$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025/39ddc6b9-a433-360e-8672-ec63693e7e71.roa File: 39ddc6b9-a433-360e-8672-ec63693e7e71.roa (raw, json) Hash identifier: LokcAUQmXCxvQkP+t4v5vWTKgG0phSPzsiWh7pUqhrA= Subject key identifier: 27:A2:73:D2:95:04:62:8B:C1:3F:79:46:59:A4:33:1F:40:3A:D9:81 Certificate issuer: /CN=aafd6acf-1b90-42db-93ca-6a5c04007025 Certificate serial: 010D0C9F4328584EF5B20B50FBEA673449B302D8 Authority key identifier: 33:52:98:80:D6:83:C5:3F:14:72:92:EA:A0:84:99:4F:1A:2D:BB:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025/39ddc6b9-a433-360e-8672-ec63693e7e71.roa Signing time: Wed 26 Aug 2026 01:00:12 +0000 ROA not before: Wed 26 Aug 2026 01:00:12 +0000 ROA not after: Tue 24 Nov 2026 02:00:12 +0000 asID: 812 IP address blocks: 69.63.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025/aafd6acf-1b90-42db-93ca-6a5c04007025.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025/aafd6acf-1b90-42db-93ca-6a5c04007025.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f5:b2:0b:50:fb:ea:67:34:49:b3:02:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aafd6acf-1b90-42db-93ca-6a5c04007025 Validity Not Before: Aug 26 01:00:12 2026 GMT Not After : Nov 24 02:00:12 2026 GMT Subject: CN=95a81707-ac48-4d13-998a-7ca3cd86727f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:a8:20:03:29:90:d6:5e:4b:78:85:43:e9:f6: b8:03:e0:f3:1f:81:59:96:1d:5b:b7:20:98:0c:92: 4c:25:1c:ce:77:3e:c4:5d:83:2a:8c:c4:bc:a8:55: 1b:81:01:ed:6a:f3:2f:d9:99:2e:2f:e9:34:c2:09: 4f:f2:cb:3b:cf:bb:c2:98:06:93:fd:b4:47:59:68: 37:ed:88:b6:40:c9:55:88:2c:67:47:3b:5c:b8:3a: 4d:ad:67:dc:c5:95:00:5c:22:75:b2:71:1f:ee:f8: 1d:ce:18:a7:21:52:1b:cd:05:d3:60:e9:dd:de:e7: 23:c6:94:fe:15:f5:f0:85:cc:8b:0a:40:2e:87:99: 6d:36:5e:9f:8d:74:19:9f:b1:b0:b2:e3:2f:23:ff: ba:3d:25:fa:c7:1b:99:f6:d1:c4:d2:ec:2a:02:ae: 97:d1:56:fa:05:e5:19:2f:ff:f0:e7:9e:e3:2a:fc: 27:40:a2:0c:27:bd:b7:43:35:5e:18:eb:eb:2d:ea: 12:2e:8d:c8:c3:ce:fd:d6:e5:35:75:53:10:da:e9: 8b:43:6d:c2:19:e9:5f:22:34:84:ee:33:c6:f6:a4: 7f:53:74:24:81:9f:83:4c:d7:64:14:4e:84:31:56: d3:5b:d7:ea:37:4e:02:a7:62:0a:99:7f:94:5a:69: 73:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:A2:73:D2:95:04:62:8B:C1:3F:79:46:59:A4:33:1F:40:3A:D9:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025/39ddc6b9-a433-360e-8672-ec63693e7e71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025/aafd6acf-1b90-42db-93ca-6a5c04007025.crl X509v3 Authority Key Identifier: keyid:33:52:98:80:D6:83:C5:3F:14:72:92:EA:A0:84:99:4F:1A:2D:BB:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025.cer sbgp-ipAddrBlock: critical IPv4: 69.63.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:d8:1a:55:fa:58:73:8a:fc:93:11:30:d0:d9:d6:92:31:15: 11:c4:40:0e:f1:d6:9f:0a:45:68:9f:55:42:d5:98:3c:60:8e: bc:ba:ee:ab:9e:31:ba:60:f9:52:ee:0e:58:1d:51:df:52:82: e7:b6:3b:73:06:0f:65:f5:df:ea:db:df:5c:35:2d:2e:46:f6: ec:8d:d1:fe:21:f6:4b:4a:67:06:e4:da:00:0f:4b:72:35:aa: 7f:a6:7f:64:72:bb:30:bf:66:a3:aa:72:f1:a1:cd:05:bd:a2: cb:e9:21:90:39:b9:b9:23:a9:86:ab:ea:16:cd:18:1b:9f:40: c3:d6:48:e9:78:d5:61:5b:64:55:02:91:9c:3d:7c:91:27:91: 3c:fc:27:fe:f0:7a:59:28:d0:c3:c7:b0:df:36:94:6a:87:20: 36:e0:b3:fb:f2:6f:fd:0e:35:7c:50:75:6b:13:ca:f5:95:d2: e4:cc:ba:23:ff:80:89:2f:8f:8d:b9:03:31:15:fa:51:0e:43: 85:3f:be:a9:2a:71:af:8c:e9:41:40:4e:60:8e:31:32:7b:e0: 5a:76:c6:1f:e5:ed:f4:b7:81:c8:79:65:ff:6b:27:ad:e6:ec: 81:2e:92:02:38:e8:18:3a:77:9e:57:bf:8e:a9:da:cd:d0:71: 25:ce:97:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE71sgtQ++pnNEmzAtgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmZDZhY2YtMWI5MC00MmRiLTkzY2EtNmE1YzA0MDA3 MDI1MB4XDTI2MDgyNjAxMDAxMloXDTI2MTEyNDAyMDAxMlowLzEtMCsGA1UEAxMk OTVhODE3MDctYWM0OC00ZDEzLTk5OGEtN2NhM2NkODY3MjdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6ggAymQ1l5LeIVD6fa4A+DzH4FZlh1btyCY DJJMJRzOdz7EXYMqjMS8qFUbgQHtavMv2ZkuL+k0wglP8ss7z7vCmAaT/bRHWWg3 7Yi2QMlViCxnRztcuDpNrWfcxZUAXCJ1snEf7vgdzhinIVIbzQXTYOnd3ucjxpT+ FfXwhcyLCkAuh5ltNl6fjXQZn7GwsuMvI/+6PSX6xxuZ9tHE0uwqAq6X0Vb6BeUZ L//w557jKvwnQKIMJ723QzVeGOvrLeoSLo3Iw8791uU1dVMQ2umLQ23CGelfIjSE 7jPG9qR/U3QkgZ+DTNdkFE6EMVbTW9fqN04Cp2IKmX+UWmlz+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCeic9KVBGKLwT95RlmkMx9AOtmBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hYWZk NmFjZi0xYjkwLTQyZGItOTNjYS02YTVjMDQwMDcwMjUvMzlkZGM2YjktYTQzMy0z NjBlLTg2NzItZWM2MzY5M2U3ZTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYWFmZDZhY2YtMWI5MC00MmRiLTkz Y2EtNmE1YzA0MDA3MDI1L2FhZmQ2YWNmLTFiOTAtNDJkYi05M2NhLTZhNWMwNDAw NzAyNS5jcmwwHwYDVR0jBBgwFoAUM1KYgNaDxT8UcpLqoISZTxotu+QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hYWZkNmFjZi0xYjkwLTQyZGItOTNjYS02YTVj MDQwMDcwMjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERT/wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABjYGlX6WHOK/JMRMNDZ1pIxFRHEQA7x1p8KRWifVULVmDxgjry67que Mbpg+VLuDlgdUd9Sgue2O3MGD2X13+rb31w1LS5G9uyN0f4h9ktKZwbk2gAPS3I1 qn+mf2RyuzC/ZqOqcvGhzQW9osvpIZA5ubkjqYar6hbNGBufQMPWSOl41WFbZFUC kZw9fJEnkTz8J/7welko0MPHsN82lGqHIDbgs/vyb/0ONXxQdWsTyvWV0uTMuiP/ gIkvj425AzEV+lEOQ4U/vqkqca+M6UFATmCOMTJ74Fp2xh/l7fS3gch5Zf9rJ63m 7IEukgI46Bg6d55Xv46p2s3QcSXOlys= -----END CERTIFICATE-----Generated at Thu Sep 3 17:44:30 2026 by rpki-client