$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/a069ba98-ec0f-3135-a0ad-1e8e81e9c0b3.roa File: a069ba98-ec0f-3135-a0ad-1e8e81e9c0b3.roa (raw, json) Hash identifier: OhO/Kt0Q+uAyPaKvC3Hxa5UaxArkDp+EPT9wKW65qfg= Subject key identifier: C5:E3:F3:0B:70:CF:E5:90:D2:3F:4E:AC:B2:1C:44:F6:DC:F4:F1:60 Certificate issuer: /CN=252bff0e-a7f2-4d92-b2ff-24bfa21a7306 Certificate serial: 010D0C9F4328584F4973D79D5F64950389450E80 Authority key identifier: 13:34:1F:39:12:25:A3:62:F4:C2:CC:7C:74:9A:15:0B:B9:94:42:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/a069ba98-ec0f-3135-a0ad-1e8e81e9c0b3.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 393732 IP address blocks: 2620:11d:5000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:d7:9d:5f:64:95:03:89:45:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=252bff0e-a7f2-4d92-b2ff-24bfa21a7306 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=97e174af-56a6-4eae-8bc1-b30ca141ca12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:cd:fb:12:c4:02:30:87:51:e2:42:75:c0:07: 92:54:31:19:a2:f7:99:38:9a:4f:d0:d3:da:f2:9a: fc:09:57:ad:77:b1:bf:c3:97:0b:df:49:a3:c7:d2: f9:c8:5e:07:7d:4d:ab:f7:b5:cf:f9:a6:01:e5:65: 27:0e:95:48:7e:c0:ce:11:7f:d9:98:b9:fc:7a:5b: 30:21:59:02:a8:63:e8:52:37:73:51:35:3f:10:9c: a4:2a:8b:40:f5:46:f0:93:e0:f2:72:4a:17:1d:1e: 7e:01:52:8e:c5:ca:1f:75:97:d3:0f:f0:19:a5:93: 7d:02:55:07:f0:f4:24:7f:3a:07:5c:8b:76:01:04: 8e:c6:c9:36:1d:81:ee:63:42:0a:a6:d9:69:b1:dd: 4b:83:38:bb:ab:f8:1a:1f:71:77:cb:37:94:32:fe: 11:f4:72:8a:a0:74:0b:ba:32:74:bc:a6:04:1b:d9: 31:3b:af:c8:e4:9f:59:5d:ac:77:33:9b:51:4a:fc: 33:80:a4:7b:5a:b2:97:f2:c9:2c:ba:9d:a5:6f:41: 8e:0e:bd:e3:9a:e2:12:fb:06:2b:ea:7f:e8:6e:30: d8:35:c6:98:84:2c:2c:50:89:bc:fe:55:c8:a5:21: db:5d:77:11:0e:eb:82:94:3d:e3:39:9c:bd:36:9f: c6:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:E3:F3:0B:70:CF:E5:90:D2:3F:4E:AC:B2:1C:44:F6:DC:F4:F1:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/a069ba98-ec0f-3135-a0ad-1e8e81e9c0b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.crl X509v3 Authority Key Identifier: keyid:13:34:1F:39:12:25:A3:62:F4:C2:CC:7C:74:9A:15:0B:B9:94:42:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.cer sbgp-ipAddrBlock: critical IPv6: 2620:11d:5000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:02:0d:1a:8d:5f:9f:40:70:27:86:20:16:19:2b:f7:57:37: f5:94:a3:3d:8b:ba:a5:41:81:0c:7a:3d:e2:23:a2:70:39:2c: 5e:27:ae:4c:cc:9f:2a:94:2a:3a:8f:5c:5d:65:dd:18:5c:39: ad:b5:0f:99:05:5b:1b:f8:f5:86:3d:51:97:5e:3a:3d:e9:d7: 01:42:aa:5a:c4:1b:21:58:5d:05:0b:79:9d:7c:b2:fc:25:68: d5:2a:9c:31:26:59:e3:47:89:c2:73:0c:c1:b6:fe:f6:d5:ad: 66:a9:a6:fe:f2:a5:4b:5c:b9:ae:b7:66:c6:c4:80:bc:18:c6: 7a:83:8a:7a:74:09:5c:53:85:8a:b8:df:15:8e:83:5c:31:15: a1:e6:df:26:83:9d:03:64:27:78:3a:7f:c6:a7:51:eb:d9:9d: aa:79:2c:ef:e6:52:f8:86:17:d5:5f:3b:2f:76:58:66:08:c3: ea:78:b4:c9:3a:50:bd:31:b8:79:6a:b9:33:fb:57:82:d6:40: 37:5d:c0:7b:f0:90:42:98:29:f5:a2:8c:03:e6:b2:71:19:47: 97:b7:5a:ac:49:1b:11:b0:55:92:67:2f:fe:87:7a:10:47:03: 96:1c:10:fb:cf:e9:b6:c9:b2:64:35:bb:80:da:08:e5:3c:d4: 9c:4e:5d:ff -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Jc9edX2SVA4lFDoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjUyYmZmMGUtYTdmMi00ZDkyLWIyZmYtMjRiZmEyMWE3 MzA2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OTdlMTc0YWYtNTZhNi00ZWFlLThiYzEtYjMwY2ExNDFjYTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoc37EsQCMIdR4kJ1wAeSVDEZoveZOJpP0NPa 8pr8CVetd7G/w5cL30mjx9L5yF4HfU2r97XP+aYB5WUnDpVIfsDOEX/ZmLn8elsw IVkCqGPoUjdzUTU/EJykKotA9Ubwk+DyckoXHR5+AVKOxcofdZfTD/AZpZN9AlUH 8PQkfzoHXIt2AQSOxsk2HYHuY0IKptlpsd1Lgzi7q/gaH3F3yzeUMv4R9HKKoHQL ujJ0vKYEG9kxO6/I5J9ZXax3M5tRSvwzgKR7WrKX8sksup2lb0GODr3jmuIS+wYr 6n/objDYNcaYhCwsUIm8/lXIpSHbXXcRDuuClD3jOZy9Np/GYQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMXj8wtwz+WQ0j9OrLIcRPbc9PFgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yNTJi ZmYwZS1hN2YyLTRkOTItYjJmZi0yNGJmYTIxYTczMDYvYTA2OWJhOTgtZWMwZi0z MTM1LWEwYWQtMWU4ZTgxZTljMGIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjUyYmZmMGUtYTdmMi00ZDkyLWIy ZmYtMjRiZmEyMWE3MzA2LzI1MmJmZjBlLWE3ZjItNGQ5Mi1iMmZmLTI0YmZhMjFh NzMwNi5jcmwwHwYDVR0jBBgwFoAUEzQfORIlo2L0wsx8dJoVC7mUQngwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8yNTJiZmYwZS1hN2YyLTRkOTItYjJmZi0yNGJm YTIxYTczMDYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABHVAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH8CDRqNX59AcCeGIBYZK/dXN/WUoz2LuqVBgQx6PeIjonA5LF4n rkzMnyqUKjqPXF1l3RhcOa21D5kFWxv49YY9UZdeOj3p1wFCqlrEGyFYXQULeZ18 svwlaNUqnDEmWeNHicJzDMG2/vbVrWappv7ypUtcua63ZsbEgLwYxnqDinp0CVxT hYq43xWOg1wxFaHm3yaDnQNkJ3g6f8anUevZnap5LO/mUviGF9VfOy92WGYIw+p4 tMk6UL0xuHlquTP7V4LWQDddwHvwkEKYKfWijAPmsnEZR5e3WqxJGxGwVZJnL/6H ehBHA5YcEPvP6bbJsmQ1u4DaCOU81JxOXf8= -----END CERTIFICATE-----Generated at Fri Sep 25 14:18:14 2026 by rpki-client