$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/6a23db1c-de6d-3fc7-942b-e2f976b5111b.roa File: 6a23db1c-de6d-3fc7-942b-e2f976b5111b.roa (raw, json) Hash identifier: knRj9z11fvA9NECk3KHJ9cHg+koi8X+6q7brylYs8dg= Subject key identifier: 3E:26:66:12:C8:2E:92:56:6D:79:3B:D1:17:18:3D:39:3D:40:B9:92 Certificate issuer: /CN=eead609d-afe6-45af-8409-34818e8450c5 Certificate serial: 010D0C9F4328584DCF2E01E9D62F8BF649DA1680 Authority key identifier: 94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/6a23db1c-de6d-3fc7-942b-e2f976b5111b.roa Signing time: Tue 12 May 2026 13:06:36 +0000 ROA not before: Tue 12 May 2026 13:06:36 +0000 ROA not after: Mon 10 Aug 2026 13:06:36 +0000 asID: 399970 IP address blocks: 2602:fc3b:ff00:291::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cf:2e:01:e9:d6:2f:8b:f6:49:da:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eead609d-afe6-45af-8409-34818e8450c5 Validity Not Before: May 12 13:06:36 2026 GMT Not After : Aug 10 13:06:36 2026 GMT Subject: CN=c4d7d7bf-d4fc-4a5a-b1c1-620d8bcd1ef8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:c1:e6:f0:26:fc:b4:d4:84:3a:96:4c:a1:81: a5:70:d6:c5:ff:9b:0a:89:c3:19:2b:b4:ff:97:9f: 1f:50:ad:b4:59:55:e7:18:79:88:10:91:3a:51:a6: 4b:33:23:07:0b:48:02:bf:13:1b:20:ea:8f:cd:7d: 10:66:cb:24:b0:76:a2:95:ae:c0:ae:4a:65:cc:e1: 44:b7:fe:59:35:6f:2c:0a:14:cb:0d:80:cb:e2:74: 33:fe:46:12:8e:7e:3b:a5:4c:fb:5f:68:0f:64:71: 6e:a0:2f:0b:56:0e:b3:59:60:93:86:71:42:10:53: 45:9f:11:2f:1d:04:6c:7a:61:f1:2e:c8:c5:c3:1f: 2c:42:c2:54:e6:d7:21:12:da:83:11:ab:ba:eb:85: 65:99:e9:a8:19:c4:9b:ef:51:84:86:b5:13:f2:b1: 66:2f:b4:30:43:de:fd:04:19:40:15:3b:13:e8:2a: f2:b0:ba:55:e9:c3:34:b0:95:20:c9:97:6d:b9:45: 5d:55:2c:7b:bf:94:25:64:f0:9a:0a:db:57:93:99: 81:9a:bb:fd:77:40:33:56:7f:05:ca:bb:f5:3b:9d: 39:9c:3d:14:53:1f:af:1e:b8:7e:21:20:6a:6b:ba: 74:00:00:36:89:90:ca:a2:4a:3a:b5:d1:ab:24:9f: a9:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:26:66:12:C8:2E:92:56:6D:79:3B:D1:17:18:3D:39:3D:40:B9:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/6a23db1c-de6d-3fc7-942b-e2f976b5111b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl X509v3 Authority Key Identifier: keyid:94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer sbgp-ipAddrBlock: critical IPv6: 2602:fc3b:ff00:291::/64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:03:0b:55:c2:e8:32:c8:16:e6:00:6c:fb:bc:4b:8c:e3:9d: 10:c9:9b:c0:76:c4:eb:62:0f:df:d5:6e:af:7c:0e:f5:81:20: 44:16:ae:d1:f5:68:0e:93:d6:b8:11:14:a7:2e:04:05:51:f7: 19:74:93:a2:14:8b:9e:c1:d4:c5:d3:a2:1c:61:bd:a6:4e:cf: 1b:c7:06:5c:97:34:09:82:fc:f3:0f:2f:65:40:7f:ed:a2:c8: 10:52:d7:ef:cb:f6:2b:c0:ba:b3:87:6e:d8:1f:8d:13:e6:64: 35:b0:9a:c9:ec:5b:d3:cc:ea:59:ef:7d:7c:cc:32:6b:7b:be: 63:72:6c:31:ca:69:73:48:cb:59:fb:b6:3c:de:ff:0f:f4:7c: 39:55:cd:a6:21:bd:6f:37:3e:08:78:90:f9:5b:cb:eb:03:bf: 44:3f:ca:14:9b:7c:23:76:d3:a6:eb:4c:eb:f9:35:a7:f4:2a: 4e:f2:9b:38:84:33:75:be:77:24:f9:df:97:d2:e5:0c:fe:3e: c8:14:fa:8f:c2:cb:5e:bb:ad:0d:03:55:88:03:e5:fb:35:a4: c9:fa:da:62:9e:55:5c:a7:71:b2:48:8c:3b:7e:d3:3c:a7:f6: 0b:25:67:cf:12:a5:98:bc:8c:e4:9a:6e:e1:41:cc:4f:fc:cb: 40:ef:28:b7 -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE3PLgHp1i+L9knaFoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWVhZDYwOWQtYWZlNi00NWFmLTg0MDktMzQ4MThlODQ1 MGM1MB4XDTI2MDUxMjEzMDYzNloXDTI2MDgxMDEzMDYzNlowLzEtMCsGA1UEAxMk YzRkN2Q3YmYtZDRmYy00YTVhLWIxYzEtNjIwZDhiY2QxZWY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhsHm8Cb8tNSEOpZMoYGlcNbF/5sKicMZK7T/ l58fUK20WVXnGHmIEJE6UaZLMyMHC0gCvxMbIOqPzX0QZssksHaila7ArkplzOFE t/5ZNW8sChTLDYDL4nQz/kYSjn47pUz7X2gPZHFuoC8LVg6zWWCThnFCEFNFnxEv HQRsemHxLsjFwx8sQsJU5tchEtqDEau664VlmemoGcSb71GEhrUT8rFmL7QwQ979 BBlAFTsT6CrysLpV6cM0sJUgyZdtuUVdVSx7v5QlZPCaCttXk5mBmrv9d0AzVn8F yrv1O505nD0UUx+vHrh+ISBqa7p0AAA2iZDKoko6tdGrJJ+ppwIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFD4mZhLILpJWbXk70RcYPTk9QLmSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9lZWFk NjA5ZC1hZmU2LTQ1YWYtODQwOS0zNDgxOGU4NDUwYzUvNmEyM2RiMWMtZGU2ZC0z ZmM3LTk0MmItZTJmOTc2YjUxMTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZWVhZDYwOWQtYWZlNi00NWFmLTg0 MDktMzQ4MThlODQ1MGM1L2VlYWQ2MDlkLWFmZTYtNDVhZi04NDA5LTM0ODE4ZTg0 NTBjNS5jcmwwHwYDVR0jBBgwFoAUlLfjG9MoedrUC407Be4h1zWUqsswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9lZWFkNjA5ZC1hZmU2LTQ1YWYtODQwOS0zNDgx OGU4NDUwYzUuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAJgL8O/8A ApEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAXwMLVcLoMsgW5gBs+7xLjOOdEMmbwHbE62IP39Vur3wO9YEg RBau0fVoDpPWuBEUpy4EBVH3GXSTohSLnsHUxdOiHGG9pk7PG8cGXJc0CYL88w8v ZUB/7aLIEFLX78v2K8C6s4du2B+NE+ZkNbCayexb08zqWe99fMwya3u+Y3JsMcpp c0jLWfu2PN7/D/R8OVXNpiG9bzc+CHiQ+VvL6wO/RD/KFJt8I3bTputM6/k1p/Qq TvKbOIQzdb53JPnfl9LlDP4+yBT6j8LLXrutDQNViAPl+zWkyfraYp5VXKdxskiM O37TPKf2CyVnzxKlmLyM5Jpu4UHMT/zLQO8otw== -----END CERTIFICATE-----Generated at Tue May 12 21:44:35 2026 by rpki-client