$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/885efa03-77dc-3628-8db2-1d306ca06f1b.roa File: 885efa03-77dc-3628-8db2-1d306ca06f1b.roa (raw, json) Hash identifier: GP5J4clLtT19OU32AIi2lvnkOfpX6LGy5cUx5zRH+eg= Subject key identifier: 1A:09:CF:3C:88:2C:2F:D4:F8:33:BB:0D:BD:02:E3:58:B8:8D:12:39 Certificate issuer: /CN=eead609d-afe6-45af-8409-34818e8450c5 Certificate serial: 010D0C9F4328584DCF2DE7CF636F55B4DE054F80 Authority key identifier: 94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/885efa03-77dc-3628-8db2-1d306ca06f1b.roa Signing time: Tue 12 May 2026 13:06:24 +0000 ROA not before: Tue 12 May 2026 13:06:24 +0000 ROA not after: Mon 10 Aug 2026 13:06:24 +0000 asID: 399970 IP address blocks: 2602:fc3b:ff00:fa::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cf:2d:e7:cf:63:6f:55:b4:de:05:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eead609d-afe6-45af-8409-34818e8450c5 Validity Not Before: May 12 13:06:24 2026 GMT Not After : Aug 10 13:06:24 2026 GMT Subject: CN=7dae25c7-b89a-4aa4-9fa7-119142f5b3b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e4:24:68:bd:3b:75:ea:a7:ee:32:23:99:53: 3a:6a:85:8b:42:7c:46:68:4c:4d:83:8f:bb:e3:67: 57:47:d5:93:55:31:06:94:42:bd:98:78:8e:e6:a8: 1e:43:e2:0c:bd:4a:96:75:20:18:da:a8:91:e9:1b: 93:1b:22:cd:ef:06:f5:d3:57:77:73:9d:4d:05:1f: fa:3a:b2:8f:39:ff:f6:11:b9:e8:77:00:df:6d:e4: a4:f1:33:c0:f3:65:52:8c:2e:0e:d4:be:f9:e3:76: df:ae:4d:38:07:0c:f9:df:e6:aa:81:8b:49:26:14: dc:05:e0:b2:37:31:64:a9:f6:63:af:7b:34:69:56: 19:d8:b2:1b:88:36:ea:fa:b7:3c:c4:95:50:7d:a5: 8d:5b:02:75:f6:5d:e6:d8:e3:6e:3b:30:2e:0e:f5: 15:8a:50:00:65:a2:37:c2:2e:5a:88:8c:a7:52:9d: 6f:6a:dd:2d:f5:92:12:60:33:c7:57:3d:1b:4e:5e: 94:3d:af:92:9d:1d:84:d3:3a:1d:98:12:2d:3e:4e: 23:9d:a7:fb:cf:4e:74:e0:fb:d0:c9:9e:6a:2c:f0: eb:c6:d8:5a:75:38:e4:68:fc:e2:67:68:1d:40:15: a4:e7:ba:39:3d:61:44:88:b5:3b:51:8e:b2:b3:ce: 17:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:09:CF:3C:88:2C:2F:D4:F8:33:BB:0D:BD:02:E3:58:B8:8D:12:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/885efa03-77dc-3628-8db2-1d306ca06f1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl X509v3 Authority Key Identifier: keyid:94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer sbgp-ipAddrBlock: critical IPv6: 2602:fc3b:ff00:fa::/64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:9b:cf:e0:f3:2a:46:da:cf:ee:f9:0b:e8:44:87:8b:b6:e2: ae:39:da:c5:25:1d:67:21:6e:0a:d4:a5:ee:fa:0c:22:e5:c6: 5f:a5:7e:5f:82:54:da:52:9d:27:37:95:11:1a:45:93:53:9d: 82:ac:d5:bf:85:f0:8e:26:a0:ee:28:ee:b0:a6:0a:7b:98:37: 6d:32:bd:f2:30:ee:11:72:c7:56:a3:34:13:30:48:b7:72:6a: ad:de:87:35:68:f8:62:1f:6e:9d:40:e2:e3:42:f7:88:7c:69: 73:ed:fa:d2:c9:42:47:fd:aa:7e:0a:fe:44:4c:1d:3c:a5:2c: c5:fc:96:09:6b:48:5e:49:91:82:6e:ef:13:06:9c:2b:f2:8d: 4b:ea:52:5b:20:05:fc:18:8a:45:2f:46:db:d2:95:cb:42:6c: 00:e8:84:3c:5d:0c:8d:41:83:12:52:28:ae:05:48:e4:22:70: 40:2c:65:b9:e9:b6:06:a6:fe:b9:c5:d9:91:f1:ec:21:98:67: ba:c9:7a:56:eb:92:12:33:43:58:ff:b7:36:83:cd:0e:61:79: c9:ef:79:80:35:b7:6c:44:4e:df:97:32:c1:dd:40:01:c2:5e: 70:97:1e:2e:7c:e4:e8:ec:06:1f:77:cd:16:7c:d9:7e:49:cf: 0c:c7:82:cb -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE3PLefPY29VtN4FT4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWVhZDYwOWQtYWZlNi00NWFmLTg0MDktMzQ4MThlODQ1 MGM1MB4XDTI2MDUxMjEzMDYyNFoXDTI2MDgxMDEzMDYyNFowLzEtMCsGA1UEAxMk N2RhZTI1YzctYjg5YS00YWE0LTlmYTctMTE5MTQyZjViM2I4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+QkaL07deqn7jIjmVM6aoWLQnxGaExNg4+7 42dXR9WTVTEGlEK9mHiO5qgeQ+IMvUqWdSAY2qiR6RuTGyLN7wb101d3c51NBR/6 OrKPOf/2EbnodwDfbeSk8TPA82VSjC4O1L7543bfrk04Bwz53+aqgYtJJhTcBeCy NzFkqfZjr3s0aVYZ2LIbiDbq+rc8xJVQfaWNWwJ19l3m2ONuOzAuDvUVilAAZaI3 wi5aiIynUp1vat0t9ZISYDPHVz0bTl6UPa+SnR2E0zodmBItPk4jnaf7z0504PvQ yZ5qLPDrxthadTjkaPziZ2gdQBWk57o5PWFEiLU7UY6ys84XjwIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFBoJzzyILC/U+DO7Db0C41i4jRI5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9lZWFk NjA5ZC1hZmU2LTQ1YWYtODQwOS0zNDgxOGU4NDUwYzUvODg1ZWZhMDMtNzdkYy0z NjI4LThkYjItMWQzMDZjYTA2ZjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZWVhZDYwOWQtYWZlNi00NWFmLTg0 MDktMzQ4MThlODQ1MGM1L2VlYWQ2MDlkLWFmZTYtNDVhZi04NDA5LTM0ODE4ZTg0 NTBjNS5jcmwwHwYDVR0jBBgwFoAUlLfjG9MoedrUC407Be4h1zWUqsswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9lZWFkNjA5ZC1hZmU2LTQ1YWYtODQwOS0zNDgx OGU4NDUwYzUuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAJgL8O/8A APowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAIpvP4PMqRtrP7vkL6ESHi7birjnaxSUdZyFuCtSl7voMIuXG X6V+X4JU2lKdJzeVERpFk1OdgqzVv4Xwjiag7ijusKYKe5g3bTK98jDuEXLHVqM0 EzBIt3Jqrd6HNWj4Yh9unUDi40L3iHxpc+360slCR/2qfgr+REwdPKUsxfyWCWtI XkmRgm7vEwacK/KNS+pSWyAF/BiKRS9G29KVy0JsAOiEPF0MjUGDElIorgVI5CJw QCxluem2Bqb+ucXZkfHsIZhnusl6VuuSEjNDWP+3NoPNDmF5ye95gDW3bERO35cy wd1AAcJecJceLnzk6OwGH3fNFnzZfknPDMeCyw== -----END CERTIFICATE-----Generated at Wed May 13 09:15:03 2026 by rpki-client