$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6ba0fd2-b526-4985-9314-bf6485056a64/5a1ec8f8-d507-3525-ad66-8dac2ac7eb7a.roa File: 5a1ec8f8-d507-3525-ad66-8dac2ac7eb7a.roa (raw, json) Hash identifier: WYAz3oXeTLQqt6np38lLG0/7tAxvXa9xqQhj8trgxeg= Subject key identifier: 42:F1:A5:1C:7A:4F:F9:C0:37:DF:4B:25:2F:E4:F1:A1:A4:62:15:64 Certificate issuer: /CN=a6ba0fd2-b526-4985-9314-bf6485056a64 Certificate serial: 010D0C9F4328584D4A8F9157019810717DD02A00 Authority key identifier: CC:23:95:78:8D:02:B3:B1:39:3C:D8:49:09:D0:31:6B:4F:1C:A6:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6ba0fd2-b526-4985-9314-bf6485056a64.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6ba0fd2-b526-4985-9314-bf6485056a64/5a1ec8f8-d507-3525-ad66-8dac2ac7eb7a.roa Signing time: Thu 26 Mar 2026 01:00:32 +0000 ROA not before: Thu 26 Mar 2026 01:00:32 +0000 ROA not after: Wed 24 Jun 2026 01:00:32 +0000 asID: 2552 IP address blocks: 128.252.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6ba0fd2-b526-4985-9314-bf6485056a64/a6ba0fd2-b526-4985-9314-bf6485056a64.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6ba0fd2-b526-4985-9314-bf6485056a64/a6ba0fd2-b526-4985-9314-bf6485056a64.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6ba0fd2-b526-4985-9314-bf6485056a64.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:8f:91:57:01:98:10:71:7d:d0:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6ba0fd2-b526-4985-9314-bf6485056a64 Validity Not Before: Mar 26 01:00:32 2026 GMT Not After : Jun 24 01:00:32 2026 GMT Subject: CN=b874bd66-e819-49ea-8e07-5e08a290a218 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:6f:4c:71:88:bc:b7:ab:85:2e:4b:77:26:32: 13:5d:d1:f0:2c:cd:78:42:c1:c9:a0:27:98:ce:55: 09:f0:e3:14:ce:86:20:3f:b0:b6:a0:61:ef:bb:c7: 3b:94:cc:e6:38:6f:af:85:79:d3:b0:7b:dd:c8:b2: 99:ee:a3:ad:cf:0a:d7:d6:04:2d:9b:7b:07:12:65: ea:b2:97:9b:de:de:00:93:6c:58:3a:5c:70:d9:e6: d7:6a:08:2a:68:03:e3:31:1c:9d:3b:98:36:85:0a: d5:c8:bc:d9:cb:96:cb:29:bf:9a:36:9d:ea:ef:70: 3e:01:f0:22:e7:4a:41:5c:58:67:31:13:b6:85:43: ee:00:56:ea:b9:66:23:10:cf:9d:5f:e3:e7:15:24: 94:71:dc:6a:2d:6f:17:31:f4:1b:9d:f3:f6:9f:6f: af:78:33:4c:b1:57:63:a8:44:4e:77:b8:67:bc:42: 22:9e:e5:0f:95:9b:c4:87:aa:8e:49:f0:04:7e:b0: 52:70:bf:9c:5d:72:49:a8:ab:8d:a8:05:9e:00:1f: d8:b6:95:fd:56:11:a9:c2:c4:03:02:09:74:1a:3b: 26:e4:48:36:06:d2:60:cf:b0:2e:7b:ae:99:c2:e6: 6b:73:01:4a:1f:2e:d0:41:5f:e9:00:88:52:ae:0e: 4d:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:F1:A5:1C:7A:4F:F9:C0:37:DF:4B:25:2F:E4:F1:A1:A4:62:15:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6ba0fd2-b526-4985-9314-bf6485056a64/5a1ec8f8-d507-3525-ad66-8dac2ac7eb7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6ba0fd2-b526-4985-9314-bf6485056a64/a6ba0fd2-b526-4985-9314-bf6485056a64.crl X509v3 Authority Key Identifier: keyid:CC:23:95:78:8D:02:B3:B1:39:3C:D8:49:09:D0:31:6B:4F:1C:A6:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6ba0fd2-b526-4985-9314-bf6485056a64.cer sbgp-ipAddrBlock: critical IPv4: 128.252.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:55:d8:c6:0b:25:a0:66:3b:b4:6e:c8:dc:25:c0:2d:a0:22: 8c:df:ed:26:0d:3a:47:be:57:79:0b:ba:05:b3:08:9b:dd:fb: a8:3b:67:4c:20:dc:fe:02:94:9f:0a:df:03:d2:a5:7e:66:ef: 75:f8:0f:fe:f1:09:7a:47:37:92:42:82:4e:8d:37:6d:c0:4e: 2e:3c:cc:ba:49:84:fa:cd:2c:2f:3d:02:f2:cb:1d:41:ca:70: 4c:a9:fc:e5:c4:8d:14:07:92:6e:35:d4:f6:6c:47:01:8e:3c: 5f:78:29:f3:35:51:1a:48:c8:63:16:82:47:43:1c:0d:af:40: 57:2f:1e:5f:af:c6:25:50:e6:58:42:f9:18:45:32:88:72:cf: b6:04:39:d3:ca:11:45:b1:3c:bc:13:2d:e6:aa:25:60:02:24: 9b:e3:c8:b7:96:31:12:48:cf:1b:26:29:32:64:4d:a1:47:eb: ec:e2:e6:f7:86:96:4f:8f:e0:bc:82:29:5e:9b:60:66:4b:73: 26:24:34:7c:af:91:3e:34:cd:c2:b8:ca:f4:f0:44:22:a3:38: 83:26:36:aa:1c:c8:b4:1a:5d:96:4d:40:9e:d6:e2:86:4d:4f: 12:71:27:f9:c6:f1:b5:8d:58:38:2f:28:96:7b:5b:32:92:96: f9:e5:c0:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Kj5FXAZgQcX3QKgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTZiYTBmZDItYjUyNi00OTg1LTkzMTQtYmY2NDg1MDU2 YTY0MB4XDTI2MDMyNjAxMDAzMloXDTI2MDYyNDAxMDAzMlowLzEtMCsGA1UEAxMk Yjg3NGJkNjYtZTgxOS00OWVhLThlMDctNWUwOGEyOTBhMjE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw29McYi8t6uFLkt3JjITXdHwLM14QsHJoCeY zlUJ8OMUzoYgP7C2oGHvu8c7lMzmOG+vhXnTsHvdyLKZ7qOtzwrX1gQtm3sHEmXq speb3t4Ak2xYOlxw2ebXaggqaAPjMRydO5g2hQrVyLzZy5bLKb+aNp3q73A+AfAi 50pBXFhnMRO2hUPuAFbquWYjEM+dX+PnFSSUcdxqLW8XMfQbnfP2n2+veDNMsVdj qEROd7hnvEIinuUPlZvEh6qOSfAEfrBScL+cXXJJqKuNqAWeAB/YtpX9VhGpwsQD Agl0Gjsm5Eg2BtJgz7Aue66ZwuZrcwFKHy7QQV/pAIhSrg5N0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFELxpRx6T/nAN99LJS/k8aGkYhVkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hNmJh MGZkMi1iNTI2LTQ5ODUtOTMxNC1iZjY0ODUwNTZhNjQvNWExZWM4ZjgtZDUwNy0z NTI1LWFkNjYtOGRhYzJhYzdlYjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYTZiYTBmZDItYjUyNi00OTg1LTkz MTQtYmY2NDg1MDU2YTY0L2E2YmEwZmQyLWI1MjYtNDk4NS05MzE0LWJmNjQ4NTA1 NmE2NC5jcmwwHwYDVR0jBBgwFoAUzCOVeI0Cs7E5PNhJCdAxa08cphIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9hNmJhMGZkMi1iNTI2LTQ5ODUtOTMxNC1iZjY0 ODUwNTZhNjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgPwwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAANV2MYLJaBmO7RuyNwlwC2gIozf7SYNOke+V3kLugWzCJvd+6g7Z0wg 3P4ClJ8K3wPSpX5m73X4D/7xCXpHN5JCgk6NN23ATi48zLpJhPrNLC89AvLLHUHK cEyp/OXEjRQHkm411PZsRwGOPF94KfM1URpIyGMWgkdDHA2vQFcvHl+vxiVQ5lhC +RhFMohyz7YEOdPKEUWxPLwTLeaqJWACJJvjyLeWMRJIzxsmKTJkTaFH6+zi5veG lk+P4LyCKV6bYGZLcyYkNHyvkT40zcK4yvTwRCKjOIMmNqocyLQaXZZNQJ7W4oZN TxJxJ/nG8bWNWDgvKJZ7WzKSlvnlwJo= -----END CERTIFICATE-----Generated at Thu Mar 26 14:14:32 2026 by rpki-client