$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025/940cb506-c287-3123-b5cd-8640efc7de0a.roa File: 940cb506-c287-3123-b5cd-8640efc7de0a.roa (raw, json) Hash identifier: WpmLNoMT6jmJV3HvL0rbEoBZsNrTbgDvzRyT7cSedTc= Subject key identifier: 3D:80:A7:E5:55:18:86:0D:F9:3A:F2:45:43:81:2F:B3:86:A0:08:93 Certificate issuer: /CN=aafd6acf-1b90-42db-93ca-6a5c04007025 Certificate serial: 010D0C9F4328584E534F37D2BC6735BCAB2CAE40 Authority key identifier: 33:52:98:80:D6:83:C5:3F:14:72:92:EA:A0:84:99:4F:1A:2D:BB:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025/940cb506-c287-3123-b5cd-8640efc7de0a.roa Signing time: Sun 28 Jun 2026 21:00:11 +0000 ROA not before: Sun 28 Jun 2026 21:00:11 +0000 ROA not after: Sat 26 Sep 2026 21:00:11 +0000 asID: 812 IP address blocks: 64.71.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025/aafd6acf-1b90-42db-93ca-6a5c04007025.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025/aafd6acf-1b90-42db-93ca-6a5c04007025.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:53:4f:37:d2:bc:67:35:bc:ab:2c:ae:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aafd6acf-1b90-42db-93ca-6a5c04007025 Validity Not Before: Jun 28 21:00:11 2026 GMT Not After : Sep 26 21:00:11 2026 GMT Subject: CN=50802602-23e4-428c-89cb-67a5659e1257 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:a3:2e:0f:77:4b:58:e7:3e:f0:ef:db:72:1f: be:08:98:2b:d8:80:12:ef:e1:c2:70:16:d8:94:e2: 77:d9:2d:f1:69:fd:f2:50:f8:e6:9d:cd:41:be:3d: 45:c6:a2:06:e4:e5:53:2d:cb:38:b8:a3:d0:72:4f: 9d:e8:de:8f:96:9d:37:88:a7:d5:f5:79:ac:c3:fc: 4f:25:92:84:ca:10:a2:b3:b6:95:c0:53:47:d4:b1: 61:d8:28:d1:3d:e7:b5:7b:a9:a8:fb:02:e0:f0:91: 75:22:d0:64:e6:c4:24:ac:25:dd:2a:46:fd:ec:f1: a0:a1:81:8b:9b:55:04:06:5e:dc:d1:a8:bb:b1:1e: 60:95:40:d6:6e:6d:68:db:95:5a:e0:b8:f2:d7:78: 11:72:e9:f3:75:90:47:17:21:5d:ec:c1:fc:fb:17: a5:9b:06:ad:29:f8:2a:6e:f2:09:fb:42:c6:c1:a3: c5:a7:40:53:52:4c:e5:fe:48:00:6d:b8:c0:20:18: f1:d5:06:f7:c7:b8:9c:43:17:26:03:41:56:9e:9d: 18:90:eb:81:75:ca:1b:c2:76:e7:34:d0:71:60:8d: 39:98:ab:c3:8b:0a:f7:98:1a:09:c0:21:a3:86:3f: 14:2a:4d:43:fb:99:80:40:a7:c0:36:7c:85:42:20: 23:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:80:A7:E5:55:18:86:0D:F9:3A:F2:45:43:81:2F:B3:86:A0:08:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025/940cb506-c287-3123-b5cd-8640efc7de0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025/aafd6acf-1b90-42db-93ca-6a5c04007025.crl X509v3 Authority Key Identifier: keyid:33:52:98:80:D6:83:C5:3F:14:72:92:EA:A0:84:99:4F:1A:2D:BB:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025.cer sbgp-ipAddrBlock: critical IPv4: 64.71.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:c6:45:a8:69:b0:6d:d8:e9:6d:f5:56:bd:b5:9d:7e:c0:e8: a2:b9:ab:e2:3b:46:86:b8:01:ef:c8:cc:09:69:b0:e1:d5:63: 32:79:6f:bc:2f:90:b2:f1:59:11:c6:77:51:d6:00:bd:a9:5e: d6:8c:83:a8:f5:a3:1a:28:4c:ae:97:f9:a1:67:e6:29:26:20: 86:2d:24:58:e5:58:2d:53:e7:22:57:e7:3c:14:bf:0e:5a:81: 61:94:88:26:30:b4:14:ac:e8:7b:60:a0:0c:01:ea:6c:6a:a7: ed:3c:09:a8:69:64:b7:98:01:4c:b0:ba:c6:29:ab:88:e3:f6: 4d:2f:2f:47:00:49:96:e7:6f:0f:89:4a:62:99:01:91:fd:4e: 76:dd:6f:51:f3:27:9c:a3:0f:b1:7a:7a:06:3f:e9:47:f7:72: 41:cf:1a:6a:a4:b6:e8:9b:54:96:6a:6c:e5:0f:96:87:08:2c: 52:ae:07:ff:fb:0d:fb:93:c1:46:8b:c1:ce:83:78:9b:85:8d: b2:4e:48:b7:c3:c2:fd:fd:d2:bb:dc:c6:f1:dc:f9:cf:bd:a1: 99:77:47:53:d1:94:8c:98:fc:a9:0f:8a:cc:54:e4:54:d9:0d: 76:4a:25:d8:1f:c5:22:a2:c0:6f:6b:42:0c:6d:a6:4c:dd:8a: 4b:f8:f5:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5TTzfSvGc1vKssrkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmZDZhY2YtMWI5MC00MmRiLTkzY2EtNmE1YzA0MDA3 MDI1MB4XDTI2MDYyODIxMDAxMVoXDTI2MDkyNjIxMDAxMVowLzEtMCsGA1UEAxMk NTA4MDI2MDItMjNlNC00MjhjLTg5Y2ItNjdhNTY1OWUxMjU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6MuD3dLWOc+8O/bch++CJgr2IAS7+HCcBbY lOJ32S3xaf3yUPjmnc1Bvj1FxqIG5OVTLcs4uKPQck+d6N6Plp03iKfV9Xmsw/xP JZKEyhCis7aVwFNH1LFh2CjRPee1e6mo+wLg8JF1ItBk5sQkrCXdKkb97PGgoYGL m1UEBl7c0ai7sR5glUDWbm1o25Va4Ljy13gRcunzdZBHFyFd7MH8+xelmwatKfgq bvIJ+0LGwaPFp0BTUkzl/kgAbbjAIBjx1Qb3x7icQxcmA0FWnp0YkOuBdcobwnbn NNBxYI05mKvDiwr3mBoJwCGjhj8UKk1D+5mAQKfANnyFQiAj7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD2Ap+VVGIYN+TryRUOBL7OGoAiTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hYWZk NmFjZi0xYjkwLTQyZGItOTNjYS02YTVjMDQwMDcwMjUvOTQwY2I1MDYtYzI4Ny0z MTIzLWI1Y2QtODY0MGVmYzdkZTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYWFmZDZhY2YtMWI5MC00MmRiLTkz Y2EtNmE1YzA0MDA3MDI1L2FhZmQ2YWNmLTFiOTAtNDJkYi05M2NhLTZhNWMwNDAw NzAyNS5jcmwwHwYDVR0jBBgwFoAUM1KYgNaDxT8UcpLqoISZTxotu+QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hYWZkNmFjZi0xYjkwLTQyZGItOTNjYS02YTVj MDQwMDcwMjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQEfwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFjGRahpsG3Y6W31Vr21nX7A6KK5q+I7Roa4Ae/IzAlpsOHVYzJ5b7wv kLLxWRHGd1HWAL2pXtaMg6j1oxooTK6X+aFn5ikmIIYtJFjlWC1T5yJX5zwUvw5a gWGUiCYwtBSs6HtgoAwB6mxqp+08CahpZLeYAUywusYpq4jj9k0vL0cASZbnbw+J SmKZAZH9Tnbdb1HzJ5yjD7F6egY/6Uf3ckHPGmqktuibVJZqbOUPlocILFKuB//7 DfuTwUaLwc6DeJuFjbJOSLfDwv390rvcxvHc+c+9oZl3R1PRlIyY/KkPisxU5FTZ DXZKJdgfxSKiwG9rQgxtpkzdikv49as= -----END CERTIFICATE-----Generated at Sun Jul 19 15:01:17 2026 by rpki-client