$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04/c491a114-e1f5-3c83-be72-d9c11a868d3d.roa File: c491a114-e1f5-3c83-be72-d9c11a868d3d.roa (raw, json) Hash identifier: /i6baI+5c1cSrufw8yCZYWFob6oYU0okfj+NYSEKtKQ= Subject key identifier: 3B:6B:36:D3:1D:DB:DE:1B:B3:80:BA:8C:EB:4B:BC:FA:66:75:93:5B Certificate issuer: /CN=eea0cb92-050e-479f-bff4-dddd68eb4e04 Certificate serial: 010D0C9F4328584D905A9C3B9E6807599B94A280 Authority key identifier: F8:B6:CA:B8:C6:2D:14:6D:0B:16:82:3C:35:57:84:26:9C:01:0E:41 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04/c491a114-e1f5-3c83-be72-d9c11a868d3d.roa Signing time: Mon 20 Apr 2026 01:00:24 +0000 ROA not before: Mon 20 Apr 2026 01:00:24 +0000 ROA not after: Sun 19 Jul 2026 01:00:24 +0000 asID: 40806 IP address blocks: 2602:f4d9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04/eea0cb92-050e-479f-bff4-dddd68eb4e04.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04/eea0cb92-050e-479f-bff4-dddd68eb4e04.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:90:5a:9c:3b:9e:68:07:59:9b:94:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eea0cb92-050e-479f-bff4-dddd68eb4e04 Validity Not Before: Apr 20 01:00:24 2026 GMT Not After : Jul 19 01:00:24 2026 GMT Subject: CN=23867555-22c6-4868-b724-28fe9655066b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:52:36:33:01:92:80:69:bc:cb:1d:f0:ab:2b: f3:d1:58:b7:fb:26:2b:a4:a9:87:f8:99:ba:19:37: d5:8d:37:1f:72:39:8a:91:b7:0c:91:1f:cc:1f:02: 21:e7:35:cb:87:dd:7a:73:fd:e4:01:5f:be:2b:2e: 49:39:41:a9:3b:82:e1:df:db:c4:c6:21:1a:0a:59: ee:10:61:04:f9:fb:d3:1b:c3:b1:90:59:20:b3:68: 71:1e:cc:f3:c3:4c:81:2b:07:81:85:c0:a5:31:a4: 8f:8d:a8:19:68:e9:67:0e:96:89:4b:c4:65:40:72: 0a:b8:26:19:ca:58:e7:93:53:57:94:79:0b:b6:b2: 56:e9:6b:f3:80:b8:a0:92:5f:d0:73:ed:c5:64:a7: 5f:61:9a:13:2c:f4:8b:db:3b:83:d5:8d:e6:e6:ce: a1:b9:26:d2:8c:4a:f3:af:3d:bb:56:8c:7d:00:6f: 59:4d:26:a1:ab:26:25:5a:90:72:96:f5:0c:4d:0f: 9c:a3:3c:0d:e6:6b:10:bb:42:90:c7:72:e7:96:58: 31:69:eb:2e:64:52:dd:79:02:27:83:6b:8c:92:1d: 92:72:79:b4:9e:42:ad:43:d1:2b:78:cd:bc:ec:9e: 53:0f:0d:e9:9a:f3:51:a1:e7:60:6e:3e:8d:5f:7b: 3d:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:6B:36:D3:1D:DB:DE:1B:B3:80:BA:8C:EB:4B:BC:FA:66:75:93:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04/c491a114-e1f5-3c83-be72-d9c11a868d3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04/eea0cb92-050e-479f-bff4-dddd68eb4e04.crl X509v3 Authority Key Identifier: keyid:F8:B6:CA:B8:C6:2D:14:6D:0B:16:82:3C:35:57:84:26:9C:01:0E:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04.cer sbgp-ipAddrBlock: critical IPv6: 2602:f4d9::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:05:31:36:ef:23:fa:4c:10:4f:63:47:30:e1:02:c0:fe:43: dd:59:c3:32:8b:59:9b:a2:6e:cd:53:09:aa:9a:e1:28:68:ba: 01:3b:51:b4:55:83:8f:ae:7e:20:b8:c4:b5:b1:90:39:73:84: 3f:b9:d7:a7:eb:73:39:a4:eb:f3:c7:d1:98:f2:7f:96:8a:59: 20:27:5b:72:f1:2d:06:27:ca:a5:f5:1e:aa:36:54:9d:10:40: 31:df:e0:1c:b1:0d:f5:95:84:e1:83:00:0e:34:e7:aa:60:b6: 05:7a:af:23:d6:29:82:e7:62:8b:e9:1a:ee:b9:d5:67:82:77: 1b:37:bf:38:90:34:57:7e:22:3c:20:b4:86:da:ef:75:11:c7: 0c:1c:fb:81:8b:f7:af:84:73:3a:2a:c8:9e:61:89:9c:24:d0: c0:52:90:6c:64:59:89:9b:1b:0c:2c:d1:89:3d:ea:aa:8d:80: 34:32:6d:01:87:47:49:c3:97:56:21:59:be:61:63:4d:d3:a1: db:38:8e:21:df:8b:87:b5:51:dd:56:e6:e0:49:a9:08:60:06: 2a:a4:5e:de:32:0b:96:cc:4b:59:51:c0:b3:72:40:43:ce:44: 7b:5c:f6:1d:00:a3:54:86:51:90:e2:db:f4:af:7b:54:f9:36: 7e:3b:da:98 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2QWpw7nmgHWZuUooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWVhMGNiOTItMDUwZS00NzlmLWJmZjQtZGRkZDY4ZWI0 ZTA0MB4XDTI2MDQyMDAxMDAyNFoXDTI2MDcxOTAxMDAyNFowLzEtMCsGA1UEAxMk MjM4Njc1NTUtMjJjNi00ODY4LWI3MjQtMjhmZTk2NTUwNjZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlI2MwGSgGm8yx3wqyvz0Vi3+yYrpKmH+Jm6 GTfVjTcfcjmKkbcMkR/MHwIh5zXLh916c/3kAV++Ky5JOUGpO4Lh39vExiEaClnu EGEE+fvTG8OxkFkgs2hxHszzw0yBKweBhcClMaSPjagZaOlnDpaJS8RlQHIKuCYZ yljnk1NXlHkLtrJW6WvzgLigkl/Qc+3FZKdfYZoTLPSL2zuD1Y3m5s6huSbSjErz rz27Vox9AG9ZTSahqyYlWpBylvUMTQ+cozwN5msQu0KQx3LnllgxaesuZFLdeQIn g2uMkh2Scnm0nkKtQ9EreM287J5TDw3pmvNRoedgbj6NX3s9VwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDtrNtMd294bs4C6jOtLvPpmdZNbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9lZWEw Y2I5Mi0wNTBlLTQ3OWYtYmZmNC1kZGRkNjhlYjRlMDQvYzQ5MWExMTQtZTFmNS0z YzgzLWJlNzItZDljMTFhODY4ZDNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZWVhMGNiOTItMDUwZS00NzlmLWJm ZjQtZGRkZDY4ZWI0ZTA0L2VlYTBjYjkyLTA1MGUtNDc5Zi1iZmY0LWRkZGQ2OGVi NGUwNC5jcmwwHwYDVR0jBBgwFoAU+LbKuMYtFG0LFoI8NVeEJpwBDkEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9lZWEwY2I5Mi0wNTBlLTQ3OWYtYmZmNC1kZGRk NjhlYjRlMDQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL02QAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABYFMTbvI/pMEE9jRzDhAsD+Q91ZwzKLWZuibs1TCaqa4ShougE7 UbRVg4+ufiC4xLWxkDlzhD+516frczmk6/PH0Zjyf5aKWSAnW3LxLQYnyqX1Hqo2 VJ0QQDHf4ByxDfWVhOGDAA4056pgtgV6ryPWKYLnYovpGu651WeCdxs3vziQNFd+ IjwgtIba73URxwwc+4GL96+EczoqyJ5hiZwk0MBSkGxkWYmbGwws0Yk96qqNgDQy bQGHR0nDl1YhWb5hY03Tods4jiHfi4e1Ud1W5uBJqQhgBiqkXt4yC5bMS1lRwLNy QEPORHtc9h0Ao1SGUZDi2/Sve1T5Nn472pg= -----END CERTIFICATE-----Generated at Tue May 12 21:51:04 2026 by rpki-client