$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025/2721406e-41a4-3e0f-8b73-e2bf43fe4ea6.roa File: 2721406e-41a4-3e0f-8b73-e2bf43fe4ea6.roa (raw, json) Hash identifier: eUWh+uz80p/rCA14apjRuhlgneuzSV0CUvRvoj6Iuro= Subject key identifier: 33:CF:42:D2:32:AD:EF:08:DB:BD:99:23:33:AA:23:57:D7:B0:5D:66 Certificate issuer: /CN=aafd6acf-1b90-42db-93ca-6a5c04007025 Certificate serial: 010D0C9F4328584F979DBF91CD33879594A196C0 Authority key identifier: 33:52:98:80:D6:83:C5:3F:14:72:92:EA:A0:84:99:4F:1A:2D:BB:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025/2721406e-41a4-3e0f-8b73-e2bf43fe4ea6.roa Signing time: Fri 23 Oct 2026 01:00:12 +0000 ROA not before: Fri 23 Oct 2026 01:00:12 +0000 ROA not after: Thu 21 Jan 2027 02:00:12 +0000 asID: 812 IP address blocks: 69.58.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025/aafd6acf-1b90-42db-93ca-6a5c04007025.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025/aafd6acf-1b90-42db-93ca-6a5c04007025.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:97:9d:bf:91:cd:33:87:95:94:a1:96:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aafd6acf-1b90-42db-93ca-6a5c04007025 Validity Not Before: Oct 23 01:00:12 2026 GMT Not After : Jan 21 02:00:12 2027 GMT Subject: CN=94561496-9ed3-4084-92f4-4e0dde04ff9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1d:08:15:0c:fe:1a:02:44:70:28:0c:e5:c7: 0a:67:35:9b:51:b4:b9:90:d7:10:b0:3a:48:2f:89: 73:90:0a:12:18:c5:5f:4a:df:2d:96:13:d0:c5:20: dd:6d:fa:87:ae:e1:1b:cf:1b:f5:66:b7:ba:bb:47: 95:f5:14:de:7a:70:be:09:2b:36:36:e6:63:74:c1: 12:51:96:6d:70:fa:8b:ea:49:ab:8f:8d:5a:62:9d: 93:04:a1:fb:48:7c:fb:bf:8d:43:56:73:be:e9:7f: 1d:55:34:ed:76:54:dd:60:de:40:5a:9a:78:db:bd: e2:c1:6e:79:7f:02:98:4b:7b:a9:dc:82:f5:18:89: 02:32:8a:06:cc:44:70:51:80:9c:b6:53:3d:3e:e8: 49:18:46:27:2a:b4:8b:53:bf:28:c6:12:10:64:d1: 91:f5:78:2f:d1:21:d0:72:14:b8:d5:7f:68:42:3a: 8f:87:b1:49:92:9d:86:95:63:a2:ee:a2:37:7e:57: 32:a3:13:a2:d8:9f:90:65:b3:70:6d:51:e9:76:46: d2:0f:75:10:eb:dc:48:53:ad:a7:87:1b:3f:c4:11: 8e:b4:79:c9:9b:f7:52:cd:ab:37:33:ba:96:2c:69: 44:09:c8:d4:10:ef:e9:3b:e5:79:91:d1:34:c9:2a: 43:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:CF:42:D2:32:AD:EF:08:DB:BD:99:23:33:AA:23:57:D7:B0:5D:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025/2721406e-41a4-3e0f-8b73-e2bf43fe4ea6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025/aafd6acf-1b90-42db-93ca-6a5c04007025.crl X509v3 Authority Key Identifier: keyid:33:52:98:80:D6:83:C5:3F:14:72:92:EA:A0:84:99:4F:1A:2D:BB:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025.cer sbgp-ipAddrBlock: critical IPv4: 69.58.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:5d:a9:25:d8:2e:b6:e1:cc:c6:39:ce:cd:e0:91:75:a9:a7: 42:74:23:38:c4:86:03:aa:45:c7:30:76:42:a2:88:68:e9:bf: 71:87:d0:24:2d:fc:74:97:a3:75:89:6c:33:c9:a1:f9:82:92: 10:fd:e8:10:53:57:16:fc:ea:45:59:d9:98:b3:46:3e:21:d2: 4f:06:a2:a4:2f:fc:1a:87:42:27:36:03:b6:f9:4c:44:c6:46: d1:e6:f4:51:30:70:67:89:4c:54:c7:2a:4d:61:27:af:2c:c5: 86:2e:3a:70:e4:6b:2e:e2:25:c0:27:26:c9:0d:a3:f5:51:b9: 20:38:2b:22:43:20:02:fa:07:d6:72:1d:61:fb:88:50:cb:5c: 24:f3:ca:90:6c:a3:e2:3f:c2:cb:d7:cd:ca:4e:d0:af:96:5b: fb:18:f5:32:ad:2c:95:a4:31:65:94:68:ac:05:64:a7:7c:b7: 31:06:dc:e0:c8:ee:57:5c:ac:9a:ed:a5:41:c1:7b:4a:6b:32: 81:52:b1:c9:46:43:f5:32:81:27:9a:77:12:ef:24:de:52:0e: e2:61:7d:54:d3:79:33:d9:79:13:61:d6:d4:d5:dc:4e:a2:88: 62:75:c3:33:c3:75:f2:77:ac:59:ea:17:30:75:7d:bb:b2:ac: 33:ed:d7:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+Xnb+RzTOHlZShlsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmZDZhY2YtMWI5MC00MmRiLTkzY2EtNmE1YzA0MDA3 MDI1MB4XDTI2MTAyMzAxMDAxMloXDTI3MDEyMTAyMDAxMlowLzEtMCsGA1UEAxMk OTQ1NjE0OTYtOWVkMy00MDg0LTkyZjQtNGUwZGRlMDRmZjljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvx0IFQz+GgJEcCgM5ccKZzWbUbS5kNcQsDpI L4lzkAoSGMVfSt8tlhPQxSDdbfqHruEbzxv1Zre6u0eV9RTeenC+CSs2NuZjdMES UZZtcPqL6kmrj41aYp2TBKH7SHz7v41DVnO+6X8dVTTtdlTdYN5AWpp4273iwW55 fwKYS3up3IL1GIkCMooGzERwUYCctlM9PuhJGEYnKrSLU78oxhIQZNGR9Xgv0SHQ chS41X9oQjqPh7FJkp2GlWOi7qI3flcyoxOi2J+QZbNwbVHpdkbSD3UQ69xIU62n hxs/xBGOtHnJm/dSzas3M7qWLGlECcjUEO/pO+V5kdE0ySpDsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDPPQtIyre8I272ZIzOqI1fXsF1mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hYWZk NmFjZi0xYjkwLTQyZGItOTNjYS02YTVjMDQwMDcwMjUvMjcyMTQwNmUtNDFhNC0z ZTBmLThiNzMtZTJiZjQzZmU0ZWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYWFmZDZhY2YtMWI5MC00MmRiLTkz Y2EtNmE1YzA0MDA3MDI1L2FhZmQ2YWNmLTFiOTAtNDJkYi05M2NhLTZhNWMwNDAw NzAyNS5jcmwwHwYDVR0jBBgwFoAUM1KYgNaDxT8UcpLqoISZTxotu+QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hYWZkNmFjZi0xYjkwLTQyZGItOTNjYS02YTVj MDQwMDcwMjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERTpgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADJdqSXYLrbhzMY5zs3gkXWpp0J0IzjEhgOqRccwdkKiiGjpv3GH0CQt /HSXo3WJbDPJofmCkhD96BBTVxb86kVZ2ZizRj4h0k8GoqQv/BqHQic2A7b5TETG RtHm9FEwcGeJTFTHKk1hJ68sxYYuOnDkay7iJcAnJskNo/VRuSA4KyJDIAL6B9Zy HWH7iFDLXCTzypBso+I/wsvXzcpO0K+WW/sY9TKtLJWkMWWUaKwFZKd8tzEG3ODI 7ldcrJrtpUHBe0prMoFSsclGQ/UygSeadxLvJN5SDuJhfVTTeTPZeRNh1tTV3E6i iGJ1wzPDdfJ3rFnqFzB1fbuyrDPt11Y= -----END CERTIFICATE-----Generated at Sun Nov 15 11:45:38 2026 by rpki-client