$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a3e280dd-8f72-3974-b2a8-dfa10f38c4d2.roa File: a3e280dd-8f72-3974-b2a8-dfa10f38c4d2.roa (raw, json) Hash identifier: KCsAiUiYmBR+M9mHNbSZk0r9hgAZdsrNoqFD6H0cwio= Subject key identifier: 1E:BB:97:D8:8D:42:7C:F6:33:0C:D8:31:A2:A9:39:1C:B0:87:20:8D Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584D1F4A35D19BECF5085A2DD000 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a3e280dd-8f72-3974-b2a8-dfa10f38c4d2.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 7029 IP address blocks: 23.27.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:35:d1:9b:ec:f5:08:5a:2d:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=c26126dd-0a97-467d-83e9-2a8424f1ab7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:17:73:6f:8f:76:49:a5:11:a6:5f:8e:cd:15: 11:39:00:82:50:06:77:e1:11:17:85:0a:7c:be:b8: 2c:94:0a:3b:51:1b:ea:b6:4c:5d:bc:82:f8:47:2a: 75:e7:34:c6:97:16:8a:be:1b:ea:75:7a:8f:99:be: 5d:53:b6:c1:a7:ad:cc:09:1c:e8:b0:55:fb:0d:8b: 47:7e:af:9a:a2:50:13:8d:61:63:26:a8:18:b7:72: 3e:3c:80:22:1b:cb:10:ae:62:76:3f:54:2a:30:93: f6:2f:4d:7d:74:ac:9f:7d:54:f2:2d:ff:56:13:17: 5f:7c:25:17:44:ae:84:4e:c7:ce:f9:a2:67:ce:16: 94:7f:34:7c:be:6c:aa:1d:04:0b:a5:8a:85:e2:4e: 4c:33:c7:9a:30:af:7b:29:09:24:fd:25:fc:b8:13: 3e:73:34:59:27:43:3f:5b:f7:c3:13:05:6e:b6:e5: 24:86:ca:9d:ad:a2:18:ee:c8:62:24:d3:cc:39:21: 17:ee:16:3e:9c:44:71:1e:50:0f:47:93:10:22:31: ba:1a:e0:ac:d0:63:3c:5a:59:7d:e1:c8:bd:49:27: 8d:b8:a6:27:c3:72:aa:c1:e2:96:49:05:1d:d8:00: 5d:b2:00:b6:58:bb:41:34:07:72:dd:bd:bb:d6:62: a1:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:BB:97:D8:8D:42:7C:F6:33:0C:D8:31:A2:A9:39:1C:B0:87:20:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a3e280dd-8f72-3974-b2a8-dfa10f38c4d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:1e:8c:90:30:f5:73:df:cc:49:e9:fe:02:57:8d:a5:6c:4a: c1:ac:c8:5e:2b:4d:b1:ce:7a:7b:8f:cb:a6:76:ed:0b:03:bc: c8:51:81:44:3b:6c:30:3c:5b:82:a2:b1:89:59:e3:ec:06:24: ce:db:d1:fa:37:d2:66:1a:da:b7:d5:6f:03:0f:a9:e2:d9:07: 3e:3e:8b:ad:cb:67:5d:60:5a:1d:36:6c:62:b8:ad:0e:4f:c2: 4b:1c:26:f4:69:c3:23:f4:0c:80:5a:9a:77:b5:b9:a7:4d:4d: eb:fd:09:75:c0:1a:16:4d:9d:cd:d1:fc:34:04:ae:1e:81:d0: 78:22:20:0d:93:51:91:fd:69:8c:b6:47:8a:10:9f:98:ef:c7: 1e:e0:3f:d5:1c:cf:0b:d2:51:ae:f7:58:01:83:9f:e8:6c:24: 93:97:12:1b:de:52:2d:6c:7a:7f:10:33:13:02:13:63:15:3e: 7b:e6:61:a0:37:ba:2f:ff:7f:f3:6b:ae:ff:2f:d1:90:5e:67: 57:74:e5:74:89:09:ff:65:82:80:bc:d5:a2:3b:7f:40:f6:7e: 12:0e:75:65:e7:1a:65:2d:e4:aa:70:65:a8:2b:e9:39:ff:ee: 2d:43:01:e7:ba:a1:91:7b:68:fa:91:97:a4:b6:a4:3f:4e:57: 6b:ed:e6:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSjXRm+z1CFot0AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk YzI2MTI2ZGQtMGE5Ny00NjdkLTgzZTktMmE4NDI0ZjFhYjdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBdzb492SaURpl+OzRUROQCCUAZ34REXhQp8 vrgslAo7URvqtkxdvIL4Ryp15zTGlxaKvhvqdXqPmb5dU7bBp63MCRzosFX7DYtH fq+aolATjWFjJqgYt3I+PIAiG8sQrmJ2P1QqMJP2L019dKyffVTyLf9WExdffCUX RK6ETsfO+aJnzhaUfzR8vmyqHQQLpYqF4k5MM8eaMK97KQkk/SX8uBM+czRZJ0M/ W/fDEwVutuUkhsqdraIY7shiJNPMOSEX7hY+nERxHlAPR5MQIjG6GuCs0GM8Wll9 4ci9SSeNuKYnw3KqweKWSQUd2ABdsgC2WLtBNAdy3b271mKhzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB67l9iNQnz2MwzYMaKpORywhyCNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYTNlMjgwZGQtOGY3Mi0z OTc0LWIyYTgtZGZhMTBmMzhjNGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxsiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJEejJAw9XPfzEnp/gJXjaVsSsGsyF4rTbHOenuPy6Z27QsDvMhRgUQ7 bDA8W4KisYlZ4+wGJM7b0fo30mYa2rfVbwMPqeLZBz4+i63LZ11gWh02bGK4rQ5P wkscJvRpwyP0DIBamne1uadNTev9CXXAGhZNnc3R/DQErh6B0HgiIA2TUZH9aYy2 R4oQn5jvxx7gP9UczwvSUa73WAGDn+hsJJOXEhveUi1sen8QMxMCE2MVPnvmYaA3 ui//f/Nrrv8v0ZBeZ1d05XSJCf9lgoC81aI7f0D2fhIOdWXnGmUt5KpwZagr6Tn/ 7i1DAee6oZF7aPqRl6S2pD9OV2vt5tk= -----END CERTIFICATE-----Generated at Thu Mar 26 02:33:30 2026 by rpki-client