$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025/2721406e-41a4-3e0f-8b73-e2bf43fe4ea6.roa File: 2721406e-41a4-3e0f-8b73-e2bf43fe4ea6.roa (raw, json) Hash identifier: EdECAOvm4BZ7JoTbWdUXh7IIrIFAMoOw7Es29I3/T/0= Subject key identifier: 9C:4A:0A:FA:A2:83:65:78:42:21:70:11:5C:6D:FB:DA:52:46:64:78 Certificate issuer: /CN=aafd6acf-1b90-42db-93ca-6a5c04007025 Certificate serial: 010D0C9F4328584EF5B208FD3D7B7CC452496DC0 Authority key identifier: 33:52:98:80:D6:83:C5:3F:14:72:92:EA:A0:84:99:4F:1A:2D:BB:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025/2721406e-41a4-3e0f-8b73-e2bf43fe4ea6.roa Signing time: Wed 26 Aug 2026 01:00:12 +0000 ROA not before: Wed 26 Aug 2026 01:00:12 +0000 ROA not after: Tue 24 Nov 2026 02:00:12 +0000 asID: 812 IP address blocks: 69.58.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025/aafd6acf-1b90-42db-93ca-6a5c04007025.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025/aafd6acf-1b90-42db-93ca-6a5c04007025.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f5:b2:08:fd:3d:7b:7c:c4:52:49:6d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aafd6acf-1b90-42db-93ca-6a5c04007025 Validity Not Before: Aug 26 01:00:12 2026 GMT Not After : Nov 24 02:00:12 2026 GMT Subject: CN=b6f518c0-5b35-4774-8090-b4a2c45ff691 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:28:c1:ef:39:42:2c:f2:a6:76:01:3c:b7:8c: fb:ab:6c:96:63:f8:00:8a:5a:97:17:b4:75:25:29: 29:6d:5d:84:64:70:2d:0e:f2:81:0f:4f:e4:6a:13: 01:2f:6b:4f:e8:8c:1e:7c:f6:db:ce:00:75:8c:01: 84:2e:95:af:37:a6:ff:a2:bf:1f:b4:a2:cf:95:92: cb:11:b2:80:08:d1:75:c7:58:a9:60:7a:ee:57:24: 75:30:55:24:ce:ca:d9:40:0a:53:e1:d7:69:71:4c: 7b:fc:65:ab:ad:20:71:34:0f:8b:e4:a3:e9:8d:f2: b8:61:b7:a2:85:2f:33:b7:85:e8:77:67:20:b3:d4: c7:39:b4:97:41:7d:10:b9:f1:37:85:66:b8:04:97: 39:4b:a5:4e:05:0c:72:11:43:18:75:87:f6:4b:c7: 1e:91:1a:9b:69:48:58:77:bf:0b:8e:11:31:10:6d: 59:6f:f0:72:e8:fb:c4:63:24:a9:ab:b3:f2:7e:7f: 2e:d3:af:90:bf:c7:c4:dc:d5:18:3e:12:79:1d:ca: 07:75:37:c7:28:79:e4:39:29:81:ef:15:b0:1b:4c: fb:cb:b1:32:ff:a3:04:59:7b:08:ff:2f:70:6c:71: 59:d5:83:7f:ba:eb:82:f2:f8:71:ed:78:85:7e:d0: f2:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:4A:0A:FA:A2:83:65:78:42:21:70:11:5C:6D:FB:DA:52:46:64:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025/2721406e-41a4-3e0f-8b73-e2bf43fe4ea6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025/aafd6acf-1b90-42db-93ca-6a5c04007025.crl X509v3 Authority Key Identifier: keyid:33:52:98:80:D6:83:C5:3F:14:72:92:EA:A0:84:99:4F:1A:2D:BB:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025.cer sbgp-ipAddrBlock: critical IPv4: 69.58.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:6f:86:94:60:d9:2b:6c:f0:2e:7b:ec:de:a9:e9:c5:ab:35: ff:65:ad:0f:ff:8a:63:9b:09:a2:21:54:f9:42:e6:88:a2:53: 14:e1:fe:8d:31:dd:84:5c:cf:2a:04:19:1c:95:2c:50:ae:9c: 07:05:10:3e:e1:05:a1:b3:4f:01:0f:21:01:14:47:18:0a:37: 1e:e8:00:6c:39:60:a4:a6:68:e4:63:f3:f3:e1:9f:9e:25:3b: 5e:c0:0e:57:ea:1e:3e:de:5b:16:21:46:b5:1a:b6:0b:ec:6d: 68:25:51:30:a2:10:0d:07:da:85:08:82:bd:3e:8e:97:89:60: d6:26:ae:b0:ae:85:d1:ef:af:2b:07:dd:22:4d:01:6b:97:b6: e9:e7:fc:cd:7b:1f:23:9f:bf:1c:52:f2:ad:07:87:b5:84:06: b2:3a:84:d6:3d:80:e9:44:36:24:94:63:e0:91:96:da:be:c1: 02:fd:92:d1:dd:5e:40:00:83:87:cd:e4:f1:f3:16:eb:c8:c9: ea:ee:24:63:67:3e:5b:24:8a:9e:15:df:ee:ea:e2:71:06:3e: 8b:3a:9d:d6:f6:9e:b3:bb:e9:5c:19:75:92:b9:3a:f7:f6:ab: 00:4f:0c:5b:cb:f9:34:84:6c:43:f3:c9:30:a8:ec:29:e9:fb: fa:ef:23:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE71sgj9PXt8xFJJbcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmZDZhY2YtMWI5MC00MmRiLTkzY2EtNmE1YzA0MDA3 MDI1MB4XDTI2MDgyNjAxMDAxMloXDTI2MTEyNDAyMDAxMlowLzEtMCsGA1UEAxMk YjZmNTE4YzAtNWIzNS00Nzc0LTgwOTAtYjRhMmM0NWZmNjkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSjB7zlCLPKmdgE8t4z7q2yWY/gAilqXF7R1 JSkpbV2EZHAtDvKBD0/kahMBL2tP6IwefPbbzgB1jAGELpWvN6b/or8ftKLPlZLL EbKACNF1x1ipYHruVyR1MFUkzsrZQApT4ddpcUx7/GWrrSBxNA+L5KPpjfK4Ybei hS8zt4Xod2cgs9THObSXQX0QufE3hWa4BJc5S6VOBQxyEUMYdYf2S8cekRqbaUhY d78LjhExEG1Zb/By6PvEYySpq7Pyfn8u06+Qv8fE3NUYPhJ5HcoHdTfHKHnkOSmB 7xWwG0z7y7Ey/6MEWXsI/y9wbHFZ1YN/uuuC8vhx7XiFftDyhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJxKCvqig2V4QiFwEVxt+9pSRmR4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hYWZk NmFjZi0xYjkwLTQyZGItOTNjYS02YTVjMDQwMDcwMjUvMjcyMTQwNmUtNDFhNC0z ZTBmLThiNzMtZTJiZjQzZmU0ZWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYWFmZDZhY2YtMWI5MC00MmRiLTkz Y2EtNmE1YzA0MDA3MDI1L2FhZmQ2YWNmLTFiOTAtNDJkYi05M2NhLTZhNWMwNDAw NzAyNS5jcmwwHwYDVR0jBBgwFoAUM1KYgNaDxT8UcpLqoISZTxotu+QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hYWZkNmFjZi0xYjkwLTQyZGItOTNjYS02YTVj MDQwMDcwMjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERTpgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGlvhpRg2Sts8C577N6p6cWrNf9lrQ//imObCaIhVPlC5oiiUxTh/o0x 3YRczyoEGRyVLFCunAcFED7hBaGzTwEPIQEURxgKNx7oAGw5YKSmaORj8/Phn54l O17ADlfqHj7eWxYhRrUatgvsbWglUTCiEA0H2oUIgr0+jpeJYNYmrrCuhdHvrysH 3SJNAWuXtunn/M17HyOfvxxS8q0Hh7WEBrI6hNY9gOlENiSUY+CRltq+wQL9ktHd XkAAg4fN5PHzFuvIyeruJGNnPlskip4V3+7q4nEGPos6ndb2nrO76VwZdZK5Ovf2 qwBPDFvL+TSEbEPzyTCo7Cnp+/rvI1o= -----END CERTIFICATE-----Generated at Thu Aug 27 05:35:30 2026 by rpki-client