$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/4c165da5-3e7a-3d83-890c-be1a38c1a67c.roa File: 4c165da5-3e7a-3d83-890c-be1a38c1a67c.roa (raw, json) Hash identifier: p1aaJPv9F4CD8dubcFdOk5WbJiQBV3gegOi5S13Gju4= Subject key identifier: B2:94:28:FC:01:96:9F:B6:34:28:43:3B:E2:4A:64:A7:EC:23:B0:EE Certificate issuer: /CN=eead609d-afe6-45af-8409-34818e8450c5 Certificate serial: 010D0C9F4328584DCF2DF10A602AB6E6856F7C80 Authority key identifier: 94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/4c165da5-3e7a-3d83-890c-be1a38c1a67c.roa Signing time: Tue 12 May 2026 13:06:28 +0000 ROA not before: Tue 12 May 2026 13:06:28 +0000 ROA not after: Mon 10 Aug 2026 13:06:28 +0000 asID: 399970 IP address blocks: 2602:fc3b:ff00:191::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cf:2d:f1:0a:60:2a:b6:e6:85:6f:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eead609d-afe6-45af-8409-34818e8450c5 Validity Not Before: May 12 13:06:28 2026 GMT Not After : Aug 10 13:06:28 2026 GMT Subject: CN=86171ee0-15dc-45d2-84f0-29139dcda5b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:7e:23:d5:81:b9:76:80:d6:56:13:21:4f:02: 30:0d:8d:fd:31:55:ce:16:c7:f0:ba:6f:26:b8:56: 9c:3e:61:ca:fe:40:f5:2d:16:12:dd:e1:d6:9c:de: 36:e8:98:04:77:13:3f:92:92:de:d6:69:83:a8:84: 7e:d4:06:75:fb:7d:ae:25:8a:f3:db:71:30:1e:4a: 25:db:30:6e:cb:88:a9:83:dd:a5:08:d5:ee:03:44: 1f:fa:3d:ad:f8:02:fe:94:87:b0:1d:51:70:94:13: 7d:f8:4e:09:44:01:61:4d:84:df:d0:92:d5:ce:c7: 54:0d:7d:8d:4d:f8:83:04:6a:c5:85:b3:a0:bd:0b: 62:ae:fe:53:b4:12:c4:38:78:b0:4c:59:70:88:4c: 6b:14:a2:76:30:b0:e0:13:c4:b4:20:6f:37:5d:91: 53:ec:a6:43:ab:2b:22:8c:14:e4:19:03:e1:23:9e: ec:a8:ac:ab:c8:f4:63:c3:d8:4d:82:8d:96:4b:00: 3c:97:20:e3:8a:0a:d7:f9:6d:32:01:45:f3:af:74: 84:76:fc:35:bb:56:dc:e7:2b:b9:ef:b3:1f:87:3d: 21:bc:2e:14:ea:7e:d1:1a:ea:df:89:39:b6:14:6b: 50:21:9d:8d:ea:e5:e1:06:b3:a6:96:48:67:a5:b8: 0d:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:94:28:FC:01:96:9F:B6:34:28:43:3B:E2:4A:64:A7:EC:23:B0:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/4c165da5-3e7a-3d83-890c-be1a38c1a67c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl X509v3 Authority Key Identifier: keyid:94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer sbgp-ipAddrBlock: critical IPv6: 2602:fc3b:ff00:191::/64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:f5:25:28:8e:de:11:3b:e9:19:8e:43:df:3f:7d:95:11:2c: 14:bf:c2:34:22:3d:fb:e5:ea:11:c3:5d:b3:5f:72:81:90:ec: b3:c7:0c:e1:7c:a2:35:c1:da:41:33:ae:d8:ba:a7:48:22:97: a4:ad:d4:fd:28:32:a4:50:18:89:04:20:f8:cc:66:de:4e:00: 64:c0:af:4f:24:a9:6f:c9:f9:1f:a6:5f:9e:15:99:f9:1e:14: 47:fe:95:61:9d:79:43:1d:c3:b0:d2:75:2b:53:aa:50:f3:f9: b1:bf:96:f6:48:98:e2:2a:ea:c1:c1:a5:99:d4:de:eb:89:cb: f1:33:38:cc:25:cf:35:f4:a9:72:f8:ad:27:4e:7b:ba:56:e4: 18:bb:e4:29:65:3f:64:a4:a5:e3:2b:74:a2:5c:eb:a9:ca:44: ca:92:d9:23:fb:a6:8f:c2:d6:89:0d:fc:75:c4:fd:8c:c8:a7: dc:32:ff:09:27:3e:31:ad:7c:a3:30:91:f2:ec:37:a8:c4:01: 91:51:30:d7:13:00:bd:1f:32:ac:48:15:07:41:0d:ee:ab:ad: e1:64:fb:6c:64:05:f7:cc:1a:1f:fd:7f:fe:2d:cd:eb:f9:1c: d4:e7:7d:88:10:a5:af:7e:d1:7d:70:fe:13:0c:8f:c0:f3:02: 21:3c:80:ba -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE3PLfEKYCq25oVvfIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWVhZDYwOWQtYWZlNi00NWFmLTg0MDktMzQ4MThlODQ1 MGM1MB4XDTI2MDUxMjEzMDYyOFoXDTI2MDgxMDEzMDYyOFowLzEtMCsGA1UEAxMk ODYxNzFlZTAtMTVkYy00NWQyLTg0ZjAtMjkxMzlkY2RhNWI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqH4j1YG5doDWVhMhTwIwDY39MVXOFsfwum8m uFacPmHK/kD1LRYS3eHWnN426JgEdxM/kpLe1mmDqIR+1AZ1+32uJYrz23EwHkol 2zBuy4ipg92lCNXuA0Qf+j2t+AL+lIewHVFwlBN9+E4JRAFhTYTf0JLVzsdUDX2N TfiDBGrFhbOgvQtirv5TtBLEOHiwTFlwiExrFKJ2MLDgE8S0IG83XZFT7KZDqysi jBTkGQPhI57sqKyryPRjw9hNgo2WSwA8lyDjigrX+W0yAUXzr3SEdvw1u1bc5yu5 77Mfhz0hvC4U6n7RGurfiTm2FGtQIZ2N6uXhBrOmlkhnpbgNpQIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFLKUKPwBlp+2NChDO+JKZKfsI7DuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9lZWFk NjA5ZC1hZmU2LTQ1YWYtODQwOS0zNDgxOGU4NDUwYzUvNGMxNjVkYTUtM2U3YS0z ZDgzLTg5MGMtYmUxYTM4YzFhNjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZWVhZDYwOWQtYWZlNi00NWFmLTg0 MDktMzQ4MThlODQ1MGM1L2VlYWQ2MDlkLWFmZTYtNDVhZi04NDA5LTM0ODE4ZTg0 NTBjNS5jcmwwHwYDVR0jBBgwFoAUlLfjG9MoedrUC407Be4h1zWUqsswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9lZWFkNjA5ZC1hZmU2LTQ1YWYtODQwOS0zNDgx OGU4NDUwYzUuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAJgL8O/8A AZEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAb/UlKI7eETvpGY5D3z99lREsFL/CNCI9++XqEcNds19ygZDs s8cM4XyiNcHaQTOu2LqnSCKXpK3U/SgypFAYiQQg+Mxm3k4AZMCvTySpb8n5H6Zf nhWZ+R4UR/6VYZ15Qx3DsNJ1K1OqUPP5sb+W9kiY4irqwcGlmdTe64nL8TM4zCXP NfSpcvitJ057ulbkGLvkKWU/ZKSl4yt0olzrqcpEypLZI/umj8LWiQ38dcT9jMin 3DL/CSc+Ma18ozCR8uw3qMQBkVEw1xMAvR8yrEgVB0EN7qut4WT7bGQF98waH/1/ /i3N6/kc1Od9iBClr37RfXD+EwyPwPMCITyAug== -----END CERTIFICATE-----Generated at Wed May 13 07:35:29 2026 by rpki-client