$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/88ffe6a4-3bbd-346d-b727-667643c36512.roa File: 88ffe6a4-3bbd-346d-b727-667643c36512.roa (raw, json) Hash identifier: 9L0ELuidT67AklyshWEwpawRsW1eqJ5ZLokr+PyNgRo= Subject key identifier: E2:4E:95:87:63:91:1E:4F:4D:B0:3E:67:80:33:06:41:FF:03:77:F6 Certificate issuer: /CN=552c5335-022a-4a1d-911d-4612dc6e86d7 Certificate serial: 010D0C9F4328584D746FC119B7FC79D6811D4960 Authority key identifier: 8C:0C:22:23:DA:2F:CB:87:90:24:13:D4:BC:A7:F7:19:5C:A2:5A:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/88ffe6a4-3bbd-346d-b727-667643c36512.roa Signing time: Fri 10 Apr 2026 01:00:24 +0000 ROA not before: Fri 10 Apr 2026 01:00:24 +0000 ROA not after: Thu 09 Jul 2026 01:00:24 +0000 asID: 394625 IP address blocks: 2606:d280::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:74:6f:c1:19:b7:fc:79:d6:81:1d:49:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=552c5335-022a-4a1d-911d-4612dc6e86d7 Validity Not Before: Apr 10 01:00:24 2026 GMT Not After : Jul 9 01:00:24 2026 GMT Subject: CN=6a43cdd7-85c5-48e9-8553-5a4c37bf085c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:53:fd:a6:9a:54:92:81:4e:04:b2:61:88:f3: ce:b8:ea:0b:cf:df:a2:53:91:89:29:c2:47:43:fd: 64:e6:e7:1e:16:92:c5:59:10:dd:2c:25:1f:2b:3f: 69:27:c0:85:72:5b:35:f9:36:d2:87:cf:66:5c:41: cc:f0:4c:4a:0d:a2:da:87:74:90:3f:65:fc:34:47: 4b:30:21:38:aa:f6:fb:9d:09:f7:f5:91:5f:69:41: f0:f6:3c:83:66:25:cc:b9:78:77:35:fa:dc:34:f1: 26:33:79:da:8b:d7:3d:f6:75:4c:e0:ba:e9:3b:d5: 21:e1:b7:7e:20:14:41:c1:65:1b:75:fd:89:ae:ed: f0:4e:9d:25:01:18:d7:fd:2c:d5:c7:b8:75:96:53: 5e:e3:9d:b0:6e:97:dd:22:d3:0b:6d:95:b5:e2:2d: d3:c1:bc:51:bf:86:9d:6d:ee:33:2b:43:d1:0a:6e: 98:99:b7:48:ef:c1:e5:53:ae:74:c7:3b:fc:a1:82: 6b:5c:42:ae:d1:ae:c2:8c:91:ee:75:e0:2a:51:04: c5:cd:9f:e3:e8:e0:b7:20:95:3b:92:24:33:a9:b7: 9c:0b:05:e7:70:fc:ce:d4:2f:36:29:81:7e:15:f7: 1b:f5:79:29:56:75:76:92:20:97:c5:ff:77:05:17: 80:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:4E:95:87:63:91:1E:4F:4D:B0:3E:67:80:33:06:41:FF:03:77:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/88ffe6a4-3bbd-346d-b727-667643c36512.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.crl X509v3 Authority Key Identifier: keyid:8C:0C:22:23:DA:2F:CB:87:90:24:13:D4:BC:A7:F7:19:5C:A2:5A:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer sbgp-ipAddrBlock: critical IPv6: 2606:d280::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:ac:a8:57:d7:60:4a:8a:e5:89:14:2a:d9:bf:f9:ff:32:c0: 4e:d1:6d:a9:0d:f9:c2:f4:a3:dd:40:d8:06:4a:aa:76:7e:f0: fe:45:94:99:62:f4:84:05:28:dc:04:7e:24:a3:03:09:4d:03: c4:b0:35:1c:33:6d:04:06:ec:5e:1e:b4:cc:8d:5d:2e:50:ff: 03:39:a2:7e:51:78:2f:ae:09:ec:d7:65:b2:be:1d:01:45:27: 13:a8:d5:9e:03:ab:29:3f:45:26:6c:33:2d:b3:37:0a:36:b2: f6:c5:0e:10:bc:a5:d6:52:e2:0f:a6:5b:15:72:94:21:00:fe: 1a:d9:4c:41:76:79:42:a5:e0:a1:c7:00:63:34:85:90:23:d6: 00:c0:3a:d0:34:02:a3:0d:b6:7b:3d:45:cd:95:8a:73:41:c4: 77:9a:28:7b:30:97:80:5b:a4:83:96:ed:6f:55:3c:9e:ee:43: 3b:6b:2e:46:7c:73:59:cf:14:72:a1:a1:d0:b7:b1:40:7d:48: 8b:f1:98:2f:42:b5:1e:58:20:5b:c5:2a:eb:4b:09:23:6b:7a: 93:ad:13:10:8f:5d:ba:d5:25:0f:5b:57:57:a9:79:ac:c1:d0: 07:cc:99:c5:53:10:dd:9f:76:36:8b:3b:c0:fd:97:02:68:c0: ce:95:6b:44 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE10b8EZt/x51oEdSWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTUyYzUzMzUtMDIyYS00YTFkLTkxMWQtNDYxMmRjNmU4 NmQ3MB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk NmE0M2NkZDctODVjNS00OGU5LTg1NTMtNWE0YzM3YmYwODVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlP9pppUkoFOBLJhiPPOuOoLz9+iU5GJKcJH Q/1k5uceFpLFWRDdLCUfKz9pJ8CFcls1+TbSh89mXEHM8ExKDaLah3SQP2X8NEdL MCE4qvb7nQn39ZFfaUHw9jyDZiXMuXh3NfrcNPEmM3nai9c99nVM4LrpO9Uh4bd+ IBRBwWUbdf2Jru3wTp0lARjX/SzVx7h1llNe452wbpfdItMLbZW14i3TwbxRv4ad be4zK0PRCm6YmbdI78HlU650xzv8oYJrXEKu0a7CjJHudeAqUQTFzZ/j6OC3IJU7 kiQzqbecCwXncPzO1C82KYF+Ffcb9XkpVnV2kiCXxf93BReAWQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOJOlYdjkR5PTbA+Z4AzBkH/A3f2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81NTJj NTMzNS0wMjJhLTRhMWQtOTExZC00NjEyZGM2ZTg2ZDcvODhmZmU2YTQtM2JiZC0z NDZkLWI3MjctNjY3NjQzYzM2NTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNTUyYzUzMzUtMDIyYS00YTFkLTkx MWQtNDYxMmRjNmU4NmQ3LzU1MmM1MzM1LTAyMmEtNGExZC05MTFkLTQ2MTJkYzZl ODZkNy5jcmwwHwYDVR0jBBgwFoAUjAwiI9ovy4eQJBPUvKf3GVyiWtwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS81NTJjNTMzNS0wMjJhLTRhMWQtOTExZC00NjEy ZGM2ZTg2ZDcuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgbSgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAtrKhX12BKiuWJFCrZv/n/MsBO0W2pDfnC9KPdQNgGSqp2fvD+RZSZ YvSEBSjcBH4kowMJTQPEsDUcM20EBuxeHrTMjV0uUP8DOaJ+UXgvrgns12Wyvh0B RScTqNWeA6spP0UmbDMtszcKNrL2xQ4QvKXWUuIPplsVcpQhAP4a2UxBdnlCpeCh xwBjNIWQI9YAwDrQNAKjDbZ7PUXNlYpzQcR3mih7MJeAW6SDlu1vVTye7kM7ay5G fHNZzxRyoaHQt7FAfUiL8ZgvQrUeWCBbxSrrSwkja3qTrRMQj1261SUPW1dXqXms wdAHzJnFUxDdn3Y2izvA/ZcCaMDOlWtE -----END CERTIFICATE-----Generated at Fri Apr 17 19:05:58 2026 by rpki-client