$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/71293884-5e99-34ad-821f-3c7b9cad2883.roa File: 71293884-5e99-34ad-821f-3c7b9cad2883.roa (raw, json) Hash identifier: COo12qmzhl5r02dVi3q1jVNl18MhpEveHlMp1s0B3mQ= Subject key identifier: 4E:3A:96:09:BE:AE:F5:AD:C3:9A:D9:F1:73:F9:1E:B1:4B:2E:64:21 Certificate issuer: /CN=eead609d-afe6-45af-8409-34818e8450c5 Certificate serial: 010D0C9F4328584DCF2E12A8C11BCD84C5F72A74 Authority key identifier: 94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/71293884-5e99-34ad-821f-3c7b9cad2883.roa Signing time: Tue 12 May 2026 13:06:44 +0000 ROA not before: Tue 12 May 2026 13:06:44 +0000 ROA not after: Mon 10 Aug 2026 13:06:44 +0000 asID: 399970 IP address blocks: 2602:fc3b:ff00:379::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cf:2e:12:a8:c1:1b:cd:84:c5:f7:2a:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eead609d-afe6-45af-8409-34818e8450c5 Validity Not Before: May 12 13:06:44 2026 GMT Not After : Aug 10 13:06:44 2026 GMT Subject: CN=3338b19e-4a59-4342-990d-6fca40e0114e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:4a:4a:4d:d1:93:f2:19:96:51:2e:02:15:8d: f0:b7:e1:f9:01:45:1d:9c:e9:11:40:0c:eb:15:21: 3a:61:68:05:40:db:b4:62:93:30:3c:c8:04:a6:dc: 74:11:e2:63:f6:e5:57:cf:69:5a:52:f5:2a:ba:7c: 6e:ad:8d:7a:23:97:f5:e6:b0:87:03:3d:c8:ee:60: 42:eb:a2:cb:0f:f1:32:e3:44:a5:1b:cc:15:6c:ca: fb:1c:bb:5c:76:f9:b3:fe:cc:33:7e:4d:b1:7b:e4: c1:03:67:40:12:7a:85:6f:0a:ac:56:fc:35:ca:65: 33:2a:0c:cc:d2:25:36:40:e6:f2:10:6a:b4:25:a6: 3d:5e:30:5a:33:82:ee:c0:17:17:ee:35:eb:5f:18: 75:b5:76:4d:3a:8e:ef:ec:d8:11:ea:3e:2a:b0:fd: f8:e7:09:8f:e5:80:28:94:8a:df:31:aa:83:d3:eb: e4:12:e5:b1:f9:f1:19:95:ef:1a:a8:59:6c:23:a6: 12:27:46:40:ea:89:30:3c:0e:7a:6b:0d:d0:de:52: 14:55:cf:88:4f:c7:85:7d:fb:9e:5c:e0:89:bf:f4: 7c:1d:d9:ac:aa:90:17:47:f4:9b:04:5b:95:ea:59: 2f:23:4a:95:ee:10:41:64:5f:78:d7:6f:de:db:35: bf:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:3A:96:09:BE:AE:F5:AD:C3:9A:D9:F1:73:F9:1E:B1:4B:2E:64:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/71293884-5e99-34ad-821f-3c7b9cad2883.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl X509v3 Authority Key Identifier: keyid:94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer sbgp-ipAddrBlock: critical IPv6: 2602:fc3b:ff00:379::/64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:d2:fa:0e:83:ac:0c:1d:e9:ca:fa:2d:eb:ef:ec:c3:dd:20: 6e:4f:48:82:d3:4c:d4:1b:ef:2f:df:55:7b:80:16:92:b0:5c: cd:13:44:38:05:ea:41:c7:7c:07:c1:c0:db:ea:85:04:97:ca: 77:c3:0a:c3:4a:05:20:bb:55:c1:c8:47:4d:25:2b:f6:69:0f: da:88:e5:e8:d3:2d:b1:a8:b6:98:a2:ba:33:7f:ef:06:56:da: 45:ee:18:8f:2f:ae:d8:c9:0c:1d:ae:63:ad:04:96:b8:b4:5a: ac:85:b7:e3:63:c6:8a:94:72:1b:70:71:e7:4d:47:3a:1d:91: 20:75:3b:55:dd:d0:03:46:d5:b2:04:30:e4:50:d3:be:2b:35: ca:45:4e:de:82:f9:5a:8a:3f:e0:74:a3:aa:24:29:69:f8:1c: 5a:e5:5d:f6:6c:85:b6:0b:0f:c0:7a:73:e0:79:9c:59:48:5a: 08:c4:a4:fc:b4:2f:98:bb:cb:44:9e:98:f7:f9:37:d3:4b:af: da:96:33:85:65:9c:d1:a6:16:50:dc:18:5d:68:fa:cf:d7:7c: 29:44:d0:3d:fd:36:19:c2:79:0c:20:5a:3a:c6:18:82:32:31: 6c:19:d7:f0:99:6b:9d:3b:e5:33:87:9d:da:e5:bb:fd:29:c5: 29:9e:95:da -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE3PLhKowRvNhMX3KnQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWVhZDYwOWQtYWZlNi00NWFmLTg0MDktMzQ4MThlODQ1 MGM1MB4XDTI2MDUxMjEzMDY0NFoXDTI2MDgxMDEzMDY0NFowLzEtMCsGA1UEAxMk MzMzOGIxOWUtNGE1OS00MzQyLTk5MGQtNmZjYTQwZTAxMTRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUpKTdGT8hmWUS4CFY3wt+H5AUUdnOkRQAzr FSE6YWgFQNu0YpMwPMgEptx0EeJj9uVXz2laUvUqunxurY16I5f15rCHAz3I7mBC 66LLD/Ey40SlG8wVbMr7HLtcdvmz/swzfk2xe+TBA2dAEnqFbwqsVvw1ymUzKgzM 0iU2QObyEGq0JaY9XjBaM4LuwBcX7jXrXxh1tXZNOo7v7NgR6j4qsP345wmP5YAo lIrfMaqD0+vkEuWx+fEZle8aqFlsI6YSJ0ZA6okwPA56aw3Q3lIUVc+IT8eFffue XOCJv/R8HdmsqpAXR/SbBFuV6lkvI0qV7hBBZF9412/e2zW/AQIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFE46lgm+rvWtw5rZ8XP5HrFLLmQhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9lZWFk NjA5ZC1hZmU2LTQ1YWYtODQwOS0zNDgxOGU4NDUwYzUvNzEyOTM4ODQtNWU5OS0z NGFkLTgyMWYtM2M3YjljYWQyODgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZWVhZDYwOWQtYWZlNi00NWFmLTg0 MDktMzQ4MThlODQ1MGM1L2VlYWQ2MDlkLWFmZTYtNDVhZi04NDA5LTM0ODE4ZTg0 NTBjNS5jcmwwHwYDVR0jBBgwFoAUlLfjG9MoedrUC407Be4h1zWUqsswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9lZWFkNjA5ZC1hZmU2LTQ1YWYtODQwOS0zNDgx OGU4NDUwYzUuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAJgL8O/8A A3kwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAE9L6DoOsDB3pyvot6+/sw90gbk9IgtNM1BvvL99Ve4AWkrBc zRNEOAXqQcd8B8HA2+qFBJfKd8MKw0oFILtVwchHTSUr9mkP2ojl6NMtsai2mKK6 M3/vBlbaRe4Yjy+u2MkMHa5jrQSWuLRarIW342PGipRyG3Bx501HOh2RIHU7Vd3Q A0bVsgQw5FDTvis1ykVO3oL5Woo/4HSjqiQpafgcWuVd9myFtgsPwHpz4HmcWUha CMSk/LQvmLvLRJ6Y9/k300uv2pYzhWWc0aYWUNwYXWj6z9d8KUTQPf02GcJ5DCBa OsYYgjIxbBnX8JlrnTvlM4ed2uW7/SnFKZ6V2g== -----END CERTIFICATE-----Generated at Wed May 13 13:02:52 2026 by rpki-client