$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025/5a81a879-7a98-330f-b70f-4e80d2348605.roa File: 5a81a879-7a98-330f-b70f-4e80d2348605.roa (raw, json) Hash identifier: F+DBu7hhREwXwrzcldgseDtXy9gE6WpHOs9A/oj2lds= Subject key identifier: BD:F2:3F:1D:EB:38:06:2B:C1:20:5D:8A:33:05:2E:0F:E1:FA:41:C2 Certificate issuer: /CN=aafd6acf-1b90-42db-93ca-6a5c04007025 Certificate serial: 010D0C9F4328584D730A72B620E5A72BF93FA880 Authority key identifier: 33:52:98:80:D6:83:C5:3F:14:72:92:EA:A0:84:99:4F:1A:2D:BB:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025/5a81a879-7a98-330f-b70f-4e80d2348605.roa Signing time: Thu 09 Apr 2026 13:00:30 +0000 ROA not before: Thu 09 Apr 2026 13:00:30 +0000 ROA not after: Wed 08 Jul 2026 13:00:30 +0000 asID: 812 IP address blocks: 67.231.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025/aafd6acf-1b90-42db-93ca-6a5c04007025.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025/aafd6acf-1b90-42db-93ca-6a5c04007025.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Apr 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:73:0a:72:b6:20:e5:a7:2b:f9:3f:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aafd6acf-1b90-42db-93ca-6a5c04007025 Validity Not Before: Apr 9 13:00:30 2026 GMT Not After : Jul 8 13:00:30 2026 GMT Subject: CN=e3715671-6e0e-418e-9252-ca1905862c9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:f0:e1:37:07:46:6a:8d:d2:f3:70:c1:d7:09: 61:d4:32:7d:73:37:62:db:93:41:0c:43:f4:e6:ef: 8f:a5:3a:44:18:4f:00:2f:92:3d:e8:79:39:71:f3: c7:b6:b8:67:09:1d:6f:42:f2:a1:2c:b0:67:86:9c: 03:78:b5:07:7b:be:9b:e4:23:92:b9:58:ae:40:2a: 02:77:44:69:9c:86:64:d8:2b:e2:34:22:0e:69:43: 30:0a:db:4c:4b:3f:2a:97:64:8b:64:73:8e:f2:3f: fe:86:8b:2b:6e:dd:95:f5:31:96:98:11:9a:7c:98: c9:1c:3a:4c:57:41:08:b1:61:8c:ec:67:c7:70:f5: 52:b0:4b:52:81:1b:3a:7e:cf:63:83:6b:52:d5:01: 68:7f:f7:01:4e:f8:2a:36:19:d1:78:5b:10:9a:14: 85:d7:0b:06:77:e3:29:35:0f:b0:6e:e1:b3:31:eb: 44:67:d5:ea:fc:b4:77:8d:86:43:12:6a:7a:e1:c0: bb:f8:9c:31:5e:c5:b2:3c:3e:9d:70:d3:3d:6a:1d: 70:7f:f3:f6:0e:24:0e:b5:95:0e:7d:ef:a4:df:21: da:17:7c:2a:88:24:f0:d8:89:92:23:54:3b:4a:2c: 6b:3f:30:29:37:8d:d3:1f:d8:a3:5c:95:5a:7b:48: 0d:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:F2:3F:1D:EB:38:06:2B:C1:20:5D:8A:33:05:2E:0F:E1:FA:41:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025/5a81a879-7a98-330f-b70f-4e80d2348605.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025/aafd6acf-1b90-42db-93ca-6a5c04007025.crl X509v3 Authority Key Identifier: keyid:33:52:98:80:D6:83:C5:3F:14:72:92:EA:A0:84:99:4F:1A:2D:BB:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025.cer sbgp-ipAddrBlock: critical IPv4: 67.231.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:d3:66:0b:35:d1:12:db:d8:2b:78:84:9d:6a:1a:85:5d:8a: 10:df:a1:bd:83:ee:a7:d7:11:08:48:e2:8e:26:fd:75:33:c1: 00:30:f0:ab:b4:30:f0:6d:98:0c:11:e1:bc:68:bd:89:38:f4: 72:40:22:e7:93:16:ea:69:39:7d:a6:c6:08:9d:12:0c:0e:ba: f9:22:53:f7:ac:d5:c6:ae:c8:d1:ef:5b:24:5e:11:0c:a1:a5: fc:88:91:e7:45:9e:0f:00:cf:68:77:2e:4f:16:0e:ef:17:34: 50:1e:b3:ef:9c:50:84:6a:f8:e5:3c:12:35:7d:c2:39:09:20: 9a:65:65:70:24:5d:6a:46:44:e5:07:19:05:7b:ed:16:13:2f: 39:ab:42:ff:65:26:28:fe:13:9a:5f:2f:d5:67:45:9b:2d:37: 08:3d:f3:1a:90:2f:9a:47:c3:a1:b4:b5:d0:13:50:2f:aa:2a: 03:25:8a:67:14:b0:8f:f8:4f:e4:c1:75:ab:7f:5e:a0:f8:97: 2d:78:ba:2a:6f:4e:c0:39:c5:f8:22:b1:16:0b:09:94:3f:97: c9:9a:d2:7b:52:0b:c1:3f:fd:ad:6d:52:4f:fb:90:ca:b6:1f: 81:d5:2f:9b:17:17:45:07:6c:88:99:94:73:ec:a3:45:b5:99: b5:83:f9:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1zCnK2IOWnK/k/qIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmZDZhY2YtMWI5MC00MmRiLTkzY2EtNmE1YzA0MDA3 MDI1MB4XDTI2MDQwOTEzMDAzMFoXDTI2MDcwODEzMDAzMFowLzEtMCsGA1UEAxMk ZTM3MTU2NzEtNmUwZS00MThlLTkyNTItY2ExOTA1ODYyYzlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgfDhNwdGao3S83DB1wlh1DJ9czdi25NBDEP0 5u+PpTpEGE8AL5I96Hk5cfPHtrhnCR1vQvKhLLBnhpwDeLUHe76b5COSuViuQCoC d0RpnIZk2CviNCIOaUMwCttMSz8ql2SLZHOO8j/+hosrbt2V9TGWmBGafJjJHDpM V0EIsWGM7GfHcPVSsEtSgRs6fs9jg2tS1QFof/cBTvgqNhnReFsQmhSF1wsGd+Mp NQ+wbuGzMetEZ9Xq/LR3jYZDEmp64cC7+JwxXsWyPD6dcNM9ah1wf/P2DiQOtZUO fe+k3yHaF3wqiCTw2ImSI1Q7SixrPzApN43TH9ijXJVae0gNoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL3yPx3rOAYrwSBdijMFLg/h+kHCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hYWZk NmFjZi0xYjkwLTQyZGItOTNjYS02YTVjMDQwMDcwMjUvNWE4MWE4NzktN2E5OC0z MzBmLWI3MGYtNGU4MGQyMzQ4NjA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYWFmZDZhY2YtMWI5MC00MmRiLTkz Y2EtNmE1YzA0MDA3MDI1L2FhZmQ2YWNmLTFiOTAtNDJkYi05M2NhLTZhNWMwNDAw NzAyNS5jcmwwHwYDVR0jBBgwFoAUM1KYgNaDxT8UcpLqoISZTxotu+QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hYWZkNmFjZi0xYjkwLTQyZGItOTNjYS02YTVj MDQwMDcwMjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ+fQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHPTZgs10RLb2Ct4hJ1qGoVdihDfob2D7qfXEQhI4o4m/XUzwQAw8Ku0 MPBtmAwR4bxovYk49HJAIueTFuppOX2mxgidEgwOuvkiU/es1cauyNHvWyReEQyh pfyIkedFng8Az2h3Lk8WDu8XNFAes++cUIRq+OU8EjV9wjkJIJplZXAkXWpGROUH GQV77RYTLzmrQv9lJij+E5pfL9VnRZstNwg98xqQL5pHw6G0tdATUC+qKgMlimcU sI/4T+TBdat/XqD4ly14uipvTsA5xfgisRYLCZQ/l8ma0ntSC8E//a1tUk/7kMq2 H4HVL5sXF0UHbIiZlHPso0W1mbWD+Yo= -----END CERTIFICATE-----Generated at Mon Apr 13 12:10:16 2026 by rpki-client