$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b/aaf7d372-4189-3790-9dca-61a125a2f0df.roa File: aaf7d372-4189-3790-9dca-61a125a2f0df.roa (raw, json) Hash identifier: c1nczQsgC2ZGICGw4M/sgu8W0zS4cFd5gISOJ5u0lSU= Subject key identifier: B8:E2:7D:89:E7:71:F4:A9:E4:8D:BB:38:68:42:F0:AE:7C:17:F0:80 Certificate issuer: /CN=23fa747f-0e53-4654-913d-ebe4ae8f453b Certificate serial: 010D0C9F4328584E376474815A31B3CECF2BE780 Authority key identifier: 4B:07:70:44:0A:64:F7:A4:10:4A:2A:58:81:04:85:C1:C9:B1:EE:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b/aaf7d372-4189-3790-9dca-61a125a2f0df.roa Signing time: Thu 18 Jun 2026 21:00:12 +0000 ROA not before: Thu 18 Jun 2026 21:00:12 +0000 ROA not after: Wed 16 Sep 2026 21:00:12 +0000 asID: 395184 IP address blocks: 2620:0:950::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b/23fa747f-0e53-4654-913d-ebe4ae8f453b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b/23fa747f-0e53-4654-913d-ebe4ae8f453b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:37:64:74:81:5a:31:b3:ce:cf:2b:e7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23fa747f-0e53-4654-913d-ebe4ae8f453b Validity Not Before: Jun 18 21:00:12 2026 GMT Not After : Sep 16 21:00:12 2026 GMT Subject: CN=1190e6eb-8957-47c0-bfae-46e1d3fc44e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:bb:ee:9b:44:26:44:57:bc:6a:e4:e4:17:d9: a9:cb:5c:21:9c:a2:e1:ff:4b:a1:9c:9c:53:9f:71: ea:b1:39:b2:ee:15:fc:79:a7:66:0e:08:f0:80:08: 84:24:23:1e:23:de:f9:ff:61:e5:33:c8:16:da:9b: 48:14:11:4a:52:40:67:6d:88:fd:5f:9f:c4:13:fa: 9e:4a:c9:47:d4:fa:df:82:18:e2:5e:7b:ba:ba:05: cf:d2:70:45:fc:35:5a:9c:30:7b:08:3d:35:cd:2b: d2:39:a1:3f:07:58:ed:d1:b4:aa:4f:67:e5:f8:0a: e8:83:fe:cd:21:47:98:0f:2e:79:9d:5a:b0:00:f1: b8:2d:c8:74:89:73:de:79:49:9a:d4:9e:bb:af:fd: e9:8c:d4:93:17:7c:7c:3d:61:52:c9:1d:82:47:13: ea:be:25:29:24:61:0b:86:0c:e8:b6:b4:6e:ef:8b: 1f:06:bd:cb:70:cc:2f:e5:45:44:5a:1a:d6:31:e7: 49:b3:79:cd:b0:b9:ec:cb:dd:0d:4c:8f:2c:a4:96: cc:e9:36:dc:89:71:a0:6d:95:ba:89:21:cd:85:be: d3:4b:21:82:27:3f:fd:82:ad:a2:5c:93:e0:bb:cc: b6:16:bb:36:c2:03:6e:1d:7c:6a:8c:b4:5f:1c:4d: 36:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:E2:7D:89:E7:71:F4:A9:E4:8D:BB:38:68:42:F0:AE:7C:17:F0:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b/aaf7d372-4189-3790-9dca-61a125a2f0df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b/23fa747f-0e53-4654-913d-ebe4ae8f453b.crl X509v3 Authority Key Identifier: keyid:4B:07:70:44:0A:64:F7:A4:10:4A:2A:58:81:04:85:C1:C9:B1:EE:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b.cer sbgp-ipAddrBlock: critical IPv6: 2620:0:950::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:ec:e9:81:6f:ed:7a:9d:e9:c1:32:30:5f:8c:ca:27:e5:68: d9:f8:ec:0d:9c:e1:51:58:85:8c:46:48:aa:59:e4:eb:f8:b2: 19:59:f4:23:36:98:ce:5a:7b:38:fa:16:23:8b:6c:08:89:16: d7:61:7e:ae:4b:61:86:0d:99:74:19:45:de:95:bb:fb:f4:d2: 2e:4b:62:f1:27:a5:30:b8:8e:c1:85:c1:f9:2b:9c:1c:42:62: 81:01:7f:ce:6e:f3:89:ce:45:7f:b3:e0:3b:7b:17:9a:87:e0: 42:8e:8a:a5:ab:ad:ac:2d:c4:0c:8d:f9:46:09:e1:ff:38:15: 99:b1:b9:e7:62:86:c4:8a:6f:e0:13:38:17:f9:6d:52:e2:d5: 39:ab:4a:ce:69:a0:bb:29:44:9a:e4:57:59:1e:38:67:81:d7: 7e:2d:e9:c0:56:76:3c:18:cf:14:79:3a:db:f5:4d:8e:68:d6: ab:c4:a4:f3:6a:25:63:2e:30:58:3b:4b:28:a4:23:3a:23:50: a4:07:7a:7d:f8:a6:bc:76:e7:af:c1:67:38:b2:fd:58:08:7f: c5:5a:d9:34:67:94:3a:8d:42:ed:ca:cd:f4:dd:c6:63:8c:81: 65:53:93:e0:dc:41:ba:0d:a6:eb:65:87:d5:17:d7:43:ce:e5: 3f:84:23:33 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE43ZHSBWjGzzs8r54AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNmYTc0N2YtMGU1My00NjU0LTkxM2QtZWJlNGFlOGY0 NTNiMB4XDTI2MDYxODIxMDAxMloXDTI2MDkxNjIxMDAxMlowLzEtMCsGA1UEAxMk MTE5MGU2ZWItODk1Ny00N2MwLWJmYWUtNDZlMWQzZmM0NGUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrvum0QmRFe8auTkF9mpy1whnKLh/0uhnJxT n3HqsTmy7hX8eadmDgjwgAiEJCMeI975/2HlM8gW2ptIFBFKUkBnbYj9X5/EE/qe SslH1PrfghjiXnu6ugXP0nBF/DVanDB7CD01zSvSOaE/B1jt0bSqT2fl+Arog/7N IUeYDy55nVqwAPG4Lch0iXPeeUma1J67r/3pjNSTF3x8PWFSyR2CRxPqviUpJGEL hgzotrRu74sfBr3LcMwv5UVEWhrWMedJs3nNsLnsy90NTI8spJbM6TbciXGgbZW6 iSHNhb7TSyGCJz/9gq2iXJPgu8y2Frs2wgNuHXxqjLRfHE024QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLjifYnncfSp5I27OGhC8K58F/CAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Zh NzQ3Zi0wZTUzLTQ2NTQtOTEzZC1lYmU0YWU4ZjQ1M2IvYWFmN2QzNzItNDE4OS0z NzkwLTlkY2EtNjFhMTI1YTJmMGRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNmYTc0N2YtMGU1My00NjU0LTkx M2QtZWJlNGFlOGY0NTNiLzIzZmE3NDdmLTBlNTMtNDY1NC05MTNkLWViZTRhZThm NDUzYi5jcmwwHwYDVR0jBBgwFoAUSwdwRApk96QQSipYgQSFwcmx7kUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2ZhNzQ3Zi0wZTUzLTQ2NTQtOTEzZC1lYmU0 YWU4ZjQ1M2IuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAAAlQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJDs6YFv7Xqd6cEyMF+MyiflaNn47A2c4VFYhYxGSKpZ5Ov4shlZ 9CM2mM5aezj6FiOLbAiJFtdhfq5LYYYNmXQZRd6Vu/v00i5LYvEnpTC4jsGFwfkr nBxCYoEBf85u84nORX+z4Dt7F5qH4EKOiqWrrawtxAyN+UYJ4f84FZmxuedihsSK b+ATOBf5bVLi1TmrSs5poLspRJrkV1keOGeB134t6cBWdjwYzxR5Otv1TY5o1qvE pPNqJWMuMFg7SyikIzojUKQHen34prx256/BZziy/VgIf8Va2TRnlDqNQu3KzfTd xmOMgWVTk+DcQboNputlh9UX10PO5T+EIzM= -----END CERTIFICATE-----Generated at Tue Jul 7 19:50:14 2026 by rpki-client