$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b/aaf7d372-4189-3790-9dca-61a125a2f0df.roa File: aaf7d372-4189-3790-9dca-61a125a2f0df.roa (raw, json) Hash identifier: aL21hNMWdZY8cFDgRvY/I7BRcswFqFs/NP7TROkXvDg= Subject key identifier: 15:92:ED:0F:96:A2:FD:7D:BF:73:F8:D7:49:5D:7F:1C:43:68:5D:F0 Certificate issuer: /CN=23fa747f-0e53-4654-913d-ebe4ae8f453b Certificate serial: 010D0C9F4328584B970CE89AB19CC08996DB2980 Authority key identifier: 4B:07:70:44:0A:64:F7:A4:10:4A:2A:58:81:04:85:C1:C9:B1:EE:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b/aaf7d372-4189-3790-9dca-61a125a2f0df.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 395184 IP address blocks: 2620:0:950::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b/23fa747f-0e53-4654-913d-ebe4ae8f453b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b/23fa747f-0e53-4654-913d-ebe4ae8f453b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:e8:9a:b1:9c:c0:89:96:db:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23fa747f-0e53-4654-913d-ebe4ae8f453b Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=67200cfd-42d5-4cd8-8aee-7242536baa07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:dc:46:9c:80:0c:3e:e3:60:6b:68:98:1e:d6: 62:1b:8d:c4:d1:16:af:0a:94:68:f8:12:8a:94:a6: 3c:e7:b2:24:30:b9:e8:72:6e:47:40:b9:bf:55:c2: 91:a5:e0:63:31:6d:f8:7e:c8:4b:e1:f3:74:13:5a: d1:9a:85:eb:62:f3:bc:46:91:57:2c:82:48:24:e8: 4e:8e:ea:9c:cb:c3:3d:89:eb:73:f6:34:0a:24:8f: e9:e4:c7:57:4c:e1:12:63:32:fd:38:c4:e3:5d:c1: 17:35:49:98:b0:05:c1:6b:64:2a:8a:29:8a:2f:8e: e8:c7:63:c0:86:c8:d8:be:94:65:99:30:7b:aa:e4: 2a:7e:49:f3:26:eb:6f:93:fe:eb:b8:1c:5b:a1:f8: 8b:5e:49:ab:0d:bb:96:d2:8a:8c:05:7e:cb:30:08: e7:3e:a6:f7:73:9a:78:1d:1f:43:06:bc:9d:e8:ca: 24:cc:45:55:db:b8:6b:76:7a:73:19:68:51:5e:25: 8d:e0:7e:a0:87:23:49:91:4f:bd:b7:ab:7c:19:44: e8:ea:a9:b4:6d:9b:1f:b1:93:36:47:ad:8d:51:ac: 7c:2a:15:3a:e4:56:fa:a7:bf:8f:30:16:20:64:74: 68:13:c1:ac:df:a2:d7:3a:63:7a:34:f9:70:34:ca: 0f:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:92:ED:0F:96:A2:FD:7D:BF:73:F8:D7:49:5D:7F:1C:43:68:5D:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b/aaf7d372-4189-3790-9dca-61a125a2f0df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b/23fa747f-0e53-4654-913d-ebe4ae8f453b.crl X509v3 Authority Key Identifier: keyid:4B:07:70:44:0A:64:F7:A4:10:4A:2A:58:81:04:85:C1:C9:B1:EE:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b.cer sbgp-ipAddrBlock: critical IPv6: 2620:0:950::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:ac:af:33:10:65:7c:a0:8d:79:0f:60:69:54:ee:e8:f9:cd: 3e:a3:72:79:14:1b:b7:e0:1c:49:c9:36:0f:c9:aa:f3:58:cc: c1:4f:81:3a:e2:3b:18:8e:5e:82:95:e8:da:3f:38:b8:f9:4b: 23:7c:72:87:eb:db:a9:94:de:84:67:97:55:4c:d6:28:8e:70: f5:9f:4a:94:d6:0b:7c:96:9c:d6:14:61:ce:c1:53:8e:5e:9a: e0:34:ed:f4:8a:1d:4c:a4:56:87:d1:ed:17:7b:ae:a0:41:3b: 2a:24:74:51:e1:9d:79:5f:37:75:92:6f:fd:37:34:b6:5e:74: c1:11:ef:45:ed:d7:4c:4c:73:e4:2c:71:30:8a:5f:e6:24:8c: c5:97:15:7b:e7:0c:aa:0b:f4:1d:66:60:5d:19:e8:2c:51:8e: 42:f0:28:1a:3d:74:22:d5:75:ee:71:bc:93:86:85:d4:b1:6f: 26:94:71:45:07:cd:a4:19:35:33:c4:87:3f:60:87:c4:09:f9: bb:d0:d8:c4:52:be:47:6b:56:ed:d2:e7:32:cf:3b:89:5d:86: 8c:0e:29:57:cf:8b:56:f5:f9:d2:4b:70:d3:e0:8d:7e:af:2f: 47:a1:3f:33:bd:61:c0:2f:93:15:ef:95:a8:2e:5f:ea:f1:ac: 69:cc:2f:db -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuXDOiasZzAiZbbKYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNmYTc0N2YtMGU1My00NjU0LTkxM2QtZWJlNGFlOGY0 NTNiMB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk NjcyMDBjZmQtNDJkNS00Y2Q4LThhZWUtNzI0MjUzNmJhYTA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdxGnIAMPuNga2iYHtZiG43E0RavCpRo+BKK lKY857IkMLnocm5HQLm/VcKRpeBjMW34fshL4fN0E1rRmoXrYvO8RpFXLIJIJOhO juqcy8M9ietz9jQKJI/p5MdXTOESYzL9OMTjXcEXNUmYsAXBa2QqiimKL47ox2PA hsjYvpRlmTB7quQqfknzJutvk/7ruBxbofiLXkmrDbuW0oqMBX7LMAjnPqb3c5p4 HR9DBryd6MokzEVV27hrdnpzGWhRXiWN4H6ghyNJkU+9t6t8GUTo6qm0bZsfsZM2 R62NUax8KhU65Fb6p7+PMBYgZHRoE8Gs36LXOmN6NPlwNMoPiQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBWS7Q+Wov19v3P410ldfxxDaF3wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Zh NzQ3Zi0wZTUzLTQ2NTQtOTEzZC1lYmU0YWU4ZjQ1M2IvYWFmN2QzNzItNDE4OS0z NzkwLTlkY2EtNjFhMTI1YTJmMGRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNmYTc0N2YtMGU1My00NjU0LTkx M2QtZWJlNGFlOGY0NTNiLzIzZmE3NDdmLTBlNTMtNDY1NC05MTNkLWViZTRhZThm NDUzYi5jcmwwHwYDVR0jBBgwFoAUSwdwRApk96QQSipYgQSFwcmx7kUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2ZhNzQ3Zi0wZTUzLTQ2NTQtOTEzZC1lYmU0 YWU4ZjQ1M2IuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAAAlQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHmsrzMQZXygjXkPYGlU7uj5zT6jcnkUG7fgHEnJNg/JqvNYzMFP gTriOxiOXoKV6No/OLj5SyN8cofr26mU3oRnl1VM1iiOcPWfSpTWC3yWnNYUYc7B U45emuA07fSKHUykVofR7Rd7rqBBOyokdFHhnXlfN3WSb/03NLZedMER70Xt10xM c+QscTCKX+YkjMWXFXvnDKoL9B1mYF0Z6CxRjkLwKBo9dCLVde5xvJOGhdSxbyaU cUUHzaQZNTPEhz9gh8QJ+bvQ2MRSvkdrVu3S5zLPO4ldhowOKVfPi1b1+dJLcNPg jX6vL0ehPzO9YcAvkxXvlaguX+rxrGnML9s= -----END CERTIFICATE-----Generated at Sun Nov 2 12:47:49 2025 by rpki-client