$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b/aaf7d372-4189-3790-9dca-61a125a2f0df.roa File: aaf7d372-4189-3790-9dca-61a125a2f0df.roa (raw, json) Hash identifier: vFCgsiPwSFCDxXvrzYhNNyjuYXbQtUvHIusFMroZArY= Subject key identifier: 94:13:DF:55:48:45:2B:69:3A:B3:25:4D:40:90:51:CC:28:6D:B2:B0 Certificate issuer: /CN=23fa747f-0e53-4654-913d-ebe4ae8f453b Certificate serial: 010D0C9F4328584AB650E9E594C44053EC222200 Authority key identifier: 4B:07:70:44:0A:64:F7:A4:10:4A:2A:58:81:04:85:C1:C9:B1:EE:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b/aaf7d372-4189-3790-9dca-61a125a2f0df.roa Signing time: Fri 01 Aug 2025 13:00:41 +0000 ROA not before: Fri 01 Aug 2025 13:00:41 +0000 ROA not after: Thu 30 Oct 2025 13:00:41 +0000 asID: 395184 IP address blocks: 2620:0:950::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b/23fa747f-0e53-4654-913d-ebe4ae8f453b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b/23fa747f-0e53-4654-913d-ebe4ae8f453b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b6:50:e9:e5:94:c4:40:53:ec:22:22:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23fa747f-0e53-4654-913d-ebe4ae8f453b Validity Not Before: Aug 1 13:00:41 2025 GMT Not After : Oct 30 13:00:41 2025 GMT Subject: CN=9e729888-58b0-4010-b8d9-c8bfadb703f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:8e:76:14:48:38:f4:3c:b1:0c:9b:85:af:82: fc:6c:38:32:55:e7:3e:6d:17:7e:b5:91:2e:49:da: 8d:7f:c3:8d:01:c4:01:30:c9:c0:e2:ab:5e:27:62: d3:27:2f:37:a0:ce:84:8b:5c:f7:f7:b2:79:10:3e: 10:fe:56:59:27:00:a5:8a:21:9e:fd:59:d4:05:c4: 49:ec:fb:46:31:9c:4c:0a:f7:87:71:bb:a3:28:ae: d4:e5:33:05:9f:d6:98:59:a3:83:a0:e2:f7:8e:a6: 6e:4d:55:b6:3b:09:dc:4e:42:5f:75:35:31:17:b2: 1f:14:dc:48:e3:23:fb:0a:95:dd:7b:b4:a7:c7:c3: dc:ec:b2:ec:0b:09:b5:58:9b:30:6e:aa:26:1e:b6: 91:43:11:69:93:04:d8:df:2a:be:15:6b:1e:ee:b6: a0:a6:00:df:df:64:4f:16:37:7e:6b:ec:d2:5e:1d: 8c:69:7d:c7:4d:c4:f8:f5:bb:ca:39:6f:1b:76:d9: 9a:60:84:da:29:e8:0d:79:d0:21:be:ba:dd:1a:53: 5f:b5:3d:54:bf:07:13:b2:ef:e9:50:dc:18:56:03: d8:d3:5f:71:53:76:d1:06:90:2a:eb:57:cf:05:e0: 95:52:36:70:b4:44:52:b6:f1:9d:38:98:ad:26:87: c0:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:13:DF:55:48:45:2B:69:3A:B3:25:4D:40:90:51:CC:28:6D:B2:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b/aaf7d372-4189-3790-9dca-61a125a2f0df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b/23fa747f-0e53-4654-913d-ebe4ae8f453b.crl X509v3 Authority Key Identifier: keyid:4B:07:70:44:0A:64:F7:A4:10:4A:2A:58:81:04:85:C1:C9:B1:EE:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b.cer sbgp-ipAddrBlock: critical IPv6: 2620:0:950::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:55:df:87:5b:b3:2b:a7:c8:45:50:f1:6e:53:8b:5c:21:e9: a5:df:bc:35:5e:7e:07:f5:a8:a7:42:46:0e:31:1f:70:a5:df: bf:dd:5c:af:bb:0c:42:e4:66:31:0a:aa:3b:9a:5f:30:37:2b: 67:b1:50:be:91:8d:32:0b:61:ae:6e:7d:bb:e6:9c:f3:92:26: 62:1a:bd:b5:f9:77:1d:71:3a:80:f8:96:f3:e8:87:42:59:28: 4d:1c:d2:08:b3:22:cd:ce:4d:7e:55:3a:a6:ac:54:3a:d4:fe: 2b:e0:ff:37:fa:d4:53:c5:74:f9:61:fe:07:09:0f:a5:32:d8: 72:aa:d3:f3:ed:69:37:eb:75:dd:80:b2:56:9f:e8:b9:3f:d1: 8d:87:12:43:25:cb:b6:32:51:c9:25:5e:ac:8f:ba:69:4a:cc: ec:8f:c2:5e:2c:5b:fc:84:21:5c:4d:c3:e9:21:f8:c6:43:70: 8d:c7:4a:66:12:8e:d3:03:82:70:f2:74:2d:f1:fa:ce:81:a4: cb:2c:7d:30:4b:e1:a5:d6:34:42:b4:18:e5:a1:fc:8d:34:3e: 24:9d:a2:97:c8:21:4b:d0:9c:57:e9:d2:e8:d9:f9:fe:35:97: 22:6b:c2:ec:88:93:04:da:4a:2e:9e:8b:6a:30:ee:2f:5d:f5: 46:2f:2d:ed -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq2UOnllMRAU+wiIgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNmYTc0N2YtMGU1My00NjU0LTkxM2QtZWJlNGFlOGY0 NTNiMB4XDTI1MDgwMTEzMDA0MVoXDTI1MTAzMDEzMDA0MVowLzEtMCsGA1UEAxMk OWU3Mjk4ODgtNThiMC00MDEwLWI4ZDktYzhiZmFkYjcwM2Y3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3o52FEg49DyxDJuFr4L8bDgyVec+bRd+tZEu SdqNf8ONAcQBMMnA4qteJ2LTJy83oM6Ei1z397J5ED4Q/lZZJwCliiGe/VnUBcRJ 7PtGMZxMCveHcbujKK7U5TMFn9aYWaODoOL3jqZuTVW2OwncTkJfdTUxF7IfFNxI 4yP7CpXde7Snx8Pc7LLsCwm1WJswbqomHraRQxFpkwTY3yq+FWse7ragpgDf32RP Fjd+a+zSXh2MaX3HTcT49bvKOW8bdtmaYITaKegNedAhvrrdGlNftT1UvwcTsu/p UNwYVgPY019xU3bRBpAq61fPBeCVUjZwtERStvGdOJitJofAiwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJQT31VIRStpOrMlTUCQUcwobbKwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Zh NzQ3Zi0wZTUzLTQ2NTQtOTEzZC1lYmU0YWU4ZjQ1M2IvYWFmN2QzNzItNDE4OS0z NzkwLTlkY2EtNjFhMTI1YTJmMGRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNmYTc0N2YtMGU1My00NjU0LTkx M2QtZWJlNGFlOGY0NTNiLzIzZmE3NDdmLTBlNTMtNDY1NC05MTNkLWViZTRhZThm NDUzYi5jcmwwHwYDVR0jBBgwFoAUSwdwRApk96QQSipYgQSFwcmx7kUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2ZhNzQ3Zi0wZTUzLTQ2NTQtOTEzZC1lYmU0 YWU4ZjQ1M2IuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAAAlQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH5V34dbsyunyEVQ8W5Ti1wh6aXfvDVefgf1qKdCRg4xH3Cl37/d XK+7DELkZjEKqjuaXzA3K2exUL6RjTILYa5ufbvmnPOSJmIavbX5dx1xOoD4lvPo h0JZKE0c0gizIs3OTX5VOqasVDrU/ivg/zf61FPFdPlh/gcJD6Uy2HKq0/PtaTfr dd2Aslaf6Lk/0Y2HEkMly7YyUcklXqyPumlKzOyPwl4sW/yEIVxNw+kh+MZDcI3H SmYSjtMDgnDydC3x+s6BpMssfTBL4aXWNEK0GOWh/I00PiSdopfIIUvQnFfp0ujZ +f41lyJrwuyIkwTaSi6ei2ow7i9d9UYvLe0= -----END CERTIFICATE-----Generated at Mon Oct 20 21:23:49 2025 by rpki-client