$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/af4cb909-994f-3bf8-95f2-5c18cfd3b5e8.roa File: af4cb909-994f-3bf8-95f2-5c18cfd3b5e8.roa (raw, json) Hash identifier: m0RqnEzlsVynlO4IXBih70E2YgrkSlWk0GwzFNGcrjo= Subject key identifier: 5F:5B:67:B3:36:AD:C8:E9:DD:B0:60:79:7B:3E:6E:95:58:83:0A:57 Certificate issuer: /CN=eead609d-afe6-45af-8409-34818e8450c5 Certificate serial: 010D0C9F4328584DCF2DEB9CF3C02BCD9ECC8454 Authority key identifier: 94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/af4cb909-994f-3bf8-95f2-5c18cfd3b5e8.roa Signing time: Tue 12 May 2026 13:06:26 +0000 ROA not before: Tue 12 May 2026 13:06:26 +0000 ROA not after: Mon 10 Aug 2026 13:06:26 +0000 asID: 399970 IP address blocks: 2602:fc3b:ff00:13a::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cf:2d:eb:9c:f3:c0:2b:cd:9e:cc:84:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eead609d-afe6-45af-8409-34818e8450c5 Validity Not Before: May 12 13:06:26 2026 GMT Not After : Aug 10 13:06:26 2026 GMT Subject: CN=587d9e7b-d825-4a25-92af-43e1d9391a20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:15:28:73:b2:88:2e:16:ad:b3:8e:45:1b:69: 45:7e:52:ed:ef:4b:3e:10:e3:6a:24:11:38:c3:4b: c1:e7:57:a3:b2:4e:03:da:5c:c7:51:b2:4a:95:23: ce:52:99:13:63:ff:1f:16:38:f3:d8:a8:7c:9a:6c: 07:26:6a:ef:74:25:70:06:71:ce:d9:98:1f:32:53: 01:c7:d0:9e:73:b8:e5:01:36:54:23:e9:5c:ee:f6: 23:25:75:22:d6:4a:ac:d7:7b:de:b6:43:16:06:f0: 5c:8e:39:b7:94:90:94:f9:d3:d7:04:ab:f2:bf:0a: d7:f3:4d:90:b4:4b:ad:77:88:a6:8b:ab:ee:18:f0: 29:04:17:5b:a8:44:61:fb:c4:f1:19:cb:41:67:1f: 1a:d1:29:8b:f0:ea:f7:d5:1b:27:e0:2c:9f:f2:c4: 17:dd:ba:b0:7b:07:69:aa:e3:58:4a:a7:32:6b:0e: 80:56:c1:92:15:b5:82:9e:73:7d:ae:b9:1c:cd:95: 88:32:88:99:56:53:e6:81:17:85:5e:19:fa:0a:c1: ee:bb:08:b4:6b:1f:de:91:1e:83:89:a9:65:fe:91: 70:c0:d6:b0:30:d4:85:48:ee:6e:3e:38:c0:fb:d1: d0:e4:da:63:0d:aa:2d:28:ad:6a:ae:28:6a:17:db: aa:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:5B:67:B3:36:AD:C8:E9:DD:B0:60:79:7B:3E:6E:95:58:83:0A:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/af4cb909-994f-3bf8-95f2-5c18cfd3b5e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl X509v3 Authority Key Identifier: keyid:94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer sbgp-ipAddrBlock: critical IPv6: 2602:fc3b:ff00:13a::/64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:6a:76:9b:7a:7b:15:09:ec:7d:82:f4:8c:29:73:53:37:fc: f2:4f:4a:32:fe:17:21:6a:60:4c:d9:17:f6:9c:d3:81:0c:9f: 4d:95:6a:57:2d:1f:9e:be:55:a2:00:45:98:7d:e8:91:f8:3a: 23:87:58:55:77:53:bd:7d:e2:93:c6:32:c6:71:4f:23:7a:13: 24:74:56:f4:00:61:8b:e0:e4:21:6d:9d:90:2e:92:3b:67:51: b4:36:6e:1c:df:14:b8:dc:ba:00:b1:38:36:fd:a1:74:60:f0: 9d:4e:fe:a7:57:c1:b5:69:07:1f:51:b5:4a:7b:11:d3:37:a6: d6:d6:39:e0:47:96:71:6f:0e:c0:2c:18:c7:e3:3a:cd:0f:16: 66:78:0e:82:8a:73:3a:ea:5c:00:50:0a:6b:bf:55:6b:e7:da: ef:52:39:be:8c:0e:a3:b5:d8:9a:00:5e:bd:89:7c:90:b7:a5: 40:15:a4:34:9a:8f:58:54:81:a4:f5:ba:e5:84:b5:92:c9:2f: ec:54:e0:e4:2d:b1:cf:39:4c:8c:77:fa:1d:c4:a6:ed:5d:6a: e3:c6:1c:18:c5:f9:95:50:e6:2d:eb:ff:e5:c4:66:e9:21:b3: 5d:9f:15:64:aa:42:1f:71:02:b3:62:90:72:31:3d:d4:71:48: 12:7e:c9:a5 -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE3PLeuc88ArzZ7MhFQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWVhZDYwOWQtYWZlNi00NWFmLTg0MDktMzQ4MThlODQ1 MGM1MB4XDTI2MDUxMjEzMDYyNloXDTI2MDgxMDEzMDYyNlowLzEtMCsGA1UEAxMk NTg3ZDllN2ItZDgyNS00YTI1LTkyYWYtNDNlMWQ5MzkxYTIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhUoc7KILhats45FG2lFflLt70s+EONqJBE4 w0vB51ejsk4D2lzHUbJKlSPOUpkTY/8fFjjz2Kh8mmwHJmrvdCVwBnHO2ZgfMlMB x9Cec7jlATZUI+lc7vYjJXUi1kqs13vetkMWBvBcjjm3lJCU+dPXBKvyvwrX802Q tEutd4imi6vuGPApBBdbqERh+8TxGctBZx8a0SmL8Or31Rsn4Cyf8sQX3bqwewdp quNYSqcyaw6AVsGSFbWCnnN9rrkczZWIMoiZVlPmgReFXhn6CsHuuwi0ax/ekR6D iall/pFwwNawMNSFSO5uPjjA+9HQ5NpjDaotKK1qrihqF9uqmwIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFF9bZ7M2rcjp3bBgeXs+bpVYgwpXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9lZWFk NjA5ZC1hZmU2LTQ1YWYtODQwOS0zNDgxOGU4NDUwYzUvYWY0Y2I5MDktOTk0Zi0z YmY4LTk1ZjItNWMxOGNmZDNiNWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZWVhZDYwOWQtYWZlNi00NWFmLTg0 MDktMzQ4MThlODQ1MGM1L2VlYWQ2MDlkLWFmZTYtNDVhZi04NDA5LTM0ODE4ZTg0 NTBjNS5jcmwwHwYDVR0jBBgwFoAUlLfjG9MoedrUC407Be4h1zWUqsswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9lZWFkNjA5ZC1hZmU2LTQ1YWYtODQwOS0zNDgx OGU4NDUwYzUuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAJgL8O/8A ATowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAS2p2m3p7FQnsfYL0jClzUzf88k9KMv4XIWpgTNkX9pzTgQyf TZVqVy0fnr5VogBFmH3okfg6I4dYVXdTvX3ik8YyxnFPI3oTJHRW9ABhi+DkIW2d kC6SO2dRtDZuHN8UuNy6ALE4Nv2hdGDwnU7+p1fBtWkHH1G1SnsR0zem1tY54EeW cW8OwCwYx+M6zQ8WZngOgopzOupcAFAKa79Va+fa71I5vowOo7XYmgBevYl8kLel QBWkNJqPWFSBpPW65YS1kskv7FTg5C2xzzlMjHf6HcSm7V1q48YcGMX5lVDmLev/ 5cRm6SGzXZ8VZKpCH3ECs2KQcjE91HFIEn7JpQ== -----END CERTIFICATE-----Generated at Wed May 13 09:23:54 2026 by rpki-client