$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2b2aeff8-0463-3e4f-a14b-7e7fd9134954.roa File: 2b2aeff8-0463-3e4f-a14b-7e7fd9134954.roa (raw, json) Hash identifier: od2gm3NSVqxKhr9DHqQsSDG7vkQM+QHODfcse6Hp3R4= Subject key identifier: B5:CF:B3:2A:D1:4B:E3:5F:DE:6B:DF:5B:7E:6C:D4:02:FF:E8:B0:69 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584F49773D68E299DA2CA4616780 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2b2aeff8-0463-3e4f-a14b-7e7fd9134954.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 214213 IP address blocks: 204.27.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:77:3d:68:e2:99:da:2c:a4:61:67:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=3951ade4-cd72-4cde-b9e4-1ae6350d94aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:4d:60:a3:52:61:7d:cd:e6:b0:a0:6a:de:bc: 51:9a:99:69:8c:56:ae:11:28:ff:ef:a5:ce:61:53: ea:5b:f3:2e:14:7d:b4:5b:e2:27:f8:bd:ba:46:51: 04:83:77:52:f0:4a:d2:55:7d:87:68:d7:c3:08:1d: 70:cd:5d:84:6d:12:c7:67:f1:ca:7a:ff:21:08:ac: 33:98:69:ab:64:bd:0a:b7:1d:14:0b:3e:f6:cd:ce: 9b:86:38:6f:cd:85:7f:85:e1:4f:bc:9e:5e:c0:56: e4:02:4c:35:50:6a:ef:0b:1a:64:73:2f:fc:b7:94: ad:de:34:1b:1e:49:9d:07:bc:5b:78:7b:a2:96:f5: d1:97:dd:9d:4f:88:68:41:60:c0:c3:29:c4:2b:5b: 10:3f:3f:b5:69:39:d9:74:c0:ae:0b:65:8b:6e:19: 21:0d:0c:02:e9:f2:f6:eb:35:3b:0c:29:43:a2:03: c0:92:ad:56:7c:e2:83:a3:53:47:50:15:cd:f3:70: 71:38:9c:07:92:66:ef:74:de:f3:d1:dc:34:67:f5: 0b:77:e1:cf:0a:b0:2b:fe:0a:c8:f4:fc:d4:f6:d9: 81:8e:89:b8:cc:8d:8d:57:7f:34:bd:ff:33:4e:e6: c5:df:ae:97:44:fa:bb:13:b0:43:d8:c3:7c:06:ad: a4:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:CF:B3:2A:D1:4B:E3:5F:DE:6B:DF:5B:7E:6C:D4:02:FF:E8:B0:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2b2aeff8-0463-3e4f-a14b-7e7fd9134954.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 204.27.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:cd:2c:90:37:92:91:a9:94:65:b3:3c:f4:82:64:ed:87:2e: 08:04:a1:b1:d3:d6:de:65:f4:71:68:05:46:d2:7d:ad:9c:54: a5:5a:7a:f7:fc:b3:d9:d9:4e:ce:6d:b7:c8:e0:0d:3a:7c:02: bd:53:bc:75:33:13:55:ba:d6:a1:94:fa:32:59:6e:68:ad:05: 6d:f9:24:80:b9:c6:1c:b8:8c:1f:2b:e3:67:da:2a:b2:29:dc: a9:22:1c:d5:67:1b:73:12:ca:5f:4b:c2:14:89:25:95:1c:43: 5d:b1:3f:7a:7c:e7:bc:ce:b7:07:0e:86:74:24:7d:5d:10:59: a4:3d:ed:13:56:d9:05:55:80:10:7f:37:fb:d9:4a:43:4d:d6: 45:5f:ea:5b:e3:b9:54:b0:d9:b6:a2:51:65:9d:07:93:cc:d7: e6:92:90:b7:24:55:0e:12:37:1e:a0:8e:ef:24:05:91:d3:0d: af:71:1f:b6:14:c9:74:aa:af:71:33:9b:b5:4c:52:ef:8d:40: c8:08:82:7b:2c:13:93:28:ad:4b:9e:33:33:28:82:5a:29:c4: 64:22:20:52:03:ad:5c:97:13:74:ab:aa:f2:1c:e5:a6:1a:6e: 74:c5:00:37:8d:32:d4:3d:b8:47:1a:28:94:0c:2c:e1:36:fb: 3b:58:86:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jdz1o4pnaLKRhZ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Mzk1MWFkZTQtY2Q3Mi00Y2RlLWI5ZTQtMWFlNjM1MGQ5NGFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtk1go1Jhfc3msKBq3rxRmplpjFauESj/76XO YVPqW/MuFH20W+In+L26RlEEg3dS8ErSVX2HaNfDCB1wzV2EbRLHZ/HKev8hCKwz mGmrZL0Ktx0UCz72zc6bhjhvzYV/heFPvJ5ewFbkAkw1UGrvCxpkcy/8t5St3jQb HkmdB7xbeHuilvXRl92dT4hoQWDAwynEK1sQPz+1aTnZdMCuC2WLbhkhDQwC6fL2 6zU7DClDogPAkq1WfOKDo1NHUBXN83BxOJwHkmbvdN7z0dw0Z/ULd+HPCrAr/grI 9PzU9tmBjom4zI2NV380vf8zTubF366XRPq7E7BD2MN8Bq2kaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLXPsyrRS+Nf3mvfW35s1AL/6LBpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMmIyYWVmZjgtMDQ2My0z ZTRmLWExNGItN2U3ZmQ5MTM0OTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzBtEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADnNLJA3kpGplGWzPPSCZO2HLggEobHT1t5l9HFoBUbSfa2cVKVaevf8 s9nZTs5tt8jgDTp8Ar1TvHUzE1W61qGU+jJZbmitBW35JIC5xhy4jB8r42faKrIp 3KkiHNVnG3MSyl9LwhSJJZUcQ12xP3p857zOtwcOhnQkfV0QWaQ97RNW2QVVgBB/ N/vZSkNN1kVf6lvjuVSw2baiUWWdB5PM1+aSkLckVQ4SNx6gju8kBZHTDa9xH7YU yXSqr3Ezm7VMUu+NQMgIgnssE5MorUueMzMoglopxGQiIFIDrVyXE3SrqvIc5aYa bnTFADeNMtQ9uEcaKJQMLOE2+ztYhiw= -----END CERTIFICATE-----Generated at Sun Sep 27 19:05:40 2026 by rpki-client