$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/cb5feeb4-f800-3858-8695-d0a84d1e24a8.roa File: cb5feeb4-f800-3858-8695-d0a84d1e24a8.roa (raw, json) Hash identifier: RBXL84EY2O6B+CBoohtCvqcSR0tNLTE3mKff3FnHahU= Subject key identifier: 00:A5:2F:EA:C5:09:5A:FF:F7:FB:53:47:FE:95:FC:BD:0C:0F:66:5C Certificate issuer: /CN=eead609d-afe6-45af-8409-34818e8450c5 Certificate serial: 010D0C9F4328584DCF2E0F338D4BDF2F98961380 Authority key identifier: 94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/cb5feeb4-f800-3858-8695-d0a84d1e24a8.roa Signing time: Tue 12 May 2026 13:06:42 +0000 ROA not before: Tue 12 May 2026 13:06:42 +0000 ROA not after: Mon 10 Aug 2026 13:06:42 +0000 asID: 399970 IP address blocks: 2602:fc3b:ff00:34b::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cf:2e:0f:33:8d:4b:df:2f:98:96:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eead609d-afe6-45af-8409-34818e8450c5 Validity Not Before: May 12 13:06:42 2026 GMT Not After : Aug 10 13:06:42 2026 GMT Subject: CN=bee237b4-92f3-4b39-b0aa-8dec3df2aefa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ba:3e:8f:7e:e6:d1:43:6b:23:66:c0:47:c4: 38:dc:3d:83:d9:51:fd:af:59:ca:b2:af:6d:30:fb: 92:4c:8e:b1:56:f8:c1:38:43:f9:69:9c:76:86:bf: 99:50:63:57:ce:02:30:b3:7f:ec:88:8a:76:f8:ff: 99:52:d4:14:22:eb:c1:27:7b:f9:c6:cb:98:ed:86: 74:b0:78:22:3d:c8:2e:65:51:2a:17:ff:d4:3f:11: 0c:23:d1:a6:f3:15:9b:39:10:74:90:64:82:b5:53: de:4d:6f:1e:a6:d6:79:d1:94:0f:75:85:b7:02:14: b6:b0:3c:e3:42:63:ef:3a:73:1e:a4:76:93:83:b5: fd:81:24:bf:5b:33:6c:d8:21:a3:5a:90:6f:1a:33: 4d:d7:6a:e0:38:e2:3f:c0:6d:39:48:b3:2d:1e:8b: b1:30:17:03:51:58:67:c9:b5:37:1c:0b:68:c3:af: fe:ae:0d:9c:0d:cc:cc:1d:6e:c5:24:7e:d6:3c:02: 1d:78:0a:34:2e:84:11:4f:7b:8a:d0:d6:b2:d2:28: 92:5c:0f:d2:a8:1f:90:69:9b:2a:98:ad:a7:fb:fa: 11:15:59:1d:9a:c4:b5:a6:8c:4c:82:91:0e:26:cc: 4d:f4:42:d2:f1:61:0b:58:0e:8d:0c:68:d1:c5:1a: 6b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:A5:2F:EA:C5:09:5A:FF:F7:FB:53:47:FE:95:FC:BD:0C:0F:66:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/cb5feeb4-f800-3858-8695-d0a84d1e24a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl X509v3 Authority Key Identifier: keyid:94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer sbgp-ipAddrBlock: critical IPv6: 2602:fc3b:ff00:34b::/64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:41:25:fe:40:51:72:25:05:df:b7:64:b6:a6:ea:de:20:51: 50:02:e9:8c:4f:5d:0d:d0:1f:b7:c6:1a:6d:cd:70:ec:73:98: 23:29:f2:a9:2e:e5:20:ee:43:f4:25:d1:9c:ed:e5:ad:c0:ad: 5e:57:ad:8c:9c:03:74:1d:9a:be:4b:b8:e8:fd:66:bd:2b:56: 91:85:dd:7f:41:b4:a0:59:0b:7b:8f:f8:50:2a:c0:45:98:6d: 92:46:6e:08:77:47:19:b1:86:7e:4f:69:e4:56:80:0b:29:2c: 67:76:f4:30:36:fb:f4:2b:e0:cf:48:5f:d2:f8:93:b4:18:11: ec:13:d3:11:a6:40:4b:cd:c5:3d:a2:5c:b8:0b:4d:ad:32:6d: 15:d8:60:e9:b0:37:90:f1:5c:e9:ab:5e:98:8f:9f:8f:e8:84: af:04:e7:9b:ed:33:7e:4f:1c:01:6c:52:b7:05:31:ec:f0:c6: 61:aa:9c:4a:76:f1:16:de:7a:dd:1c:c4:16:dd:ce:cb:8b:53: 0a:11:aa:e1:53:0e:45:e7:b4:3c:5e:b2:2c:97:65:54:0a:62: c9:7c:bc:22:a0:22:e5:c2:50:2a:80:08:25:3d:06:21:eb:d4: d4:d1:3d:dc:e3:f9:ad:ef:0b:28:43:ee:83:60:67:94:38:8d: 49:9c:91:ee -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE3PLg8zjUvfL5iWE4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWVhZDYwOWQtYWZlNi00NWFmLTg0MDktMzQ4MThlODQ1 MGM1MB4XDTI2MDUxMjEzMDY0MloXDTI2MDgxMDEzMDY0MlowLzEtMCsGA1UEAxMk YmVlMjM3YjQtOTJmMy00YjM5LWIwYWEtOGRlYzNkZjJhZWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbo+j37m0UNrI2bAR8Q43D2D2VH9r1nKsq9t MPuSTI6xVvjBOEP5aZx2hr+ZUGNXzgIws3/siIp2+P+ZUtQUIuvBJ3v5xsuY7YZ0 sHgiPcguZVEqF//UPxEMI9Gm8xWbORB0kGSCtVPeTW8eptZ50ZQPdYW3AhS2sDzj QmPvOnMepHaTg7X9gSS/WzNs2CGjWpBvGjNN12rgOOI/wG05SLMtHouxMBcDUVhn ybU3HAtow6/+rg2cDczMHW7FJH7WPAIdeAo0LoQRT3uK0Nay0iiSXA/SqB+QaZsq mK2n+/oRFVkdmsS1poxMgpEOJsxN9ELS8WELWA6NDGjRxRpr9wIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFAClL+rFCVr/9/tTR/6V/L0MD2ZcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9lZWFk NjA5ZC1hZmU2LTQ1YWYtODQwOS0zNDgxOGU4NDUwYzUvY2I1ZmVlYjQtZjgwMC0z ODU4LTg2OTUtZDBhODRkMWUyNGE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZWVhZDYwOWQtYWZlNi00NWFmLTg0 MDktMzQ4MThlODQ1MGM1L2VlYWQ2MDlkLWFmZTYtNDVhZi04NDA5LTM0ODE4ZTg0 NTBjNS5jcmwwHwYDVR0jBBgwFoAUlLfjG9MoedrUC407Be4h1zWUqsswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9lZWFkNjA5ZC1hZmU2LTQ1YWYtODQwOS0zNDgx OGU4NDUwYzUuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAJgL8O/8A A0swVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAVUEl/kBRciUF37dktqbq3iBRUALpjE9dDdAft8Yabc1w7HOY IynyqS7lIO5D9CXRnO3lrcCtXletjJwDdB2avku46P1mvStWkYXdf0G0oFkLe4/4 UCrARZhtkkZuCHdHGbGGfk9p5FaACyksZ3b0MDb79Cvgz0hf0viTtBgR7BPTEaZA S83FPaJcuAtNrTJtFdhg6bA3kPFc6atemI+fj+iErwTnm+0zfk8cAWxStwUx7PDG YaqcSnbxFt563RzEFt3Oy4tTChGq4VMORee0PF6yLJdlVApiyXy8IqAi5cJQKoAI JT0GIevU1NE93OP5re8LKEPug2BnlDiNSZyR7g== -----END CERTIFICATE-----Generated at Wed May 13 16:42:40 2026 by rpki-client