$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/847f9976-9443-3942-9c96-75b038c927e9.roa File: 847f9976-9443-3942-9c96-75b038c927e9.roa (raw, json) Hash identifier: cMzdzmNSP2BcTnrc7m9xnLPnCVInOkJxZryAbsCc3Ko= Subject key identifier: 16:0C:1B:52:EE:C0:BC:16:41:CD:4F:68:9F:7D:BB:C8:94:AB:06:3C Certificate issuer: /CN=252bff0e-a7f2-4d92-b2ff-24bfa21a7306 Certificate serial: 010D0C9F4328584E059B41D9CBC71F9AC1DB2080 Authority key identifier: 13:34:1F:39:12:25:A3:62:F4:C2:CC:7C:74:9A:15:0B:B9:94:42:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/847f9976-9443-3942-9c96-75b038c927e9.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 393732 IP address blocks: 2620:11d:5001::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9b:41:d9:cb:c7:1f:9a:c1:db:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=252bff0e-a7f2-4d92-b2ff-24bfa21a7306 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=52d5729c-2a3b-4a4c-9bfc-3a31b4dd55d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:34:12:98:5d:18:5c:02:9c:e3:d2:cf:2c:85: 58:61:51:16:ac:66:61:d4:e8:8c:be:4f:61:9e:68: 88:fa:49:c9:c6:8a:44:d2:30:ed:06:b5:5b:bc:7f: de:a5:f8:af:91:14:51:c1:19:3d:c7:ee:4c:51:03: a2:af:e9:61:02:21:bc:b3:06:94:aa:4e:77:6d:28: 08:16:07:1c:87:08:34:bd:ae:a7:b9:c5:2c:aa:d1: 38:aa:18:1f:c4:ad:f0:bc:aa:37:e1:a0:55:76:94: ef:8e:f9:fe:71:54:6c:b8:a6:0e:1f:52:56:87:bd: 34:53:85:0c:a0:e1:17:5f:da:07:3e:22:f7:4f:c6: 91:e7:0c:a6:32:c3:08:5b:17:4b:fa:a5:02:83:b6: 33:e2:6f:3b:e6:d7:68:df:a2:3c:51:4f:e6:6c:ae: d1:a4:b0:0e:85:02:13:fe:ee:77:57:64:2f:4a:eb: ef:f5:63:0c:f5:3b:4b:1f:36:9e:6f:12:72:36:85: f6:73:32:b0:a1:54:1f:5d:e3:f2:4a:cf:8b:95:5d: 75:71:df:8e:9b:1d:4b:e9:b1:1d:20:22:06:6e:5f: 2b:79:92:3c:f6:5e:10:4b:9c:d4:fe:7b:a1:cc:db: da:22:3c:76:17:7d:17:f8:b9:e9:a6:e6:f4:c6:ca: 6c:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:0C:1B:52:EE:C0:BC:16:41:CD:4F:68:9F:7D:BB:C8:94:AB:06:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/847f9976-9443-3942-9c96-75b038c927e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.crl X509v3 Authority Key Identifier: keyid:13:34:1F:39:12:25:A3:62:F4:C2:CC:7C:74:9A:15:0B:B9:94:42:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.cer sbgp-ipAddrBlock: critical IPv6: 2620:11d:5001::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:f5:1d:a7:f3:37:58:18:b6:7f:7b:1a:55:94:45:f0:e3:ac: 9d:90:16:0f:b3:8c:0d:6a:85:54:be:77:d8:8a:84:e3:fd:e3: b7:e7:5e:c2:7b:92:a0:e9:c8:28:36:0b:1a:03:75:cf:d9:02: d7:22:6d:bc:e8:27:29:c6:35:17:78:6f:69:52:7d:3c:38:8f: 6c:69:bf:81:e7:5f:81:a2:10:df:ae:c9:28:ce:43:53:24:c2: 66:d6:d6:ce:17:04:4e:61:7c:0f:f5:90:ec:0e:93:97:b3:6c: fa:8c:41:ff:4e:3e:b6:66:ab:83:d4:fa:4e:11:b9:6b:8e:60: 52:c9:24:ab:e4:a2:23:f1:b1:0f:8d:ac:be:ed:20:0a:44:4b: b6:66:c5:0d:48:6e:4d:ce:06:32:a3:bc:8e:e7:4d:01:c7:68: 4e:68:38:a0:7b:34:29:44:5f:61:39:5d:f7:b1:e2:16:cb:b4: ad:1b:65:ba:f5:ee:f1:df:2a:59:c2:bc:ec:26:9e:1d:aa:d1: be:55:9e:94:83:94:4d:b3:38:1e:f8:9b:1f:af:c4:76:42:c1: ef:36:dd:95:76:d8:8a:9e:5a:43:6c:c9:15:e7:8e:95:f1:cb: 5c:c1:d2:2c:5b:cc:54:ba:ae:3f:ce:3d:0b:bd:a4:f0:9d:f7: 7c:67:4d:50 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4Fm0HZy8cfmsHbIIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjUyYmZmMGUtYTdmMi00ZDkyLWIyZmYtMjRiZmEyMWE3 MzA2MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk NTJkNTcyOWMtMmEzYi00YTRjLTliZmMtM2EzMWI0ZGQ1NWQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjQSmF0YXAKc49LPLIVYYVEWrGZh1OiMvk9h nmiI+knJxopE0jDtBrVbvH/epfivkRRRwRk9x+5MUQOir+lhAiG8swaUqk53bSgI Fgcchwg0va6nucUsqtE4qhgfxK3wvKo34aBVdpTvjvn+cVRsuKYOH1JWh700U4UM oOEXX9oHPiL3T8aR5wymMsMIWxdL+qUCg7Yz4m875tdo36I8UU/mbK7RpLAOhQIT /u53V2QvSuvv9WMM9TtLHzaebxJyNoX2czKwoVQfXePySs+LlV11cd+Omx1L6bEd ICIGbl8reZI89l4QS5zU/nuhzNvaIjx2F30X+Lnppub0xspszQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBYMG1LuwLwWQc1PaJ99u8iUqwY8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yNTJi ZmYwZS1hN2YyLTRkOTItYjJmZi0yNGJmYTIxYTczMDYvODQ3Zjk5NzYtOTQ0My0z OTQyLTljOTYtNzViMDM4YzkyN2U5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjUyYmZmMGUtYTdmMi00ZDkyLWIy ZmYtMjRiZmEyMWE3MzA2LzI1MmJmZjBlLWE3ZjItNGQ5Mi1iMmZmLTI0YmZhMjFh NzMwNi5jcmwwHwYDVR0jBBgwFoAUEzQfORIlo2L0wsx8dJoVC7mUQngwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8yNTJiZmYwZS1hN2YyLTRkOTItYjJmZi0yNGJm YTIxYTczMDYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABHVAB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACv1HafzN1gYtn97GlWURfDjrJ2QFg+zjA1qhVS+d9iKhOP947fn XsJ7kqDpyCg2CxoDdc/ZAtcibbzoJynGNRd4b2lSfTw4j2xpv4HnX4GiEN+uySjO Q1MkwmbW1s4XBE5hfA/1kOwOk5ezbPqMQf9OPrZmq4PU+k4RuWuOYFLJJKvkoiPx sQ+NrL7tIApES7ZmxQ1Ibk3OBjKjvI7nTQHHaE5oOKB7NClEX2E5Xfex4hbLtK0b Zbr17vHfKlnCvOwmnh2q0b5VnpSDlE2zOB74mx+vxHZCwe823ZV22IqeWkNsyRXn jpXxy1zB0ixbzFS6rj/OPQu9pPCd93xnTVA= -----END CERTIFICATE-----Generated at Sat Jun 13 22:47:39 2026 by rpki-client