$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/b4e12750-06a0-3c6f-85bc-d48c1d4d4202.roa File: b4e12750-06a0-3c6f-85bc-d48c1d4d4202.roa (raw, json) Hash identifier: cYlxuKdj5nb5dIpSpKXDGkYgG66GAoWW7XEFRTO/FzI= Subject key identifier: 0E:45:01:09:77:DD:B9:FB:1D:3F:81:48:EB:64:B4:5F:30:87:6A:EC Certificate issuer: /CN=eead609d-afe6-45af-8409-34818e8450c5 Certificate serial: 010D0C9F4328584DCF2DF5BCC0BBE226BEB64DC0 Authority key identifier: 94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/b4e12750-06a0-3c6f-85bc-d48c1d4d4202.roa Signing time: Tue 12 May 2026 13:06:30 +0000 ROA not before: Tue 12 May 2026 13:06:30 +0000 ROA not after: Mon 10 Aug 2026 13:06:30 +0000 asID: 399970 IP address blocks: 2602:fc3b:ff00:1da::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cf:2d:f5:bc:c0:bb:e2:26:be:b6:4d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eead609d-afe6-45af-8409-34818e8450c5 Validity Not Before: May 12 13:06:30 2026 GMT Not After : Aug 10 13:06:30 2026 GMT Subject: CN=211c1471-6ff0-485d-9e4b-c25dd2b6e838 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:7f:42:b9:f4:61:2b:51:fc:03:c0:ed:cd:a9: e6:4e:aa:1d:28:c1:47:47:18:1e:ae:36:0a:85:0f: 69:6e:28:19:56:7f:7d:44:69:91:11:41:5e:be:3d: 12:0b:f4:ad:32:a0:25:b8:80:ac:25:48:d1:7f:bb: 79:9b:9a:e9:40:78:4e:bf:07:08:a3:43:3a:02:06: db:0e:c8:3a:53:9f:21:24:b5:26:71:f0:79:51:67: 78:f7:f1:34:ec:0a:6f:bf:1e:a0:3a:42:39:4e:d1: 28:6f:5a:df:47:f0:24:dd:9d:8f:de:f2:fe:c9:95: 2b:77:f9:18:41:1a:bb:54:c3:ab:e6:86:51:f0:fe: c5:17:d2:db:18:fd:69:ce:bc:8c:49:87:0c:99:de: 46:1b:46:03:f7:d7:af:f1:10:bc:ab:d8:92:5c:6d: c2:fb:5f:84:ff:06:7e:31:b4:c1:5e:da:29:93:20: e1:a8:2f:c4:70:86:66:c5:68:25:55:08:1f:7c:f7: 63:60:61:21:2b:56:1f:9c:e6:97:7b:f5:34:04:cd: d7:b6:71:6f:f5:4e:7a:c3:25:a2:46:90:2b:dd:10: d7:74:75:b0:9a:50:e4:c9:54:36:ce:f6:a8:a4:ba: cf:78:65:b1:c3:38:3f:76:1a:dd:71:d2:89:df:41: 46:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:45:01:09:77:DD:B9:FB:1D:3F:81:48:EB:64:B4:5F:30:87:6A:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/b4e12750-06a0-3c6f-85bc-d48c1d4d4202.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl X509v3 Authority Key Identifier: keyid:94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer sbgp-ipAddrBlock: critical IPv6: 2602:fc3b:ff00:1da::/64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:71:b7:e6:9b:37:0b:87:10:fc:d2:c5:32:30:df:c3:f6:9f: d8:80:2f:7c:3d:3f:69:9e:2f:29:d4:ad:e9:3c:8f:8e:88:49: cb:f2:0e:ce:4f:c6:bc:1b:df:80:12:5e:d9:fe:ea:88:5d:28: 96:21:47:77:38:99:9d:2c:c8:49:d2:9c:97:79:1a:dc:34:c4: c9:72:8b:8c:9a:47:49:51:66:1a:85:7d:c1:eb:7a:c4:e6:fd: 6e:71:6a:22:16:ef:21:bb:b0:9f:49:6c:de:8c:ae:68:bf:e3: 8f:4d:fd:78:31:b8:c9:c7:91:cf:67:c7:c2:a0:38:34:90:a0: 62:b4:b2:85:60:30:02:c1:44:e1:58:fc:f4:8d:cc:4a:75:ff: df:e5:76:84:32:b9:a2:0f:61:d7:c2:77:26:6a:28:95:51:65: 8b:f6:5e:83:00:83:d6:05:96:a9:55:97:27:41:f8:28:96:af: 7c:af:a7:c5:c7:18:8d:22:79:65:75:97:6d:3c:24:e2:3c:24: 6d:9a:95:ca:55:d9:d7:66:d1:3e:15:6d:e2:07:79:d5:15:bc: e4:e6:65:27:30:3e:bf:4a:33:1b:9d:64:13:d8:c3:c5:df:bb: e4:42:9c:80:aa:7a:7a:27:d8:30:fe:1b:0d:01:38:d0:27:11: 0a:c3:21:76 -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE3PLfW8wLviJr62TcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWVhZDYwOWQtYWZlNi00NWFmLTg0MDktMzQ4MThlODQ1 MGM1MB4XDTI2MDUxMjEzMDYzMFoXDTI2MDgxMDEzMDYzMFowLzEtMCsGA1UEAxMk MjExYzE0NzEtNmZmMC00ODVkLTllNGItYzI1ZGQyYjZlODM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvX9CufRhK1H8A8DtzanmTqodKMFHRxgerjYK hQ9pbigZVn99RGmREUFevj0SC/StMqAluICsJUjRf7t5m5rpQHhOvwcIo0M6Agbb Dsg6U58hJLUmcfB5UWd49/E07Apvvx6gOkI5TtEob1rfR/Ak3Z2P3vL+yZUrd/kY QRq7VMOr5oZR8P7FF9LbGP1pzryMSYcMmd5GG0YD99ev8RC8q9iSXG3C+1+E/wZ+ MbTBXtopkyDhqC/EcIZmxWglVQgffPdjYGEhK1YfnOaXe/U0BM3XtnFv9U56wyWi RpAr3RDXdHWwmlDkyVQ2zvaopLrPeGWxwzg/dhrdcdKJ30FGRwIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFA5FAQl33bn7HT+BSOtktF8wh2rsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9lZWFk NjA5ZC1hZmU2LTQ1YWYtODQwOS0zNDgxOGU4NDUwYzUvYjRlMTI3NTAtMDZhMC0z YzZmLTg1YmMtZDQ4YzFkNGQ0MjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZWVhZDYwOWQtYWZlNi00NWFmLTg0 MDktMzQ4MThlODQ1MGM1L2VlYWQ2MDlkLWFmZTYtNDVhZi04NDA5LTM0ODE4ZTg0 NTBjNS5jcmwwHwYDVR0jBBgwFoAUlLfjG9MoedrUC407Be4h1zWUqsswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9lZWFkNjA5ZC1hZmU2LTQ1YWYtODQwOS0zNDgx OGU4NDUwYzUuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAJgL8O/8A AdowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAsXG35ps3C4cQ/NLFMjDfw/af2IAvfD0/aZ4vKdSt6TyPjohJ y/IOzk/GvBvfgBJe2f7qiF0oliFHdziZnSzISdKcl3ka3DTEyXKLjJpHSVFmGoV9 wet6xOb9bnFqIhbvIbuwn0ls3oyuaL/jj039eDG4yceRz2fHwqA4NJCgYrSyhWAw AsFE4Vj89I3MSnX/3+V2hDK5og9h18J3JmoolVFli/ZegwCD1gWWqVWXJ0H4KJav fK+nxccYjSJ5ZXWXbTwk4jwkbZqVylXZ12bRPhVt4gd51RW85OZlJzA+v0ozG51k E9jDxd+75EKcgKp6eifYMP4bDQE40CcRCsMhdg== -----END CERTIFICATE-----Generated at Wed May 13 09:12:40 2026 by rpki-client