$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/cc55409f-44e3-360e-998f-8eda6b5291cd.roa File: cc55409f-44e3-360e-998f-8eda6b5291cd.roa (raw, json) Hash identifier: Fsirb6uBk5eb9FnrVYH18CBp+J+HJ8z9IuiZfUnUyqo= Subject key identifier: 89:CF:B9:D2:FD:E7:43:9F:58:9C:25:89:C1:DE:BF:10:9B:03:E4:2C Certificate issuer: /CN=eead609d-afe6-45af-8409-34818e8450c5 Certificate serial: 010D0C9F4328584DCF2DE157CCD6D12467BAF700 Authority key identifier: 94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/cc55409f-44e3-360e-998f-8eda6b5291cd.roa Signing time: Tue 12 May 2026 13:06:21 +0000 ROA not before: Tue 12 May 2026 13:06:21 +0000 ROA not after: Mon 10 Aug 2026 13:06:21 +0000 asID: 399970 IP address blocks: 2602:fc3b:ff00:89::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cf:2d:e1:57:cc:d6:d1:24:67:ba:f7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eead609d-afe6-45af-8409-34818e8450c5 Validity Not Before: May 12 13:06:21 2026 GMT Not After : Aug 10 13:06:21 2026 GMT Subject: CN=7ba9d796-5997-48a9-9acc-96816146bc07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:d9:ef:1f:e7:03:ac:d4:05:ba:4c:3f:84:e5: a9:f0:0f:70:28:8f:dd:f7:4a:27:65:aa:c3:3b:35: a5:e1:9b:19:de:c5:6d:04:8b:75:c5:68:a7:2d:1f: 47:7f:99:51:b4:4f:f2:51:04:4a:07:9a:4a:a8:76: 82:68:00:60:8c:cc:b1:f6:00:d8:e9:e0:5f:8c:bf: 3d:dc:63:c0:c6:e5:06:af:d1:1d:40:18:ff:d8:62: fa:04:72:57:6d:36:8f:51:67:26:32:e9:bd:f7:b5: 81:2f:5e:d8:f4:68:94:b2:84:77:26:26:64:02:aa: fe:65:2e:2c:3f:d5:df:0a:17:88:52:9b:d7:c4:5e: 15:18:db:6c:d1:f7:b5:51:4d:f6:a9:54:a8:3d:6c: f8:6b:9b:cf:7b:80:c1:ea:7f:26:12:8a:89:3c:20: cf:2d:d0:ec:78:89:08:62:af:22:3f:09:dc:13:58: ad:17:c0:c1:24:55:b5:cd:09:ad:7b:60:31:dd:72: 10:b4:fd:72:af:03:27:7b:ca:cc:fb:27:ff:37:e6: fc:e0:a2:a6:45:6f:b8:d1:3c:ab:a9:a5:7e:46:63: cc:a3:39:19:b7:23:0a:3d:ef:52:fe:ee:b6:b0:1f: c6:5c:02:93:f8:aa:f3:fd:b9:29:47:b0:91:30:ce: 12:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:CF:B9:D2:FD:E7:43:9F:58:9C:25:89:C1:DE:BF:10:9B:03:E4:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/cc55409f-44e3-360e-998f-8eda6b5291cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl X509v3 Authority Key Identifier: keyid:94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer sbgp-ipAddrBlock: critical IPv6: 2602:fc3b:ff00:89::/64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:f8:48:b0:1d:a8:19:af:1d:07:28:a1:63:2e:94:27:35:a5: b0:25:90:63:57:7a:0a:f7:12:50:dc:e7:de:86:9a:6b:02:90: f4:6e:70:71:e1:19:74:1b:7b:68:41:9a:2d:21:0f:8e:cf:d5: 61:62:ee:d7:dc:5a:a3:2e:2a:5e:66:dd:6f:61:10:11:28:4b: b6:6e:38:52:de:df:f3:a1:ff:cc:4d:d2:7f:85:95:f8:d7:19: 4a:40:2f:bc:d1:18:fd:19:e2:e0:cf:2f:98:35:49:cd:58:c8: 80:39:0d:23:62:69:64:86:d6:33:bc:ae:49:c4:5a:41:cc:3c: fe:c7:46:5d:ed:68:4d:b9:7a:30:3f:69:36:12:0d:ec:0f:f0: 29:a3:34:79:8b:90:27:c0:8d:2e:57:e7:c2:3a:67:83:9b:ea: 6c:7c:d4:81:98:84:c1:bd:ae:08:42:11:a5:a2:23:3d:8a:07: 86:ac:2a:24:b3:f9:91:27:b7:b7:fc:b5:20:d8:2d:08:67:7f: c3:97:7a:40:13:52:73:00:cc:73:85:25:43:c3:ed:98:1f:b9: 21:39:ad:bc:22:79:51:73:fe:fe:d9:cb:d6:13:4e:8e:47:58: 6f:45:d7:ac:4d:ab:bf:05:3e:4c:ee:72:ab:76:1e:59:af:08: 2a:21:7e:12 -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE3PLeFXzNbRJGe69wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWVhZDYwOWQtYWZlNi00NWFmLTg0MDktMzQ4MThlODQ1 MGM1MB4XDTI2MDUxMjEzMDYyMVoXDTI2MDgxMDEzMDYyMVowLzEtMCsGA1UEAxMk N2JhOWQ3OTYtNTk5Ny00OGE5LTlhY2MtOTY4MTYxNDZiYzA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9nvH+cDrNQFukw/hOWp8A9wKI/d90onZarD OzWl4ZsZ3sVtBIt1xWinLR9Hf5lRtE/yUQRKB5pKqHaCaABgjMyx9gDY6eBfjL89 3GPAxuUGr9EdQBj/2GL6BHJXbTaPUWcmMum997WBL17Y9GiUsoR3JiZkAqr+ZS4s P9XfCheIUpvXxF4VGNts0fe1UU32qVSoPWz4a5vPe4DB6n8mEoqJPCDPLdDseIkI Yq8iPwncE1itF8DBJFW1zQmte2Ax3XIQtP1yrwMne8rM+yf/N+b84KKmRW+40Tyr qaV+RmPMozkZtyMKPe9S/u62sB/GXAKT+Krz/bkpR7CRMM4SzwIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFInPudL950OfWJwlicHevxCbA+QsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9lZWFk NjA5ZC1hZmU2LTQ1YWYtODQwOS0zNDgxOGU4NDUwYzUvY2M1NTQwOWYtNDRlMy0z NjBlLTk5OGYtOGVkYTZiNTI5MWNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZWVhZDYwOWQtYWZlNi00NWFmLTg0 MDktMzQ4MThlODQ1MGM1L2VlYWQ2MDlkLWFmZTYtNDVhZi04NDA5LTM0ODE4ZTg0 NTBjNS5jcmwwHwYDVR0jBBgwFoAUlLfjG9MoedrUC407Be4h1zWUqsswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9lZWFkNjA5ZC1hZmU2LTQ1YWYtODQwOS0zNDgx OGU4NDUwYzUuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAJgL8O/8A AIkwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAr/hIsB2oGa8dByihYy6UJzWlsCWQY1d6CvcSUNzn3oaaawKQ 9G5wceEZdBt7aEGaLSEPjs/VYWLu19xaoy4qXmbdb2EQEShLtm44Ut7f86H/zE3S f4WV+NcZSkAvvNEY/Rni4M8vmDVJzVjIgDkNI2JpZIbWM7yuScRaQcw8/sdGXe1o Tbl6MD9pNhIN7A/wKaM0eYuQJ8CNLlfnwjpng5vqbHzUgZiEwb2uCEIRpaIjPYoH hqwqJLP5kSe3t/y1INgtCGd/w5d6QBNScwDMc4UlQ8PtmB+5ITmtvCJ5UXP+/tnL 1hNOjkdYb0XXrE2rvwU+TO5yq3YeWa8IKiF+Eg== -----END CERTIFICATE-----Generated at Wed May 13 10:30:25 2026 by rpki-client