$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/3fbbb992-9cfa-3505-864a-6dff98f90759.roa File: 3fbbb992-9cfa-3505-864a-6dff98f90759.roa (raw, json) Hash identifier: yKSZL8zQiYYex1gEajjGMDSGgb0263zXVij0mjLvsl0= Subject key identifier: A9:C9:15:9B:4C:C4:76:95:61:3F:42:C2:59:4E:30:21:B3:79:70:66 Certificate issuer: /CN=eead609d-afe6-45af-8409-34818e8450c5 Certificate serial: 010D0C9F4328584DCF2DDB2B0A6DA65E36D9D780 Authority key identifier: 94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/3fbbb992-9cfa-3505-864a-6dff98f90759.roa Signing time: Tue 12 May 2026 13:06:18 +0000 ROA not before: Tue 12 May 2026 13:06:18 +0000 ROA not after: Mon 10 Aug 2026 13:06:18 +0000 asID: 399970 IP address blocks: 2602:fc3b:ff00:19::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cf:2d:db:2b:0a:6d:a6:5e:36:d9:d7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eead609d-afe6-45af-8409-34818e8450c5 Validity Not Before: May 12 13:06:18 2026 GMT Not After : Aug 10 13:06:18 2026 GMT Subject: CN=91c041b8-3c7b-4713-9e6d-ce7bef870712 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a4:d2:af:3e:4f:fb:31:37:a0:e4:d2:ca:7c: 6a:5d:2e:51:96:25:b4:2b:61:49:cf:00:29:bb:19: 69:d7:fa:f1:30:a9:64:07:92:77:03:69:ff:9a:ed: 60:7e:50:d3:b4:d8:cd:f3:65:e7:36:22:fe:47:d6: bd:23:71:56:5b:80:53:17:90:b1:21:59:4f:6f:a1: 43:9d:d9:98:71:b5:3d:57:31:d1:9d:4c:de:16:1d: c4:22:52:01:d7:d0:f4:7b:45:9f:bf:a0:09:d2:cf: b7:42:00:c9:0c:cf:ab:aa:25:1d:38:e9:cd:ec:cd: 53:be:fb:b3:a6:17:2c:fd:fb:76:2d:72:e9:37:df: bd:ef:4b:c5:47:ee:d4:32:8b:c2:56:75:fe:5a:b4: e7:ca:9c:98:23:ba:b6:dc:bb:d4:34:12:f6:4a:e6: 16:e2:c5:20:20:f2:79:bc:3d:55:59:8c:e8:1f:76: 28:f5:9d:2a:95:50:e7:0f:8a:73:03:d5:3f:31:17: ed:2c:0d:85:32:8f:bb:a8:09:c2:8f:c4:a1:9d:3e: 18:27:25:a1:39:44:c8:f7:5d:7b:ab:55:60:c4:d2: 04:50:47:7d:47:1d:0c:3c:12:52:9b:b4:de:3b:f3: d8:a9:6d:37:ec:28:7a:3a:3b:5b:9f:b4:65:e0:bc: 7f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:C9:15:9B:4C:C4:76:95:61:3F:42:C2:59:4E:30:21:B3:79:70:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/3fbbb992-9cfa-3505-864a-6dff98f90759.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl X509v3 Authority Key Identifier: keyid:94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer sbgp-ipAddrBlock: critical IPv6: 2602:fc3b:ff00:19::/64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:24:ea:c3:99:6b:a8:3e:8f:45:83:e3:f5:bd:a5:19:e4:d2: 18:44:48:9f:5e:db:46:17:99:f9:5f:ec:01:61:cd:4b:62:ea: 63:20:61:27:0d:c6:8e:29:93:d2:1f:b4:b7:3a:e8:56:17:03: 98:0e:a1:f4:d2:ad:99:79:4c:92:79:90:b9:c0:9e:b3:15:e4: 2f:ba:69:c0:5d:8c:15:b6:d7:c5:ef:09:f5:29:ae:af:66:f4: 6b:dc:c3:1f:a2:7a:96:8d:2d:bd:80:ee:26:8b:94:30:c9:61: c0:44:48:d9:74:f0:bc:1d:5f:83:65:3a:87:25:0e:9b:89:3d: 62:f5:69:f4:89:94:c6:8d:f7:a2:e1:9c:28:d1:26:04:b8:d0: 26:6a:9a:b4:92:59:bd:2c:d1:fb:1f:21:4e:91:5d:28:cd:c7: eb:09:8c:10:75:2d:ef:f3:7f:11:5d:c5:e3:52:a8:b6:89:79: ca:e3:f8:4d:52:14:a8:21:3f:4a:c6:55:20:33:76:ed:35:e2: 35:23:90:db:4f:31:d1:d1:92:33:70:9a:38:96:d9:b8:59:9a: 11:08:4e:42:03:c5:ed:fa:02:40:be:fd:8d:ce:2e:66:10:08: 3b:89:25:aa:a6:ef:79:3c:92:1f:4d:5d:80:83:c6:c3:dc:1b: 37:0c:98:f0 -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE3PLdsrCm2mXjbZ14AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWVhZDYwOWQtYWZlNi00NWFmLTg0MDktMzQ4MThlODQ1 MGM1MB4XDTI2MDUxMjEzMDYxOFoXDTI2MDgxMDEzMDYxOFowLzEtMCsGA1UEAxMk OTFjMDQxYjgtM2M3Yi00NzEzLTllNmQtY2U3YmVmODcwNzEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxaTSrz5P+zE3oOTSynxqXS5RliW0K2FJzwAp uxlp1/rxMKlkB5J3A2n/mu1gflDTtNjN82XnNiL+R9a9I3FWW4BTF5CxIVlPb6FD ndmYcbU9VzHRnUzeFh3EIlIB19D0e0Wfv6AJ0s+3QgDJDM+rqiUdOOnN7M1Tvvuz phcs/ft2LXLpN9+970vFR+7UMovCVnX+WrTnypyYI7q23LvUNBL2SuYW4sUgIPJ5 vD1VWYzoH3Yo9Z0qlVDnD4pzA9U/MRftLA2FMo+7qAnCj8ShnT4YJyWhOUTI9117 q1VgxNIEUEd9Rx0MPBJSm7TeO/PYqW037Ch6Ojtbn7Rl4Lx/TQIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFKnJFZtMxHaVYT9CwllOMCGzeXBmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9lZWFk NjA5ZC1hZmU2LTQ1YWYtODQwOS0zNDgxOGU4NDUwYzUvM2ZiYmI5OTItOWNmYS0z NTA1LTg2NGEtNmRmZjk4ZjkwNzU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZWVhZDYwOWQtYWZlNi00NWFmLTg0 MDktMzQ4MThlODQ1MGM1L2VlYWQ2MDlkLWFmZTYtNDVhZi04NDA5LTM0ODE4ZTg0 NTBjNS5jcmwwHwYDVR0jBBgwFoAUlLfjG9MoedrUC407Be4h1zWUqsswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9lZWFkNjA5ZC1hZmU2LTQ1YWYtODQwOS0zNDgx OGU4NDUwYzUuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAJgL8O/8A ABkwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEALyTqw5lrqD6PRYPj9b2lGeTSGERIn17bRheZ+V/sAWHNS2Lq YyBhJw3GjimT0h+0tzroVhcDmA6h9NKtmXlMknmQucCesxXkL7ppwF2MFbbXxe8J 9Smur2b0a9zDH6J6lo0tvYDuJouUMMlhwERI2XTwvB1fg2U6hyUOm4k9YvVp9ImU xo33ouGcKNEmBLjQJmqatJJZvSzR+x8hTpFdKM3H6wmMEHUt7/N/EV3F41Kotol5 yuP4TVIUqCE/SsZVIDN27TXiNSOQ208x0dGSM3CaOJbZuFmaEQhOQgPF7foCQL79 jc4uZhAIO4klqqbveTySH01dgIPGw9wbNwyY8A== -----END CERTIFICATE-----Generated at Wed May 13 10:54:34 2026 by rpki-client