$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025/39ddc6b9-a433-360e-8672-ec63693e7e71.roa File: 39ddc6b9-a433-360e-8672-ec63693e7e71.roa (raw, json) Hash identifier: ko3fklheC2gUg0SFGxgbZpEVCUr16td0xafsz0soxEM= Subject key identifier: CB:E1:27:3B:8E:6A:E2:EC:2D:B6:21:F1:F0:10:89:F4:5C:B5:EC:99 Certificate issuer: /CN=aafd6acf-1b90-42db-93ca-6a5c04007025 Certificate serial: 010D0C9F4328584F979DC148579B52B3FB1DB620 Authority key identifier: 33:52:98:80:D6:83:C5:3F:14:72:92:EA:A0:84:99:4F:1A:2D:BB:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025/39ddc6b9-a433-360e-8672-ec63693e7e71.roa Signing time: Fri 23 Oct 2026 01:00:12 +0000 ROA not before: Fri 23 Oct 2026 01:00:12 +0000 ROA not after: Thu 21 Jan 2027 02:00:12 +0000 asID: 812 IP address blocks: 69.63.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025/aafd6acf-1b90-42db-93ca-6a5c04007025.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025/aafd6acf-1b90-42db-93ca-6a5c04007025.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:97:9d:c1:48:57:9b:52:b3:fb:1d:b6:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aafd6acf-1b90-42db-93ca-6a5c04007025 Validity Not Before: Oct 23 01:00:12 2026 GMT Not After : Jan 21 02:00:12 2027 GMT Subject: CN=5e7d1e69-c53f-4280-a3aa-896a4bb4909b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:56:1d:7e:3c:cb:2a:d4:f7:e4:09:b3:56:91: 3b:30:85:b1:24:b2:c3:fe:11:96:55:b2:8c:e3:b2: 09:59:55:89:39:f5:6c:d4:db:af:28:9b:9a:b8:cf: 38:59:05:67:11:40:ee:48:95:7e:22:6c:b6:41:93: 7f:2d:b3:aa:56:b2:57:d0:44:3d:71:0f:28:de:14: 9a:db:95:c5:34:2e:52:d5:12:7b:9e:17:74:b8:5a: 8a:16:44:ad:eb:a3:e8:9f:fe:fb:81:1b:dd:0d:20: 6b:20:36:da:d1:7f:e2:3e:99:bd:d4:d4:0f:2e:b9: f0:f9:49:18:05:b5:ca:4f:00:3d:a9:f4:02:b8:95: 30:ae:27:e6:ff:9f:1e:4e:1f:cc:00:5c:2a:c9:06: 1e:2f:cd:d5:58:96:bf:a9:01:fd:72:af:aa:9c:f3: 4e:36:55:35:20:5b:58:a3:3b:ab:9b:cd:f2:6f:10: aa:88:33:7f:fd:b9:a7:cf:ec:99:05:d9:fe:35:ba: ba:07:04:21:87:85:76:a3:60:c6:98:cd:c2:d9:8e: b8:79:07:01:74:b7:d5:09:87:6c:5a:c6:0f:2a:ec: 7e:8d:54:3b:c3:c3:b8:07:10:1c:6e:89:7c:84:32: 81:71:f9:ea:02:1f:ed:4f:ff:b3:a8:d2:7f:d7:bf: 15:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:E1:27:3B:8E:6A:E2:EC:2D:B6:21:F1:F0:10:89:F4:5C:B5:EC:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025/39ddc6b9-a433-360e-8672-ec63693e7e71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025/aafd6acf-1b90-42db-93ca-6a5c04007025.crl X509v3 Authority Key Identifier: keyid:33:52:98:80:D6:83:C5:3F:14:72:92:EA:A0:84:99:4F:1A:2D:BB:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025.cer sbgp-ipAddrBlock: critical IPv4: 69.63.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:3f:58:ac:f0:88:05:0a:c8:7b:fb:ce:ea:da:ec:e7:e9:4b: f5:e6:f9:d1:81:65:bc:2c:87:01:60:70:07:d7:67:8d:bf:b4: 52:47:e8:60:76:87:dc:0d:74:50:73:58:58:3c:c7:14:0a:0d: 12:dd:30:7b:7c:6d:b3:ce:cf:c8:56:27:58:a3:e8:a7:4b:a2: b4:bf:66:a1:52:58:5e:01:7d:43:36:66:3b:f7:0f:fb:60:5e: 9f:4e:b6:78:c8:de:9b:ff:ed:21:01:61:d2:f6:fa:a3:6e:20: 38:4d:58:24:aa:92:91:97:ce:f0:82:17:d3:8e:ea:54:c1:b6: 44:eb:61:c4:6d:5a:a7:b9:db:45:33:6e:4c:96:de:5a:c5:a3: 2b:c8:40:35:7b:fb:1b:31:c8:2a:64:9f:23:7f:62:a7:86:8c: 7b:6e:87:3c:b6:0a:fb:e4:51:b9:40:c5:24:f6:03:6f:2c:16: 07:b8:87:52:6e:81:41:86:af:3a:c4:f0:fa:68:e7:39:e5:54: d4:13:f5:51:d6:b0:84:cb:3e:a0:71:de:23:2c:42:e5:38:7a: ad:ec:ec:4a:a4:30:84:0a:65:6e:5b:04:1b:c3:c6:00:1b:84: 53:60:e3:50:71:14:7a:03:c9:e9:a3:12:f5:c8:00:4a:06:d7: 76:e8:04:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+XncFIV5tSs/sdtiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmZDZhY2YtMWI5MC00MmRiLTkzY2EtNmE1YzA0MDA3 MDI1MB4XDTI2MTAyMzAxMDAxMloXDTI3MDEyMTAyMDAxMlowLzEtMCsGA1UEAxMk NWU3ZDFlNjktYzUzZi00MjgwLWEzYWEtODk2YTRiYjQ5MDliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlYdfjzLKtT35AmzVpE7MIWxJLLD/hGWVbKM 47IJWVWJOfVs1NuvKJuauM84WQVnEUDuSJV+Imy2QZN/LbOqVrJX0EQ9cQ8o3hSa 25XFNC5S1RJ7nhd0uFqKFkSt66Pon/77gRvdDSBrIDba0X/iPpm91NQPLrnw+UkY BbXKTwA9qfQCuJUwrifm/58eTh/MAFwqyQYeL83VWJa/qQH9cq+qnPNONlU1IFtY ozurm83ybxCqiDN//bmnz+yZBdn+Nbq6BwQhh4V2o2DGmM3C2Y64eQcBdLfVCYds WsYPKux+jVQ7w8O4BxAcbol8hDKBcfnqAh/tT/+zqNJ/178VAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMvhJzuOauLsLbYh8fAQifRcteyZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hYWZk NmFjZi0xYjkwLTQyZGItOTNjYS02YTVjMDQwMDcwMjUvMzlkZGM2YjktYTQzMy0z NjBlLTg2NzItZWM2MzY5M2U3ZTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYWFmZDZhY2YtMWI5MC00MmRiLTkz Y2EtNmE1YzA0MDA3MDI1L2FhZmQ2YWNmLTFiOTAtNDJkYi05M2NhLTZhNWMwNDAw NzAyNS5jcmwwHwYDVR0jBBgwFoAUM1KYgNaDxT8UcpLqoISZTxotu+QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hYWZkNmFjZi0xYjkwLTQyZGItOTNjYS02YTVj MDQwMDcwMjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERT/wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACs/WKzwiAUKyHv7zura7OfpS/Xm+dGBZbwshwFgcAfXZ42/tFJH6GB2 h9wNdFBzWFg8xxQKDRLdMHt8bbPOz8hWJ1ij6KdLorS/ZqFSWF4BfUM2Zjv3D/tg Xp9OtnjI3pv/7SEBYdL2+qNuIDhNWCSqkpGXzvCCF9OO6lTBtkTrYcRtWqe520Uz bkyW3lrFoyvIQDV7+xsxyCpknyN/YqeGjHtuhzy2CvvkUblAxST2A28sFge4h1Ju gUGGrzrE8Ppo5znlVNQT9VHWsITLPqBx3iMsQuU4eq3s7EqkMIQKZW5bBBvDxgAb hFNg41BxFHoDyemjEvXIAEoG13boBM4= -----END CERTIFICATE-----Generated at Sun Nov 15 11:46:03 2026 by rpki-client