$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/338db7a4-13de-39ae-bf9b-9edcc9332828.roa File: 338db7a4-13de-39ae-bf9b-9edcc9332828.roa (raw, json) Hash identifier: xoEVlYMEwE7Ke4BSQZgNfLJSo3klIs8pIOHRcy44KS4= Subject key identifier: 5F:2B:4D:69:A8:30:9A:9D:E8:19:20:70:0F:0E:18:1F:51:CC:97:5F Certificate issuer: /CN=eead609d-afe6-45af-8409-34818e8450c5 Certificate serial: 010D0C9F4328584DCF2DDE47E74F9671B73B2FC0 Authority key identifier: 94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/338db7a4-13de-39ae-bf9b-9edcc9332828.roa Signing time: Tue 12 May 2026 13:06:19 +0000 ROA not before: Tue 12 May 2026 13:06:19 +0000 ROA not after: Mon 10 Aug 2026 13:06:19 +0000 asID: 399970 IP address blocks: 2602:fc3b:ff00:52::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cf:2d:de:47:e7:4f:96:71:b7:3b:2f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eead609d-afe6-45af-8409-34818e8450c5 Validity Not Before: May 12 13:06:19 2026 GMT Not After : Aug 10 13:06:19 2026 GMT Subject: CN=c878b306-9273-475a-814c-5dcdc497afcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:0e:c5:ce:0e:60:db:8c:f0:4d:4b:fe:c2:ed: 53:ad:65:6a:61:2a:4a:2e:10:e2:9e:52:2c:b8:39: dc:78:1f:06:a0:32:c1:38:46:66:fb:82:68:cc:d5: 28:9e:d3:e8:4c:24:c3:8f:c0:06:5a:f8:b6:ce:16: 47:ab:a2:f8:9d:a2:1e:9e:a8:37:75:46:3b:8a:1b: 0a:0d:9f:c5:80:9e:66:ee:65:c4:e9:0c:5a:50:5d: 3a:94:a2:2e:6d:2e:84:51:31:e3:89:4b:5b:d6:eb: 2c:f2:f3:24:c4:1c:6d:df:57:29:a2:10:a9:8a:3b: 80:e4:b1:15:f0:60:8e:f2:d5:7d:f9:39:6c:c7:06: e3:75:0f:27:45:72:5f:d8:3d:95:8b:cc:27:df:5e: f4:d5:34:f3:51:d4:b2:08:7c:86:e6:d1:85:da:72: 10:98:c7:9d:6b:cf:f5:b8:d4:44:fc:4b:53:38:8e: e7:01:52:c1:3e:ae:fa:c6:c8:80:24:56:75:77:ab: b6:6a:c3:ff:89:4d:c5:9c:28:95:2a:2c:80:74:92: 0b:a0:32:a7:7a:c7:48:d3:46:8b:6c:fa:ef:4d:1f: 20:ff:dc:b1:7b:3d:42:ce:5e:ac:4c:41:cc:f6:d7: 35:fe:f6:08:67:b7:4b:55:21:e5:e4:48:88:c0:33: 27:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:2B:4D:69:A8:30:9A:9D:E8:19:20:70:0F:0E:18:1F:51:CC:97:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/338db7a4-13de-39ae-bf9b-9edcc9332828.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl X509v3 Authority Key Identifier: keyid:94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer sbgp-ipAddrBlock: critical IPv6: 2602:fc3b:ff00:52::/64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:bc:9a:31:63:18:5e:e4:91:a3:4d:c1:e3:f9:5d:42:82:31: f4:2f:d9:b1:f7:79:ef:ce:83:13:b3:73:eb:83:42:1a:df:83: 3c:6e:8f:e5:c3:16:93:28:cb:d7:40:74:dc:d3:5d:df:74:16: e7:d7:08:d3:52:c6:87:5a:b8:89:5c:2d:0b:1d:9a:cd:c6:1c: d4:30:c0:6e:4b:b4:4c:91:ac:f7:04:85:7e:76:a1:7f:bc:ce: 96:ef:89:9a:0e:9a:a2:da:bd:ba:49:4b:19:49:05:2e:7d:6d: 1f:a4:bf:7f:68:c8:66:f7:7f:58:cb:74:7e:2d:c7:d6:4a:9e: b6:ec:5e:ea:e8:6e:ff:46:44:2f:0c:87:bf:4a:f9:a7:8c:0b: 75:f9:39:19:eb:14:8e:c8:c9:f4:50:e3:d0:0d:39:57:1c:62: 83:a0:e8:20:28:3d:50:4d:61:98:41:42:24:4e:30:01:17:64: dc:07:83:16:ae:30:ab:77:2b:7d:2f:29:f1:c9:3c:93:24:65: 2d:5a:2c:21:4d:20:78:ac:15:b2:bc:c1:68:84:de:48:29:65: 80:a3:a6:49:29:d1:94:62:3c:55:af:5a:0e:f1:bb:be:b8:57: ad:88:d0:6f:17:bb:17:13:43:f6:a0:03:4e:1c:e1:01:bc:ee: 18:4d:ac:b5 -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE3PLd5H50+Wcbc7L8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWVhZDYwOWQtYWZlNi00NWFmLTg0MDktMzQ4MThlODQ1 MGM1MB4XDTI2MDUxMjEzMDYxOVoXDTI2MDgxMDEzMDYxOVowLzEtMCsGA1UEAxMk Yzg3OGIzMDYtOTI3My00NzVhLTgxNGMtNWRjZGM0OTdhZmNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsA7Fzg5g24zwTUv+wu1TrWVqYSpKLhDinlIs uDnceB8GoDLBOEZm+4JozNUontPoTCTDj8AGWvi2zhZHq6L4naIenqg3dUY7ihsK DZ/FgJ5m7mXE6QxaUF06lKIubS6EUTHjiUtb1uss8vMkxBxt31cpohCpijuA5LEV 8GCO8tV9+TlsxwbjdQ8nRXJf2D2Vi8wn31701TTzUdSyCHyG5tGF2nIQmMeda8/1 uNRE/EtTOI7nAVLBPq76xsiAJFZ1d6u2asP/iU3FnCiVKiyAdJILoDKnesdI00aL bPrvTR8g/9yxez1Czl6sTEHM9tc1/vYIZ7dLVSHl5EiIwDMn4QIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFF8rTWmoMJqd6BkgcA8OGB9RzJdfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9lZWFk NjA5ZC1hZmU2LTQ1YWYtODQwOS0zNDgxOGU4NDUwYzUvMzM4ZGI3YTQtMTNkZS0z OWFlLWJmOWItOWVkY2M5MzMyODI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZWVhZDYwOWQtYWZlNi00NWFmLTg0 MDktMzQ4MThlODQ1MGM1L2VlYWQ2MDlkLWFmZTYtNDVhZi04NDA5LTM0ODE4ZTg0 NTBjNS5jcmwwHwYDVR0jBBgwFoAUlLfjG9MoedrUC407Be4h1zWUqsswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9lZWFkNjA5ZC1hZmU2LTQ1YWYtODQwOS0zNDgx OGU4NDUwYzUuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAJgL8O/8A AFIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAp7yaMWMYXuSRo03B4/ldQoIx9C/Zsfd5786DE7Nz64NCGt+D PG6P5cMWkyjL10B03NNd33QW59cI01LGh1q4iVwtCx2azcYc1DDAbku0TJGs9wSF fnahf7zOlu+Jmg6aotq9uklLGUkFLn1tH6S/f2jIZvd/WMt0fi3H1kqetuxe6uhu /0ZELwyHv0r5p4wLdfk5GesUjsjJ9FDj0A05Vxxig6DoICg9UE1hmEFCJE4wARdk 3AeDFq4wq3crfS8p8ck8kyRlLVosIU0geKwVsrzBaITeSCllgKOmSSnRlGI8Va9a DvG7vrhXrYjQbxe7FxND9qADThzhAbzuGE2stQ== -----END CERTIFICATE-----Generated at Wed May 13 09:47:51 2026 by rpki-client