$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025/2721406e-41a4-3e0f-8b73-e2bf43fe4ea6.roa File: 2721406e-41a4-3e0f-8b73-e2bf43fe4ea6.roa (raw, json) Hash identifier: 2wEAHkCGb0dtTaYIjKkJXbXZYtN46GuQUPFRgWOXJz0= Subject key identifier: EB:73:38:2E:7A:0F:75:97:9E:05:29:90:17:90:75:A9:B7:D3:8F:B0 Certificate issuer: /CN=aafd6acf-1b90-42db-93ca-6a5c04007025 Certificate serial: 010D0C9F4328584D730A6CA35AC827876C284B00 Authority key identifier: 33:52:98:80:D6:83:C5:3F:14:72:92:EA:A0:84:99:4F:1A:2D:BB:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025/2721406e-41a4-3e0f-8b73-e2bf43fe4ea6.roa Signing time: Thu 09 Apr 2026 13:00:30 +0000 ROA not before: Thu 09 Apr 2026 13:00:30 +0000 ROA not after: Wed 08 Jul 2026 13:00:30 +0000 asID: 812 IP address blocks: 69.58.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025/aafd6acf-1b90-42db-93ca-6a5c04007025.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025/aafd6acf-1b90-42db-93ca-6a5c04007025.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Apr 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:73:0a:6c:a3:5a:c8:27:87:6c:28:4b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aafd6acf-1b90-42db-93ca-6a5c04007025 Validity Not Before: Apr 9 13:00:30 2026 GMT Not After : Jul 8 13:00:30 2026 GMT Subject: CN=a15a4e98-579f-4f66-afa9-88f5b70746e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:74:a9:37:b6:71:27:fd:db:18:d1:45:66:bb: 9a:1e:a5:37:bd:f4:43:4e:fa:6f:6a:4f:4f:7a:23: ba:1a:5f:74:c3:bd:3a:bd:5a:86:7a:81:e0:69:49: c8:41:6a:08:ec:3c:7e:ba:10:91:ad:9b:eb:fa:42: de:26:3c:5c:94:cd:8b:c6:24:0d:df:97:49:45:c9: 32:b7:3a:92:e7:99:b2:34:5a:9b:e6:40:49:04:48: f7:02:85:dd:cb:22:2d:cc:c9:5c:f0:30:e3:bd:dc: 3b:c3:db:85:b5:db:e8:f4:61:4d:41:67:61:62:8b: 96:b3:14:59:1e:67:85:e1:80:07:27:41:2d:52:fe: fa:76:4b:8e:2b:5f:0e:e0:26:c5:c1:c3:45:54:b5: 38:0e:a0:c1:8b:db:41:88:7e:66:8b:7c:a3:c4:e8: 06:dc:78:80:7f:af:a1:9c:1d:74:ee:a1:9c:1d:aa: 20:a7:d3:a2:4a:cb:26:80:c9:0c:0f:aa:20:70:a5: 40:e8:c4:a0:5c:bd:31:88:01:59:88:f7:cb:5a:fa: 87:9f:88:5b:a9:8d:7e:1e:f1:1f:d7:90:fc:a4:a2: 9f:8e:80:04:8b:5a:85:f2:27:20:2d:84:57:89:07: 1e:19:30:49:69:07:e8:9c:4e:c4:bb:aa:cd:b9:07: d0:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:73:38:2E:7A:0F:75:97:9E:05:29:90:17:90:75:A9:B7:D3:8F:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025/2721406e-41a4-3e0f-8b73-e2bf43fe4ea6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025/aafd6acf-1b90-42db-93ca-6a5c04007025.crl X509v3 Authority Key Identifier: keyid:33:52:98:80:D6:83:C5:3F:14:72:92:EA:A0:84:99:4F:1A:2D:BB:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025.cer sbgp-ipAddrBlock: critical IPv4: 69.58.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:cf:3c:c1:e4:d0:76:b1:31:72:36:da:16:ab:0d:4e:2d:b0: ae:46:eb:9c:3d:1e:18:3a:b2:ee:fb:eb:30:a8:0b:21:24:1f: 2c:42:0e:68:6b:3c:36:95:10:5b:69:ee:95:f2:37:8d:05:56: 2e:80:09:2c:9c:54:f7:6d:d1:a8:8a:8a:a0:15:f1:25:47:f1: ec:65:10:1d:31:37:38:6b:36:9f:0b:d7:bd:86:a5:de:5e:e1: be:8d:a7:31:6b:89:f1:a1:15:b9:09:d0:5e:88:b5:1b:48:12: 2d:0a:33:3f:9e:41:03:1f:05:1e:bc:23:d3:e1:70:40:15:df: 00:15:a1:74:60:3b:20:8e:6f:e0:5b:fa:79:47:39:82:f0:04: 6b:f8:cc:1d:f9:6c:75:42:fd:48:0c:97:98:30:64:d4:45:97: c9:96:23:12:f6:7a:6d:8f:cc:d3:8b:c3:90:73:8f:d8:ea:d8: d1:2d:e3:b1:ab:e2:ba:61:7b:49:b9:45:94:63:27:7d:d6:ec: 6b:38:3c:8e:7f:b9:3e:02:a1:26:f7:6a:4c:78:a3:22:fa:c8: 4a:c7:7d:16:6d:80:63:5c:bc:fb:6d:0f:be:7c:9f:3c:66:79: 12:0c:b0:03:29:b4:c2:f4:22:91:c0:4b:a9:79:d0:dd:ff:67: e2:93:d2:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1zCmyjWsgnh2woSwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmZDZhY2YtMWI5MC00MmRiLTkzY2EtNmE1YzA0MDA3 MDI1MB4XDTI2MDQwOTEzMDAzMFoXDTI2MDcwODEzMDAzMFowLzEtMCsGA1UEAxMk YTE1YTRlOTgtNTc5Zi00ZjY2LWFmYTktODhmNWI3MDc0NmU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXSpN7ZxJ/3bGNFFZruaHqU3vfRDTvpvak9P eiO6Gl90w706vVqGeoHgaUnIQWoI7Dx+uhCRrZvr+kLeJjxclM2LxiQN35dJRcky tzqS55myNFqb5kBJBEj3AoXdyyItzMlc8DDjvdw7w9uFtdvo9GFNQWdhYouWsxRZ HmeF4YAHJ0EtUv76dkuOK18O4CbFwcNFVLU4DqDBi9tBiH5mi3yjxOgG3HiAf6+h nB107qGcHaogp9OiSssmgMkMD6ogcKVA6MSgXL0xiAFZiPfLWvqHn4hbqY1+HvEf 15D8pKKfjoAEi1qF8icgLYRXiQceGTBJaQfonE7Eu6rNuQfQXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOtzOC56D3WXngUpkBeQdam304+wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hYWZk NmFjZi0xYjkwLTQyZGItOTNjYS02YTVjMDQwMDcwMjUvMjcyMTQwNmUtNDFhNC0z ZTBmLThiNzMtZTJiZjQzZmU0ZWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYWFmZDZhY2YtMWI5MC00MmRiLTkz Y2EtNmE1YzA0MDA3MDI1L2FhZmQ2YWNmLTFiOTAtNDJkYi05M2NhLTZhNWMwNDAw NzAyNS5jcmwwHwYDVR0jBBgwFoAUM1KYgNaDxT8UcpLqoISZTxotu+QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hYWZkNmFjZi0xYjkwLTQyZGItOTNjYS02YTVj MDQwMDcwMjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERTpgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGjPPMHk0HaxMXI22harDU4tsK5G65w9Hhg6su776zCoCyEkHyxCDmhr PDaVEFtp7pXyN40FVi6ACSycVPdt0aiKiqAV8SVH8exlEB0xNzhrNp8L172Gpd5e 4b6NpzFrifGhFbkJ0F6ItRtIEi0KMz+eQQMfBR68I9PhcEAV3wAVoXRgOyCOb+Bb +nlHOYLwBGv4zB35bHVC/UgMl5gwZNRFl8mWIxL2em2PzNOLw5Bzj9jq2NEt47Gr 4rphe0m5RZRjJ33W7Gs4PI5/uT4CoSb3akx4oyL6yErHfRZtgGNcvPttD758nzxm eRIMsAMptML0IpHAS6l50N3/Z+KT0ng= -----END CERTIFICATE-----Generated at Mon Apr 13 12:08:25 2026 by rpki-client