$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025/940cb506-c287-3123-b5cd-8640efc7de0a.roa File: 940cb506-c287-3123-b5cd-8640efc7de0a.roa (raw, json) Hash identifier: Gegqir6tfJtn3jxHDWqMZkTOVtP+TwUhrcYzOE4wlX8= Subject key identifier: BE:E0:CB:FA:4D:30:1D:AC:26:FC:E0:74:99:0F:AD:EF:A5:AF:D8:0B Certificate issuer: /CN=aafd6acf-1b90-42db-93ca-6a5c04007025 Certificate serial: 010D0C9F4328584EF5B20630990B7140C7DAD580 Authority key identifier: 33:52:98:80:D6:83:C5:3F:14:72:92:EA:A0:84:99:4F:1A:2D:BB:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025/940cb506-c287-3123-b5cd-8640efc7de0a.roa Signing time: Wed 26 Aug 2026 01:00:12 +0000 ROA not before: Wed 26 Aug 2026 01:00:12 +0000 ROA not after: Tue 24 Nov 2026 02:00:12 +0000 asID: 812 IP address blocks: 64.71.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025/aafd6acf-1b90-42db-93ca-6a5c04007025.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025/aafd6acf-1b90-42db-93ca-6a5c04007025.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f5:b2:06:30:99:0b:71:40:c7:da:d5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aafd6acf-1b90-42db-93ca-6a5c04007025 Validity Not Before: Aug 26 01:00:12 2026 GMT Not After : Nov 24 02:00:12 2026 GMT Subject: CN=8fdecd16-1d64-4f9f-a6f1-c2d52750b3bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:ad:d7:93:0a:18:b1:1c:54:77:b1:a1:1c:f3: 66:7a:94:c0:d4:34:ec:51:23:38:15:58:f7:e2:85: f6:f2:5c:12:89:d9:de:00:7c:89:f9:56:e6:7b:02: b1:fa:a9:09:4f:9f:83:d7:04:e1:9e:ad:28:70:5a: 90:34:f7:21:14:be:2e:68:1d:92:1b:49:cb:cf:4b: 06:e5:44:27:c5:13:19:4c:ea:7a:5d:56:0c:c0:d2: 4a:1c:44:a1:80:29:db:b4:43:1d:9e:6f:72:04:4a: 7f:ae:28:ef:70:af:64:d7:d4:83:05:28:58:4b:9d: 15:6b:99:3c:d3:ae:83:47:c2:a7:53:f7:0b:b3:cf: 14:2e:f5:f2:16:e4:95:f7:f0:00:03:29:f5:6e:68: 0f:e4:90:16:8a:5b:07:d9:ab:78:d5:59:f7:c0:35: 1c:d2:59:c9:d8:3f:da:4a:30:5f:ee:94:f1:c4:a5: fc:1d:52:00:85:6c:bb:2e:77:29:33:03:19:6e:99: 50:7d:4e:37:2b:64:4f:69:c5:26:a6:38:db:5e:35: b1:5b:0a:d3:a4:01:17:79:3c:70:79:70:20:68:63: 3f:6f:f5:98:b1:14:0d:f3:c5:2a:68:6f:67:38:77: cf:e6:7b:bc:e0:da:80:03:2d:ee:d2:c7:5f:f9:52: 19:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:E0:CB:FA:4D:30:1D:AC:26:FC:E0:74:99:0F:AD:EF:A5:AF:D8:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025/940cb506-c287-3123-b5cd-8640efc7de0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025/aafd6acf-1b90-42db-93ca-6a5c04007025.crl X509v3 Authority Key Identifier: keyid:33:52:98:80:D6:83:C5:3F:14:72:92:EA:A0:84:99:4F:1A:2D:BB:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025.cer sbgp-ipAddrBlock: critical IPv4: 64.71.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:99:93:c3:8e:93:8c:dd:b0:14:b5:ce:3d:48:79:e0:8a:91: 21:0a:63:5b:20:c5:1e:b7:6a:99:c9:5b:bb:6c:6d:fd:a2:f8: dc:18:4e:00:a3:d0:d4:d5:5f:88:6d:0d:7f:bd:35:ae:13:c8: 44:7b:f1:95:21:95:4d:dc:0f:9c:45:1d:60:ee:d3:e7:ee:8d: d4:59:e1:48:6d:4e:1d:3c:b8:70:76:59:c5:a1:5d:70:d6:48: 29:19:ea:17:4e:75:24:da:79:32:7d:a8:c4:57:e1:80:4c:dd: ab:ad:68:8b:8d:42:4d:01:ce:a0:04:ef:d1:53:ea:b6:5e:60: f1:0f:3e:5f:2c:8d:98:d8:7f:73:4e:58:d5:64:65:05:5a:fc: 95:84:30:ab:0c:00:14:31:96:dc:50:46:40:7d:a2:2a:fc:73: 18:a4:11:3b:f6:1d:e4:53:63:3e:11:4b:52:84:98:9e:68:2e: dc:8d:24:44:1d:ec:73:6b:70:3a:e7:e9:cf:23:af:ad:97:92: a9:ed:52:cf:69:83:a2:7c:98:c5:74:0d:52:6c:c4:a8:bd:e1: 3d:79:64:02:fa:8f:2b:0c:56:a0:4e:55:55:3e:52:df:62:af: 4b:67:f5:d8:15:86:b5:d1:c4:18:0d:55:59:e3:83:8c:bd:55: d1:76:ea:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE71sgYwmQtxQMfa1YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmZDZhY2YtMWI5MC00MmRiLTkzY2EtNmE1YzA0MDA3 MDI1MB4XDTI2MDgyNjAxMDAxMloXDTI2MTEyNDAyMDAxMlowLzEtMCsGA1UEAxMk OGZkZWNkMTYtMWQ2NC00ZjlmLWE2ZjEtYzJkNTI3NTBiM2JkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7a3XkwoYsRxUd7GhHPNmepTA1DTsUSM4FVj3 4oX28lwSidneAHyJ+VbmewKx+qkJT5+D1wThnq0ocFqQNPchFL4uaB2SG0nLz0sG 5UQnxRMZTOp6XVYMwNJKHEShgCnbtEMdnm9yBEp/rijvcK9k19SDBShYS50Va5k8 066DR8KnU/cLs88ULvXyFuSV9/AAAyn1bmgP5JAWilsH2at41Vn3wDUc0lnJ2D/a SjBf7pTxxKX8HVIAhWy7LncpMwMZbplQfU43K2RPacUmpjjbXjWxWwrTpAEXeTxw eXAgaGM/b/WYsRQN88UqaG9nOHfP5nu84NqAAy3u0sdf+VIZ5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL7gy/pNMB2sJvzgdJkPre+lr9gLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hYWZk NmFjZi0xYjkwLTQyZGItOTNjYS02YTVjMDQwMDcwMjUvOTQwY2I1MDYtYzI4Ny0z MTIzLWI1Y2QtODY0MGVmYzdkZTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYWFmZDZhY2YtMWI5MC00MmRiLTkz Y2EtNmE1YzA0MDA3MDI1L2FhZmQ2YWNmLTFiOTAtNDJkYi05M2NhLTZhNWMwNDAw NzAyNS5jcmwwHwYDVR0jBBgwFoAUM1KYgNaDxT8UcpLqoISZTxotu+QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hYWZkNmFjZi0xYjkwLTQyZGItOTNjYS02YTVj MDQwMDcwMjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQEfwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG6Zk8OOk4zdsBS1zj1IeeCKkSEKY1sgxR63apnJW7tsbf2i+NwYTgCj 0NTVX4htDX+9Na4TyER78ZUhlU3cD5xFHWDu0+fujdRZ4UhtTh08uHB2WcWhXXDW SCkZ6hdOdSTaeTJ9qMRX4YBM3autaIuNQk0BzqAE79FT6rZeYPEPPl8sjZjYf3NO WNVkZQVa/JWEMKsMABQxltxQRkB9oir8cxikETv2HeRTYz4RS1KEmJ5oLtyNJEQd 7HNrcDrn6c8jr62XkqntUs9pg6J8mMV0DVJsxKi94T15ZAL6jysMVqBOVVU+Ut9i r0tn9dgVhrXRxBgNVVnjg4y9VdF26s8= -----END CERTIFICATE-----Generated at Thu Sep 3 17:44:38 2026 by rpki-client