$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/88ffe6a4-3bbd-346d-b727-667643c36512.roa File: 88ffe6a4-3bbd-346d-b727-667643c36512.roa (raw, json) Hash identifier: 70eGcqm8+IYU2v026ZmP13m2lGmS0h/m2RgKzQY6n80= Subject key identifier: AD:25:73:08:87:2E:70:7C:8F:43:01:73:54:ED:37:23:AE:23:63:8C Certificate issuer: /CN=552c5335-022a-4a1d-911d-4612dc6e86d7 Certificate serial: 010D0C9F4328584C93D1963C7A14764248D87310 Authority key identifier: 8C:0C:22:23:DA:2F:CB:87:90:24:13:D4:BC:A7:F7:19:5C:A2:5A:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/88ffe6a4-3bbd-346d-b727-667643c36512.roa Signing time: Mon 19 Jan 2026 14:00:38 +0000 ROA not before: Mon 19 Jan 2026 14:00:38 +0000 ROA not after: Sun 19 Apr 2026 13:00:38 +0000 asID: 394625 IP address blocks: 2606:d280::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:93:d1:96:3c:7a:14:76:42:48:d8:73:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=552c5335-022a-4a1d-911d-4612dc6e86d7 Validity Not Before: Jan 19 14:00:38 2026 GMT Not After : Apr 19 13:00:38 2026 GMT Subject: CN=bbde264a-afc6-4489-8667-6405f2bcf751 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:10:a9:91:3a:89:47:11:58:c1:f8:de:87:08: 39:65:ba:ed:21:60:e0:6a:f1:d3:32:23:14:47:26: 7b:2d:9f:cb:06:c7:b0:57:4f:05:65:ae:7b:8b:7c: b9:dc:c6:6c:05:74:50:49:99:28:29:ee:9c:57:d7: d2:45:21:15:3d:7c:bf:13:81:6b:6c:64:6d:03:4e: 79:8f:8c:f5:59:4e:93:5a:bb:a3:41:08:04:fc:de: 6d:b7:33:b5:4f:11:1b:5d:59:f7:c5:5a:9b:04:2b: ec:0f:99:a4:24:96:83:a1:68:6d:a8:c9:73:48:c6: c3:01:e2:9d:b2:c9:6d:b1:d0:6f:03:8b:c9:d5:74: 58:71:09:78:7c:b1:cf:94:60:e9:6f:17:7c:24:b6: c9:40:7f:1b:69:11:57:87:7a:1d:c0:52:38:da:d2: 39:46:3e:20:8d:d5:13:1b:11:9b:82:cf:7d:c6:26: 61:05:fd:f8:d3:8d:07:c3:75:6c:81:3e:6b:88:a2: 65:93:d9:bd:d9:89:9c:42:af:e0:ee:e4:67:0c:6a: 7d:ef:d1:22:b0:41:85:58:ec:9f:ec:71:f4:fe:ae: c3:ac:d5:60:66:3f:5f:f5:f2:4a:58:06:fb:c0:f6: f0:cb:3c:25:c4:a4:54:c6:8f:f7:15:6f:e2:9a:52: 44:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:25:73:08:87:2E:70:7C:8F:43:01:73:54:ED:37:23:AE:23:63:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/88ffe6a4-3bbd-346d-b727-667643c36512.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.crl X509v3 Authority Key Identifier: keyid:8C:0C:22:23:DA:2F:CB:87:90:24:13:D4:BC:A7:F7:19:5C:A2:5A:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer sbgp-ipAddrBlock: critical IPv6: 2606:d280::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:34:98:25:14:0e:b7:b0:a3:61:7e:bb:e9:09:f7:fa:43:e3: 08:0b:a2:f2:fa:b2:38:2e:91:ce:31:64:89:a0:9f:a4:0d:97: 00:0c:31:ce:a6:3c:75:77:79:48:cb:4f:84:fd:53:64:de:6f: fa:47:3f:ab:84:35:48:23:fe:40:ed:62:c6:87:ed:21:5c:b1: a5:5e:a9:b9:d4:08:a9:c0:67:c8:89:eb:44:d0:75:91:d4:7e: b4:52:d1:45:a7:2d:93:f7:e1:9d:37:c0:f6:e2:f6:d7:fa:24: f6:ec:2b:7b:da:8a:e6:95:60:51:a4:a6:26:9f:90:93:b8:31: ce:33:7c:2c:15:29:f0:de:39:7c:8a:69:8b:a0:a9:d7:1f:3c: fd:a4:59:81:7b:63:6e:7c:10:37:8c:fb:8b:ab:e3:e6:fe:2d: 9e:53:59:8d:32:66:4b:ac:fb:e0:dd:9a:47:92:3c:be:5b:ff: d9:89:95:7b:bc:09:57:01:8d:80:40:da:03:c4:b4:99:81:fd: 6d:22:c5:b7:e0:95:6a:e7:80:a5:02:78:d7:4b:b3:0e:e5:b9: 84:a0:71:4b:15:67:3e:56:6d:42:66:3c:a2:f9:f3:7b:7a:5b: 66:3e:be:55:cc:27:93:1e:43:8c:24:17:26:f6:a0:d1:97:07: b2:42:78:f2 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEyT0ZY8ehR2QkjYcxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTUyYzUzMzUtMDIyYS00YTFkLTkxMWQtNDYxMmRjNmU4 NmQ3MB4XDTI2MDExOTE0MDAzOFoXDTI2MDQxOTEzMDAzOFowLzEtMCsGA1UEAxMk YmJkZTI2NGEtYWZjNi00NDg5LTg2NjctNjQwNWYyYmNmNzUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhCpkTqJRxFYwfjehwg5ZbrtIWDgavHTMiMU RyZ7LZ/LBsewV08FZa57i3y53MZsBXRQSZkoKe6cV9fSRSEVPXy/E4FrbGRtA055 j4z1WU6TWrujQQgE/N5ttzO1TxEbXVn3xVqbBCvsD5mkJJaDoWhtqMlzSMbDAeKd ssltsdBvA4vJ1XRYcQl4fLHPlGDpbxd8JLbJQH8baRFXh3odwFI42tI5Rj4gjdUT GxGbgs99xiZhBf34040Hw3VsgT5riKJlk9m92YmcQq/g7uRnDGp979EisEGFWOyf 7HH0/q7DrNVgZj9f9fJKWAb7wPbwyzwlxKRUxo/3FW/imlJEoQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFK0lcwiHLnB8j0MBc1TtNyOuI2OMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81NTJj NTMzNS0wMjJhLTRhMWQtOTExZC00NjEyZGM2ZTg2ZDcvODhmZmU2YTQtM2JiZC0z NDZkLWI3MjctNjY3NjQzYzM2NTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNTUyYzUzMzUtMDIyYS00YTFkLTkx MWQtNDYxMmRjNmU4NmQ3LzU1MmM1MzM1LTAyMmEtNGExZC05MTFkLTQ2MTJkYzZl ODZkNy5jcmwwHwYDVR0jBBgwFoAUjAwiI9ovy4eQJBPUvKf3GVyiWtwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS81NTJjNTMzNS0wMjJhLTRhMWQtOTExZC00NjEy ZGM2ZTg2ZDcuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgbSgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBANJglFA63sKNhfrvpCff6Q+MIC6Ly+rI4LpHOMWSJoJ+kDZcADDHO pjx1d3lIy0+E/VNk3m/6Rz+rhDVII/5A7WLGh+0hXLGlXqm51AipwGfIietE0HWR 1H60UtFFpy2T9+GdN8D24vbX+iT27Ct72ormlWBRpKYmn5CTuDHOM3wsFSnw3jl8 immLoKnXHzz9pFmBe2NufBA3jPuLq+Pm/i2eU1mNMmZLrPvg3ZpHkjy+W//ZiZV7 vAlXAY2AQNoDxLSZgf1tIsW34JVq54ClAnjXS7MO5bmEoHFLFWc+Vm1CZjyi+fN7 eltmPr5VzCeTHkOMJBcm9qDRlweyQnjy -----END CERTIFICATE-----Generated at Mon Mar 2 19:08:09 2026 by rpki-client