$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/aced4e46-dfeb-3fd4-841b-70a84ea8c171.roa File: aced4e46-dfeb-3fd4-841b-70a84ea8c171.roa (raw, json) Hash identifier: CJzIKlZgnTX3Qgw4ZlgNxPMx/C6Aj7akN41LFi3yTfE= Subject key identifier: 04:74:11:D9:9B:4A:60:49:51:6F:37:73:3F:F6:91:2F:76:8E:3D:08 Certificate issuer: /CN=eead609d-afe6-45af-8409-34818e8450c5 Certificate serial: 010D0C9F4328584DCF2DE8542777EA342E822948 Authority key identifier: 94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/aced4e46-dfeb-3fd4-841b-70a84ea8c171.roa Signing time: Tue 12 May 2026 13:06:24 +0000 ROA not before: Tue 12 May 2026 13:06:24 +0000 ROA not after: Mon 10 Aug 2026 13:06:24 +0000 asID: 399970 IP address blocks: 2602:fc3b:ff00:103::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cf:2d:e8:54:27:77:ea:34:2e:82:29:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eead609d-afe6-45af-8409-34818e8450c5 Validity Not Before: May 12 13:06:24 2026 GMT Not After : Aug 10 13:06:24 2026 GMT Subject: CN=f0aec5f8-dead-4f85-a219-7bc19fd2d769 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:24:bd:c9:48:90:87:da:23:ce:d3:a1:30:71: 00:80:ba:28:7e:a6:75:2b:9c:8e:59:86:85:5a:68: ab:68:58:0c:9d:87:c1:03:e2:f1:76:65:a4:22:57: d3:0e:a8:5f:93:56:18:17:59:c8:21:ab:a9:8a:53: 56:e1:34:41:68:57:85:6d:2a:23:c4:55:88:4c:0f: 82:5b:c8:3d:01:7a:ba:6c:22:0d:94:76:bf:cd:60: e8:89:50:2b:98:8e:83:08:c4:a3:f8:28:c8:b8:f0: bc:c2:32:22:a3:a3:01:d9:a1:98:b0:0c:14:33:35: 1e:fe:98:79:49:6e:ab:36:2e:02:ec:0d:6d:98:bc: 21:55:e9:01:db:26:c0:d2:de:74:92:33:e4:e1:6e: 9c:c9:a8:21:94:58:60:49:ec:70:d8:76:11:b2:b2: d6:a6:64:52:9f:71:de:c3:f1:9d:d4:d6:b8:bd:48: 36:f1:6b:ae:66:de:ae:eb:13:b6:48:5f:c7:50:71: 84:7d:db:e5:b6:bb:cb:ac:ad:23:a5:b5:8c:21:4c: c5:1a:38:3c:df:82:f8:8b:7e:86:c3:61:6f:1a:bf: 10:7f:ef:5f:08:c9:55:54:73:14:14:e7:28:a5:6a: 50:8f:3f:ea:86:d6:7a:a0:de:bf:da:e9:5c:4c:ab: 23:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:74:11:D9:9B:4A:60:49:51:6F:37:73:3F:F6:91:2F:76:8E:3D:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/aced4e46-dfeb-3fd4-841b-70a84ea8c171.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl X509v3 Authority Key Identifier: keyid:94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer sbgp-ipAddrBlock: critical IPv6: 2602:fc3b:ff00:103::/64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:ce:46:b2:5b:e4:d2:f0:ce:d8:6b:9b:dc:bb:f3:46:08:5e: 33:98:dc:a0:7d:31:59:8f:da:c4:05:a2:cd:69:12:e7:dd:62: 36:74:0c:72:15:a7:44:cd:db:18:d6:56:b2:1a:b4:f2:da:55: cc:4b:5a:50:8b:80:8e:b2:62:1f:90:73:5a:1d:e1:19:31:85: b6:f1:03:5c:b6:7a:3c:7b:43:65:37:c0:21:22:f7:a6:99:ff: d2:51:c3:7c:61:ec:83:82:28:58:47:a0:ea:03:9b:ed:91:ef: 79:a6:84:10:77:57:de:b0:b1:1c:f2:6a:3b:5c:1c:91:05:3a: 6d:f2:87:b3:c6:b6:36:53:62:77:0a:67:48:46:dd:4f:93:8a: ae:85:bd:d3:78:09:ce:40:a3:91:45:0e:0e:12:a8:f7:21:ed: e1:74:fb:ed:41:65:1a:64:a4:45:d7:4f:5a:6b:47:f3:24:4b: a9:18:b1:cb:a9:eb:93:b6:ce:4a:01:eb:0d:99:a3:ed:1b:e0: b7:9d:f6:56:2d:11:cb:d7:ad:36:12:f5:8c:aa:2c:70:c4:87: 03:d4:95:88:49:76:22:08:d9:78:a3:a1:10:e8:ec:f3:53:80: 74:34:80:c3:12:e2:ee:cc:43:92:af:6f:58:b1:39:f1:c4:d4: 2d:e3:19:ad -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE3PLehUJ3fqNC6CKUgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWVhZDYwOWQtYWZlNi00NWFmLTg0MDktMzQ4MThlODQ1 MGM1MB4XDTI2MDUxMjEzMDYyNFoXDTI2MDgxMDEzMDYyNFowLzEtMCsGA1UEAxMk ZjBhZWM1ZjgtZGVhZC00Zjg1LWEyMTktN2JjMTlmZDJkNzY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgyS9yUiQh9ojztOhMHEAgLoofqZ1K5yOWYaF WmiraFgMnYfBA+LxdmWkIlfTDqhfk1YYF1nIIaupilNW4TRBaFeFbSojxFWITA+C W8g9AXq6bCINlHa/zWDoiVArmI6DCMSj+CjIuPC8wjIio6MB2aGYsAwUMzUe/ph5 SW6rNi4C7A1tmLwhVekB2ybA0t50kjPk4W6cyaghlFhgSexw2HYRsrLWpmRSn3He w/Gd1Na4vUg28WuuZt6u6xO2SF/HUHGEfdvltrvLrK0jpbWMIUzFGjg834L4i36G w2FvGr8Qf+9fCMlVVHMUFOcopWpQjz/qhtZ6oN6/2ulcTKsj/QIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFAR0EdmbSmBJUW83cz/2kS92jj0IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9lZWFk NjA5ZC1hZmU2LTQ1YWYtODQwOS0zNDgxOGU4NDUwYzUvYWNlZDRlNDYtZGZlYi0z ZmQ0LTg0MWItNzBhODRlYThjMTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZWVhZDYwOWQtYWZlNi00NWFmLTg0 MDktMzQ4MThlODQ1MGM1L2VlYWQ2MDlkLWFmZTYtNDVhZi04NDA5LTM0ODE4ZTg0 NTBjNS5jcmwwHwYDVR0jBBgwFoAUlLfjG9MoedrUC407Be4h1zWUqsswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9lZWFkNjA5ZC1hZmU2LTQ1YWYtODQwOS0zNDgx OGU4NDUwYzUuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAJgL8O/8A AQMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAoc5Gslvk0vDO2Gub3LvzRgheM5jcoH0xWY/axAWizWkS591i NnQMchWnRM3bGNZWshq08tpVzEtaUIuAjrJiH5BzWh3hGTGFtvEDXLZ6PHtDZTfA ISL3ppn/0lHDfGHsg4IoWEeg6gOb7ZHveaaEEHdX3rCxHPJqO1wckQU6bfKHs8a2 NlNidwpnSEbdT5OKroW903gJzkCjkUUODhKo9yHt4XT77UFlGmSkRddPWmtH8yRL qRixy6nrk7bOSgHrDZmj7Rvgt532Vi0Ry9etNhL1jKoscMSHA9SViEl2IgjZeKOh EOjs81OAdDSAwxLi7sxDkq9vWLE58cTULeMZrQ== -----END CERTIFICATE-----Generated at Wed May 13 04:10:06 2026 by rpki-client