$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/da6e3117-dc84-37c0-9f02-4523ec3e0ba2.roa File: da6e3117-dc84-37c0-9f02-4523ec3e0ba2.roa (raw, json) Hash identifier: zsypLCa5JqjxNw+mYUY4Ab9GOyVNmGM4NvKSVB26jFw= Subject key identifier: E8:2A:66:54:45:98:35:6E:23:6F:43:B0:FC:AF:D2:41:F3:C1:CF:51 Certificate issuer: /CN=eead609d-afe6-45af-8409-34818e8450c5 Certificate serial: 010D0C9F4328584DCF2DDD5CA564D551C2893000 Authority key identifier: 94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/da6e3117-dc84-37c0-9f02-4523ec3e0ba2.roa Signing time: Tue 12 May 2026 13:06:19 +0000 ROA not before: Tue 12 May 2026 13:06:19 +0000 ROA not after: Mon 10 Aug 2026 13:06:19 +0000 asID: 399970 IP address blocks: 2602:fc3b:ff00:42::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cf:2d:dd:5c:a5:64:d5:51:c2:89:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eead609d-afe6-45af-8409-34818e8450c5 Validity Not Before: May 12 13:06:19 2026 GMT Not After : Aug 10 13:06:19 2026 GMT Subject: CN=097eced7-2974-4dba-beb2-46cb7df0fb2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:01:5c:f2:d9:16:8c:c1:72:dc:cd:a6:0e:1d: b6:5c:84:fb:8f:1a:a0:ab:64:37:51:67:22:e8:fa: 99:b2:1b:05:cf:84:59:ce:00:eb:f7:18:94:b8:66: 82:63:1b:ad:d6:f7:ab:a7:8d:22:3f:c4:a0:85:25: 6e:2b:cd:a1:2a:88:0b:3a:80:40:7d:05:f7:f3:c7: b7:d9:b5:69:9d:ff:92:5a:93:a2:70:6e:7b:54:3a: a3:0a:bc:f3:0c:33:78:c0:55:79:32:f3:82:04:57: 72:28:b2:3a:98:5d:33:4b:76:6e:2a:82:56:2e:bd: 65:b2:29:35:81:27:c0:8f:e3:90:84:cd:30:c1:a9: c5:fd:f1:bb:8f:18:c1:72:45:06:90:8f:16:f4:3a: ab:c3:2e:c3:21:7d:54:a3:94:cd:99:a8:0c:20:75: 72:63:9b:e6:d6:1a:5a:5a:48:97:f8:8a:0b:5b:37: 98:5d:89:2d:f1:ba:21:ec:0a:78:97:9c:22:0e:16: 1f:d0:ec:cf:72:79:71:05:c8:0a:26:d5:d0:3a:54: 42:77:bf:3b:b1:7e:7b:21:7c:e5:0a:80:46:ba:a3: 1e:b3:de:7f:8c:38:9b:44:e2:52:54:8e:fe:a3:39: ee:62:9c:12:d6:0a:ce:31:9c:ec:d8:45:ab:23:fb: ab:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:2A:66:54:45:98:35:6E:23:6F:43:B0:FC:AF:D2:41:F3:C1:CF:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/da6e3117-dc84-37c0-9f02-4523ec3e0ba2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl X509v3 Authority Key Identifier: keyid:94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer sbgp-ipAddrBlock: critical IPv6: 2602:fc3b:ff00:42::/64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c9:cb:78:36:e7:be:10:d5:58:81:9c:bf:46:c5:39:63:ee:4d: 20:6f:d8:93:1b:7f:47:be:87:1e:55:6b:bd:49:32:d8:16:88: c7:41:ee:68:c3:2f:7a:69:e6:40:32:79:2d:f8:74:d4:81:a7: 47:7d:26:87:a2:bd:32:60:53:41:9d:94:2a:5d:a5:44:3d:63: 23:22:68:bb:3e:c7:a2:99:3f:c1:35:d1:b9:8f:06:94:a4:88: ab:82:6c:46:1c:17:9e:fc:1a:60:ae:27:90:9f:0e:bb:48:b6: 8b:b3:fe:19:6e:9a:57:7b:b0:ff:28:08:5c:de:60:20:97:a4: dd:18:4b:f1:c6:32:d9:b0:a8:ae:ce:18:f8:f2:29:f1:0b:28: 2e:bb:95:a2:ed:7c:63:cc:50:e1:64:14:d3:4f:20:33:5d:53: a4:69:d1:ed:17:67:2f:1d:78:89:2d:b2:70:de:5d:3c:1d:6a: 62:d5:05:2d:79:57:c8:8b:24:bf:56:4a:df:33:42:33:1d:8d: 31:d8:b0:0e:b0:cd:95:45:19:d8:82:97:7b:56:57:7b:da:64: 0d:2e:85:ab:1e:ee:0a:82:39:fd:19:12:f6:e7:f2:27:6e:37: e4:a9:34:94:d3:b8:69:f5:7e:e2:82:47:a0:0e:1a:3f:a8:11: ef:aa:e5:01 -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE3PLd1cpWTVUcKJMAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWVhZDYwOWQtYWZlNi00NWFmLTg0MDktMzQ4MThlODQ1 MGM1MB4XDTI2MDUxMjEzMDYxOVoXDTI2MDgxMDEzMDYxOVowLzEtMCsGA1UEAxMk MDk3ZWNlZDctMjk3NC00ZGJhLWJlYjItNDZjYjdkZjBmYjJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwFc8tkWjMFy3M2mDh22XIT7jxqgq2Q3UWci 6PqZshsFz4RZzgDr9xiUuGaCYxut1verp40iP8SghSVuK82hKogLOoBAfQX388e3 2bVpnf+SWpOicG57VDqjCrzzDDN4wFV5MvOCBFdyKLI6mF0zS3ZuKoJWLr1lsik1 gSfAj+OQhM0wwanF/fG7jxjBckUGkI8W9Dqrwy7DIX1Uo5TNmagMIHVyY5vm1hpa WkiX+IoLWzeYXYkt8boh7Ap4l5wiDhYf0OzPcnlxBcgKJtXQOlRCd787sX57IXzl CoBGuqMes95/jDibROJSVI7+oznuYpwS1grOMZzs2EWrI/ursQIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFOgqZlRFmDVuI29DsPyv0kHzwc9RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9lZWFk NjA5ZC1hZmU2LTQ1YWYtODQwOS0zNDgxOGU4NDUwYzUvZGE2ZTMxMTctZGM4NC0z N2MwLTlmMDItNDUyM2VjM2UwYmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZWVhZDYwOWQtYWZlNi00NWFmLTg0 MDktMzQ4MThlODQ1MGM1L2VlYWQ2MDlkLWFmZTYtNDVhZi04NDA5LTM0ODE4ZTg0 NTBjNS5jcmwwHwYDVR0jBBgwFoAUlLfjG9MoedrUC407Be4h1zWUqsswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9lZWFkNjA5ZC1hZmU2LTQ1YWYtODQwOS0zNDgx OGU4NDUwYzUuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAJgL8O/8A AEIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAyct4Nue+ENVYgZy/RsU5Y+5NIG/Ykxt/R76HHlVrvUky2BaI x0HuaMMvemnmQDJ5Lfh01IGnR30mh6K9MmBTQZ2UKl2lRD1jIyJouz7Hopk/wTXR uY8GlKSIq4JsRhwXnvwaYK4nkJ8Ou0i2i7P+GW6aV3uw/ygIXN5gIJek3RhL8cYy 2bCors4Y+PIp8QsoLruVou18Y8xQ4WQU008gM11TpGnR7RdnLx14iS2ycN5dPB1q YtUFLXlXyIskv1ZK3zNCMx2NMdiwDrDNlUUZ2IKXe1ZXe9pkDS6Fqx7uCoI5/RkS 9ufyJ2435Kk0lNO4afV+4oJHoA4aP6gR76rlAQ== -----END CERTIFICATE-----Generated at Wed May 13 11:18:55 2026 by rpki-client