$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b/aaf7d372-4189-3790-9dca-61a125a2f0df.roa File: aaf7d372-4189-3790-9dca-61a125a2f0df.roa (raw, json) Hash identifier: QSyB/CQ9ihuEVwr8a6JOTmSEn8zkn943nFdrGyhZl8M= Subject key identifier: B7:91:EA:9A:BF:31:66:E7:62:87:17:69:A5:6B:56:43:98:85:3C:D9 Certificate issuer: /CN=23fa747f-0e53-4654-913d-ebe4ae8f453b Certificate serial: 010D0C9F4328584D571FAF0B4400394188461140 Authority key identifier: 4B:07:70:44:0A:64:F7:A4:10:4A:2A:58:81:04:85:C1:C9:B1:EE:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b/aaf7d372-4189-3790-9dca-61a125a2f0df.roa Signing time: Mon 30 Mar 2026 13:00:30 +0000 ROA not before: Mon 30 Mar 2026 13:00:30 +0000 ROA not after: Sun 28 Jun 2026 13:00:30 +0000 asID: 395184 IP address blocks: 2620:0:950::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b/23fa747f-0e53-4654-913d-ebe4ae8f453b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b/23fa747f-0e53-4654-913d-ebe4ae8f453b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:57:1f:af:0b:44:00:39:41:88:46:11:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23fa747f-0e53-4654-913d-ebe4ae8f453b Validity Not Before: Mar 30 13:00:30 2026 GMT Not After : Jun 28 13:00:30 2026 GMT Subject: CN=5b72c047-fe2f-47e0-8bef-985660f1c55f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f9:30:db:e1:b4:80:28:92:98:9c:f7:46:05: 87:1e:37:25:c4:c7:49:6a:a7:ab:d0:6a:07:e3:56: 31:53:39:2a:9a:61:95:a6:3c:5d:f6:1c:08:0a:ab: 1f:0a:69:55:d9:2f:68:27:5f:07:4f:5d:96:09:79: ad:0d:ca:33:8d:9f:41:6c:0b:18:2f:ec:7e:e8:cf: 68:42:ea:c4:6f:5b:01:94:b2:27:de:86:ac:c5:b0: c0:08:8d:35:e3:19:5c:eb:36:59:46:1d:f7:ac:f6: ce:fe:94:6f:5a:d8:01:ec:2a:83:c6:57:0d:16:5a: 03:98:c7:28:ba:d6:6a:e7:4c:32:bc:9c:cd:18:b8: d8:00:bf:dd:f4:92:00:53:4b:a8:25:38:73:22:e9: e2:6c:1b:48:c5:35:b8:cf:be:ab:16:f1:8d:a4:8a: ab:76:ba:ff:b2:5f:a6:ad:e1:9f:5e:3c:c6:0f:07: a5:4d:90:90:90:ac:b4:55:82:0e:ab:59:2b:03:92: 0c:1c:f8:de:71:86:5f:55:34:de:65:24:21:ad:fe: 80:8a:84:81:d6:a8:5d:24:91:de:3a:70:0a:1b:35: d8:41:87:2b:23:0e:0c:55:9f:55:32:b3:fc:09:51: 77:3f:7c:be:b9:6b:22:39:33:4c:8f:d9:ec:1c:31: 77:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:91:EA:9A:BF:31:66:E7:62:87:17:69:A5:6B:56:43:98:85:3C:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b/aaf7d372-4189-3790-9dca-61a125a2f0df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b/23fa747f-0e53-4654-913d-ebe4ae8f453b.crl X509v3 Authority Key Identifier: keyid:4B:07:70:44:0A:64:F7:A4:10:4A:2A:58:81:04:85:C1:C9:B1:EE:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b.cer sbgp-ipAddrBlock: critical IPv6: 2620:0:950::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:64:27:88:54:3c:a6:42:06:c2:ed:3b:6d:c9:0b:df:32:3e: db:c2:cf:34:24:47:d1:9b:ea:0e:8d:4a:d4:6c:72:96:9b:b8: af:e9:c8:1f:33:95:e3:07:8b:11:7e:a8:08:42:8d:06:b5:04: e1:95:52:7e:27:d5:e7:2c:20:aa:8a:7a:8e:86:bd:ca:a3:c4: e6:a6:ab:c4:f8:37:6e:13:d0:5d:59:a5:c4:e5:62:71:78:c0: 0a:45:c9:16:ee:4b:4d:23:62:01:8c:ea:69:49:fc:eb:b5:64: da:66:fa:c5:bf:d0:cf:06:ff:c6:35:33:7d:3e:81:48:85:c8: b4:fb:3d:71:bb:f7:99:82:4c:e6:c6:ce:04:18:a7:8c:44:81: a8:bb:bc:ca:36:62:a7:5e:58:fe:d6:da:5c:de:19:ee:40:03: 10:56:4e:69:eb:b9:92:2a:95:2d:20:01:65:44:39:15:ba:29: d3:c2:46:a4:de:10:a2:7f:f3:36:68:d3:1a:ef:c3:fd:fc:bd: 34:d0:81:1a:e6:d8:f1:70:c6:07:92:f0:89:17:60:92:b1:e2: f0:ad:6d:07:6f:f6:53:e6:99:fe:25:10:c3:b7:c4:5d:98:ab: 29:4a:dc:cf:24:8c:07:90:10:cb:f6:48:66:43:be:04:80:96: 8c:c3:60:b6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1XH68LRAA5QYhGEUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNmYTc0N2YtMGU1My00NjU0LTkxM2QtZWJlNGFlOGY0 NTNiMB4XDTI2MDMzMDEzMDAzMFoXDTI2MDYyODEzMDAzMFowLzEtMCsGA1UEAxMk NWI3MmMwNDctZmUyZi00N2UwLThiZWYtOTg1NjYwZjFjNTVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvkw2+G0gCiSmJz3RgWHHjclxMdJaqer0GoH 41YxUzkqmmGVpjxd9hwICqsfCmlV2S9oJ18HT12WCXmtDcozjZ9BbAsYL+x+6M9o QurEb1sBlLIn3oasxbDACI014xlc6zZZRh33rPbO/pRvWtgB7CqDxlcNFloDmMco utZq50wyvJzNGLjYAL/d9JIAU0uoJThzIunibBtIxTW4z76rFvGNpIqrdrr/sl+m reGfXjzGDwelTZCQkKy0VYIOq1krA5IMHPjecYZfVTTeZSQhrf6AioSB1qhdJJHe OnAKGzXYQYcrIw4MVZ9VMrP8CVF3P3y+uWsiOTNMj9nsHDF3eQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLeR6pq/MWbnYocXaaVrVkOYhTzZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Zh NzQ3Zi0wZTUzLTQ2NTQtOTEzZC1lYmU0YWU4ZjQ1M2IvYWFmN2QzNzItNDE4OS0z NzkwLTlkY2EtNjFhMTI1YTJmMGRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNmYTc0N2YtMGU1My00NjU0LTkx M2QtZWJlNGFlOGY0NTNiLzIzZmE3NDdmLTBlNTMtNDY1NC05MTNkLWViZTRhZThm NDUzYi5jcmwwHwYDVR0jBBgwFoAUSwdwRApk96QQSipYgQSFwcmx7kUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2ZhNzQ3Zi0wZTUzLTQ2NTQtOTEzZC1lYmU0 YWU4ZjQ1M2IuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAAAlQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAItkJ4hUPKZCBsLtO23JC98yPtvCzzQkR9Gb6g6NStRscpabuK/p yB8zleMHixF+qAhCjQa1BOGVUn4n1ecsIKqKeo6GvcqjxOamq8T4N24T0F1ZpcTl YnF4wApFyRbuS00jYgGM6mlJ/Ou1ZNpm+sW/0M8G/8Y1M30+gUiFyLT7PXG795mC TObGzgQYp4xEgai7vMo2YqdeWP7W2lzeGe5AAxBWTmnruZIqlS0gAWVEORW6KdPC RqTeEKJ/8zZo0xrvw/38vTTQgRrm2PFwxgeS8IkXYJKx4vCtbQdv9lPmmf4lEMO3 xF2YqylK3M8kjAeQEMv2SGZDvgSAlozDYLY= -----END CERTIFICATE-----Generated at Fri Apr 17 15:16:58 2026 by rpki-client