$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/9ca5ed04-3753-31ea-a1e7-257cbc7fb2f2.roa File: 9ca5ed04-3753-31ea-a1e7-257cbc7fb2f2.roa (raw, json) Hash identifier: qdKlSEZ62ZqeWF0S3kMOAkkdsTeRMvm5M3zILJnGN0I= Subject key identifier: CC:36:4C:B4:91:75:5A:DB:A4:63:73:58:D5:CC:F5:2A:66:B0:F3:5E Certificate issuer: /CN=252bff0e-a7f2-4d92-b2ff-24bfa21a7306 Certificate serial: 010D0C9F4328584D343A15CC5426918A68016C80 Authority key identifier: 13:34:1F:39:12:25:A3:62:F4:C2:CC:7C:74:9A:15:0B:B9:94:42:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/9ca5ed04-3753-31ea-a1e7-257cbc7fb2f2.roa Signing time: Wed 18 Mar 2026 01:00:33 +0000 ROA not before: Wed 18 Mar 2026 01:00:33 +0000 ROA not after: Tue 16 Jun 2026 01:00:33 +0000 asID: 393732 IP address blocks: 2620:11d:500c::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 29 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:34:3a:15:cc:54:26:91:8a:68:01:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=252bff0e-a7f2-4d92-b2ff-24bfa21a7306 Validity Not Before: Mar 18 01:00:33 2026 GMT Not After : Jun 16 01:00:33 2026 GMT Subject: CN=17bbbea7-6eb5-476b-8383-ab67863dd9b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:fd:dc:76:c3:09:cf:e1:be:38:7a:a9:b7:f9: 44:d3:43:ba:2f:27:bd:ba:9f:b5:c9:ce:80:d4:1b: d8:a7:75:ff:3c:6a:bf:5a:0b:37:dd:80:c2:3f:50: 02:e8:6e:40:16:45:d3:22:08:5c:bf:d1:2c:0f:bd: c1:18:83:b7:b0:4e:01:16:d9:23:f2:7c:9f:38:e2: 91:52:32:7b:f5:28:57:3d:ac:f3:90:bb:39:5b:67: 5b:fb:86:42:98:3f:0b:4c:c7:0e:46:80:fb:b8:6d: 41:46:c5:25:9f:70:3c:a5:88:0e:02:98:70:a8:53: a8:66:59:f5:a0:de:15:f3:f9:80:c3:84:e4:ac:e7: 21:29:8d:32:6b:0e:98:82:26:b9:cd:66:33:f9:cf: d0:e0:c2:a5:5a:6e:b5:cc:e5:66:34:f2:b1:9f:5a: 57:5c:02:59:eb:a5:0e:69:b9:94:7e:02:47:e6:ad: 1a:53:77:f2:07:99:b2:18:67:ad:49:44:31:76:37: 29:4e:4c:3a:62:64:71:44:4e:f0:3c:0a:7d:b0:23: d0:37:44:b3:42:16:27:1b:4d:9f:27:07:58:00:b9: 4f:b4:32:e1:03:76:d3:75:8b:4d:9d:57:cb:01:8d: bf:d6:0b:9b:66:69:04:a3:f0:f1:d8:ea:2c:89:ec: a3:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:36:4C:B4:91:75:5A:DB:A4:63:73:58:D5:CC:F5:2A:66:B0:F3:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/9ca5ed04-3753-31ea-a1e7-257cbc7fb2f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.crl X509v3 Authority Key Identifier: keyid:13:34:1F:39:12:25:A3:62:F4:C2:CC:7C:74:9A:15:0B:B9:94:42:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.cer sbgp-ipAddrBlock: critical IPv6: 2620:11d:500c::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:2f:0b:3a:2e:e8:4b:08:bb:9d:14:92:bc:59:da:59:48:bf: 7f:5d:06:85:a3:1a:de:a7:73:e1:06:27:51:a2:ee:fe:62:5a: 04:1d:0e:f7:1b:db:bb:cd:35:15:b6:20:2b:2c:14:cf:7d:3b: f6:95:1c:f8:98:7c:4e:d5:c0:5b:65:c0:d3:cc:39:bc:bb:4f: 3c:73:9e:6d:5f:b9:8a:89:e3:1d:54:f6:a8:81:ea:3f:2f:b7: c3:8e:99:38:60:72:cb:0a:03:cc:b3:e0:a2:fa:83:52:6c:31: f2:a4:4a:a6:cc:3a:3e:48:18:2c:86:df:ab:e3:80:8f:44:ec: 5c:25:68:39:d9:a7:7c:fa:e8:c3:db:83:35:d7:4a:71:1d:b4: e3:bd:58:0e:68:ea:5e:6f:1e:4a:63:eb:42:31:54:67:f4:d5: 5c:b7:22:17:b8:12:11:b7:3b:ba:4b:0d:5a:ee:23:b7:88:e0: 66:bf:e9:0c:97:fd:06:7c:21:b0:d5:ac:21:a1:8b:52:59:74: 30:9e:a6:e6:8f:c1:2f:10:a5:23:81:27:d8:99:4d:d5:20:7f: c9:fe:21:39:eb:b4:0a:6a:aa:35:33:3f:cd:16:01:0c:a1:a7: 78:09:08:43:97:1e:a6:8e:9c:35:1e:a0:1d:c4:40:6d:a8:28: ae:ce:c8:de -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE00OhXMVCaRimgBbIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjUyYmZmMGUtYTdmMi00ZDkyLWIyZmYtMjRiZmEyMWE3 MzA2MB4XDTI2MDMxODAxMDAzM1oXDTI2MDYxNjAxMDAzM1owLzEtMCsGA1UEAxMk MTdiYmJlYTctNmViNS00NzZiLTgzODMtYWI2Nzg2M2RkOWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgf3cdsMJz+G+OHqpt/lE00O6Lye9up+1yc6A 1BvYp3X/PGq/Wgs33YDCP1AC6G5AFkXTIghcv9EsD73BGIO3sE4BFtkj8nyfOOKR UjJ79ShXPazzkLs5W2db+4ZCmD8LTMcORoD7uG1BRsUln3A8pYgOAphwqFOoZln1 oN4V8/mAw4TkrOchKY0yaw6Ygia5zWYz+c/Q4MKlWm61zOVmNPKxn1pXXAJZ66UO abmUfgJH5q0aU3fyB5myGGetSUQxdjcpTkw6YmRxRE7wPAp9sCPQN0SzQhYnG02f JwdYALlPtDLhA3bTdYtNnVfLAY2/1gubZmkEo/Dx2OosieyjHQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMw2TLSRdVrbpGNzWNXM9SpmsPNeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yNTJi ZmYwZS1hN2YyLTRkOTItYjJmZi0yNGJmYTIxYTczMDYvOWNhNWVkMDQtMzc1My0z MWVhLWExZTctMjU3Y2JjN2ZiMmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjUyYmZmMGUtYTdmMi00ZDkyLWIy ZmYtMjRiZmEyMWE3MzA2LzI1MmJmZjBlLWE3ZjItNGQ5Mi1iMmZmLTI0YmZhMjFh NzMwNi5jcmwwHwYDVR0jBBgwFoAUEzQfORIlo2L0wsx8dJoVC7mUQngwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8yNTJiZmYwZS1hN2YyLTRkOTItYjJmZi0yNGJm YTIxYTczMDYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJiABHVAM MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEYvCzou6EsIu50UkrxZ2llIv39dBoWjGt6nc+EGJ1Gi7v5iWgQd Dvcb27vNNRW2ICssFM99O/aVHPiYfE7VwFtlwNPMOby7Tzxznm1fuYqJ4x1U9qiB 6j8vt8OOmThgcssKA8yz4KL6g1JsMfKkSqbMOj5IGCyG36vjgI9E7FwlaDnZp3z6 6MPbgzXXSnEdtOO9WA5o6l5vHkpj60IxVGf01Vy3Ihe4EhG3O7pLDVruI7eI4Ga/ 6QyX/QZ8IbDVrCGhi1JZdDCepuaPwS8QpSOBJ9iZTdUgf8n+ITnrtApqqjUzP80W AQyhp3gJCEOXHqaOnDUeoB3EQG2oKK7OyN4= -----END CERTIFICATE-----Generated at Sat Mar 28 13:41:17 2026 by rpki-client