$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/3fd5df91-3bb5-349c-87d0-eceab1f8356c.roa File: 3fd5df91-3bb5-349c-87d0-eceab1f8356c.roa (raw, json) Hash identifier: 3Tmwmqv3mK2NlHbg2/Mns2xjaOiDu/fW99J93Iyb1OY= Subject key identifier: 1B:9C:88:97:19:C6:EA:83:AE:D0:18:0D:B8:B6:35:CE:70:8B:3E:DA Certificate issuer: /CN=eead609d-afe6-45af-8409-34818e8450c5 Certificate serial: 010D0C9F4328584DCF2E110BB278DCA3667A50C0 Authority key identifier: 94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/3fd5df91-3bb5-349c-87d0-eceab1f8356c.roa Signing time: Tue 12 May 2026 13:06:43 +0000 ROA not before: Tue 12 May 2026 13:06:43 +0000 ROA not after: Mon 10 Aug 2026 13:06:43 +0000 asID: 399970 IP address blocks: 2602:fc3b:ff00:364::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cf:2e:11:0b:b2:78:dc:a3:66:7a:50:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eead609d-afe6-45af-8409-34818e8450c5 Validity Not Before: May 12 13:06:43 2026 GMT Not After : Aug 10 13:06:43 2026 GMT Subject: CN=5846b467-95e4-4d88-9656-5d64b195bd74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:9c:5d:6a:5a:f1:02:b8:0b:53:6e:85:b7:a5: 47:eb:1d:ac:de:62:2c:5a:28:1d:f5:73:33:44:88: ac:39:90:06:db:66:97:a5:07:0e:3c:48:0c:94:0d: 42:24:40:90:20:7d:16:d1:42:48:ba:f4:a9:91:fa: b8:da:1d:2a:13:da:2c:42:92:1f:d6:8a:05:d0:fc: 71:8f:8b:cd:2d:25:da:73:13:7b:69:3e:b6:64:d0: e5:20:68:1f:8a:63:08:c5:ad:5d:fa:eb:60:f7:b5: 79:d9:37:d8:0b:82:97:74:8a:50:34:42:14:43:8c: 41:75:d8:76:d1:52:6e:f6:1d:a4:1e:b6:fa:6c:b7: d7:58:1e:4a:a3:e6:1c:8b:4c:61:79:0c:4d:e6:f7: 29:c3:85:8b:79:a9:db:3d:f3:4d:4d:2f:f6:54:c4: e6:2d:32:8c:63:a3:4d:66:d6:9d:ba:f1:d9:f0:6d: 53:5c:52:76:75:80:de:74:5b:1a:44:a7:2b:29:79: ca:b9:3b:dd:7a:87:d4:cd:54:73:12:6b:e2:c7:cb: c6:76:54:17:b6:cc:73:40:7d:06:b2:0e:7f:28:45: ad:19:50:52:56:55:ce:b6:b4:c8:98:a5:ac:e0:64: 41:e7:20:75:72:ea:83:a1:f8:3d:ec:47:ee:a1:f5: f0:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:9C:88:97:19:C6:EA:83:AE:D0:18:0D:B8:B6:35:CE:70:8B:3E:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/3fd5df91-3bb5-349c-87d0-eceab1f8356c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl X509v3 Authority Key Identifier: keyid:94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer sbgp-ipAddrBlock: critical IPv6: 2602:fc3b:ff00:364::/64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:9a:75:b5:f2:30:74:94:88:62:ac:58:fb:b3:d0:ec:95:ad: 75:c7:b1:25:a1:b1:41:87:8c:57:fd:30:a2:7f:e9:d5:77:5f: d5:dc:7c:e1:c3:f3:33:64:ce:64:37:94:ab:0c:6d:2c:1f:06: 0c:00:ad:9d:59:18:ad:af:48:90:f0:6f:6a:58:90:87:cb:04: 19:a3:c3:35:3e:18:b6:2d:74:fe:ba:5a:0e:76:68:57:9b:3b: cb:ca:33:bf:ed:c7:f1:e6:d0:d7:de:3e:2c:6d:61:41:1d:16: 43:37:4e:b7:bb:a6:1f:58:d6:fe:9d:28:b0:7e:49:58:9f:8c: 76:de:9f:67:87:8a:52:a9:b7:e4:6f:e2:70:6e:db:97:c0:ee: 3c:b2:16:4a:3a:75:9e:ff:4d:89:dd:4d:af:2a:cf:74:15:a4: 79:2e:3a:82:db:3d:8d:77:b4:e6:c8:9f:84:11:7b:fa:2c:c7: 04:3e:22:7e:e6:3d:2f:04:a2:25:85:fa:d7:61:86:66:27:d4: 11:e0:d3:10:af:48:f7:8e:98:72:4d:66:38:d4:14:a0:34:de: 4d:42:85:77:e8:44:97:06:a2:2c:27:a7:9f:37:4d:cf:37:41: 1e:42:18:94:bc:f9:e2:34:ef:d8:bd:1c:70:b9:d1:e6:2f:ce: ca:9d:1c:83 -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE3PLhELsnjco2Z6UMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWVhZDYwOWQtYWZlNi00NWFmLTg0MDktMzQ4MThlODQ1 MGM1MB4XDTI2MDUxMjEzMDY0M1oXDTI2MDgxMDEzMDY0M1owLzEtMCsGA1UEAxMk NTg0NmI0NjctOTVlNC00ZDg4LTk2NTYtNWQ2NGIxOTViZDc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZxdalrxArgLU26Ft6VH6x2s3mIsWigd9XMz RIisOZAG22aXpQcOPEgMlA1CJECQIH0W0UJIuvSpkfq42h0qE9osQpIf1ooF0Pxx j4vNLSXacxN7aT62ZNDlIGgfimMIxa1d+utg97V52TfYC4KXdIpQNEIUQ4xBddh2 0VJu9h2kHrb6bLfXWB5Ko+Yci0xheQxN5vcpw4WLeanbPfNNTS/2VMTmLTKMY6NN ZtaduvHZ8G1TXFJ2dYDedFsaRKcrKXnKuTvdeofUzVRzEmvix8vGdlQXtsxzQH0G sg5/KEWtGVBSVlXOtrTImKWs4GRB5yB1cuqDofg97EfuofXw3wIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFBuciJcZxuqDrtAYDbi2Nc5wiz7aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9lZWFk NjA5ZC1hZmU2LTQ1YWYtODQwOS0zNDgxOGU4NDUwYzUvM2ZkNWRmOTEtM2JiNS0z NDljLTg3ZDAtZWNlYWIxZjgzNTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZWVhZDYwOWQtYWZlNi00NWFmLTg0 MDktMzQ4MThlODQ1MGM1L2VlYWQ2MDlkLWFmZTYtNDVhZi04NDA5LTM0ODE4ZTg0 NTBjNS5jcmwwHwYDVR0jBBgwFoAUlLfjG9MoedrUC407Be4h1zWUqsswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9lZWFkNjA5ZC1hZmU2LTQ1YWYtODQwOS0zNDgx OGU4NDUwYzUuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAJgL8O/8A A2QwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAAZp1tfIwdJSIYqxY+7PQ7JWtdcexJaGxQYeMV/0won/p1Xdf 1dx84cPzM2TOZDeUqwxtLB8GDACtnVkYra9IkPBvaliQh8sEGaPDNT4Yti10/rpa DnZoV5s7y8ozv+3H8ebQ194+LG1hQR0WQzdOt7umH1jW/p0osH5JWJ+Mdt6fZ4eK Uqm35G/icG7bl8DuPLIWSjp1nv9Nid1NryrPdBWkeS46gts9jXe05sifhBF7+izH BD4ifuY9LwSiJYX612GGZifUEeDTEK9I946Yck1mONQUoDTeTUKFd+hElwaiLCen nzdNzzdBHkIYlLz54jTv2L0ccLnR5i/Oyp0cgw== -----END CERTIFICATE-----Generated at Tue May 12 21:48:07 2026 by rpki-client