$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/aaf529f7-7b6d-3be9-978f-88e20d77046a.roa File: aaf529f7-7b6d-3be9-978f-88e20d77046a.roa (raw, json) Hash identifier: Qa34dgJaXETF1z6ZREt24Iz/wzd5MWAOhBQ7hBXCAiQ= Subject key identifier: 4F:27:78:D2:2A:D4:BE:8D:BD:76:34:1E:EB:21:AF:0A:ED:23:20:93 Certificate issuer: /CN=8450660f-e06c-43ee-910d-d4b472fdc395 Certificate serial: 010D0C9F4328584FA2C885CCD03803BC91696410 Authority key identifier: 69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/aaf529f7-7b6d-3be9-978f-88e20d77046a.roa Signing time: Tue 27 Oct 2026 01:00:14 +0000 ROA not before: Tue 27 Oct 2026 01:00:14 +0000 ROA not after: Mon 25 Jan 2027 02:00:14 +0000 asID: 23316 IP address blocks: 72.37.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a2:c8:85:cc:d0:38:03:bc:91:69:64:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8450660f-e06c-43ee-910d-d4b472fdc395 Validity Not Before: Oct 27 01:00:14 2026 GMT Not After : Jan 25 02:00:14 2027 GMT Subject: CN=337cb2b0-ab43-4a75-af95-f5c5ac49168b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:fd:72:29:f6:22:5f:a4:7d:fb:fd:e7:18:dd: 74:b8:91:ba:e0:f1:c1:71:a2:4c:77:49:f3:3f:76: f3:20:b0:31:a1:99:ca:bb:7f:ca:c9:68:d2:3d:a5: ea:4d:1e:b1:1f:21:91:4a:29:f7:57:64:f3:5e:51: 99:06:c8:80:cb:1f:c9:64:11:16:3f:90:18:9e:43: 79:7d:6c:4f:4c:e1:80:3a:d2:57:3e:87:45:00:4a: c3:48:85:a9:e7:1b:cd:81:7b:8b:7a:d4:54:5c:b7: a9:02:7b:e4:4f:e9:0b:81:f3:d5:3d:8c:06:a0:22: 95:ba:85:f1:bb:d7:4e:55:5d:b9:5c:3b:92:1c:3b: 79:a1:67:4e:f5:8e:94:9f:76:3e:22:77:89:8f:ae: 92:45:4a:8a:7b:47:f1:94:c1:c2:32:0c:7a:93:91: 32:1c:ac:2f:54:ca:c3:dc:b4:cb:8f:83:eb:76:9d: 33:82:8f:5c:c3:a7:b5:e0:ad:71:96:1b:30:50:a8: 24:2e:de:c7:6f:71:3a:94:01:c7:36:8f:51:3d:d1: 0e:04:d7:0c:f1:de:08:bf:e9:cd:ab:a0:2d:ed:8e: f8:6b:d6:59:6d:d2:63:3a:ef:f2:b0:35:a5:f6:aa: 4a:bf:d6:c6:82:20:3c:7a:24:22:15:b2:bb:71:83: 12:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:27:78:D2:2A:D4:BE:8D:BD:76:34:1E:EB:21:AF:0A:ED:23:20:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/aaf529f7-7b6d-3be9-978f-88e20d77046a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl X509v3 Authority Key Identifier: keyid:69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer sbgp-ipAddrBlock: critical IPv4: 72.37.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:eb:8e:a9:28:77:a2:d0:3e:7a:65:77:da:d7:7e:a2:a3:0d: 4b:09:6e:f0:a6:b8:24:8f:41:25:02:bb:1b:b0:af:15:f9:33: cb:69:02:74:6b:0c:3e:04:04:16:cf:b4:8e:ed:b6:25:bb:61: 44:67:82:8a:04:0c:5d:98:50:be:c3:d8:2d:c3:92:fb:f5:4f: f1:f7:a1:96:9f:1a:df:3e:7e:fc:73:56:3e:08:72:15:bd:2c: 67:18:5b:c9:c5:ed:c2:c6:56:bd:7a:fa:48:75:99:88:f5:ea: 2e:67:ec:75:29:90:9c:30:63:50:b2:99:bb:ba:8c:6a:8d:db: 55:ea:c0:c3:b6:48:ad:0c:62:64:68:48:5d:60:81:3e:58:41: 64:e7:55:ba:d5:c5:a7:15:18:b6:20:3a:65:89:be:af:e6:75: 59:bd:75:f5:b2:e2:99:40:ac:88:eb:10:fa:12:21:2c:0d:5d: 91:4a:8d:93:ac:e1:7c:c5:1f:30:ed:25:b2:8a:9f:61:73:60: f7:55:74:1a:9d:74:65:a0:4b:e5:c5:68:74:c2:53:67:10:3c: 6c:08:75:63:10:67:ee:09:fc:62:3e:e0:bd:aa:f4:5a:41:49: ed:32:be:de:c0:5f:fb:05:ed:89:4b:73:51:86:ec:39:c3:c4: dd:db:a3:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+iyIXM0DgDvJFpZBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODQ1MDY2MGYtZTA2Yy00M2VlLTkxMGQtZDRiNDcyZmRj Mzk1MB4XDTI2MTAyNzAxMDAxNFoXDTI3MDEyNTAyMDAxNFowLzEtMCsGA1UEAxMk MzM3Y2IyYjAtYWI0My00YTc1LWFmOTUtZjVjNWFjNDkxNjhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0v1yKfYiX6R9+/3nGN10uJG64PHBcaJMd0nz P3bzILAxoZnKu3/KyWjSPaXqTR6xHyGRSin3V2TzXlGZBsiAyx/JZBEWP5AYnkN5 fWxPTOGAOtJXPodFAErDSIWp5xvNgXuLetRUXLepAnvkT+kLgfPVPYwGoCKVuoXx u9dOVV25XDuSHDt5oWdO9Y6Un3Y+IneJj66SRUqKe0fxlMHCMgx6k5EyHKwvVMrD 3LTLj4Prdp0zgo9cw6e14K1xlhswUKgkLt7Hb3E6lAHHNo9RPdEOBNcM8d4Iv+nN q6At7Y74a9ZZbdJjOu/ysDWl9qpKv9bGgiA8eiQiFbK7cYMSyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE8neNIq1L6NvXY0HushrwrtIyCTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84NDUw NjYwZi1lMDZjLTQzZWUtOTEwZC1kNGI0NzJmZGMzOTUvYWFmNTI5ZjctN2I2ZC0z YmU5LTk3OGYtODhlMjBkNzcwNDZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODQ1MDY2MGYtZTA2Yy00M2VlLTkx MGQtZDRiNDcyZmRjMzk1Lzg0NTA2NjBmLWUwNmMtNDNlZS05MTBkLWQ0YjQ3MmZk YzM5NS5jcmwwHwYDVR0jBBgwFoAUaSV1dwQ7lbF+FkhyBO8jrAqogc0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84NDUwNjYwZi1lMDZjLTQzZWUtOTEwZC1kNGI0 NzJmZGMzOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASCWNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFjrjqkod6LQPnpld9rXfqKjDUsJbvCmuCSPQSUCuxuwrxX5M8tpAnRr DD4EBBbPtI7ttiW7YURngooEDF2YUL7D2C3Dkvv1T/H3oZafGt8+fvxzVj4IchW9 LGcYW8nF7cLGVr16+kh1mYj16i5n7HUpkJwwY1Cymbu6jGqN21XqwMO2SK0MYmRo SF1ggT5YQWTnVbrVxacVGLYgOmWJvq/mdVm9dfWy4plArIjrEPoSISwNXZFKjZOs 4XzFHzDtJbKKn2FzYPdVdBqddGWgS+XFaHTCU2cQPGwIdWMQZ+4J/GI+4L2q9FpB Se0yvt7AX/sF7YlLc1GG7DnDxN3boyA= -----END CERTIFICATE-----Generated at Thu Nov 5 17:53:37 2026 by rpki-client