLNHIcr8w+5ipGQOg/ZDknnefsvEMKnM9oeHlMq mgRY/8u/OK/b2n73rQ4/Q8N7n9djqcZXbyPyeciItMk8YQvmITZchedsrw7OtmK8 nPiEbRYaBUE7nzixOHn8K7foe8WkbKCa7czbEZ4RjAKrAoNvzQIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFKzOHvQti1RT9uncxV3+NHzixhYrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9lZWFk NjA5ZC1hZmU2LTQ1YWYtODQwOS0zNDgxOGU4NDUwYzUvMzJkM2ZmZjktOTZiNy0z Zjc5LTg1YWItZTJhNDhkOTEzMzg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZWVhZDYwOWQtYWZlNi00NWFmLTg0 MDktMzQ4MThlODQ1MGM1L2VlYWQ2MDlkLWFmZTYtNDVhZi04NDA5LTM0ODE4ZTg0 NTBjNS5jcmwwHwYDVR0jBBgwFoAUlLfjG9MoedrUC407Be4h1zWUqsswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9lZWFkNjA5ZC1hZmU2LTQ1YWYtODQwOS0zNDgx OGU4NDUwYzUuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAJgL8O/8A Av8wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAtkIVKBbPnsm842hWWb2V3MmhFXDUHXEAV3kWUvF+hsxxddla +I5O7funokOOKHEfzJNL6mFi7SLDEOMWoruEs7bMpHt25/hi92OJqhHXe1CNUgBN CmC9QNO5icOTIVmn9zK0DR65XDfNt9XJ2hTXEepFCdnD71/3bSmW6nJB3tyJKdlB MqC1fEZxe6b/pBIn7HInRMSdaqD4lnhQqU1oNnziCiH/S7ScdpA2IhanWWh8Eakc rYX9Tr31qPGKiu8IoPI1y0m+9LIuPM2HfepYs/hwmLjNmNZLKDofhao4zIdXR5as NPjSa0r7yj1ONs7PpUgA7zp4uIsxcxq0Sh/A5A== -----END CERTIFICATE-----Generated at Tue May 12 21:48:17 2026 by rpki-client