$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/595941d6-63c3-448f-a1d8-89c887c32b78/5ea8e1fe-2c15-3579-a81d-8ec1df6eb13e.roa File: 5ea8e1fe-2c15-3579-a81d-8ec1df6eb13e.roa (raw, json) Hash identifier: rCEz0gcNjMYwcp4dzrUh3YRwGxaGCiHjHnF6wbWrwN8= Subject key identifier: FD:58:E6:C5:43:28:2E:A9:F8:E6:6B:D5:CA:20:F4:B4:F0:7D:55:B1 Certificate issuer: /CN=595941d6-63c3-448f-a1d8-89c887c32b78 Certificate serial: 010D0C9F4328584DC8304914199888D29FB0D380 Authority key identifier: B6:42:E5:7E:3E:A4:D3:23:86:80:63:9B:C8:3C:75:9E:80:B8:26:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/595941d6-63c3-448f-a1d8-89c887c32b78.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/595941d6-63c3-448f-a1d8-89c887c32b78/5ea8e1fe-2c15-3579-a81d-8ec1df6eb13e.roa Signing time: Sun 10 May 2026 01:00:24 +0000 ROA not before: Sun 10 May 2026 01:00:24 +0000 ROA not after: Sat 08 Aug 2026 01:00:24 +0000 asID: 400797 IP address blocks: 2602:faf3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/595941d6-63c3-448f-a1d8-89c887c32b78/595941d6-63c3-448f-a1d8-89c887c32b78.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/595941d6-63c3-448f-a1d8-89c887c32b78/595941d6-63c3-448f-a1d8-89c887c32b78.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/595941d6-63c3-448f-a1d8-89c887c32b78.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c8:30:49:14:19:98:88:d2:9f:b0:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=595941d6-63c3-448f-a1d8-89c887c32b78 Validity Not Before: May 10 01:00:24 2026 GMT Not After : Aug 8 01:00:24 2026 GMT Subject: CN=3b90caaf-1a63-4b7c-bf75-384df72bcc9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:8a:f5:ed:f5:73:2a:45:ca:fd:42:01:dc:10: 8b:fa:8e:a9:f8:cc:6b:f9:5d:5d:34:1f:27:99:4e: 20:bf:f9:89:a2:11:51:c3:24:68:38:8f:b1:c2:01: 73:ea:0c:9f:5f:9d:71:e3:b7:52:44:00:b2:00:43: f2:de:42:9b:3d:bb:99:72:5c:80:9a:36:46:f9:af: c6:24:63:ed:82:77:c7:34:f1:d8:45:13:42:a2:29: 41:b9:be:98:f7:25:9b:03:30:d5:30:3c:4d:4d:bc: 51:a0:86:3f:34:dc:e3:74:66:79:e7:81:15:ad:50: 88:5d:92:d9:8d:3e:e8:50:ca:6e:05:01:0d:a0:a9: 2b:5b:54:35:53:24:e2:2d:2c:c6:9e:09:46:cf:d8: f3:e1:f3:69:9f:b9:a4:a4:55:99:8f:9c:21:b4:b1: 8e:7a:f9:b9:24:83:f8:86:0c:b1:ae:d8:6e:03:4d: 4c:b4:ca:ae:9f:94:b3:a7:14:4a:d3:14:19:d4:d1: a3:7c:d8:10:5a:17:fd:91:11:ea:23:10:d4:ae:d9: ac:35:67:76:92:f1:f2:6d:3d:36:69:20:10:5f:fc: 96:27:21:4c:5b:22:17:3d:49:88:d5:4d:23:b1:a8: f8:4c:d5:2c:22:19:4f:de:5c:ae:fe:01:1e:89:7e: a8:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:58:E6:C5:43:28:2E:A9:F8:E6:6B:D5:CA:20:F4:B4:F0:7D:55:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/595941d6-63c3-448f-a1d8-89c887c32b78/5ea8e1fe-2c15-3579-a81d-8ec1df6eb13e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/595941d6-63c3-448f-a1d8-89c887c32b78/595941d6-63c3-448f-a1d8-89c887c32b78.crl X509v3 Authority Key Identifier: keyid:B6:42:E5:7E:3E:A4:D3:23:86:80:63:9B:C8:3C:75:9E:80:B8:26:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/595941d6-63c3-448f-a1d8-89c887c32b78.cer sbgp-ipAddrBlock: critical IPv6: 2602:faf3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:d3:f4:74:ca:30:67:16:48:fd:83:fc:b4:53:6e:d8:3e:ee: cd:f8:bb:af:9d:75:bb:a0:91:0f:2d:ac:5c:df:80:cf:a6:4a: 9c:f5:a0:d5:50:d6:d0:cc:bb:c0:d4:0b:18:be:c4:f3:f6:3e: 94:27:b6:11:57:e4:ce:2e:b9:d7:f4:bb:39:39:bc:7e:74:39: e0:1e:76:ab:88:af:25:cf:9e:c4:ba:16:1f:bc:c4:ac:2a:0a: c8:67:36:41:8a:9b:e8:c6:0a:51:5a:17:13:14:a6:65:b1:bb: 96:f1:9d:86:90:cb:86:62:f5:49:73:4f:b5:4e:16:b7:81:9b: 4c:f6:94:f0:21:91:80:a0:ee:de:8e:15:1a:2a:88:4e:0f:ad: 76:26:b7:99:ca:5a:be:7b:a5:10:a0:0a:8d:be:cd:af:67:1a: 39:90:ea:2f:a5:53:bb:70:d3:98:06:49:67:2f:c2:4d:15:1f: 1b:bb:c7:ae:35:05:0a:a3:97:22:41:1d:20:6d:42:6b:20:34: 5d:4d:ac:ea:9a:76:8e:8d:20:86:41:77:52:f1:df:bb:0d:9b: d6:bc:f0:d0:71:46:15:4c:2a:f0:1d:df:e2:91:e2:b4:ca:97: bc:cd:cd:74:76:d1:c3:4b:9b:6d:3c:3d:da:0b:8f:1e:fc:3e: 8e:10:97:e1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3IMEkUGZiI0p+w04AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTk1OTQxZDYtNjNjMy00NDhmLWExZDgtODljODg3YzMy Yjc4MB4XDTI2MDUxMDAxMDAyNFoXDTI2MDgwODAxMDAyNFowLzEtMCsGA1UEAxMk M2I5MGNhYWYtMWE2My00YjdjLWJmNzUtMzg0ZGY3MmJjYzlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgIr17fVzKkXK/UIB3BCL+o6p+Mxr+V1dNB8n mU4gv/mJohFRwyRoOI+xwgFz6gyfX51x47dSRACyAEPy3kKbPbuZclyAmjZG+a/G JGPtgnfHNPHYRRNCoilBub6Y9yWbAzDVMDxNTbxRoIY/NNzjdGZ554EVrVCIXZLZ jT7oUMpuBQENoKkrW1Q1UyTiLSzGnglGz9jz4fNpn7mkpFWZj5whtLGOevm5JIP4 hgyxrthuA01MtMqun5SzpxRK0xQZ1NGjfNgQWhf9kRHqIxDUrtmsNWd2kvHybT02 aSAQX/yWJyFMWyIXPUmI1U0jsaj4TNUsIhlP3lyu/gEeiX6oMQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFP1Y5sVDKC6p+OZr1cog9LTwfVWxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81OTU5 NDFkNi02M2MzLTQ0OGYtYTFkOC04OWM4ODdjMzJiNzgvNWVhOGUxZmUtMmMxNS0z NTc5LWE4MWQtOGVjMWRmNmViMTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNTk1OTQxZDYtNjNjMy00NDhmLWEx ZDgtODljODg3YzMyYjc4LzU5NTk0MWQ2LTYzYzMtNDQ4Zi1hMWQ4LTg5Yzg4N2Mz MmI3OC5jcmwwHwYDVR0jBBgwFoAUtkLlfj6k0yOGgGObyDx1noC4Jg0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS81OTU5NDFkNi02M2MzLTQ0OGYtYTFkOC04OWM4 ODdjMzJiNzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL68wAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFHT9HTKMGcWSP2D/LRTbtg+7s34u6+ddbugkQ8trFzfgM+mSpz1 oNVQ1tDMu8DUCxi+xPP2PpQnthFX5M4uudf0uzk5vH50OeAedquIryXPnsS6Fh+8 xKwqCshnNkGKm+jGClFaFxMUpmWxu5bxnYaQy4Zi9UlzT7VOFreBm0z2lPAhkYCg 7t6OFRoqiE4PrXYmt5nKWr57pRCgCo2+za9nGjmQ6i+lU7tw05gGSWcvwk0VHxu7 x641BQqjlyJBHSBtQmsgNF1NrOqado6NIIZBd1Lx37sNm9a88NBxRhVMKvAd3+KR 4rTKl7zNzXR20cNLm208PdoLjx78Po4Ql+E= -----END CERTIFICATE-----Generated at Wed May 13 16:12:28 2026 by rpki-client