$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/836d35af-0bb7-3d69-95ab-78f67cd6b6c7.roa File: 836d35af-0bb7-3d69-95ab-78f67cd6b6c7.roa (raw, json) Hash identifier: 9o+1qjgaoBXKE9o0YgKbrgDxIjzvukkyVTEqrtlRUI8= Subject key identifier: DB:75:F9:32:6F:EC:83:8C:E7:E8:10:EC:38:3E:A0:5A:5C:6F:FB:D1 Certificate issuer: /CN=eead609d-afe6-45af-8409-34818e8450c5 Certificate serial: 010D0C9F4328584DCF2E07525B5D1D6498C6EB20 Authority key identifier: 94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/836d35af-0bb7-3d69-95ab-78f67cd6b6c7.roa Signing time: Tue 12 May 2026 13:06:39 +0000 ROA not before: Tue 12 May 2026 13:06:39 +0000 ROA not after: Mon 10 Aug 2026 13:06:39 +0000 asID: 399970 IP address blocks: 2602:fc3b:ff00:2de::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cf:2e:07:52:5b:5d:1d:64:98:c6:eb:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eead609d-afe6-45af-8409-34818e8450c5 Validity Not Before: May 12 13:06:39 2026 GMT Not After : Aug 10 13:06:39 2026 GMT Subject: CN=0b003e7a-4448-49ec-84ee-7b013947fb0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:af:0c:4a:9b:06:07:22:f1:59:e2:b9:74:5b: d6:80:91:2c:e1:3b:1b:56:31:84:3f:6e:83:0a:ef: 2b:63:18:9f:fb:d0:d6:48:2a:e8:a3:07:e2:7c:5f: e3:dd:8f:a8:35:17:4f:ba:41:3c:5a:23:a9:c8:9d: 4a:f6:75:27:92:39:82:52:3c:11:61:f6:4f:87:15: 4b:58:c5:dc:4b:8b:a9:bb:26:9d:bd:06:d9:bf:7e: f3:d9:c0:39:4f:85:22:6a:d7:c7:0d:6e:58:db:ca: 82:a9:ae:08:a5:f1:e5:54:ec:d8:5f:c9:4e:b5:f5: d3:ce:14:8c:fb:2d:14:bc:3f:a1:ea:b0:83:63:80: f0:8a:c5:98:fe:a1:1b:6e:e7:77:24:91:c8:1b:2c: 4d:7a:23:77:ff:b3:4e:6a:de:59:bb:3f:20:c7:a4: c7:d9:f8:98:e8:87:b8:ce:e9:2e:95:8e:3d:88:c6: 67:34:f8:8c:21:c6:c3:94:bf:3a:62:ab:04:0c:b4: f4:37:f2:23:a1:3f:d5:ce:e0:9f:b3:d2:0c:48:cf: a7:cb:48:2c:5d:b7:02:20:cb:e1:6c:69:0b:86:a3: 62:d4:0e:46:bf:f4:b5:a4:e4:e0:88:a2:f6:58:43: f3:2d:f1:60:37:50:79:10:f5:6f:9d:2f:2a:c8:26: ec:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:75:F9:32:6F:EC:83:8C:E7:E8:10:EC:38:3E:A0:5A:5C:6F:FB:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/836d35af-0bb7-3d69-95ab-78f67cd6b6c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl X509v3 Authority Key Identifier: keyid:94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer sbgp-ipAddrBlock: critical IPv6: 2602:fc3b:ff00:2de::/64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:24:be:4e:78:dd:78:f3:45:54:2d:7a:3f:23:24:f9:a3:b8: c7:8f:a0:de:95:3e:a8:97:14:9c:35:1c:b7:63:f7:66:ec:1a: ad:12:0f:32:a2:8f:c7:d6:c5:34:92:50:f1:93:43:db:19:77: 57:9c:b8:6b:01:3b:93:ef:b8:f2:c9:dd:c3:c5:ea:33:ac:5b: a4:3d:0a:2b:cf:f2:89:47:b5:d1:a9:b9:30:6f:71:ac:ef:36: f2:ca:b3:58:f6:d3:c0:f0:d7:ab:02:1a:21:c2:d0:21:45:fb: b9:7e:99:f5:96:7b:df:32:30:3b:5b:26:9a:d1:6a:43:b3:4a: 07:65:24:df:15:b6:91:25:43:fe:7d:13:f8:3f:f7:cc:52:a1: 06:5a:51:7a:34:95:e1:f3:65:72:f9:b7:95:19:c0:80:44:90: 52:61:00:4b:69:f8:03:17:d2:76:d6:f9:00:7c:47:a3:a9:74: c3:26:62:5f:e0:2a:71:5d:3c:71:f7:6e:a8:d3:7f:48:f9:ab: 15:d1:58:4f:97:8e:6a:49:0c:09:53:98:55:79:78:9c:92:d7: 49:f0:e1:f7:0a:a4:8c:42:46:ca:99:b3:28:20:ea:15:f3:00: 92:a2:47:df:57:79:5e:b5:ad:99:5f:6f:ff:63:ee:43:aa:31: 09:33:e2:16 -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE3PLgdSW10dZJjG6yAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWVhZDYwOWQtYWZlNi00NWFmLTg0MDktMzQ4MThlODQ1 MGM1MB4XDTI2MDUxMjEzMDYzOVoXDTI2MDgxMDEzMDYzOVowLzEtMCsGA1UEAxMk MGIwMDNlN2EtNDQ0OC00OWVjLTg0ZWUtN2IwMTM5NDdmYjBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiK8MSpsGByLxWeK5dFvWgJEs4TsbVjGEP26D Cu8rYxif+9DWSCroowfifF/j3Y+oNRdPukE8WiOpyJ1K9nUnkjmCUjwRYfZPhxVL WMXcS4upuyadvQbZv37z2cA5T4UiatfHDW5Y28qCqa4IpfHlVOzYX8lOtfXTzhSM +y0UvD+h6rCDY4DwisWY/qEbbud3JJHIGyxNeiN3/7NOat5Zuz8gx6TH2fiY6Ie4 zukulY49iMZnNPiMIcbDlL86YqsEDLT0N/IjoT/VzuCfs9IMSM+ny0gsXbcCIMvh bGkLhqNi1A5Gv/S1pOTgiKL2WEPzLfFgN1B5EPVvnS8qyCbsAwIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFNt1+TJv7IOM5+gQ7Dg+oFpcb/vRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9lZWFk NjA5ZC1hZmU2LTQ1YWYtODQwOS0zNDgxOGU4NDUwYzUvODM2ZDM1YWYtMGJiNy0z ZDY5LTk1YWItNzhmNjdjZDZiNmM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZWVhZDYwOWQtYWZlNi00NWFmLTg0 MDktMzQ4MThlODQ1MGM1L2VlYWQ2MDlkLWFmZTYtNDVhZi04NDA5LTM0ODE4ZTg0 NTBjNS5jcmwwHwYDVR0jBBgwFoAUlLfjG9MoedrUC407Be4h1zWUqsswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9lZWFkNjA5ZC1hZmU2LTQ1YWYtODQwOS0zNDgx OGU4NDUwYzUuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAJgL8O/8A At4wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEADyS+TnjdePNFVC16PyMk+aO4x4+g3pU+qJcUnDUct2P3Zuwa rRIPMqKPx9bFNJJQ8ZND2xl3V5y4awE7k++48sndw8XqM6xbpD0KK8/yiUe10am5 MG9xrO828sqzWPbTwPDXqwIaIcLQIUX7uX6Z9ZZ73zIwO1smmtFqQ7NKB2Uk3xW2 kSVD/n0T+D/3zFKhBlpRejSV4fNlcvm3lRnAgESQUmEAS2n4AxfSdtb5AHxHo6l0 wyZiX+AqcV08cfduqNN/SPmrFdFYT5eOakkMCVOYVXl4nJLXSfDh9wqkjEJGypmz KCDqFfMAkqJH31d5XrWtmV9v/2PuQ6oxCTPiFg== -----END CERTIFICATE-----Generated at Wed May 13 10:23:01 2026 by rpki-client