$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47727e8f-5ea0-4ad7-a853-5cade93acd74/a9b090ba-4e2e-3fd0-bda2-f5b0e738e762.roa File: a9b090ba-4e2e-3fd0-bda2-f5b0e738e762.roa (raw, json) Hash identifier: +tZOrRnp0qwaASo1ApArWucgTSiPP48eMagqnRLLfAk= Subject key identifier: 0D:17:EF:3D:A5:33:BC:E6:5E:C0:92:A2:E3:F9:3C:99:8C:EA:2A:1C Certificate issuer: /CN=47727e8f-5ea0-4ad7-a853-5cade93acd74 Certificate serial: 010D0C9F4328584D95EFF43B62520412740B2300 Authority key identifier: 23:CC:1E:F4:90:EF:01:06:87:7F:DD:36:B9:49:CF:70:A3:A2:F7:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47727e8f-5ea0-4ad7-a853-5cade93acd74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47727e8f-5ea0-4ad7-a853-5cade93acd74/a9b090ba-4e2e-3fd0-bda2-f5b0e738e762.roa Signing time: Wed 22 Apr 2026 01:00:23 +0000 ROA not before: Wed 22 Apr 2026 01:00:23 +0000 ROA not after: Tue 21 Jul 2026 01:00:23 +0000 asID: 64272 IP address blocks: 23.134.64.0/24 maxlen: 24 2602:fecb::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47727e8f-5ea0-4ad7-a853-5cade93acd74/47727e8f-5ea0-4ad7-a853-5cade93acd74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47727e8f-5ea0-4ad7-a853-5cade93acd74/47727e8f-5ea0-4ad7-a853-5cade93acd74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47727e8f-5ea0-4ad7-a853-5cade93acd74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Apr 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:95:ef:f4:3b:62:52:04:12:74:0b:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47727e8f-5ea0-4ad7-a853-5cade93acd74 Validity Not Before: Apr 22 01:00:23 2026 GMT Not After : Jul 21 01:00:23 2026 GMT Subject: CN=29b727fa-5a81-4fec-a381-84c854438e46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:ed:02:16:aa:47:54:ac:ca:17:68:49:09:a2: 92:bd:35:ed:86:16:87:d1:91:de:d2:45:37:49:8e: f7:24:c5:a1:f1:8b:84:58:b4:3a:08:f4:75:8f:e6: df:0f:1e:25:79:f2:6c:d0:c0:58:2b:12:80:dc:76: d3:59:87:63:74:71:cf:1d:03:ab:01:99:7b:f1:b7: b5:cf:d5:66:b2:4f:db:b1:41:b5:b6:e4:68:c4:21: 9d:fc:36:fb:66:8a:64:1d:b9:3b:cb:a4:10:43:f3: 15:26:ac:ff:5d:ba:05:dc:ff:56:78:f1:26:32:41: d0:73:a4:f4:fb:b1:99:5a:c9:36:81:40:17:e5:f2: 4c:17:3f:37:29:63:19:86:46:d3:b7:bb:62:ab:c0: 91:10:b9:fe:e8:d3:cc:4b:36:2e:85:35:b5:b2:f0: f6:4b:3a:f8:aa:c2:0b:a7:39:6b:73:42:75:c1:56: 5c:27:fa:b3:16:03:71:6e:3f:48:6b:94:c3:d7:a9: df:2f:3d:a4:e1:d5:3e:fa:6a:27:5a:f7:76:fe:0b: 95:c1:41:1a:5f:8e:78:ff:2e:f2:07:a8:14:de:35: 41:78:51:12:56:e1:a9:da:69:06:3c:68:42:25:66: 08:93:9e:bf:1a:23:5b:3d:4b:c9:a9:97:66:1f:c2: d4:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:17:EF:3D:A5:33:BC:E6:5E:C0:92:A2:E3:F9:3C:99:8C:EA:2A:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47727e8f-5ea0-4ad7-a853-5cade93acd74/a9b090ba-4e2e-3fd0-bda2-f5b0e738e762.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47727e8f-5ea0-4ad7-a853-5cade93acd74/47727e8f-5ea0-4ad7-a853-5cade93acd74.crl X509v3 Authority Key Identifier: keyid:23:CC:1E:F4:90:EF:01:06:87:7F:DD:36:B9:49:CF:70:A3:A2:F7:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47727e8f-5ea0-4ad7-a853-5cade93acd74.cer sbgp-ipAddrBlock: critical IPv4: 23.134.64.0/24 IPv6: 2602:fecb::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:cf:a9:65:4c:4a:78:20:2e:6d:94:46:ba:bb:1c:c8:0b:0c: ed:dc:f8:fe:77:82:63:b0:d8:4f:dd:c5:20:e2:84:43:c3:f4: a3:22:c7:9c:dc:a0:54:fe:94:e2:97:2d:24:14:5b:20:38:3b: 93:b2:b2:4f:c9:68:a8:4b:57:e0:5d:da:f3:b7:18:82:f6:0a: 00:ca:4e:46:99:2e:50:41:16:13:c6:41:c0:24:9e:9c:d7:84: 63:6b:54:fd:31:13:f6:e3:64:f0:45:e3:eb:12:39:e1:67:cf: 04:9c:7e:e9:81:f6:d1:eb:47:55:0e:65:09:f7:32:6b:af:e3: 67:8d:ba:e3:bf:98:30:bb:9e:53:e5:09:8a:3a:31:e1:18:4c: 34:31:61:8e:43:2a:cc:5a:ab:ca:92:cd:b8:27:fd:32:76:bd: 28:26:ed:fb:96:4f:02:d5:9a:33:ee:d2:de:89:3a:c7:1c:d9: bb:c4:bb:bc:b7:61:98:dd:f4:e0:1c:0d:63:c8:de:50:d8:63: 2b:6c:c5:ed:c2:08:df:86:1a:41:0d:d0:1e:a3:81:c9:5e:78: 7a:d0:e2:de:13:d1:34:1a:64:4f:a8:4b:34:0a:e7:1a:c7:e4: e5:f4:c0:21:c3:16:64:5a:a3:5a:40:a2:6a:54:95:47:82:de: 3f:b2:82:fa -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE2V7/Q7YlIEEnQLIwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDc3MjdlOGYtNWVhMC00YWQ3LWE4NTMtNWNhZGU5M2Fj ZDc0MB4XDTI2MDQyMjAxMDAyM1oXDTI2MDcyMTAxMDAyM1owLzEtMCsGA1UEAxMk MjliNzI3ZmEtNWE4MS00ZmVjLWEzODEtODRjODU0NDM4ZTQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5O0CFqpHVKzKF2hJCaKSvTXthhaH0ZHe0kU3 SY73JMWh8YuEWLQ6CPR1j+bfDx4lefJs0MBYKxKA3HbTWYdjdHHPHQOrAZl78be1 z9Vmsk/bsUG1tuRoxCGd/Db7ZopkHbk7y6QQQ/MVJqz/XboF3P9WePEmMkHQc6T0 +7GZWsk2gUAX5fJMFz83KWMZhkbTt7tiq8CRELn+6NPMSzYuhTW1svD2Szr4qsIL pzlrc0J1wVZcJ/qzFgNxbj9Ia5TD16nfLz2k4dU++monWvd2/guVwUEaX454/y7y B6gU3jVBeFESVuGp2mkGPGhCJWYIk56/GiNbPUvJqZdmH8LUmQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFA0X7z2lM7zmXsCSouP5PJmM6iocMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Nzcy N2U4Zi01ZWEwLTRhZDctYTg1My01Y2FkZTkzYWNkNzQvYTliMDkwYmEtNGUyZS0z ZmQwLWJkYTItZjViMGU3MzhlNzYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDc3MjdlOGYtNWVhMC00YWQ3LWE4 NTMtNWNhZGU5M2FjZDc0LzQ3NzI3ZThmLTVlYTAtNGFkNy1hODUzLTVjYWRlOTNh Y2Q3NC5jcmwwHwYDVR0jBBgwFoAUI8we9JDvAQaHf902uUnPcKOi95MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NzcyN2U4Zi01ZWEwLTRhZDctYTg1My01Y2Fk ZTkzYWNkNzQuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4ZAMA4E AgACMAgDBgQmAv7LADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCZz6llTEp4IC5tlEa6uxzICwzt3Pj+d4Jj sNhP3cUg4oRDw/SjIsec3KBU/pTily0kFFsgODuTsrJPyWioS1fgXdrztxiC9goA yk5GmS5QQRYTxkHAJJ6c14Rja1T9MRP242TwRePrEjnhZ88EnH7pgfbR60dVDmUJ 9zJrr+Nnjbrjv5gwu55T5QmKOjHhGEw0MWGOQyrMWqvKks24J/0ydr0oJu37lk8C 1Zoz7tLeiTrHHNm7xLu8t2GY3fTgHA1jyN5Q2GMrbMXtwgjfhhpBDdAeo4HJXnh6 0OLeE9E0GmRPqEs0Cucax+Tl9MAhwxZkWqNaQKJqVJVHgt4/soL6 -----END CERTIFICATE-----Generated at Mon Apr 27 11:20:03 2026 by rpki-client