$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/aa9e4e2e-56f4-3b96-be15-93da22ab4272.roa File: aa9e4e2e-56f4-3b96-be15-93da22ab4272.roa (raw, json) Hash identifier: dNJj6SrQ2U6LdkH4L3PTEZ6/qFwkM49SfAmf4Fm0mF8= Subject key identifier: DC:00:0B:43:54:40:CD:A6:36:50:C4:09:10:96:EC:04:46:F0:3D:89 Certificate issuer: /CN=eead609d-afe6-45af-8409-34818e8450c5 Certificate serial: 010D0C9F4328584DCF2DDF67BE7C87F178A03620 Authority key identifier: 94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/aa9e4e2e-56f4-3b96-be15-93da22ab4272.roa Signing time: Tue 12 May 2026 13:06:20 +0000 ROA not before: Tue 12 May 2026 13:06:20 +0000 ROA not after: Mon 10 Aug 2026 13:06:20 +0000 asID: 399970 IP address blocks: 2602:fc3b:ff00:66::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cf:2d:df:67:be:7c:87:f1:78:a0:36:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eead609d-afe6-45af-8409-34818e8450c5 Validity Not Before: May 12 13:06:20 2026 GMT Not After : Aug 10 13:06:20 2026 GMT Subject: CN=1de07899-0e06-40da-9126-1d5fbeabc0f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f4:bc:16:7c:bf:df:1d:00:a6:fd:6d:fb:6b: 52:8b:88:ff:9d:28:1d:51:64:d8:93:a3:3c:c1:53: 60:0c:da:6d:f4:8d:57:ee:c2:0e:71:1c:fd:58:a8: f0:99:f2:1a:e9:1a:76:97:e1:2e:50:3e:3f:58:af: d3:9c:1f:80:7e:f0:65:01:71:b3:98:83:68:b0:24: 00:db:c9:e0:1c:26:8d:38:32:20:5a:62:d4:d5:7d: bc:56:6c:61:be:35:5d:c0:b1:29:95:00:c0:11:e0: 8c:ff:ef:52:94:6c:5f:dc:08:4a:2b:ac:76:a0:95: d2:59:d8:49:21:8c:e5:77:20:a0:cb:65:e2:f0:1d: a1:cc:34:3d:c2:8b:fd:09:05:a4:0b:5e:4e:ee:47: ae:90:8a:7f:5b:42:59:4d:3f:f0:9e:72:07:a3:2a: 19:ba:46:72:d3:ab:f5:ba:ab:f8:96:e4:93:44:5c: ef:9d:a5:4c:a1:2f:b8:be:ad:1e:ce:da:9c:12:0b: e3:10:63:67:b6:80:ea:12:55:60:b0:7e:fa:3a:27: c8:e8:11:50:e0:c7:e6:51:65:2f:8c:99:46:ae:eb: d6:71:1d:be:5f:52:2b:2e:8e:24:84:c3:3a:7b:0b: 30:ab:17:4e:c5:36:9d:8d:82:81:98:bd:45:63:8c: d5:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:00:0B:43:54:40:CD:A6:36:50:C4:09:10:96:EC:04:46:F0:3D:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/aa9e4e2e-56f4-3b96-be15-93da22ab4272.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl X509v3 Authority Key Identifier: keyid:94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer sbgp-ipAddrBlock: critical IPv6: 2602:fc3b:ff00:66::/64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:17:8d:9c:15:2e:6e:5d:11:eb:0d:1d:e0:13:6c:af:e9:4b: f9:72:26:03:e5:bf:4c:7a:26:b5:32:a4:e2:70:2d:ed:3d:7d: 12:67:9c:e4:43:10:33:d1:42:da:0b:16:3c:e8:73:76:43:45: 62:fa:b3:7e:e4:cb:7f:cb:2e:5d:03:d0:b3:a8:d2:3a:d0:78: b1:29:56:82:b7:94:10:54:ce:c0:83:35:59:c2:33:9b:8a:dc: 0b:4d:0f:b3:56:28:65:bd:72:09:73:b9:27:7e:68:72:97:68: 68:4b:cc:c4:eb:35:bb:14:b6:55:3d:94:62:7a:87:aa:25:8d: a4:31:bf:3e:c6:b8:14:d2:a2:79:8e:69:70:e7:e7:21:68:55: b4:b9:f8:02:80:64:d7:04:90:ca:87:4f:69:a0:0a:bb:31:69: 0f:e8:40:1a:35:02:cd:36:c6:a5:52:b0:c5:39:a4:ad:a3:62: 5c:47:71:f1:41:51:e4:61:7d:6e:50:7d:e0:6f:37:77:72:84: 71:e5:e3:78:1f:0d:f5:ee:32:dc:77:81:e5:ec:ea:6d:18:9c: e4:14:4a:87:58:93:12:28:03:7d:19:34:93:5c:c0:87:10:4c: 9b:65:6d:eb:49:10:20:1f:c3:58:61:80:c1:2d:c8:3f:b4:ca: cd:62:c3:ff -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE3PLd9nvnyH8XigNiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWVhZDYwOWQtYWZlNi00NWFmLTg0MDktMzQ4MThlODQ1 MGM1MB4XDTI2MDUxMjEzMDYyMFoXDTI2MDgxMDEzMDYyMFowLzEtMCsGA1UEAxMk MWRlMDc4OTktMGUwNi00MGRhLTkxMjYtMWQ1ZmJlYWJjMGYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvS8Fny/3x0Apv1t+2tSi4j/nSgdUWTYk6M8 wVNgDNpt9I1X7sIOcRz9WKjwmfIa6Rp2l+EuUD4/WK/TnB+AfvBlAXGzmINosCQA 28ngHCaNODIgWmLU1X28VmxhvjVdwLEplQDAEeCM/+9SlGxf3AhKK6x2oJXSWdhJ IYzldyCgy2Xi8B2hzDQ9wov9CQWkC15O7keukIp/W0JZTT/wnnIHoyoZukZy06v1 uqv4luSTRFzvnaVMoS+4vq0eztqcEgvjEGNntoDqElVgsH76OifI6BFQ4MfmUWUv jJlGruvWcR2+X1IrLo4khMM6ewswqxdOxTadjYKBmL1FY4zVJQIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFNwAC0NUQM2mNlDECRCW7ARG8D2JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9lZWFk NjA5ZC1hZmU2LTQ1YWYtODQwOS0zNDgxOGU4NDUwYzUvYWE5ZTRlMmUtNTZmNC0z Yjk2LWJlMTUtOTNkYTIyYWI0MjcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZWVhZDYwOWQtYWZlNi00NWFmLTg0 MDktMzQ4MThlODQ1MGM1L2VlYWQ2MDlkLWFmZTYtNDVhZi04NDA5LTM0ODE4ZTg0 NTBjNS5jcmwwHwYDVR0jBBgwFoAUlLfjG9MoedrUC407Be4h1zWUqsswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9lZWFkNjA5ZC1hZmU2LTQ1YWYtODQwOS0zNDgx OGU4NDUwYzUuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAJgL8O/8A AGYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAqBeNnBUubl0R6w0d4BNsr+lL+XImA+W/THomtTKk4nAt7T19 Emec5EMQM9FC2gsWPOhzdkNFYvqzfuTLf8suXQPQs6jSOtB4sSlWgreUEFTOwIM1 WcIzm4rcC00Ps1YoZb1yCXO5J35ocpdoaEvMxOs1uxS2VT2UYnqHqiWNpDG/Psa4 FNKieY5pcOfnIWhVtLn4AoBk1wSQyodPaaAKuzFpD+hAGjUCzTbGpVKwxTmkraNi XEdx8UFR5GF9blB94G83d3KEceXjeB8N9e4y3HeB5ezqbRic5BRKh1iTEigDfRk0 k1zAhxBMm2Vt60kQIB/DWGGAwS3IP7TKzWLD/w== -----END CERTIFICATE-----Generated at Wed May 13 05:43:58 2026 by rpki-client