$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b/aaf7d372-4189-3790-9dca-61a125a2f0df.roa File: aaf7d372-4189-3790-9dca-61a125a2f0df.roa (raw, json) Hash identifier: 25izVmFclL1FGYnZwYcT36qUB+QJTYVU4cqt6llCwFc= Subject key identifier: 1E:28:48:11:EE:36:9B:6D:C1:52:D1:AF:24:C2:D5:71:61:5A:F4:6C Certificate issuer: /CN=23fa747f-0e53-4654-913d-ebe4ae8f453b Certificate serial: 010D0C9F4328584ED9C753ABAA9165BA81FC4D40 Authority key identifier: 4B:07:70:44:0A:64:F7:A4:10:4A:2A:58:81:04:85:C1:C9:B1:EE:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b/aaf7d372-4189-3790-9dca-61a125a2f0df.roa Signing time: Sun 16 Aug 2026 01:00:14 +0000 ROA not before: Sun 16 Aug 2026 01:00:14 +0000 ROA not after: Sat 14 Nov 2026 02:00:14 +0000 asID: 395184 IP address blocks: 2620:0:950::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b/23fa747f-0e53-4654-913d-ebe4ae8f453b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b/23fa747f-0e53-4654-913d-ebe4ae8f453b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 23 Aug 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d9:c7:53:ab:aa:91:65:ba:81:fc:4d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23fa747f-0e53-4654-913d-ebe4ae8f453b Validity Not Before: Aug 16 01:00:14 2026 GMT Not After : Nov 14 02:00:14 2026 GMT Subject: CN=bf142697-c38b-40b1-842b-538040c6490e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:0a:5a:36:72:69:ee:4b:52:2f:6b:67:5e:83: a6:0d:66:c2:0c:de:6d:6b:28:eb:3f:d2:50:ff:db: f6:d1:21:4f:6c:be:88:0a:73:76:96:73:67:54:9c: 29:c5:46:63:48:63:59:82:52:3b:e0:df:b9:03:5a: d8:13:ae:31:f2:4e:f9:69:53:b7:f5:74:fa:57:7b: 4a:0b:52:05:78:c2:29:d9:be:25:86:bf:a7:ae:77: df:80:61:12:c5:d7:8c:9f:42:61:74:9f:94:a3:13: c5:58:02:d9:43:ac:4b:99:81:f9:55:78:42:ed:8b: a4:8c:7d:9d:bc:46:e9:9d:c6:8a:74:57:7f:b0:9c: 8c:cd:81:e1:a1:40:dd:3c:12:0e:72:7e:02:20:ae: 04:63:2c:8c:99:87:b8:cc:6f:0b:ca:41:66:b9:d6: b0:2c:17:25:fa:e4:38:db:ef:95:e0:bc:a0:74:d5: ed:36:70:57:66:24:ef:54:e0:b7:7f:2a:af:c1:02: 22:38:76:15:b6:30:95:6c:42:da:31:42:36:d8:68: 67:e8:b4:2c:89:0c:27:22:59:9c:17:b8:bc:58:0d: 53:65:cf:84:18:42:32:ce:1a:40:66:71:4c:fe:ed: 4c:f5:68:89:90:5e:d6:ad:b1:7b:ba:b5:8e:04:53: 76:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:28:48:11:EE:36:9B:6D:C1:52:D1:AF:24:C2:D5:71:61:5A:F4:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b/aaf7d372-4189-3790-9dca-61a125a2f0df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b/23fa747f-0e53-4654-913d-ebe4ae8f453b.crl X509v3 Authority Key Identifier: keyid:4B:07:70:44:0A:64:F7:A4:10:4A:2A:58:81:04:85:C1:C9:B1:EE:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b.cer sbgp-ipAddrBlock: critical IPv6: 2620:0:950::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:ea:4f:39:f8:0e:49:2f:61:ec:90:e0:5b:ed:71:20:42:28: 37:f8:5d:8c:be:14:94:3c:37:d2:bf:3c:ae:b9:1f:ae:6a:78: 2c:9d:3f:e2:d4:ad:0e:00:30:83:f2:d2:f1:10:8a:88:4a:39: 2a:cb:d0:bd:ac:14:12:4c:8b:24:52:1d:c2:cd:35:0a:66:9b: bb:3e:64:3a:32:60:4c:f0:f3:fc:32:98:ef:6d:6c:5d:93:c4: cd:8c:dc:f2:2c:23:93:28:21:e2:49:7c:9b:03:87:a2:a0:6a: c0:b3:3c:52:aa:d0:a5:20:ff:df:36:f2:68:fd:89:ed:63:fe: fb:12:cf:66:53:14:e0:cf:91:2d:79:21:78:65:d5:af:fe:41: ea:c5:7f:63:0d:4e:5a:31:4b:de:94:31:93:e4:fb:ea:52:29: f9:d4:25:54:c6:60:a6:8a:c0:0f:01:3a:c7:a3:2e:79:8a:75: 7d:de:b7:17:53:7a:a3:f3:ca:ce:14:27:c0:99:17:dd:09:e9: 82:3e:ea:88:63:5a:f2:ac:44:d7:a6:94:22:9d:03:21:1c:72: cc:be:0c:36:d7:09:52:34:4c:e0:a7:75:09:10:3a:af:6a:51: e1:47:ea:ed:7e:a7:04:7a:1b:80:fb:3f:bc:e6:69:d3:cc:7a: 43:e6:72:d4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7Zx1OrqpFluoH8TUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNmYTc0N2YtMGU1My00NjU0LTkxM2QtZWJlNGFlOGY0 NTNiMB4XDTI2MDgxNjAxMDAxNFoXDTI2MTExNDAyMDAxNFowLzEtMCsGA1UEAxMk YmYxNDI2OTctYzM4Yi00MGIxLTg0MmItNTM4MDQwYzY0OTBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQpaNnJp7ktSL2tnXoOmDWbCDN5tayjrP9JQ /9v20SFPbL6ICnN2lnNnVJwpxUZjSGNZglI74N+5A1rYE64x8k75aVO39XT6V3tK C1IFeMIp2b4lhr+nrnffgGESxdeMn0JhdJ+UoxPFWALZQ6xLmYH5VXhC7YukjH2d vEbpncaKdFd/sJyMzYHhoUDdPBIOcn4CIK4EYyyMmYe4zG8LykFmudawLBcl+uQ4 2++V4LygdNXtNnBXZiTvVOC3fyqvwQIiOHYVtjCVbELaMUI22Ghn6LQsiQwnIlmc F7i8WA1TZc+EGEIyzhpAZnFM/u1M9WiJkF7WrbF7urWOBFN2FwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFB4oSBHuNpttwVLRryTC1XFhWvRsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Zh NzQ3Zi0wZTUzLTQ2NTQtOTEzZC1lYmU0YWU4ZjQ1M2IvYWFmN2QzNzItNDE4OS0z NzkwLTlkY2EtNjFhMTI1YTJmMGRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNmYTc0N2YtMGU1My00NjU0LTkx M2QtZWJlNGFlOGY0NTNiLzIzZmE3NDdmLTBlNTMtNDY1NC05MTNkLWViZTRhZThm NDUzYi5jcmwwHwYDVR0jBBgwFoAUSwdwRApk96QQSipYgQSFwcmx7kUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2ZhNzQ3Zi0wZTUzLTQ2NTQtOTEzZC1lYmU0 YWU4ZjQ1M2IuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAAAlQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKDqTzn4DkkvYeyQ4FvtcSBCKDf4XYy+FJQ8N9K/PK65H65qeCyd P+LUrQ4AMIPy0vEQiohKOSrL0L2sFBJMiyRSHcLNNQpmm7s+ZDoyYEzw8/wymO9t bF2TxM2M3PIsI5MoIeJJfJsDh6KgasCzPFKq0KUg/9828mj9ie1j/vsSz2ZTFODP kS15IXhl1a/+QerFf2MNTloxS96UMZPk++pSKfnUJVTGYKaKwA8BOsejLnmKdX3e txdTeqPzys4UJ8CZF90J6YI+6ohjWvKsRNemlCKdAyEccsy+DDbXCVI0TOCndQkQ Oq9qUeFH6u1+pwR6G4D7P7zmadPMekPmctQ= -----END CERTIFICATE-----Generated at Fri Aug 21 22:43:29 2026 by rpki-client