$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/68fb9d76-1509-3c2c-af22-47abc42e242a.roa File: 68fb9d76-1509-3c2c-af22-47abc42e242a.roa (raw, json) Hash identifier: 0FFQSO+yiruSFkzFr1ec24MVnTIobDhnij6wgsnNHHA= Subject key identifier: 3E:84:D6:C9:11:E2:39:1C:C3:74:7F:6B:8F:94:D8:4C:A3:73:6E:5E Certificate issuer: /CN=eead609d-afe6-45af-8409-34818e8450c5 Certificate serial: 010D0C9F4328584DCF2DDFE60C60E78A5C5A567E Authority key identifier: 94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/68fb9d76-1509-3c2c-af22-47abc42e242a.roa Signing time: Tue 12 May 2026 13:06:20 +0000 ROA not before: Tue 12 May 2026 13:06:20 +0000 ROA not after: Mon 10 Aug 2026 13:06:20 +0000 asID: 399970 IP address blocks: 2602:fc3b:ff00:6f::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cf:2d:df:e6:0c:60:e7:8a:5c:5a:56:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eead609d-afe6-45af-8409-34818e8450c5 Validity Not Before: May 12 13:06:20 2026 GMT Not After : Aug 10 13:06:20 2026 GMT Subject: CN=2c32c338-ea46-4b0f-ac04-230bd4eafb17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:93:54:6d:c5:2c:40:80:c3:c4:5c:47:cc:c1: 46:37:3e:98:26:ca:0b:1e:90:79:b0:4a:b7:71:0e: 52:3a:db:7e:20:eb:c5:ec:d2:00:fe:4e:29:50:ef: 95:8f:6f:80:7f:73:e0:8f:13:1c:96:a4:89:da:89: 69:8b:4e:3c:9e:fb:62:00:1d:fb:e7:ef:be:3f:81: f7:75:22:b2:bd:93:84:97:d4:27:08:1d:13:16:2a: 22:ac:f2:0d:81:a1:17:16:82:3b:a0:2f:fa:d2:24: 85:12:df:72:5d:4d:fe:f0:44:f1:c6:c0:dd:9d:f2: b1:02:e0:d4:7a:19:12:46:7b:70:a0:e7:64:7e:c1: ea:d0:31:45:78:d5:49:8e:b9:22:79:18:df:48:ef: 07:cf:3f:49:88:e0:f4:17:1e:48:44:a2:ac:a3:2d: 57:6a:81:ef:03:77:c6:37:31:99:0b:4c:e2:f5:e5: 06:c3:17:dc:9b:71:55:c9:f2:70:aa:29:0b:43:84: 3d:0c:1a:af:f5:2b:e5:e7:6b:36:3f:3a:57:4a:32: af:b6:6a:c0:ae:55:25:7b:0b:af:16:5d:63:dd:2c: 2d:27:1c:fc:a9:36:20:e1:75:67:9a:a0:28:1f:51: 58:3c:6a:63:45:37:0f:12:e0:38:ed:69:6c:4d:94: fe:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:84:D6:C9:11:E2:39:1C:C3:74:7F:6B:8F:94:D8:4C:A3:73:6E:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/68fb9d76-1509-3c2c-af22-47abc42e242a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl X509v3 Authority Key Identifier: keyid:94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer sbgp-ipAddrBlock: critical IPv6: 2602:fc3b:ff00:6f::/64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:97:09:43:32:df:16:83:08:a5:41:9f:38:9a:b0:5b:75:d5: 13:54:9a:df:79:41:bf:30:6b:a6:c4:a1:b2:e9:f2:e1:02:f6: f4:43:5a:d5:2d:82:75:e6:cd:22:81:77:09:37:c2:6d:9f:a2: a3:e8:ac:35:31:94:2e:a0:e7:24:aa:52:6d:ad:7c:82:94:f6: 03:7d:cf:e4:4e:ca:6e:54:cb:7a:89:27:ab:ea:40:52:c0:a8: ef:aa:76:45:44:e3:27:a4:f0:77:44:66:4f:89:37:d5:73:c1: 7d:ee:df:c4:13:a9:91:6d:c6:d3:03:90:22:0f:6c:57:5d:ae: e3:bb:01:89:66:3c:eb:13:da:b1:1f:4c:57:7c:58:1e:b5:1e: 09:88:6d:e8:18:cd:14:9e:73:ed:71:cb:f6:d8:b6:a1:22:ea: 81:ad:c9:1a:ca:f7:4f:0c:6b:f6:35:d0:27:7f:bc:47:f5:e6: ea:54:5c:2f:01:cd:72:de:ad:98:a7:74:58:58:fc:75:3c:dd: 81:6f:8c:d4:36:ba:d7:60:84:d1:31:60:06:43:87:bf:fa:64: c3:d6:c7:69:f6:20:a1:54:8e:20:2f:69:14:c6:9f:de:5b:43: 9e:ac:d9:e8:ed:28:aa:92:29:0c:5d:a8:92:52:89:95:be:55: 1d:a3:ed:3c -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE3PLd/mDGDnilxaVn4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWVhZDYwOWQtYWZlNi00NWFmLTg0MDktMzQ4MThlODQ1 MGM1MB4XDTI2MDUxMjEzMDYyMFoXDTI2MDgxMDEzMDYyMFowLzEtMCsGA1UEAxMk MmMzMmMzMzgtZWE0Ni00YjBmLWFjMDQtMjMwYmQ0ZWFmYjE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0pNUbcUsQIDDxFxHzMFGNz6YJsoLHpB5sEq3 cQ5SOtt+IOvF7NIA/k4pUO+Vj2+Af3PgjxMclqSJ2olpi048nvtiAB375+++P4H3 dSKyvZOEl9QnCB0TFioirPINgaEXFoI7oC/60iSFEt9yXU3+8ETxxsDdnfKxAuDU ehkSRntwoOdkfsHq0DFFeNVJjrkieRjfSO8Hzz9JiOD0Fx5IRKKsoy1XaoHvA3fG NzGZC0zi9eUGwxfcm3FVyfJwqikLQ4Q9DBqv9Svl52s2PzpXSjKvtmrArlUlewuv Fl1j3SwtJxz8qTYg4XVnmqAoH1FYPGpjRTcPEuA47WlsTZT+lwIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFD6E1skR4jkcw3R/a4+U2Eyjc25eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9lZWFk NjA5ZC1hZmU2LTQ1YWYtODQwOS0zNDgxOGU4NDUwYzUvNjhmYjlkNzYtMTUwOS0z YzJjLWFmMjItNDdhYmM0MmUyNDJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZWVhZDYwOWQtYWZlNi00NWFmLTg0 MDktMzQ4MThlODQ1MGM1L2VlYWQ2MDlkLWFmZTYtNDVhZi04NDA5LTM0ODE4ZTg0 NTBjNS5jcmwwHwYDVR0jBBgwFoAUlLfjG9MoedrUC407Be4h1zWUqsswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9lZWFkNjA5ZC1hZmU2LTQ1YWYtODQwOS0zNDgx OGU4NDUwYzUuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAJgL8O/8A AG8wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAMpcJQzLfFoMIpUGfOJqwW3XVE1Sa33lBvzBrpsShsuny4QL2 9ENa1S2CdebNIoF3CTfCbZ+io+isNTGULqDnJKpSba18gpT2A33P5E7KblTLeokn q+pAUsCo76p2RUTjJ6Twd0RmT4k31XPBfe7fxBOpkW3G0wOQIg9sV12u47sBiWY8 6xPasR9MV3xYHrUeCYht6BjNFJ5z7XHL9ti2oSLqga3JGsr3Twxr9jXQJ3+8R/Xm 6lRcLwHNct6tmKd0WFj8dTzdgW+M1Da612CE0TFgBkOHv/pkw9bHafYgoVSOIC9p FMaf3ltDnqzZ6O0oqpIpDF2oklKJlb5VHaPtPA== -----END CERTIFICATE-----Generated at Wed May 13 05:47:29 2026 by rpki-client