$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6952cc0b-a365-40b8-a8b3-43408c4c6fe1/9e7fe432-a3de-33c1-ab67-17713d7b8d0a.roa File: 9e7fe432-a3de-33c1-ab67-17713d7b8d0a.roa (raw, json) Hash identifier: R4KTI0UA+Dq68w4V+le6CVgJYP9pg4COVF6+7szpWgU= Subject key identifier: A2:FA:49:85:64:29:A4:1A:1E:65:1F:4D:E2:4F:19:BD:08:DB:8C:14 Certificate issuer: /CN=6952cc0b-a365-40b8-a8b3-43408c4c6fe1 Certificate serial: 010D0C9F4328584D5B4FA195BAC37FB71C928300 Authority key identifier: D4:09:5B:4E:B5:FE:37:2E:F3:84:76:17:06:1E:22:F5:17:9C:0A:84 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6952cc0b-a365-40b8-a8b3-43408c4c6fe1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6952cc0b-a365-40b8-a8b3-43408c4c6fe1/9e7fe432-a3de-33c1-ab67-17713d7b8d0a.roa Signing time: Wed 01 Apr 2026 01:00:23 +0000 ROA not before: Wed 01 Apr 2026 01:00:23 +0000 ROA not after: Tue 30 Jun 2026 01:00:23 +0000 asID: 11062 IP address blocks: 162.252.36.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6952cc0b-a365-40b8-a8b3-43408c4c6fe1/6952cc0b-a365-40b8-a8b3-43408c4c6fe1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6952cc0b-a365-40b8-a8b3-43408c4c6fe1/6952cc0b-a365-40b8-a8b3-43408c4c6fe1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6952cc0b-a365-40b8-a8b3-43408c4c6fe1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5b:4f:a1:95:ba:c3:7f:b7:1c:92:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6952cc0b-a365-40b8-a8b3-43408c4c6fe1 Validity Not Before: Apr 1 01:00:23 2026 GMT Not After : Jun 30 01:00:23 2026 GMT Subject: CN=7c2b584a-03a1-4b2f-a802-20f47dce9962 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:71:0d:45:74:3b:d3:97:07:07:32:33:04:90: f5:a0:d0:4c:e5:87:30:06:c5:6e:7e:78:5b:74:27: 20:42:da:b5:cf:11:ca:b0:f5:a2:c3:db:50:85:61: d4:4b:bf:28:cb:a1:81:14:df:9b:d5:da:0f:ad:0b: 9d:21:91:8f:4d:77:6d:ee:a3:da:6b:2b:54:1c:83: 9c:0d:16:79:80:26:41:8e:44:a8:8b:87:7f:4d:02: 36:45:d9:a8:fa:f2:b7:b2:88:37:23:4b:01:54:31: e0:4f:40:a1:ad:b9:c8:eb:bf:fd:b2:c9:b8:3a:1e: 2f:ef:82:f6:b6:5e:b4:17:6a:5a:9d:67:94:d4:a1: 63:ba:f5:80:76:30:1d:56:48:66:7c:82:62:2b:f5: 3f:e9:67:5c:d6:9a:92:a8:0c:e5:87:7f:5f:b9:3c: 5d:b7:45:09:ea:69:61:13:d7:eb:b7:da:c5:4b:3e: 38:08:87:b2:47:9b:55:ff:5a:1d:28:60:9b:00:26: 8b:df:3a:97:89:f6:64:55:7f:bf:60:d0:e0:33:5d: b5:7f:a7:67:c4:7a:d1:26:4e:58:81:34:9a:89:4e: 2b:bf:b1:66:0f:15:c2:13:34:4f:be:c9:9c:b3:57: e0:7f:b3:32:79:9d:6c:a2:b3:63:40:af:63:49:cf: 95:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:FA:49:85:64:29:A4:1A:1E:65:1F:4D:E2:4F:19:BD:08:DB:8C:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6952cc0b-a365-40b8-a8b3-43408c4c6fe1/9e7fe432-a3de-33c1-ab67-17713d7b8d0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6952cc0b-a365-40b8-a8b3-43408c4c6fe1/6952cc0b-a365-40b8-a8b3-43408c4c6fe1.crl X509v3 Authority Key Identifier: keyid:D4:09:5B:4E:B5:FE:37:2E:F3:84:76:17:06:1E:22:F5:17:9C:0A:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6952cc0b-a365-40b8-a8b3-43408c4c6fe1.cer sbgp-ipAddrBlock: critical IPv4: 162.252.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:d5:0e:d8:da:2f:1d:62:1c:ec:d1:df:c1:eb:98:00:59:7f: 36:20:6c:de:1e:b9:b6:77:a0:73:0e:1f:e6:f0:a5:77:0b:a8: d1:de:f4:da:c1:5a:5b:1e:c2:18:72:7b:50:5c:44:5a:0c:a3: 8d:72:cf:2d:0e:f2:96:52:da:78:e0:de:94:44:67:af:7b:a5: 88:d3:dc:3a:5a:03:5a:87:78:30:d3:62:01:ef:ac:f3:55:f7: 74:78:67:78:46:6c:cf:4d:f2:1f:e0:20:27:9a:03:3f:d4:77: ba:03:52:e9:cc:12:b8:25:24:14:1f:2c:d2:0f:43:16:7e:ae: 27:64:e3:df:a8:8e:9c:7a:63:8e:7f:1b:3e:38:9b:00:b0:41: e0:d2:19:ac:fb:b5:dd:59:ab:96:71:58:02:19:02:a0:07:b3: 9b:7e:e2:19:ed:22:10:80:9f:c5:f8:94:6a:2b:8f:a4:13:ba: 02:2a:50:f3:bc:62:e9:13:fe:b3:78:7f:2c:e1:25:7c:68:69: 42:35:2d:5c:2f:f3:8c:81:45:86:d0:d4:3a:d9:24:bb:ca:4d: d6:ad:f3:bb:53:f2:8e:bd:85:6d:8c:31:6f:0f:41:2b:90:23: ac:06:9c:32:d7:fd:06:57:b2:fe:df:33:ac:1f:2c:51:0c:0e: 73:39:b5:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1bT6GVusN/txySgwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjk1MmNjMGItYTM2NS00MGI4LWE4YjMtNDM0MDhjNGM2 ZmUxMB4XDTI2MDQwMTAxMDAyM1oXDTI2MDYzMDAxMDAyM1owLzEtMCsGA1UEAxMk N2MyYjU4NGEtMDNhMS00YjJmLWE4MDItMjBmNDdkY2U5OTYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3ENRXQ705cHBzIzBJD1oNBM5YcwBsVufnhb dCcgQtq1zxHKsPWiw9tQhWHUS78oy6GBFN+b1doPrQudIZGPTXdt7qPaaytUHIOc DRZ5gCZBjkSoi4d/TQI2Rdmo+vK3sog3I0sBVDHgT0ChrbnI67/9ssm4Oh4v74L2 tl60F2panWeU1KFjuvWAdjAdVkhmfIJiK/U/6Wdc1pqSqAzlh39fuTxdt0UJ6mlh E9frt9rFSz44CIeyR5tV/1odKGCbACaL3zqXifZkVX+/YNDgM121f6dnxHrRJk5Y gTSaiU4rv7FmDxXCEzRPvsmcs1fgf7MyeZ1sorNjQK9jSc+VYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKL6SYVkKaQaHmUfTeJPGb0I24wUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82OTUy Y2MwYi1hMzY1LTQwYjgtYThiMy00MzQwOGM0YzZmZTEvOWU3ZmU0MzItYTNkZS0z M2MxLWFiNjctMTc3MTNkN2I4ZDBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNjk1MmNjMGItYTM2NS00MGI4LWE4 YjMtNDM0MDhjNGM2ZmUxLzY5NTJjYzBiLWEzNjUtNDBiOC1hOGIzLTQzNDA4YzRj NmZlMS5jcmwwHwYDVR0jBBgwFoAU1AlbTrX+Ny7zhHYXBh4i9RecCoQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82OTUyY2MwYi1hMzY1LTQwYjgtYThiMy00MzQw OGM0YzZmZTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCovwkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADXVDtjaLx1iHOzR38HrmABZfzYgbN4eubZ3oHMOH+bwpXcLqNHe9NrB Wlsewhhye1BcRFoMo41yzy0O8pZS2njg3pREZ697pYjT3DpaA1qHeDDTYgHvrPNV 93R4Z3hGbM9N8h/gICeaAz/Ud7oDUunMErglJBQfLNIPQxZ+ridk49+ojpx6Y45/ Gz44mwCwQeDSGaz7td1Zq5ZxWAIZAqAHs5t+4hntIhCAn8X4lGorj6QTugIqUPO8 YukT/rN4fyzhJXxoaUI1LVwv84yBRYbQ1DrZJLvKTdat87tT8o69hW2MMW8PQSuQ I6wGnDLX/QZXsv7fM6wfLFEMDnM5taQ= -----END CERTIFICATE-----Generated at Fri Apr 17 18:17:33 2026 by rpki-client