$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/27e70452-5e7e-4070-905f-86c708cbebd5/d505f680-ddd9-361d-8240-9518d17f6b9a.roa File: d505f680-ddd9-361d-8240-9518d17f6b9a.roa (raw, json) Hash identifier: vezj0tjPd0gMFDEY9nHi2JaK147rnPYwjzeQHfycICE= Subject key identifier: 6A:B2:CE:4D:30:F7:2E:3F:2E:9C:9F:EF:72:80:75:CF:09:BB:C5:07 Certificate issuer: /CN=27e70452-5e7e-4070-905f-86c708cbebd5 Certificate serial: 010D0C9F4328584F4975F2113C07C8B42D00D080 Authority key identifier: 17:12:EF:47:C7:61:2F:3E:82:65:90:AB:12:22:2A:57:26:08:3D:97 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/27e70452-5e7e-4070-905f-86c708cbebd5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/27e70452-5e7e-4070-905f-86c708cbebd5/d505f680-ddd9-361d-8240-9518d17f6b9a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 400586 IP address blocks: 23.134.104.0/24 maxlen: 24 2602:fb98::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/27e70452-5e7e-4070-905f-86c708cbebd5/27e70452-5e7e-4070-905f-86c708cbebd5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/27e70452-5e7e-4070-905f-86c708cbebd5/27e70452-5e7e-4070-905f-86c708cbebd5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/27e70452-5e7e-4070-905f-86c708cbebd5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:f2:11:3c:07:c8:b4:2d:00:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27e70452-5e7e-4070-905f-86c708cbebd5 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=b5f09f09-266f-4988-9296-fd41bcf35f3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:9a:89:6f:d1:2e:58:f3:8d:9f:5c:24:5e:d3: 31:5a:f2:d9:45:6e:ef:12:c7:db:18:5a:ef:23:b8: 46:3e:10:5b:5c:80:79:39:95:19:16:47:5a:8f:fe: 75:d0:31:66:9b:0a:37:68:43:aa:8a:4d:6c:81:8b: 66:94:bb:ba:18:af:cf:a8:62:52:4c:54:db:22:d3: 47:3c:9e:31:cc:f2:20:77:19:8c:40:b6:1c:c5:79: 14:07:60:41:ec:fa:f8:fa:d7:24:f5:ab:d5:98:34: fa:24:23:b0:b8:cb:d9:52:2c:78:b9:2d:84:82:97: 2e:25:c6:70:a7:3f:ca:21:84:d1:4b:dc:64:8e:3a: f9:c7:c7:88:ee:95:35:b4:7f:1e:b0:6f:e4:a6:b8: e8:ee:80:28:f5:c2:a6:0c:69:45:e2:bd:44:57:ff: 2d:d6:87:61:c8:23:c1:3f:86:73:48:b8:03:2d:ce: 8d:2e:3a:54:e4:95:2d:49:c2:6b:98:aa:2e:9d:6d: 09:c8:4a:36:13:38:01:4e:0b:3c:19:6f:ec:a0:ef: 43:54:9a:79:38:cb:9f:22:66:ae:c7:55:e7:42:5c: 92:5d:e6:74:34:80:06:74:28:c9:73:78:f6:62:3c: 8a:75:09:f6:b1:7a:1e:12:cf:75:aa:89:30:f7:96: 5a:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:B2:CE:4D:30:F7:2E:3F:2E:9C:9F:EF:72:80:75:CF:09:BB:C5:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/27e70452-5e7e-4070-905f-86c708cbebd5/d505f680-ddd9-361d-8240-9518d17f6b9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/27e70452-5e7e-4070-905f-86c708cbebd5/27e70452-5e7e-4070-905f-86c708cbebd5.crl X509v3 Authority Key Identifier: keyid:17:12:EF:47:C7:61:2F:3E:82:65:90:AB:12:22:2A:57:26:08:3D:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/27e70452-5e7e-4070-905f-86c708cbebd5.cer sbgp-ipAddrBlock: critical IPv4: 23.134.104.0/24 IPv6: 2602:fb98::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:17:be:17:9b:7f:3a:b0:a0:ad:9c:77:21:39:1b:37:a5:65: 34:61:93:22:67:91:a4:18:3e:c7:d7:a9:0a:70:e0:00:94:43: 5f:73:15:de:f4:ee:38:18:a6:da:25:a6:38:91:c0:e9:3f:1a: a0:fa:dd:72:67:33:91:88:a1:02:c1:c5:69:c8:df:4d:29:29: cd:8f:2c:5a:5b:a1:70:bc:f6:b0:86:59:9b:43:8e:3f:9a:fa: 1f:49:1d:79:ce:10:39:be:62:04:4c:5d:10:c6:b5:33:2f:fb: cc:5c:51:2b:04:bb:18:5e:39:77:ef:ba:a8:15:25:f9:3c:61: c3:65:58:4e:81:6b:8b:11:b5:e7:42:dd:a9:78:d5:81:44:a6: b0:5d:a9:63:5f:68:4f:57:c2:3c:1e:84:36:40:c1:4d:dd:50: 04:2d:bc:f4:14:44:a3:b9:6b:eb:fa:58:d7:c0:f5:87:77:55: 4a:6d:1f:ac:48:21:9a:c9:ff:68:19:cf:48:b8:cb:18:0f:6b: 29:2d:16:c4:da:24:19:d0:e2:10:2b:e4:2b:4c:10:38:0d:a0: 1e:de:28:96:a7:45:67:ee:54:12:f2:e8:52:5b:e2:c7:aa:42: f0:27:37:97:dc:57:ae:b4:2f:0c:af:cb:53:59:bd:88:40:9d: 3b:3b:99:7f -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE9JdfIRPAfItC0A0IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjdlNzA0NTItNWU3ZS00MDcwLTkwNWYtODZjNzA4Y2Jl YmQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YjVmMDlmMDktMjY2Zi00OTg4LTkyOTYtZmQ0MWJjZjM1ZjNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZqJb9EuWPONn1wkXtMxWvLZRW7vEsfbGFrv I7hGPhBbXIB5OZUZFkdaj/510DFmmwo3aEOqik1sgYtmlLu6GK/PqGJSTFTbItNH PJ4xzPIgdxmMQLYcxXkUB2BB7Pr4+tck9avVmDT6JCOwuMvZUix4uS2EgpcuJcZw pz/KIYTRS9xkjjr5x8eI7pU1tH8esG/kprjo7oAo9cKmDGlF4r1EV/8t1odhyCPB P4ZzSLgDLc6NLjpU5JUtScJrmKounW0JyEo2EzgBTgs8GW/soO9DVJp5OMufImau x1XnQlySXeZ0NIAGdCjJc3j2YjyKdQn2sXoeEs91qokw95ZaAwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFGqyzk0w9y4/Lpyf73KAdc8Ju8UHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yN2U3 MDQ1Mi01ZTdlLTQwNzAtOTA1Zi04NmM3MDhjYmViZDUvZDUwNWY2ODAtZGRkOS0z NjFkLTgyNDAtOTUxOGQxN2Y2YjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjdlNzA0NTItNWU3ZS00MDcwLTkw NWYtODZjNzA4Y2JlYmQ1LzI3ZTcwNDUyLTVlN2UtNDA3MC05MDVmLTg2YzcwOGNi ZWJkNS5jcmwwHwYDVR0jBBgwFoAUFxLvR8dhLz6CZZCrEiIqVyYIPZcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yN2U3MDQ1Mi01ZTdlLTQwNzAtOTA1Zi04NmM3 MDhjYmViZDUuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4ZoMA4E AgACMAgDBgAmAvuYADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBQF74Xm386sKCtnHchORs3pWU0YZMiZ5Gk GD7H16kKcOAAlENfcxXe9O44GKbaJaY4kcDpPxqg+t1yZzORiKECwcVpyN9NKSnN jyxaW6FwvPawhlmbQ44/mvofSR15zhA5vmIETF0QxrUzL/vMXFErBLsYXjl377qo FSX5PGHDZVhOgWuLEbXnQt2peNWBRKawXaljX2hPV8I8HoQ2QMFN3VAELbz0FESj uWvr+ljXwPWHd1VKbR+sSCGayf9oGc9IuMsYD2spLRbE2iQZ0OIQK+QrTBA4DaAe 3iiWp0Vn7lQS8uhSW+LHqkLwJzeX3FeutC8Mr8tTWb2IQJ07O5l/ -----END CERTIFICATE-----Generated at Sun Oct 4 13:23:07 2026 by rpki-client