$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/afe94c71-6c19-33e5-af8b-750734550499.roa File: afe94c71-6c19-33e5-af8b-750734550499.roa (raw, json) Hash identifier: xlGjpuVFsSKnTpVyk/JmJHegJFGtFIf/xoI4D4B47m0= Subject key identifier: F4:73:FC:57:0E:C2:C0:8D:01:5F:86:3E:5A:4E:02:D1:51:84:40:9D Certificate issuer: /CN=eead609d-afe6-45af-8409-34818e8450c5 Certificate serial: 010D0C9F4328584DCF2DFB5AEEA8432DBB35DC70 Authority key identifier: 94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/afe94c71-6c19-33e5-af8b-750734550499.roa Signing time: Tue 12 May 2026 13:06:33 +0000 ROA not before: Tue 12 May 2026 13:06:33 +0000 ROA not after: Mon 10 Aug 2026 13:06:33 +0000 asID: 399970 IP address blocks: 2602:fc3b:ff00:231::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cf:2d:fb:5a:ee:a8:43:2d:bb:35:dc:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eead609d-afe6-45af-8409-34818e8450c5 Validity Not Before: May 12 13:06:33 2026 GMT Not After : Aug 10 13:06:33 2026 GMT Subject: CN=ec8924b9-dcc3-4027-bab4-20b74d256227 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:d1:aa:e4:f5:d1:86:56:1e:c8:ec:1b:d5:1a: c6:97:3e:7d:36:fc:32:a2:b2:9b:d4:99:c3:56:3c: f3:d2:71:6a:fd:7f:fd:b0:96:3c:67:ad:ce:29:14: f1:a2:4b:90:67:1a:63:56:5f:8e:5a:d4:fc:49:f0: b0:df:63:5e:2d:82:36:eb:6a:81:fb:44:51:f8:c8: f4:27:ae:5a:a2:63:d0:a7:bf:28:16:f5:e4:c9:57: b0:ea:0d:36:ea:98:66:8f:35:31:18:ba:77:e9:f3: 46:db:88:f7:40:64:90:31:36:71:58:1a:01:7b:10: ca:95:5a:27:40:43:cc:47:f0:94:47:90:18:19:7f: 4a:c0:3b:bc:7b:81:8d:24:50:4a:71:80:57:d8:c2: 41:1e:0e:cc:c8:92:10:b7:00:da:05:15:4f:4d:b0: a8:d2:9e:49:5b:3f:77:90:61:ae:9b:5f:ba:64:06: bf:04:3b:5c:af:13:cd:83:fc:85:e0:fa:e1:19:1a: f7:02:64:16:2c:b0:f7:af:7c:b6:a1:7b:3f:77:11: 21:19:19:6d:48:69:d2:41:e5:93:4a:90:dc:52:c6: 28:ec:a2:1f:93:ce:d2:d4:3f:92:d7:80:b4:09:ef: e7:a0:0e:21:45:4b:95:f5:6a:d4:78:2e:92:92:ce: de:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:73:FC:57:0E:C2:C0:8D:01:5F:86:3E:5A:4E:02:D1:51:84:40:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/afe94c71-6c19-33e5-af8b-750734550499.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl X509v3 Authority Key Identifier: keyid:94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer sbgp-ipAddrBlock: critical IPv6: 2602:fc3b:ff00:231::/64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:02:f8:19:7c:a5:4a:d3:40:48:94:dc:37:e9:c9:36:83:49: ba:bb:5f:08:de:24:f1:88:c9:dd:02:79:53:8f:99:2a:f0:54: c2:7f:86:93:c5:96:74:58:d9:f2:8b:f4:78:65:79:1d:0c:e4: fa:f0:76:e2:01:42:a3:44:05:6f:98:0c:96:72:11:75:8b:cf: 9d:99:4b:36:92:92:fc:c2:42:5f:c8:dc:23:cf:21:cf:b0:f4: a7:c8:05:24:9d:a8:d4:b7:cd:e1:c5:e7:35:a4:2a:88:97:30: ba:28:c8:44:5d:01:27:13:aa:76:b2:41:f5:be:94:ce:ca:17: b4:bd:d3:d6:34:cf:e2:7e:3e:71:c6:d1:4a:af:f4:93:5f:45: 29:8e:e9:3e:23:fa:8b:90:e6:73:b6:d7:4c:73:e5:71:94:82: 3d:a5:f5:31:43:89:ac:46:e7:cf:56:b6:67:13:32:95:31:6c: 6b:6d:58:33:6b:e5:02:87:3e:88:e8:72:f6:5b:4a:1e:ab:96: f2:4f:da:2b:a3:ca:48:d3:39:c8:be:41:4b:4b:78:0a:38:06: 85:4f:29:e9:e3:83:ae:3a:b2:64:f1:bc:9c:07:9a:d2:52:03: 40:08:80:b0:31:3f:88:ed:94:47:52:3a:fa:d8:58:4b:4f:eb: 4e:8f:dc:22 -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE3PLfta7qhDLbs13HAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWVhZDYwOWQtYWZlNi00NWFmLTg0MDktMzQ4MThlODQ1 MGM1MB4XDTI2MDUxMjEzMDYzM1oXDTI2MDgxMDEzMDYzM1owLzEtMCsGA1UEAxMk ZWM4OTI0YjktZGNjMy00MDI3LWJhYjQtMjBiNzRkMjU2MjI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNGq5PXRhlYeyOwb1RrGlz59NvwyorKb1JnD Vjzz0nFq/X/9sJY8Z63OKRTxokuQZxpjVl+OWtT8SfCw32NeLYI262qB+0RR+Mj0 J65aomPQp78oFvXkyVew6g026phmjzUxGLp36fNG24j3QGSQMTZxWBoBexDKlVon QEPMR/CUR5AYGX9KwDu8e4GNJFBKcYBX2MJBHg7MyJIQtwDaBRVPTbCo0p5JWz93 kGGum1+6ZAa/BDtcrxPNg/yF4PrhGRr3AmQWLLD3r3y2oXs/dxEhGRltSGnSQeWT SpDcUsYo7KIfk87S1D+S14C0Ce/noA4hRUuV9WrUeC6Sks7eJwIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFPRz/FcOwsCNAV+GPlpOAtFRhECdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9lZWFk NjA5ZC1hZmU2LTQ1YWYtODQwOS0zNDgxOGU4NDUwYzUvYWZlOTRjNzEtNmMxOS0z M2U1LWFmOGItNzUwNzM0NTUwNDk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZWVhZDYwOWQtYWZlNi00NWFmLTg0 MDktMzQ4MThlODQ1MGM1L2VlYWQ2MDlkLWFmZTYtNDVhZi04NDA5LTM0ODE4ZTg0 NTBjNS5jcmwwHwYDVR0jBBgwFoAUlLfjG9MoedrUC407Be4h1zWUqsswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9lZWFkNjA5ZC1hZmU2LTQ1YWYtODQwOS0zNDgx OGU4NDUwYzUuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAJgL8O/8A AjEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEANgL4GXylStNASJTcN+nJNoNJurtfCN4k8YjJ3QJ5U4+ZKvBU wn+Gk8WWdFjZ8ov0eGV5HQzk+vB24gFCo0QFb5gMlnIRdYvPnZlLNpKS/MJCX8jc I88hz7D0p8gFJJ2o1LfN4cXnNaQqiJcwuijIRF0BJxOqdrJB9b6UzsoXtL3T1jTP 4n4+ccbRSq/0k19FKY7pPiP6i5Dmc7bXTHPlcZSCPaX1MUOJrEbnz1a2ZxMylTFs a21YM2vlAoc+iOhy9ltKHquW8k/aK6PKSNM5yL5BS0t4CjgGhU8p6eODrjqyZPG8 nAea0lIDQAiAsDE/iO2UR1I6+thYS0/rTo/cIg== -----END CERTIFICATE-----Generated at Wed May 13 11:49:47 2026 by rpki-client