$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/27e70452-5e7e-4070-905f-86c708cbebd5/d505f680-ddd9-361d-8240-9518d17f6b9a.roa File: d505f680-ddd9-361d-8240-9518d17f6b9a.roa (raw, json) Hash identifier: BQb8zPHt8VJ8Pv18I+6OuF7Sx8EW6iLz5dRAZ+bqxpI= Subject key identifier: 8A:AB:42:44:30:B2:B5:05:50:3D:62:B5:AB:C9:0A:B2:5B:FE:2F:3B Certificate issuer: /CN=27e70452-5e7e-4070-905f-86c708cbebd5 Certificate serial: 010D0C9F4328584B44B1BBF6621C5EF97DF5A380 Authority key identifier: 17:12:EF:47:C7:61:2F:3E:82:65:90:AB:12:22:2A:57:26:08:3D:97 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/27e70452-5e7e-4070-905f-86c708cbebd5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/27e70452-5e7e-4070-905f-86c708cbebd5/d505f680-ddd9-361d-8240-9518d17f6b9a.roa Signing time: Sun 21 Sep 2025 13:00:42 +0000 ROA not before: Sun 21 Sep 2025 13:00:42 +0000 ROA not after: Sat 20 Dec 2025 14:00:42 +0000 asID: 400586 IP address blocks: 23.134.104.0/24 maxlen: 24 2602:fb98::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/27e70452-5e7e-4070-905f-86c708cbebd5/27e70452-5e7e-4070-905f-86c708cbebd5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/27e70452-5e7e-4070-905f-86c708cbebd5/27e70452-5e7e-4070-905f-86c708cbebd5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/27e70452-5e7e-4070-905f-86c708cbebd5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:44:b1:bb:f6:62:1c:5e:f9:7d:f5:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27e70452-5e7e-4070-905f-86c708cbebd5 Validity Not Before: Sep 21 13:00:42 2025 GMT Not After : Dec 20 14:00:42 2025 GMT Subject: CN=856a33cd-886f-4ac4-a805-fa94c03cc6a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:da:c7:cd:25:27:bb:c7:3e:4a:b8:86:cf:9f: eb:0b:ec:06:fd:51:79:b9:af:9e:69:f0:e3:7c:91: 6a:ab:ac:5d:3e:51:97:c6:fe:d7:0a:c2:81:0c:70: 59:8f:f9:ac:42:a6:3e:20:b3:18:ab:1f:c4:e0:fa: 53:18:75:4e:79:bc:b1:94:27:4b:41:2c:df:22:8d: e9:52:f9:2f:bc:9e:ac:c0:69:4a:99:94:06:3e:5b: 55:62:ae:92:fa:43:44:11:a0:7e:7c:ae:29:d2:b5: 17:4b:7a:75:ec:14:71:d9:2e:f4:0c:eb:40:42:3f: 22:5f:f4:1b:2b:25:6d:67:f6:c6:d5:a2:04:e6:94: 56:c0:7f:54:24:14:52:3d:7d:37:d6:0f:96:d0:9c: 0d:71:ef:2e:90:e5:32:f9:61:d5:6a:83:ab:e6:5d: d2:49:66:9e:6c:e0:07:56:39:d0:bf:90:0f:6d:e4: 94:d5:69:ba:6b:c4:46:78:a2:92:f9:8f:ba:0c:1f: a7:f8:2c:3b:5d:50:6a:64:61:16:b2:91:03:60:94: 31:75:3a:21:ce:65:bc:77:9d:bf:74:cd:16:ce:0a: bb:51:11:03:c9:d7:7a:14:54:8b:e5:34:e2:15:06: 90:35:76:c9:50:c9:ff:3e:74:d2:9f:fc:b9:a6:8c: 35:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:AB:42:44:30:B2:B5:05:50:3D:62:B5:AB:C9:0A:B2:5B:FE:2F:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/27e70452-5e7e-4070-905f-86c708cbebd5/d505f680-ddd9-361d-8240-9518d17f6b9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/27e70452-5e7e-4070-905f-86c708cbebd5/27e70452-5e7e-4070-905f-86c708cbebd5.crl X509v3 Authority Key Identifier: keyid:17:12:EF:47:C7:61:2F:3E:82:65:90:AB:12:22:2A:57:26:08:3D:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/27e70452-5e7e-4070-905f-86c708cbebd5.cer sbgp-ipAddrBlock: critical IPv4: 23.134.104.0/24 IPv6: 2602:fb98::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:b0:1e:6f:0b:45:99:55:00:13:4e:fd:c7:61:52:1d:e6:08: d0:b2:03:60:43:b7:9e:01:5e:fe:0b:fc:93:65:f4:76:5b:7e: cd:55:8a:e4:81:8b:7a:76:c7:40:a0:21:b4:43:c0:b4:f7:9b: 20:2a:65:95:ef:52:69:57:7b:36:bd:81:39:e9:43:7e:da:44: 62:5d:49:f4:9f:62:09:1a:ab:a0:0f:c7:6e:73:64:4a:88:96: d2:c4:f5:87:30:6b:05:38:72:40:ac:2f:27:4d:ac:ab:73:ea: d9:3a:26:70:83:6f:78:75:a2:da:20:5c:cf:0a:f8:3c:ea:b4: 4e:bc:7c:9e:43:bf:cb:0f:a9:fb:b2:6a:35:ad:97:f6:60:ce: 23:c4:57:19:7f:6a:44:5b:71:4d:5d:17:59:ab:6a:ad:a9:bd: 3a:62:3a:45:39:a1:ba:2e:a3:96:72:3f:9d:10:b2:6d:56:60: df:57:24:3e:3d:07:1f:de:7d:6c:97:e8:d4:86:92:45:1d:17: 39:44:c7:03:ef:58:27:a3:ba:0e:aa:1a:b2:33:b6:bc:79:d1: f6:c5:56:c8:01:72:e3:a5:45:62:9c:90:08:30:8e:b8:9a:c0: e1:39:e6:13:05:e8:16:8a:e0:d9:08:9e:2d:69:7b:eb:d9:86: 80:c1:6b:93 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEtEsbv2Yhxe+X31o4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjdlNzA0NTItNWU3ZS00MDcwLTkwNWYtODZjNzA4Y2Jl YmQ1MB4XDTI1MDkyMTEzMDA0MloXDTI1MTIyMDE0MDA0MlowLzEtMCsGA1UEAxMk ODU2YTMzY2QtODg2Zi00YWM0LWE4MDUtZmE5NGMwM2NjNmEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNrHzSUnu8c+SriGz5/rC+wG/VF5ua+eafDj fJFqq6xdPlGXxv7XCsKBDHBZj/msQqY+ILMYqx/E4PpTGHVOebyxlCdLQSzfIo3p UvkvvJ6swGlKmZQGPltVYq6S+kNEEaB+fK4p0rUXS3p17BRx2S70DOtAQj8iX/Qb KyVtZ/bG1aIE5pRWwH9UJBRSPX031g+W0JwNce8ukOUy+WHVaoOr5l3SSWaebOAH VjnQv5APbeSU1Wm6a8RGeKKS+Y+6DB+n+Cw7XVBqZGEWspEDYJQxdTohzmW8d52/ dM0Wzgq7UREDydd6FFSL5TTiFQaQNXbJUMn/PnTSn/y5pow17QIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFIqrQkQwsrUFUD1itavJCrJb/i87MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yN2U3 MDQ1Mi01ZTdlLTQwNzAtOTA1Zi04NmM3MDhjYmViZDUvZDUwNWY2ODAtZGRkOS0z NjFkLTgyNDAtOTUxOGQxN2Y2YjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjdlNzA0NTItNWU3ZS00MDcwLTkw NWYtODZjNzA4Y2JlYmQ1LzI3ZTcwNDUyLTVlN2UtNDA3MC05MDVmLTg2YzcwOGNi ZWJkNS5jcmwwHwYDVR0jBBgwFoAUFxLvR8dhLz6CZZCrEiIqVyYIPZcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yN2U3MDQ1Mi01ZTdlLTQwNzAtOTA1Zi04NmM3 MDhjYmViZDUuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4ZoMA4E AgACMAgDBgAmAvuYADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBjsB5vC0WZVQATTv3HYVId5gjQsgNgQ7ee AV7+C/yTZfR2W37NVYrkgYt6dsdAoCG0Q8C095sgKmWV71JpV3s2vYE56UN+2kRi XUn0n2IJGqugD8duc2RKiJbSxPWHMGsFOHJArC8nTayrc+rZOiZwg294daLaIFzP Cvg86rROvHyeQ7/LD6n7smo1rZf2YM4jxFcZf2pEW3FNXRdZq2qtqb06YjpFOaG6 LqOWcj+dELJtVmDfVyQ+PQcf3n1sl+jUhpJFHRc5RMcD71gno7oOqhqyM7a8edH2 xVbIAXLjpUVinJAIMI64msDhOeYTBegWiuDZCJ4taXvr2YaAwWuT -----END CERTIFICATE-----Generated at Wed Nov 5 17:05:42 2025 by rpki-client