$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/708a0fce-faf3-3bf4-879c-98c847a3d670.roa File: 708a0fce-faf3-3bf4-879c-98c847a3d670.roa (raw, json) Hash identifier: +d2abPjeTTSAffVN3TYNZqEeKA1gW1hyURpNYBTl38w= Subject key identifier: FC:65:6E:B4:65:1C:C0:C1:86:6E:6B:28:48:AD:27:45:0D:FC:2E:4F Certificate issuer: /CN=552c5335-022a-4a1d-911d-4612dc6e86d7 Certificate serial: 010D0C9F4328584F480D3E98CF666C0EB4CAD080 Authority key identifier: 8C:0C:22:23:DA:2F:CB:87:90:24:13:D4:BC:A7:F7:19:5C:A2:5A:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/708a0fce-faf3-3bf4-879c-98c847a3d670.roa Signing time: Thu 24 Sep 2026 13:00:12 +0000 ROA not before: Thu 24 Sep 2026 13:00:12 +0000 ROA not after: Wed 23 Dec 2026 14:00:12 +0000 asID: 394625 IP address blocks: 2606:d280:8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:48:0d:3e:98:cf:66:6c:0e:b4:ca:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=552c5335-022a-4a1d-911d-4612dc6e86d7 Validity Not Before: Sep 24 13:00:12 2026 GMT Not After : Dec 23 14:00:12 2026 GMT Subject: CN=2a667834-c96b-4ad1-b541-ff437690ba80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:38:b8:5a:fc:c4:94:3c:6e:48:8e:dd:0e:90: c2:0e:59:23:1e:13:44:89:ca:36:49:40:83:c5:cc: 75:b1:4d:91:46:75:ab:f7:d9:24:d7:fe:1a:5e:ab: 8d:cf:7c:ed:0e:e7:f7:c8:ff:a9:1e:b9:35:89:25: 76:92:17:71:4f:d2:b7:ef:bd:55:12:00:1f:fa:70: 34:95:43:27:12:3a:c5:3b:77:34:5c:10:54:43:26: c7:b3:21:18:92:b5:72:69:3f:3e:d5:d6:55:9c:fd: f8:90:b2:9a:d7:e4:4e:59:8a:71:84:3d:e7:c7:a8: a5:68:a7:08:8e:a2:fb:c9:51:95:46:bb:1d:89:b6: 94:3d:b7:5b:82:da:eb:74:0b:d3:b2:93:28:26:dc: ed:9c:bb:c6:b5:07:4b:36:e7:31:9c:70:de:af:67: 67:9e:31:8c:e2:76:7d:6c:7f:23:5b:28:75:ce:3e: b2:75:d2:00:11:5b:ea:3f:bc:89:55:eb:8f:54:f3: d5:05:b5:7c:0a:b8:4b:97:e0:be:df:0f:1e:09:d6: 79:9d:b1:4c:2d:82:90:6a:10:a1:76:38:fa:77:49: 20:46:97:fc:56:65:a0:b0:93:3a:c7:6c:c7:68:be: 72:27:01:cd:f3:29:cd:9d:38:e3:e4:c7:91:9a:45: b0:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:65:6E:B4:65:1C:C0:C1:86:6E:6B:28:48:AD:27:45:0D:FC:2E:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/708a0fce-faf3-3bf4-879c-98c847a3d670.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.crl X509v3 Authority Key Identifier: keyid:8C:0C:22:23:DA:2F:CB:87:90:24:13:D4:BC:A7:F7:19:5C:A2:5A:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer sbgp-ipAddrBlock: critical IPv6: 2606:d280:8::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:e3:55:b4:e8:ec:38:19:25:16:c7:b1:4a:d4:4c:a1:73:e1: 5e:bc:f6:73:ad:6b:1b:a0:12:33:e9:1e:cc:90:3e:9c:85:73: 7f:ed:6c:59:e0:1b:37:8a:bb:37:57:7d:b5:b6:a8:2a:ef:54: e2:c9:41:3c:48:24:ac:6d:ed:06:7d:ca:6b:a5:7c:36:99:b9: d0:d4:86:55:66:88:45:6f:6d:3b:0d:50:b3:39:62:41:31:d5: 0d:4b:b3:3a:eb:55:3e:c8:ed:79:12:42:7a:fa:6d:35:b9:a5: d1:4b:f3:94:81:cb:85:27:81:bd:ca:31:18:a0:d6:e2:5b:79: a4:91:92:7e:ec:a0:b6:60:25:b2:51:0c:2b:3b:e4:77:04:32: d4:07:72:f5:24:fe:63:7a:74:86:1a:3a:e4:ee:10:a6:e7:25: 80:8c:60:a3:84:5b:7c:04:ed:57:0d:ce:97:54:14:05:f1:81: d2:65:70:18:86:88:44:47:10:8a:01:43:bf:5b:bf:70:25:29: d9:e9:ee:8c:80:e8:13:8f:50:44:43:c9:14:9f:86:05:b3:bf: 9c:57:55:24:52:8b:4b:f7:d7:c4:5b:ca:cf:fb:c5:9b:b5:71: 2d:bf:7c:d1:09:a1:c1:56:3f:66:97:71:97:24:19:b2:17:f1: ef:bd:d1:e1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9IDT6Yz2ZsDrTK0IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTUyYzUzMzUtMDIyYS00YTFkLTkxMWQtNDYxMmRjNmU4 NmQ3MB4XDTI2MDkyNDEzMDAxMloXDTI2MTIyMzE0MDAxMlowLzEtMCsGA1UEAxMk MmE2Njc4MzQtYzk2Yi00YWQxLWI1NDEtZmY0Mzc2OTBiYTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTi4WvzElDxuSI7dDpDCDlkjHhNEico2SUCD xcx1sU2RRnWr99kk1/4aXquNz3ztDuf3yP+pHrk1iSV2khdxT9K3771VEgAf+nA0 lUMnEjrFO3c0XBBUQybHsyEYkrVyaT8+1dZVnP34kLKa1+ROWYpxhD3nx6ilaKcI jqL7yVGVRrsdibaUPbdbgtrrdAvTspMoJtztnLvGtQdLNucxnHDer2dnnjGM4nZ9 bH8jWyh1zj6yddIAEVvqP7yJVeuPVPPVBbV8CrhLl+C+3w8eCdZ5nbFMLYKQahCh djj6d0kgRpf8VmWgsJM6x2zHaL5yJwHN8ynNnTjj5MeRmkWwmwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPxlbrRlHMDBhm5rKEitJ0UN/C5PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81NTJj NTMzNS0wMjJhLTRhMWQtOTExZC00NjEyZGM2ZTg2ZDcvNzA4YTBmY2UtZmFmMy0z YmY0LTg3OWMtOThjODQ3YTNkNjcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNTUyYzUzMzUtMDIyYS00YTFkLTkx MWQtNDYxMmRjNmU4NmQ3LzU1MmM1MzM1LTAyMmEtNGExZC05MTFkLTQ2MTJkYzZl ODZkNy5jcmwwHwYDVR0jBBgwFoAUjAwiI9ovy4eQJBPUvKf3GVyiWtwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS81NTJjNTMzNS0wMjJhLTRhMWQtOTExZC00NjEy ZGM2ZTg2ZDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgbSgAAI MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF3jVbTo7DgZJRbHsUrUTKFz4V689nOtaxugEjPpHsyQPpyFc3/t bFngGzeKuzdXfbW2qCrvVOLJQTxIJKxt7QZ9ymulfDaZudDUhlVmiEVvbTsNULM5 YkEx1Q1LszrrVT7I7XkSQnr6bTW5pdFL85SBy4Ungb3KMRig1uJbeaSRkn7soLZg JbJRDCs75HcEMtQHcvUk/mN6dIYaOuTuEKbnJYCMYKOEW3wE7VcNzpdUFAXxgdJl cBiGiERHEIoBQ79bv3AlKdnp7oyA6BOPUERDyRSfhgWzv5xXVSRSi0v318Rbys/7 xZu1cS2/fNEJocFWP2aXcZckGbIX8e+90eE= -----END CERTIFICATE-----Generated at Tue Sep 29 16:42:08 2026 by rpki-client