$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/27e70452-5e7e-4070-905f-86c708cbebd5/d505f680-ddd9-361d-8240-9518d17f6b9a.roa File: d505f680-ddd9-361d-8240-9518d17f6b9a.roa (raw, json) Hash identifier: MB+uB+1l0w7KxaprDK2vGndIzS8PqfntQL/8MS/Xlog= Subject key identifier: B4:35:C1:E5:C2:AE:88:59:EA:17:DB:CA:15:D3:32:E2:A1:F0:30:8E Certificate issuer: /CN=27e70452-5e7e-4070-905f-86c708cbebd5 Certificate serial: 010D0C9F4328584EA791565450752E46A3397080 Authority key identifier: 17:12:EF:47:C7:61:2F:3E:82:65:90:AB:12:22:2A:57:26:08:3D:97 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/27e70452-5e7e-4070-905f-86c708cbebd5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/27e70452-5e7e-4070-905f-86c708cbebd5/d505f680-ddd9-361d-8240-9518d17f6b9a.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 400586 IP address blocks: 23.134.104.0/24 maxlen: 24 2602:fb98::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/27e70452-5e7e-4070-905f-86c708cbebd5/27e70452-5e7e-4070-905f-86c708cbebd5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/27e70452-5e7e-4070-905f-86c708cbebd5/27e70452-5e7e-4070-905f-86c708cbebd5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/27e70452-5e7e-4070-905f-86c708cbebd5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:91:56:54:50:75:2e:46:a3:39:70:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27e70452-5e7e-4070-905f-86c708cbebd5 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=b8b47981-f5e7-4327-b7c7-cbe75e01eb69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:20:fa:9e:23:29:19:42:a0:dd:4e:f0:a2:45: 4a:e8:2d:73:76:d3:29:36:49:06:94:50:f7:60:4a: 33:33:39:2d:f5:b8:88:94:7e:ab:b6:57:e0:e0:33: 72:95:f2:d9:ec:f5:46:58:f6:21:54:00:8f:48:74: 07:09:19:cc:17:84:12:42:74:fe:1c:0a:8e:07:3b: eb:97:99:3d:fe:4c:5c:ed:e9:ac:7a:51:13:fe:a5: 6c:b9:14:9a:93:4f:08:bb:88:b3:22:f5:42:d5:38: 4f:e0:a1:dc:e4:2b:c9:b6:9c:01:00:58:a0:a4:d9: 75:5f:9c:31:ff:16:c5:89:a7:a1:67:41:4a:c1:92: 62:03:61:6e:6a:4c:06:80:04:73:54:c8:23:74:61: 60:5c:00:c7:14:75:b2:d6:55:c4:d9:1e:20:bd:f2: 63:77:bf:26:ce:e4:76:1c:55:a3:e7:61:76:95:e9: 13:63:42:56:7f:dc:61:dc:8e:e2:8b:02:bd:7f:97: 4a:3d:bc:1d:06:3a:d1:29:93:46:17:23:1d:fc:01: 5c:a0:38:29:ed:9b:1e:6d:90:bf:31:e0:f0:16:4d: b4:59:8e:d7:39:85:3d:56:1b:51:3d:5f:bb:ee:d5: 6c:72:04:f7:bf:8a:3d:e5:17:0e:f9:ba:da:63:de: d3:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:35:C1:E5:C2:AE:88:59:EA:17:DB:CA:15:D3:32:E2:A1:F0:30:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/27e70452-5e7e-4070-905f-86c708cbebd5/d505f680-ddd9-361d-8240-9518d17f6b9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/27e70452-5e7e-4070-905f-86c708cbebd5/27e70452-5e7e-4070-905f-86c708cbebd5.crl X509v3 Authority Key Identifier: keyid:17:12:EF:47:C7:61:2F:3E:82:65:90:AB:12:22:2A:57:26:08:3D:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/27e70452-5e7e-4070-905f-86c708cbebd5.cer sbgp-ipAddrBlock: critical IPv4: 23.134.104.0/24 IPv6: 2602:fb98::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:9e:46:02:52:04:5f:5f:35:1f:17:5f:a1:c0:16:ef:4e:7d: 26:36:65:39:7c:65:6b:b9:01:5b:c2:f7:34:ed:4d:bd:2d:9a: ef:30:2b:dd:07:1c:1d:8d:6b:6b:83:76:6f:3f:e4:84:bb:62: 81:ac:ad:3e:55:86:7f:02:a3:d8:c3:d1:af:b0:77:73:6e:ca: 6e:3f:64:46:77:b8:47:d0:27:62:50:42:1b:a4:b9:eb:58:e1: 77:35:7f:67:9d:f9:33:9c:89:30:6e:f1:d1:53:98:e5:03:46: c1:00:a1:32:5f:6e:6a:d0:4d:d0:f3:dc:43:59:24:a6:02:17: 3c:94:60:bf:82:04:04:22:1e:8c:09:06:de:26:c0:3a:7e:0c: 15:f1:97:34:db:68:5e:e0:d5:4a:5b:70:2e:39:23:06:6b:16: 61:53:a2:a5:2c:2d:43:7d:2e:a9:2f:84:aa:6b:98:74:a3:2d: d2:b5:aa:07:30:64:ce:47:c4:2f:c2:bf:a2:05:37:f9:e5:94: 9c:b5:73:75:0b:f4:a1:83:7e:c3:62:7d:a4:3e:52:e0:9c:26: 7b:2a:51:f1:6b:fc:10:12:7a:d2:e5:75:1e:9f:55:de:7a:0e: 82:39:04:fe:b2:06:fa:7b:3a:f0:61:dc:9b:6a:68:b6:f1:f7: fd:a6:53:4a -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE6nkVZUUHUuRqM5cIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjdlNzA0NTItNWU3ZS00MDcwLTkwNWYtODZjNzA4Y2Jl YmQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YjhiNDc5ODEtZjVlNy00MzI3LWI3YzctY2JlNzVlMDFlYjY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCD6niMpGUKg3U7wokVK6C1zdtMpNkkGlFD3 YEozMzkt9biIlH6rtlfg4DNylfLZ7PVGWPYhVACPSHQHCRnMF4QSQnT+HAqOBzvr l5k9/kxc7emselET/qVsuRSak08Iu4izIvVC1ThP4KHc5CvJtpwBAFigpNl1X5wx /xbFiaehZ0FKwZJiA2FuakwGgARzVMgjdGFgXADHFHWy1lXE2R4gvfJjd78mzuR2 HFWj52F2lekTY0JWf9xh3I7iiwK9f5dKPbwdBjrRKZNGFyMd/AFcoDgp7ZsebZC/ MeDwFk20WY7XOYU9VhtRPV+77tVscgT3v4o95RcO+braY97T6QIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFLQ1weXCrohZ6hfbyhXTMuKh8DCOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yN2U3 MDQ1Mi01ZTdlLTQwNzAtOTA1Zi04NmM3MDhjYmViZDUvZDUwNWY2ODAtZGRkOS0z NjFkLTgyNDAtOTUxOGQxN2Y2YjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjdlNzA0NTItNWU3ZS00MDcwLTkw NWYtODZjNzA4Y2JlYmQ1LzI3ZTcwNDUyLTVlN2UtNDA3MC05MDVmLTg2YzcwOGNi ZWJkNS5jcmwwHwYDVR0jBBgwFoAUFxLvR8dhLz6CZZCrEiIqVyYIPZcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yN2U3MDQ1Mi01ZTdlLTQwNzAtOTA1Zi04NmM3 MDhjYmViZDUuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4ZoMA4E AgACMAgDBgAmAvuYADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAunkYCUgRfXzUfF1+hwBbvTn0mNmU5fGVr uQFbwvc07U29LZrvMCvdBxwdjWtrg3ZvP+SEu2KBrK0+VYZ/AqPYw9GvsHdzbspu P2RGd7hH0CdiUEIbpLnrWOF3NX9nnfkznIkwbvHRU5jlA0bBAKEyX25q0E3Q89xD WSSmAhc8lGC/ggQEIh6MCQbeJsA6fgwV8Zc022he4NVKW3AuOSMGaxZhU6KlLC1D fS6pL4Sqa5h0oy3StaoHMGTOR8Qvwr+iBTf55ZSctXN1C/Shg37DYn2kPlLgnCZ7 KlHxa/wQEnrS5XUen1Xeeg6COQT+sgb6ezrwYdybami28ff9plNK -----END CERTIFICATE-----Generated at Wed Jul 29 13:12:42 2026 by rpki-client