$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/abcd95f3-e384-36da-8fbd-a093ab2b7e03.roa File: abcd95f3-e384-36da-8fbd-a093ab2b7e03.roa (raw, json) Hash identifier: 5qAvqaRu9+8N4xtCL6bj4oH6FKdUSV425dM6KJp0gD0= Subject key identifier: 80:EE:10:E7:11:2B:3C:4A:28:68:29:4B:0D:29:D0:5B:C2:05:FA:C5 Certificate issuer: /CN=eead609d-afe6-45af-8409-34818e8450c5 Certificate serial: 010D0C9F4328584DCF2E01917C2611051D7A78C0 Authority key identifier: 94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/abcd95f3-e384-36da-8fbd-a093ab2b7e03.roa Signing time: Tue 12 May 2026 13:06:36 +0000 ROA not before: Tue 12 May 2026 13:06:36 +0000 ROA not after: Mon 10 Aug 2026 13:06:36 +0000 asID: 399970 IP address blocks: 2602:fc3b:ff00:28c::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cf:2e:01:91:7c:26:11:05:1d:7a:78:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eead609d-afe6-45af-8409-34818e8450c5 Validity Not Before: May 12 13:06:36 2026 GMT Not After : Aug 10 13:06:36 2026 GMT Subject: CN=5509e7dd-dad9-4582-a498-5e9d807be08a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b6:f6:4c:24:31:91:b3:2c:a7:7e:c2:92:aa: 50:de:9b:94:1d:d6:8b:fb:c6:3a:e9:3d:22:1f:88: 27:60:10:3b:a4:c3:76:5a:56:da:77:16:81:7b:f0: 2f:8c:c3:7b:d0:5d:bf:e1:05:74:0f:02:0c:7f:01: 65:67:bf:a2:36:5a:33:06:79:54:e5:dd:e4:14:9c: dd:84:a1:eb:2c:22:79:b3:3e:3b:23:c6:2a:f6:a3: 4c:e5:61:61:f8:ba:59:ed:d0:ed:c7:0c:50:1c:1a: 1b:64:db:71:09:3b:26:7c:8d:f8:78:e1:e3:ef:c0: b4:fd:a6:01:8b:68:4c:cd:3f:79:eb:1c:3e:0b:13: 9d:61:d8:a2:5e:dd:b1:9a:9b:16:cb:91:ed:fe:56: 86:22:a5:d7:fe:6e:2d:20:7b:5a:a1:ed:5c:5a:f6: cd:6a:65:f5:68:4b:11:e7:51:c2:a4:c3:5e:06:68: 10:c7:39:88:14:67:c6:66:27:5f:c8:98:92:38:92: 25:32:a2:2b:dd:01:bd:5c:9c:61:23:c3:c8:54:bc: bb:4d:4c:09:fc:c9:1f:10:0e:4d:c9:70:9b:a9:64: ea:74:4c:a3:37:3c:fa:2f:2d:f5:2d:92:97:40:da: b2:b0:fd:ae:a9:43:c7:64:a6:7e:53:d6:84:d8:0d: c2:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:EE:10:E7:11:2B:3C:4A:28:68:29:4B:0D:29:D0:5B:C2:05:FA:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/abcd95f3-e384-36da-8fbd-a093ab2b7e03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl X509v3 Authority Key Identifier: keyid:94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer sbgp-ipAddrBlock: critical IPv6: 2602:fc3b:ff00:28c::/64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:cc:76:4a:ec:40:5d:be:4b:2c:af:02:96:e4:5e:cf:38:7c: 18:ea:ed:a5:d4:fc:24:56:3a:77:bf:0c:ba:44:7e:9c:a2:b7: 84:a9:fe:b4:dc:ed:54:e3:80:c0:68:0b:62:00:87:30:d1:23: 89:3e:71:61:2c:01:b0:12:e4:8e:6e:79:73:d1:3c:23:55:25: a2:ce:16:5a:e5:3d:fd:b9:22:92:76:dd:8a:37:f5:db:c1:a5: 70:b6:db:86:91:9e:ef:5a:f6:74:b6:f8:ed:57:32:af:69:4a: 5e:fb:59:4c:9b:b7:a8:e2:37:bf:67:c5:32:bc:78:e3:17:c2: 1b:f1:e7:9f:e6:c5:d2:02:df:26:d3:d6:a9:1a:76:1d:cd:e7: bf:e5:2e:33:27:b6:55:69:bc:be:3a:f8:41:7f:5d:26:8c:03: de:b9:82:3a:bd:d6:29:02:68:7a:d9:d7:72:64:a8:76:7e:50: 27:5b:5c:43:d2:dd:44:c0:07:5f:f3:7c:c2:57:69:a1:f5:51: 77:ab:86:5b:2a:5f:99:7b:1a:62:27:e5:ef:9d:4e:d4:13:93: 99:81:28:7c:c0:0a:cb:b7:78:67:94:0c:cf:64:36:d4:aa:6c: a0:f5:57:2b:22:3a:7d:37:24:2c:12:00:73:0b:df:0f:5b:25: 89:c5:26:b2 -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE3PLgGRfCYRBR16eMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWVhZDYwOWQtYWZlNi00NWFmLTg0MDktMzQ4MThlODQ1 MGM1MB4XDTI2MDUxMjEzMDYzNloXDTI2MDgxMDEzMDYzNlowLzEtMCsGA1UEAxMk NTUwOWU3ZGQtZGFkOS00NTgyLWE0OTgtNWU5ZDgwN2JlMDhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLb2TCQxkbMsp37CkqpQ3puUHdaL+8Y66T0i H4gnYBA7pMN2WlbadxaBe/AvjMN70F2/4QV0DwIMfwFlZ7+iNlozBnlU5d3kFJzd hKHrLCJ5sz47I8Yq9qNM5WFh+LpZ7dDtxwxQHBobZNtxCTsmfI34eOHj78C0/aYB i2hMzT956xw+CxOdYdiiXt2xmpsWy5Ht/laGIqXX/m4tIHtaoe1cWvbNamX1aEsR 51HCpMNeBmgQxzmIFGfGZidfyJiSOJIlMqIr3QG9XJxhI8PIVLy7TUwJ/MkfEA5N yXCbqWTqdEyjNzz6Ly31LZKXQNqysP2uqUPHZKZ+U9aE2A3CgQIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFIDuEOcRKzxKKGgpSw0p0FvCBfrFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9lZWFk NjA5ZC1hZmU2LTQ1YWYtODQwOS0zNDgxOGU4NDUwYzUvYWJjZDk1ZjMtZTM4NC0z NmRhLThmYmQtYTA5M2FiMmI3ZTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZWVhZDYwOWQtYWZlNi00NWFmLTg0 MDktMzQ4MThlODQ1MGM1L2VlYWQ2MDlkLWFmZTYtNDVhZi04NDA5LTM0ODE4ZTg0 NTBjNS5jcmwwHwYDVR0jBBgwFoAUlLfjG9MoedrUC407Be4h1zWUqsswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9lZWFkNjA5ZC1hZmU2LTQ1YWYtODQwOS0zNDgx OGU4NDUwYzUuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAJgL8O/8A AowwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAtMx2SuxAXb5LLK8CluRezzh8GOrtpdT8JFY6d78MukR+nKK3 hKn+tNztVOOAwGgLYgCHMNEjiT5xYSwBsBLkjm55c9E8I1Ulos4WWuU9/bkiknbd ijf128GlcLbbhpGe71r2dLb47Vcyr2lKXvtZTJu3qOI3v2fFMrx44xfCG/Hnn+bF 0gLfJtPWqRp2Hc3nv+UuMye2VWm8vjr4QX9dJowD3rmCOr3WKQJoetnXcmSodn5Q J1tcQ9LdRMAHX/N8wldpofVRd6uGWypfmXsaYifl751O1BOTmYEofMAKy7d4Z5QM z2Q21KpsoPVXKyI6fTckLBIAcwvfD1slicUmsg== -----END CERTIFICATE-----Generated at Tue May 12 21:44:36 2026 by rpki-client