$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/faa95775-323c-3313-8034-9b3257c57bf2.roa File: faa95775-323c-3313-8034-9b3257c57bf2.roa (raw, json) Hash identifier: oD5/xhJvwk+VMZI7iAHZ3d1f8BoYqKgWePOV3OQpAnU= Subject key identifier: 8C:04:51:A2:CA:D2:DC:57:ED:6E:42:32:60:67:1B:3F:D7:CF:F3:ED Certificate issuer: /CN=eead609d-afe6-45af-8409-34818e8450c5 Certificate serial: 010D0C9F4328584DCF2DF90B88037D3F33C57880 Authority key identifier: 94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/faa95775-323c-3313-8034-9b3257c57bf2.roa Signing time: Tue 12 May 2026 13:06:32 +0000 ROA not before: Tue 12 May 2026 13:06:32 +0000 ROA not after: Mon 10 Aug 2026 13:06:32 +0000 asID: 399970 IP address blocks: 2602:fc3b:ff00:20d::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cf:2d:f9:0b:88:03:7d:3f:33:c5:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eead609d-afe6-45af-8409-34818e8450c5 Validity Not Before: May 12 13:06:32 2026 GMT Not After : Aug 10 13:06:32 2026 GMT Subject: CN=5a8ab3ca-6697-42a3-bc3d-3ea45f4d89b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b8:2c:42:4f:76:cd:f3:18:a6:53:a9:15:45: bd:c1:c8:dc:23:9d:28:1c:28:ec:0e:c8:75:06:0c: 1c:05:cc:84:52:24:88:e2:58:fc:4b:cd:d7:e6:b4: 06:3e:94:ab:60:ee:19:1e:21:79:50:19:e6:95:1b: 0c:e3:32:02:41:e6:ba:95:b6:50:61:08:82:9a:42: 46:84:05:f8:43:fa:a7:01:e3:81:86:8d:a6:c4:df: a4:28:ab:18:ea:1f:37:36:a6:65:98:9a:27:fa:3d: f7:60:7e:d5:66:46:38:0c:07:41:1e:1d:67:34:99: 4c:6c:2a:68:a2:1d:2f:ab:97:4a:80:0a:22:10:b7: 8d:57:20:6e:af:f7:d8:36:18:03:1d:fb:da:3a:52: 9c:e7:4f:80:02:f6:c5:fb:28:2c:2e:8b:3c:1a:f5: fb:16:d7:96:e2:28:34:53:83:82:28:ee:a1:33:ea: 90:48:20:59:df:50:46:32:a3:39:f2:16:e7:45:26: 67:fe:ff:b8:f3:d2:60:64:ae:bc:17:83:5a:36:9c: c6:8b:c2:98:42:bf:cf:01:1d:39:46:9b:7a:78:91: f7:23:84:52:cc:7c:6a:cc:ed:f4:94:5d:3e:a0:1d: ae:fe:98:33:69:4b:79:3f:e6:41:42:9c:c3:ab:36: c4:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:04:51:A2:CA:D2:DC:57:ED:6E:42:32:60:67:1B:3F:D7:CF:F3:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/faa95775-323c-3313-8034-9b3257c57bf2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl X509v3 Authority Key Identifier: keyid:94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer sbgp-ipAddrBlock: critical IPv6: 2602:fc3b:ff00:20d::/64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:29:1c:a9:23:af:4c:d5:15:61:86:48:a6:05:cb:02:ae:6e: fe:bc:85:21:c3:46:bc:c9:98:52:4e:6e:c8:c0:c4:2f:6e:ec: a5:d3:67:6c:6f:0b:b7:02:cc:43:d3:16:df:73:4c:6a:72:90: be:f2:9d:de:40:d6:db:2a:a3:d7:c7:bc:8c:40:ed:0a:a4:8a: ee:9f:34:9a:e3:de:5c:d3:bb:38:2e:ce:b6:02:ba:4e:52:66: 64:4f:c2:fa:48:73:9f:d8:e2:df:59:e8:45:54:c5:81:bc:ca: 1d:0d:6e:0d:96:ea:9a:03:71:4e:df:57:17:20:3d:82:29:b6: 43:cc:37:e4:ea:15:02:f1:83:51:d2:c8:d8:4a:26:37:3e:a7: c8:bd:d8:e1:2e:00:0f:7d:7b:43:8f:47:ae:96:75:c3:77:8e: 52:b6:84:d7:13:b6:b9:c0:75:28:ac:a2:52:dc:b9:9a:af:8c: 43:26:05:45:66:7f:70:de:96:07:b2:d6:ab:30:e0:d0:1c:87: 80:cc:70:fe:0f:f3:fa:76:64:79:f7:b7:3a:c5:3d:81:91:08: 03:55:45:23:73:06:ca:d2:b6:f6:30:0d:67:8d:03:70:f2:71: 86:21:26:d6:ce:de:0b:f3:fa:8d:a6:ad:18:43:39:26:ca:ee: 71:12:e9:58 -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE3PLfkLiAN9PzPFeIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWVhZDYwOWQtYWZlNi00NWFmLTg0MDktMzQ4MThlODQ1 MGM1MB4XDTI2MDUxMjEzMDYzMloXDTI2MDgxMDEzMDYzMlowLzEtMCsGA1UEAxMk NWE4YWIzY2EtNjY5Ny00MmEzLWJjM2QtM2VhNDVmNGQ4OWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrgsQk92zfMYplOpFUW9wcjcI50oHCjsDsh1 BgwcBcyEUiSI4lj8S83X5rQGPpSrYO4ZHiF5UBnmlRsM4zICQea6lbZQYQiCmkJG hAX4Q/qnAeOBho2mxN+kKKsY6h83NqZlmJon+j33YH7VZkY4DAdBHh1nNJlMbCpo oh0vq5dKgAoiELeNVyBur/fYNhgDHfvaOlKc50+AAvbF+ygsLos8GvX7FteW4ig0 U4OCKO6hM+qQSCBZ31BGMqM58hbnRSZn/v+489JgZK68F4NaNpzGi8KYQr/PAR05 Rpt6eJH3I4RSzHxqzO30lF0+oB2u/pgzaUt5P+ZBQpzDqzbEDQIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFIwEUaLK0txX7W5CMmBnGz/Xz/PtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9lZWFk NjA5ZC1hZmU2LTQ1YWYtODQwOS0zNDgxOGU4NDUwYzUvZmFhOTU3NzUtMzIzYy0z MzEzLTgwMzQtOWIzMjU3YzU3YmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZWVhZDYwOWQtYWZlNi00NWFmLTg0 MDktMzQ4MThlODQ1MGM1L2VlYWQ2MDlkLWFmZTYtNDVhZi04NDA5LTM0ODE4ZTg0 NTBjNS5jcmwwHwYDVR0jBBgwFoAUlLfjG9MoedrUC407Be4h1zWUqsswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9lZWFkNjA5ZC1hZmU2LTQ1YWYtODQwOS0zNDgx OGU4NDUwYzUuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAJgL8O/8A Ag0wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAWykcqSOvTNUVYYZIpgXLAq5u/ryFIcNGvMmYUk5uyMDEL27s pdNnbG8LtwLMQ9MW33NManKQvvKd3kDW2yqj18e8jEDtCqSK7p80muPeXNO7OC7O tgK6TlJmZE/C+khzn9ji31noRVTFgbzKHQ1uDZbqmgNxTt9XFyA9gim2Q8w35OoV AvGDUdLI2EomNz6nyL3Y4S4AD317Q49HrpZ1w3eOUraE1xO2ucB1KKyiUty5mq+M QyYFRWZ/cN6WB7LWqzDg0ByHgMxw/g/z+nZkefe3OsU9gZEIA1VFI3MGytK29jAN Z40DcPJxhiEm1s7eC/P6jaatGEM5JsrucRLpWA== -----END CERTIFICATE-----Generated at Wed May 13 11:58:29 2026 by rpki-client