$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/3a2b8644-1c0a-3f9d-850c-6c5ba4d00b26.roa File: 3a2b8644-1c0a-3f9d-850c-6c5ba4d00b26.roa (raw, json) Hash identifier: dnjvh+srDmR6FoYdi3jLB4XAO6/3gCEeWY2azuVdOVA= Subject key identifier: 38:1A:57:77:BE:2D:86:D7:5B:D9:72:2F:E7:9F:54:55:16:5F:5D:B2 Certificate issuer: /CN=eead609d-afe6-45af-8409-34818e8450c5 Certificate serial: 010D0C9F4328584DCF2E199EAC294407DD9DAF80 Authority key identifier: 94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/3a2b8644-1c0a-3f9d-850c-6c5ba4d00b26.roa Signing time: Tue 12 May 2026 13:06:47 +0000 ROA not before: Tue 12 May 2026 13:06:47 +0000 ROA not after: Mon 10 Aug 2026 13:06:47 +0000 asID: 399970 IP address blocks: 2602:fc3b:ff00:3d5::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cf:2e:19:9e:ac:29:44:07:dd:9d:af:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eead609d-afe6-45af-8409-34818e8450c5 Validity Not Before: May 12 13:06:47 2026 GMT Not After : Aug 10 13:06:47 2026 GMT Subject: CN=19975a0f-2186-4787-b8e2-fc6998da247c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:1c:61:51:fe:65:e3:93:4b:d2:a3:6e:59:96: 6c:9a:8c:91:5c:4b:fb:51:62:88:21:15:9c:7a:c3: f4:d0:72:67:84:24:62:b8:92:63:67:9b:cf:53:24: db:40:eb:65:fb:95:7e:0a:f1:f7:a6:78:ed:01:0d: 6d:61:39:2b:a0:ee:64:f3:23:cf:d8:32:63:b2:5c: e3:30:8a:b5:ea:ae:ac:84:c3:a3:a9:e7:4a:79:67: a3:b3:69:a3:21:f3:12:c7:f6:63:8b:9d:17:ca:8a: 72:5d:38:6a:42:f6:83:fd:72:78:19:c1:74:f6:b3: 86:7d:26:cf:79:d2:c6:a9:87:14:6f:a8:f0:a1:f5: 2f:fb:97:0f:1a:a8:4d:b2:b7:d3:d0:3e:36:4e:7e: e5:9b:53:2f:87:d4:4e:1b:a6:72:fb:83:15:11:95: 57:94:da:25:44:ed:fa:b4:7a:cc:bd:45:96:4a:0d: 81:ce:3c:99:b0:ad:00:69:e8:0a:e4:c0:0a:74:90: 20:c3:5e:a7:7b:27:2d:c9:70:4a:ab:62:94:df:9a: 86:e5:ad:13:33:c4:d9:7c:a2:34:d3:64:65:1a:04: 7c:15:48:86:26:11:d1:06:db:2c:28:c0:23:03:2f: a4:5a:23:34:7c:9d:44:36:d5:a4:3b:58:5f:30:b7: 6c:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:1A:57:77:BE:2D:86:D7:5B:D9:72:2F:E7:9F:54:55:16:5F:5D:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/3a2b8644-1c0a-3f9d-850c-6c5ba4d00b26.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl X509v3 Authority Key Identifier: keyid:94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer sbgp-ipAddrBlock: critical IPv6: 2602:fc3b:ff00:3d5::/64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:4e:df:bc:8a:fd:a1:be:a7:e0:bf:ae:58:2d:18:17:52:3a: 27:61:f8:05:94:c0:09:be:d2:76:69:90:bb:e2:1a:2f:27:c9: 03:fb:6e:ce:1d:e3:75:3f:14:11:43:8a:3b:af:a1:0c:20:22: f3:b5:50:75:a0:cf:65:2b:f6:c6:fc:c4:6e:73:90:da:35:42: 2f:7b:d7:93:ea:09:d5:63:a1:af:a7:27:27:fd:ed:09:a1:bd: d3:56:80:6f:39:f4:af:f8:54:64:14:48:60:86:89:53:1e:ff: 4e:f2:6b:95:a2:8b:66:15:97:bf:40:88:11:d4:c7:e6:29:30: f3:57:de:c7:1a:c0:f0:dc:08:76:0a:97:27:3b:22:80:fd:ec: f9:4c:40:98:ff:06:8b:fa:1d:ad:1f:1a:56:f0:ce:c7:2d:3c: 72:12:99:5b:5f:67:bf:85:39:24:66:53:5d:12:f4:8d:6e:a2: 1a:3f:0d:55:85:e0:18:9c:3a:ca:96:44:e7:ca:e6:fc:90:5f: 4b:9b:f5:e3:7a:b2:0e:68:03:33:0a:ec:de:ef:f4:61:a7:f2: 08:ba:a3:41:9a:5c:fc:54:05:5a:55:50:a5:45:b2:29:f7:83: c9:38:fe:a9:bd:9d:db:6f:a9:5d:0e:1a:2d:83:a5:a1:25:a5: d1:60:59:1d -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE3PLhmerClEB92dr4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWVhZDYwOWQtYWZlNi00NWFmLTg0MDktMzQ4MThlODQ1 MGM1MB4XDTI2MDUxMjEzMDY0N1oXDTI2MDgxMDEzMDY0N1owLzEtMCsGA1UEAxMk MTk5NzVhMGYtMjE4Ni00Nzg3LWI4ZTItZmM2OTk4ZGEyNDdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxxhUf5l45NL0qNuWZZsmoyRXEv7UWKIIRWc esP00HJnhCRiuJJjZ5vPUyTbQOtl+5V+CvH3pnjtAQ1tYTkroO5k8yPP2DJjslzj MIq16q6shMOjqedKeWejs2mjIfMSx/Zji50XyopyXThqQvaD/XJ4GcF09rOGfSbP edLGqYcUb6jwofUv+5cPGqhNsrfT0D42Tn7lm1Mvh9ROG6Zy+4MVEZVXlNolRO36 tHrMvUWWSg2BzjyZsK0AaegK5MAKdJAgw16neyctyXBKq2KU35qG5a0TM8TZfKI0 02RlGgR8FUiGJhHRBtssKMAjAy+kWiM0fJ1ENtWkO1hfMLdsYwIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFDgaV3e+LYbXW9lyL+efVFUWX12yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9lZWFk NjA5ZC1hZmU2LTQ1YWYtODQwOS0zNDgxOGU4NDUwYzUvM2EyYjg2NDQtMWMwYS0z ZjlkLTg1MGMtNmM1YmE0ZDAwYjI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZWVhZDYwOWQtYWZlNi00NWFmLTg0 MDktMzQ4MThlODQ1MGM1L2VlYWQ2MDlkLWFmZTYtNDVhZi04NDA5LTM0ODE4ZTg0 NTBjNS5jcmwwHwYDVR0jBBgwFoAUlLfjG9MoedrUC407Be4h1zWUqsswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9lZWFkNjA5ZC1hZmU2LTQ1YWYtODQwOS0zNDgx OGU4NDUwYzUuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAJgL8O/8A A9UwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAPU7fvIr9ob6n4L+uWC0YF1I6J2H4BZTACb7SdmmQu+IaLyfJ A/tuzh3jdT8UEUOKO6+hDCAi87VQdaDPZSv2xvzEbnOQ2jVCL3vXk+oJ1WOhr6cn J/3tCaG901aAbzn0r/hUZBRIYIaJUx7/TvJrlaKLZhWXv0CIEdTH5ikw81fexxrA 8NwIdgqXJzsigP3s+UxAmP8Gi/odrR8aVvDOxy08chKZW19nv4U5JGZTXRL0jW6i Gj8NVYXgGJw6ypZE58rm/JBfS5v143qyDmgDMwrs3u/0YafyCLqjQZpc/FQFWlVQ pUWyKfeDyTj+qb2d22+pXQ4aLYOloSWl0WBZHQ== -----END CERTIFICATE-----Generated at Wed May 13 12:25:14 2026 by rpki-client