$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/a069ba98-ec0f-3135-a0ad-1e8e81e9c0b3.roa File: a069ba98-ec0f-3135-a0ad-1e8e81e9c0b3.roa (raw, json) Hash identifier: cxu6056qWKLPKo01HAbhvA7U9agKqhdb8GKNlml9/uQ= Subject key identifier: A3:AD:B4:85:62:C2:AF:F1:4C:CE:8D:D0:FD:3C:FE:23:C5:B0:AB:33 Certificate issuer: /CN=252bff0e-a7f2-4d92-b2ff-24bfa21a7306 Certificate serial: 010D0C9F4328584D24DF84F86D193C4AD53C1FB0 Authority key identifier: 13:34:1F:39:12:25:A3:62:F4:C2:CC:7C:74:9A:15:0B:B9:94:42:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/a069ba98-ec0f-3135-a0ad-1e8e81e9c0b3.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 393732 IP address blocks: 2620:11d:5000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 29 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:84:f8:6d:19:3c:4a:d5:3c:1f:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=252bff0e-a7f2-4d92-b2ff-24bfa21a7306 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=25780ced-e20f-463c-bc0d-8c58b5bacd7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ca:1f:7e:bc:ce:c5:b6:c3:3d:84:ee:e2:cd: 0a:f2:3c:6a:22:bc:9b:b3:b7:97:9f:ea:b4:f0:47: 83:db:71:1d:e9:48:bc:f1:33:72:3c:37:e3:9f:f5: 4e:ab:73:4a:0f:32:17:9e:0f:a6:a7:15:88:db:49: b2:a4:07:95:70:4c:a5:a8:d8:4a:f5:a3:2d:40:76: 3b:6c:12:5c:76:29:ee:fe:6d:9a:b6:99:e0:1c:e2: ba:8d:c3:ca:ad:0a:d3:01:df:54:e9:bd:d0:fe:f7: 23:1c:d0:11:76:7f:b4:00:63:ba:6a:76:2b:8b:c2: 20:f8:29:51:63:ec:a8:ec:11:2b:c3:7e:96:d5:1a: c2:e5:2e:34:a9:41:c2:35:89:0f:e5:76:8f:91:08: 5b:27:8a:a0:f5:93:f1:77:ae:5b:a9:f8:a1:31:c2: b7:a8:95:1b:b3:ec:ab:cf:8f:0b:34:ef:11:c6:78: 17:68:b1:43:ce:0c:49:13:2e:fe:ed:ad:41:8a:ee: 80:7d:1b:e4:8e:c9:2b:69:26:03:ea:18:81:e9:49: dc:71:88:6f:cd:83:8b:cd:b3:1b:e1:15:9c:51:2c: 01:ab:40:d9:6f:cf:dd:f5:e7:89:e9:2e:94:74:53: 88:e1:35:e7:a7:5d:3f:a0:a2:fc:30:47:6d:9d:24: 89:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:AD:B4:85:62:C2:AF:F1:4C:CE:8D:D0:FD:3C:FE:23:C5:B0:AB:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/a069ba98-ec0f-3135-a0ad-1e8e81e9c0b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.crl X509v3 Authority Key Identifier: keyid:13:34:1F:39:12:25:A3:62:F4:C2:CC:7C:74:9A:15:0B:B9:94:42:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.cer sbgp-ipAddrBlock: critical IPv6: 2620:11d:5000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:37:be:ca:2b:00:6f:48:da:48:ff:b7:80:d5:7e:a5:1f:a7: fe:c5:63:2b:6d:4c:60:f9:6e:13:ed:45:80:62:8b:85:40:20: ca:16:ef:3e:ea:0d:09:ab:ec:ce:0a:a8:55:44:41:dc:9a:34: 10:24:e0:41:e2:bb:27:23:a8:69:68:a3:a6:d4:c4:01:af:04: c3:1f:31:4d:b0:f8:ab:9a:98:4f:ab:a3:2a:98:1f:29:68:a8: 8d:f3:68:3c:25:94:da:f8:d0:97:1f:7f:52:41:e4:35:95:b2: 49:44:da:a4:3d:ce:88:78:ec:49:2c:77:f4:2c:8a:dc:81:78: b8:02:e9:10:cc:53:4a:d3:56:50:1d:bd:83:96:26:ba:ce:ad: b0:b2:47:80:61:42:f0:72:b8:f8:ed:4c:10:97:70:d8:cf:65: a5:25:e7:4c:1d:98:7c:49:db:21:b7:52:1d:12:ad:5f:29:3c: 85:b3:0d:8a:7d:52:fb:2c:18:b0:11:75:b9:57:29:e4:ef:da: 90:20:22:1a:97:c9:72:50:d6:c7:63:9f:10:e4:83:2a:be:c3: 67:be:0d:e6:6a:7b:57:f5:8c:28:1b:46:90:64:db:66:f2:6e: d2:7c:41:c9:cf:ce:09:08:01:03:40:55:c1:02:23:e0:8d:00: 68:81:1f:3d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0k34T4bRk8StU8H7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjUyYmZmMGUtYTdmMi00ZDkyLWIyZmYtMjRiZmEyMWE3 MzA2MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MjU3ODBjZWQtZTIwZi00NjNjLWJjMGQtOGM1OGI1YmFjZDdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8offrzOxbbDPYTu4s0K8jxqIrybs7eXn+q0 8EeD23Ed6Ui88TNyPDfjn/VOq3NKDzIXng+mpxWI20mypAeVcEylqNhK9aMtQHY7 bBJcdinu/m2atpngHOK6jcPKrQrTAd9U6b3Q/vcjHNARdn+0AGO6anYri8Ig+ClR Y+yo7BErw36W1RrC5S40qUHCNYkP5XaPkQhbJ4qg9ZPxd65bqfihMcK3qJUbs+yr z48LNO8RxngXaLFDzgxJEy7+7a1Biu6AfRvkjskraSYD6hiB6UnccYhvzYOLzbMb 4RWcUSwBq0DZb8/d9eeJ6S6UdFOI4TXnp10/oKL8MEdtnSSJ5wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKOttIViwq/xTM6N0P08/iPFsKszMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yNTJi ZmYwZS1hN2YyLTRkOTItYjJmZi0yNGJmYTIxYTczMDYvYTA2OWJhOTgtZWMwZi0z MTM1LWEwYWQtMWU4ZTgxZTljMGIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjUyYmZmMGUtYTdmMi00ZDkyLWIy ZmYtMjRiZmEyMWE3MzA2LzI1MmJmZjBlLWE3ZjItNGQ5Mi1iMmZmLTI0YmZhMjFh NzMwNi5jcmwwHwYDVR0jBBgwFoAUEzQfORIlo2L0wsx8dJoVC7mUQngwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8yNTJiZmYwZS1hN2YyLTRkOTItYjJmZi0yNGJm YTIxYTczMDYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABHVAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIQ3vsorAG9I2kj/t4DVfqUfp/7FYyttTGD5bhPtRYBii4VAIMoW 7z7qDQmr7M4KqFVEQdyaNBAk4EHiuycjqGloo6bUxAGvBMMfMU2w+KuamE+royqY HyloqI3zaDwllNr40Jcff1JB5DWVsklE2qQ9zoh47Eksd/QsityBeLgC6RDMU0rT VlAdvYOWJrrOrbCyR4BhQvByuPjtTBCXcNjPZaUl50wdmHxJ2yG3Uh0SrV8pPIWz DYp9UvssGLARdblXKeTv2pAgIhqXyXJQ1sdjnxDkgyq+w2e+DeZqe1f1jCgbRpBk 22bybtJ8QcnPzgkIAQNAVcECI+CNAGiBHz0= -----END CERTIFICATE-----Generated at Sat Mar 28 13:42:24 2026 by rpki-client