$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/84595f5f-4972-3aeb-997f-6aad1440e931.roa File: 84595f5f-4972-3aeb-997f-6aad1440e931.roa (raw, json) Hash identifier: G+YQ/tynwjQMjr4ZE4LVXLXKDT46n+syje/1w3lek88= Subject key identifier: 9A:64:17:C3:6C:60:1D:D1:51:2F:BF:A6:AA:A4:F5:7E:C8:C0:02:51 Certificate issuer: /CN=eead609d-afe6-45af-8409-34818e8450c5 Certificate serial: 010D0C9F4328584DCF2DDCDD3C1AD618284A48C0 Authority key identifier: 94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/84595f5f-4972-3aeb-997f-6aad1440e931.roa Signing time: Tue 12 May 2026 13:06:19 +0000 ROA not before: Tue 12 May 2026 13:06:19 +0000 ROA not after: Mon 10 Aug 2026 13:06:19 +0000 asID: 399970 IP address blocks: 2602:fc3b:ff00:39::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cf:2d:dc:dd:3c:1a:d6:18:28:4a:48:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eead609d-afe6-45af-8409-34818e8450c5 Validity Not Before: May 12 13:06:19 2026 GMT Not After : Aug 10 13:06:19 2026 GMT Subject: CN=2e838809-c806-4408-bbcb-f2dac917dbab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:33:f6:7c:f5:30:eb:ce:c4:69:a5:ea:94:e3: e8:d1:2f:55:34:b0:17:05:7c:8a:1b:e7:2d:94:3d: d1:84:59:b1:f4:64:c6:bf:6f:bb:80:b2:b7:9c:5b: 8a:6b:1d:59:c0:7c:c9:66:0e:c6:df:3d:b7:0a:9f: 7a:33:4d:91:dc:b6:9b:f9:42:dc:81:cb:59:42:f4: 48:0d:9a:f7:64:16:26:fa:d4:d9:49:e7:89:db:e1: 7e:8a:7c:0b:1d:41:c5:70:31:28:88:59:fa:0a:a9: 34:c5:7f:c5:94:ae:06:1f:7f:eb:48:07:99:fb:5b: 23:bd:94:3d:9b:c9:22:f2:f2:b8:1e:6d:33:3c:e7: 38:bf:04:81:b3:2e:ea:a4:68:c6:27:17:d9:7f:23: 52:4b:66:d3:98:5a:b7:a7:27:62:d6:b7:92:bf:c2: 4d:51:5b:dd:db:26:7b:da:d5:80:48:4c:f1:2e:40: 08:df:17:a6:2c:0f:76:2a:c5:8f:fa:bf:f6:df:ac: b6:dc:d8:36:a8:0b:99:6e:c8:e2:f8:7f:51:8c:05: 5b:8b:16:7e:d3:fc:28:61:b3:00:16:b5:a5:88:17: a6:57:76:bf:de:6e:53:03:13:f9:da:1f:84:cd:ab: b8:89:14:99:1c:78:7a:35:06:08:3b:b2:d4:19:20: 8f:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:64:17:C3:6C:60:1D:D1:51:2F:BF:A6:AA:A4:F5:7E:C8:C0:02:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/84595f5f-4972-3aeb-997f-6aad1440e931.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl X509v3 Authority Key Identifier: keyid:94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer sbgp-ipAddrBlock: critical IPv6: 2602:fc3b:ff00:39::/64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:eb:eb:dd:69:d5:12:16:9a:b7:d8:11:05:d4:95:dd:9d:a9: 10:53:18:0c:95:e4:98:09:87:23:28:65:5a:02:ba:6c:a3:31: 6c:22:d9:c4:e9:3b:01:17:0f:79:40:4b:6a:f3:13:57:6b:ca: 9d:83:c6:32:26:fe:96:d8:f8:bc:2b:8c:a1:f2:ee:c0:a0:48: 93:38:32:24:ff:0a:1f:9f:b2:b0:48:34:f1:f2:a5:39:ff:e5: b9:db:db:55:51:ba:e5:1d:c8:a5:ea:0a:27:bb:fd:61:fc:b6: e7:29:87:b5:3d:91:55:db:39:a8:99:2e:21:c7:d7:e7:13:bb: 30:be:f1:01:6c:97:17:ec:b0:b4:06:2c:5e:5d:db:65:01:b6: 6b:60:9d:6d:9b:82:61:87:64:10:dd:c4:9f:d5:7b:6e:d0:2c: 9b:74:52:67:b2:9c:98:52:5c:05:0a:15:2a:d5:a1:57:66:4b: b3:93:ec:b8:bb:d4:da:95:6f:ef:ef:2f:df:38:01:b5:1c:4f: bf:dc:00:09:0b:9d:35:80:64:8d:7f:d8:e8:45:12:e6:18:dd: e3:c6:c5:78:30:1c:51:cb:b6:23:21:20:f6:8d:cc:ec:b5:ea: 59:9f:45:15:02:5e:61:1e:ea:95:95:40:01:29:d3:ea:eb:be: 4c:d9:e6:5c -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE3PLdzdPBrWGChKSMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWVhZDYwOWQtYWZlNi00NWFmLTg0MDktMzQ4MThlODQ1 MGM1MB4XDTI2MDUxMjEzMDYxOVoXDTI2MDgxMDEzMDYxOVowLzEtMCsGA1UEAxMk MmU4Mzg4MDktYzgwNi00NDA4LWJiY2ItZjJkYWM5MTdkYmFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzP2fPUw687EaaXqlOPo0S9VNLAXBXyKG+ct lD3RhFmx9GTGv2+7gLK3nFuKax1ZwHzJZg7G3z23Cp96M02R3Lab+ULcgctZQvRI DZr3ZBYm+tTZSeeJ2+F+inwLHUHFcDEoiFn6Cqk0xX/FlK4GH3/rSAeZ+1sjvZQ9 m8ki8vK4Hm0zPOc4vwSBsy7qpGjGJxfZfyNSS2bTmFq3pydi1reSv8JNUVvd2yZ7 2tWASEzxLkAI3xemLA92KsWP+r/236y23Ng2qAuZbsji+H9RjAVbixZ+0/woYbMA FrWliBemV3a/3m5TAxP52h+Ezau4iRSZHHh6NQYIO7LUGSCPwwIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFJpkF8NsYB3RUS+/pqqk9X7IwAJRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9lZWFk NjA5ZC1hZmU2LTQ1YWYtODQwOS0zNDgxOGU4NDUwYzUvODQ1OTVmNWYtNDk3Mi0z YWViLTk5N2YtNmFhZDE0NDBlOTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZWVhZDYwOWQtYWZlNi00NWFmLTg0 MDktMzQ4MThlODQ1MGM1L2VlYWQ2MDlkLWFmZTYtNDVhZi04NDA5LTM0ODE4ZTg0 NTBjNS5jcmwwHwYDVR0jBBgwFoAUlLfjG9MoedrUC407Be4h1zWUqsswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9lZWFkNjA5ZC1hZmU2LTQ1YWYtODQwOS0zNDgx OGU4NDUwYzUuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAJgL8O/8A ADkwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAoOvr3WnVEhaat9gRBdSV3Z2pEFMYDJXkmAmHIyhlWgK6bKMx bCLZxOk7ARcPeUBLavMTV2vKnYPGMib+ltj4vCuMofLuwKBIkzgyJP8KH5+ysEg0 8fKlOf/ludvbVVG65R3IpeoKJ7v9Yfy25ymHtT2RVds5qJkuIcfX5xO7ML7xAWyX F+ywtAYsXl3bZQG2a2CdbZuCYYdkEN3En9V7btAsm3RSZ7KcmFJcBQoVKtWhV2ZL s5PsuLvU2pVv7+8v3zgBtRxPv9wACQudNYBkjX/Y6EUS5hjd48bFeDAcUcu2IyEg 9o3M7LXqWZ9FFQJeYR7qlZVAASnT6uu+TNnmXA== -----END CERTIFICATE-----Generated at Wed May 13 12:06:13 2026 by rpki-client