$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/27e70452-5e7e-4070-905f-86c708cbebd5/d505f680-ddd9-361d-8240-9518d17f6b9a.roa File: d505f680-ddd9-361d-8240-9518d17f6b9a.roa (raw, json) Hash identifier: T32/5l+G02NOQPXeSEC030QXjWBWl1XINZ91XU9wM6k= Subject key identifier: F2:3D:31:6C:18:75:C5:79:1F:B0:78:D6:87:42:8C:F0:D4:50:BB:80 Certificate issuer: /CN=27e70452-5e7e-4070-905f-86c708cbebd5 Certificate serial: 010D0C9F4328584D04E23F483EA836CC625A8618 Authority key identifier: 17:12:EF:47:C7:61:2F:3E:82:65:90:AB:12:22:2A:57:26:08:3D:97 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/27e70452-5e7e-4070-905f-86c708cbebd5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/27e70452-5e7e-4070-905f-86c708cbebd5/d505f680-ddd9-361d-8240-9518d17f6b9a.roa Signing time: Sun 01 Mar 2026 02:00:31 +0000 ROA not before: Sun 01 Mar 2026 02:00:31 +0000 ROA not after: Sat 30 May 2026 01:00:31 +0000 asID: 400586 IP address blocks: 23.134.104.0/24 maxlen: 24 2602:fb98::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/27e70452-5e7e-4070-905f-86c708cbebd5/27e70452-5e7e-4070-905f-86c708cbebd5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/27e70452-5e7e-4070-905f-86c708cbebd5/27e70452-5e7e-4070-905f-86c708cbebd5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/27e70452-5e7e-4070-905f-86c708cbebd5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:04:e2:3f:48:3e:a8:36:cc:62:5a:86:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27e70452-5e7e-4070-905f-86c708cbebd5 Validity Not Before: Mar 1 02:00:31 2026 GMT Not After : May 30 01:00:31 2026 GMT Subject: CN=0a95f299-2437-4277-9d2b-7115da2d98ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:b3:75:15:52:ba:25:82:82:4c:78:a9:fd:78: 5d:0b:0e:22:c1:4c:e6:cd:9b:82:f8:dc:00:a4:84: e0:ef:b6:73:bb:c6:7b:8d:d9:93:84:d6:bb:2f:5e: e4:a2:20:5e:43:21:b5:50:c2:07:17:bb:23:11:78: cd:bf:21:13:51:df:1a:6f:71:3e:4f:c5:e1:6e:dc: 93:b3:d7:fe:54:69:bb:19:66:c1:98:3c:8a:fd:d0: 1d:93:6c:af:79:9f:82:3a:b7:d2:94:6d:b2:d0:ad: c8:e9:6c:14:df:a2:3c:4a:4e:96:c7:96:f2:75:84: e5:cb:f2:89:f4:68:6c:52:e0:41:36:31:3f:3a:f9: 59:b0:f4:ab:b9:17:8d:ee:86:15:24:83:92:7d:f8: b5:88:e5:81:2e:67:5a:60:af:47:c5:38:83:a1:84: 3f:d2:a7:a9:12:2e:3e:5f:dc:fb:ef:08:19:a0:db: 1a:f2:4c:c4:aa:fd:10:40:c5:79:42:59:1a:bb:46: c8:18:76:f6:a9:de:24:40:b8:12:11:e7:74:7b:7d: 55:68:74:a3:15:0c:f9:b4:d4:80:c4:62:d4:7f:1e: 3f:fd:a6:f3:e0:20:35:06:e5:d2:19:53:38:1d:14: 02:13:0f:9b:00:8b:e8:38:6d:90:cc:fc:24:6b:70: bf:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:3D:31:6C:18:75:C5:79:1F:B0:78:D6:87:42:8C:F0:D4:50:BB:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/27e70452-5e7e-4070-905f-86c708cbebd5/d505f680-ddd9-361d-8240-9518d17f6b9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/27e70452-5e7e-4070-905f-86c708cbebd5/27e70452-5e7e-4070-905f-86c708cbebd5.crl X509v3 Authority Key Identifier: keyid:17:12:EF:47:C7:61:2F:3E:82:65:90:AB:12:22:2A:57:26:08:3D:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/27e70452-5e7e-4070-905f-86c708cbebd5.cer sbgp-ipAddrBlock: critical IPv4: 23.134.104.0/24 IPv6: 2602:fb98::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:91:8c:7a:51:2b:bf:96:4e:04:54:8c:ac:6f:ed:33:33:ef: 8d:8c:f6:89:77:e4:08:13:61:f2:9f:d6:48:45:5f:f6:0a:02: db:aa:b7:45:57:ed:46:04:69:02:e7:26:ff:b0:d6:6a:7b:fc: 36:49:6a:03:d0:8e:94:b3:c0:4d:51:ba:cb:7c:4e:a3:01:68: 0c:4d:36:79:9a:36:8c:88:c9:65:9a:c1:45:c9:99:9b:db:1b: 75:44:ff:af:37:02:e3:b9:ec:c6:77:22:bd:e3:bd:04:c4:cc: 52:0c:a9:46:2f:da:8d:57:df:c9:f3:37:d5:04:a3:52:e2:25: 2c:d2:34:1e:c7:81:b1:61:c6:ae:05:fa:d6:2b:c7:7e:d2:7e: 8b:e4:9e:b8:29:ac:6f:63:93:9b:a8:55:d4:b8:c7:24:0d:e6: 96:37:c2:0b:9d:fa:be:f9:ab:71:8a:60:b9:cf:0f:31:df:92: bb:3f:f1:37:62:7d:8a:2d:aa:87:0f:d8:e2:e6:69:e9:8f:9b: ea:4a:ca:96:ca:0b:df:9a:59:49:a4:e9:f2:96:48:e7:07:97: 7c:3e:8e:a7:8b:b5:f3:ec:9c:48:cd:0f:7a:dc:12:20:26:ad: 68:1c:e6:1a:8f:bb:11:11:97:6d:bd:5d:10:09:1d:4f:eb:3e: 9a:bb:fe:24 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE0E4j9IPqg2zGJahhgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjdlNzA0NTItNWU3ZS00MDcwLTkwNWYtODZjNzA4Y2Jl YmQ1MB4XDTI2MDMwMTAyMDAzMVoXDTI2MDUzMDAxMDAzMVowLzEtMCsGA1UEAxMk MGE5NWYyOTktMjQzNy00Mjc3LTlkMmItNzExNWRhMmQ5OGZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgLN1FVK6JYKCTHip/XhdCw4iwUzmzZuC+NwA pITg77Zzu8Z7jdmThNa7L17koiBeQyG1UMIHF7sjEXjNvyETUd8ab3E+T8XhbtyT s9f+VGm7GWbBmDyK/dAdk2yveZ+COrfSlG2y0K3I6WwU36I8Sk6Wx5bydYTly/KJ 9GhsUuBBNjE/OvlZsPSruReN7oYVJIOSffi1iOWBLmdaYK9HxTiDoYQ/0qepEi4+ X9z77wgZoNsa8kzEqv0QQMV5Qlkau0bIGHb2qd4kQLgSEed0e31VaHSjFQz5tNSA xGLUfx4//abz4CA1BuXSGVM4HRQCEw+bAIvoOG2QzPwka3C/1QIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFPI9MWwYdcV5H7B41odCjPDUULuAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yN2U3 MDQ1Mi01ZTdlLTQwNzAtOTA1Zi04NmM3MDhjYmViZDUvZDUwNWY2ODAtZGRkOS0z NjFkLTgyNDAtOTUxOGQxN2Y2YjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjdlNzA0NTItNWU3ZS00MDcwLTkw NWYtODZjNzA4Y2JlYmQ1LzI3ZTcwNDUyLTVlN2UtNDA3MC05MDVmLTg2YzcwOGNi ZWJkNS5jcmwwHwYDVR0jBBgwFoAUFxLvR8dhLz6CZZCrEiIqVyYIPZcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yN2U3MDQ1Mi01ZTdlLTQwNzAtOTA1Zi04NmM3 MDhjYmViZDUuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4ZoMA4E AgACMAgDBgAmAvuYADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBDkYx6USu/lk4EVIysb+0zM++NjPaJd+QI E2Hyn9ZIRV/2CgLbqrdFV+1GBGkC5yb/sNZqe/w2SWoD0I6Us8BNUbrLfE6jAWgM TTZ5mjaMiMllmsFFyZmb2xt1RP+vNwLjuezGdyK9470ExMxSDKlGL9qNV9/J8zfV BKNS4iUs0jQex4GxYcauBfrWK8d+0n6L5J64KaxvY5ObqFXUuMckDeaWN8ILnfq+ +atximC5zw8x35K7P/E3Yn2KLaqHD9ji5mnpj5vqSsqWygvfmllJpOnylkjnB5d8 Po6ni7Xz7JxIzQ963BIgJq1oHOYaj7sREZdtvV0QCR1P6z6au/4k -----END CERTIFICATE-----Generated at Mon Mar 2 11:45:34 2026 by rpki-client