$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/4d0d3ec0-41a4-37d2-bbad-8aec92c78636.roa File: 4d0d3ec0-41a4-37d2-bbad-8aec92c78636.roa (raw, json) Hash identifier: 0mvSAhRsfIY/J1irAEJDlKuYKPwlnm25WQZpYsJcUyM= Subject key identifier: 9E:CF:0D:DA:CA:8E:04:06:0B:06:DD:30:15:D0:6A:11:A9:01:23:73 Certificate issuer: /CN=eead609d-afe6-45af-8409-34818e8450c5 Certificate serial: 010D0C9F4328584DCF2E1B3DE3C5941670B83778 Authority key identifier: 94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/4d0d3ec0-41a4-37d2-bbad-8aec92c78636.roa Signing time: Tue 12 May 2026 13:06:48 +0000 ROA not before: Tue 12 May 2026 13:06:48 +0000 ROA not after: Mon 10 Aug 2026 13:06:48 +0000 asID: 399970 IP address blocks: 2602:fc3b:ff00:3ea::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cf:2e:1b:3d:e3:c5:94:16:70:b8:37:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eead609d-afe6-45af-8409-34818e8450c5 Validity Not Before: May 12 13:06:48 2026 GMT Not After : Aug 10 13:06:48 2026 GMT Subject: CN=feb14e9d-2d5b-449a-bc22-614beb184994 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:7f:60:f0:f5:d2:f6:03:0a:06:58:21:06:68: c0:1b:69:7f:4c:89:90:c7:94:0e:7e:13:d5:e9:bc: fd:8c:7b:7a:14:54:09:5e:5c:68:d6:92:c8:2a:3d: 40:ee:a9:de:82:de:94:ee:9e:ab:fe:62:98:e5:43: eb:4c:e8:99:1a:76:6f:95:9b:e6:94:ac:77:82:5e: 58:ed:aa:5d:3f:b8:28:74:19:00:53:0b:fc:33:a9: e1:30:8f:4e:63:1e:6d:bb:06:83:5b:32:cd:4e:fb: f0:91:c9:2c:70:d1:08:e6:a6:ff:7b:c4:ac:ba:4e: ea:42:3d:39:f9:bf:e5:0e:7a:67:e6:40:53:f0:dd: 0e:eb:46:aa:41:80:70:1a:73:e8:26:ca:4c:fc:68: 56:da:20:ca:59:36:7b:17:07:8d:86:d1:01:dd:ca: 0e:ba:9c:22:11:89:ef:a3:30:e0:94:22:56:a0:81: 02:04:76:49:cf:b3:c5:d6:de:d7:aa:59:90:de:2c: eb:8c:55:06:eb:43:e5:2e:ce:9d:1e:58:f6:d1:ad: ce:62:24:1b:a4:62:08:26:54:83:b6:13:95:ba:9d: 2e:86:8b:dd:93:8c:ac:bc:14:c0:60:2b:44:71:af: c4:81:12:f3:3a:7f:8c:b5:9c:e2:88:67:0c:7f:cf: 05:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:CF:0D:DA:CA:8E:04:06:0B:06:DD:30:15:D0:6A:11:A9:01:23:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/4d0d3ec0-41a4-37d2-bbad-8aec92c78636.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl X509v3 Authority Key Identifier: keyid:94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer sbgp-ipAddrBlock: critical IPv6: 2602:fc3b:ff00:3ea::/64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:c3:ff:10:64:49:d9:1b:26:3f:e5:50:72:7f:e7:4f:30:19: 70:6e:1d:a7:fe:e3:c8:65:af:18:67:b8:bc:6e:1d:8e:d4:a9: 01:1b:96:ec:0b:4c:6b:b2:70:f4:69:11:75:67:27:eb:ca:95: a9:bc:15:34:5e:f1:0e:1d:fc:24:48:43:97:96:4a:57:2b:57: 64:d1:72:ac:39:4d:57:d6:ac:7d:c7:77:f5:62:26:3b:dd:48: f9:fc:6a:d1:96:a6:77:85:a0:32:50:52:75:53:09:64:26:c0: 94:72:62:d7:ba:ec:9d:54:0e:3d:97:50:fb:95:79:59:92:a9: 2b:29:43:16:a4:b0:76:fe:49:13:03:23:30:17:c1:96:ea:1b: 02:fb:de:98:18:00:cf:fe:53:e1:8e:78:96:02:50:3a:6f:7f: b6:55:f4:b5:7b:90:e9:ef:a5:ac:67:f5:e0:a5:3c:92:2c:f4: bf:b9:84:87:63:29:ea:d1:be:30:fb:e3:95:f4:d3:bb:b6:13: 74:15:3c:0e:a4:80:27:20:c0:23:a7:1e:b3:e0:2c:42:68:f7: dd:ff:5e:e7:06:80:ed:a4:d1:48:e2:bd:07:e5:b3:88:bd:ab: 6d:09:be:e3:bb:f8:b2:7f:31:21:29:7f:c9:3a:5e:32:55:7e: e5:49:4a:1b -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE3PLhs948WUFnC4N3gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWVhZDYwOWQtYWZlNi00NWFmLTg0MDktMzQ4MThlODQ1 MGM1MB4XDTI2MDUxMjEzMDY0OFoXDTI2MDgxMDEzMDY0OFowLzEtMCsGA1UEAxMk ZmViMTRlOWQtMmQ1Yi00NDlhLWJjMjItNjE0YmViMTg0OTk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwn9g8PXS9gMKBlghBmjAG2l/TImQx5QOfhPV 6bz9jHt6FFQJXlxo1pLIKj1A7qnegt6U7p6r/mKY5UPrTOiZGnZvlZvmlKx3gl5Y 7apdP7godBkAUwv8M6nhMI9OYx5tuwaDWzLNTvvwkckscNEI5qb/e8Ssuk7qQj05 +b/lDnpn5kBT8N0O60aqQYBwGnPoJspM/GhW2iDKWTZ7FweNhtEB3coOupwiEYnv ozDglCJWoIECBHZJz7PF1t7XqlmQ3izrjFUG60PlLs6dHlj20a3OYiQbpGIIJlSD thOVup0uhovdk4ysvBTAYCtEca/EgRLzOn+MtZziiGcMf88FgQIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFJ7PDdrKjgQGCwbdMBXQahGpASNzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9lZWFk NjA5ZC1hZmU2LTQ1YWYtODQwOS0zNDgxOGU4NDUwYzUvNGQwZDNlYzAtNDFhNC0z N2QyLWJiYWQtOGFlYzkyYzc4NjM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZWVhZDYwOWQtYWZlNi00NWFmLTg0 MDktMzQ4MThlODQ1MGM1L2VlYWQ2MDlkLWFmZTYtNDVhZi04NDA5LTM0ODE4ZTg0 NTBjNS5jcmwwHwYDVR0jBBgwFoAUlLfjG9MoedrUC407Be4h1zWUqsswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9lZWFkNjA5ZC1hZmU2LTQ1YWYtODQwOS0zNDgx OGU4NDUwYzUuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAJgL8O/8A A+owVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAKsP/EGRJ2RsmP+VQcn/nTzAZcG4dp/7jyGWvGGe4vG4djtSp ARuW7AtMa7Jw9GkRdWcn68qVqbwVNF7xDh38JEhDl5ZKVytXZNFyrDlNV9asfcd3 9WImO91I+fxq0Zamd4WgMlBSdVMJZCbAlHJi17rsnVQOPZdQ+5V5WZKpKylDFqSw dv5JEwMjMBfBluobAvvemBgAz/5T4Y54lgJQOm9/tlX0tXuQ6e+lrGf14KU8kiz0 v7mEh2Mp6tG+MPvjlfTTu7YTdBU8DqSAJyDAI6ces+AsQmj33f9e5waA7aTRSOK9 B+WziL2rbQm+47v4sn8xISl/yTpeMlV+5UlKGw== -----END CERTIFICATE-----Generated at Tue May 12 21:48:01 2026 by rpki-client