$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/27e70452-5e7e-4070-905f-86c708cbebd5/d505f680-ddd9-361d-8240-9518d17f6b9a.roa File: d505f680-ddd9-361d-8240-9518d17f6b9a.roa (raw, json) Hash identifier: +TyESglSjbSUd6TJ+dcG0RaGZku9b9X1zH2wP6/wtno= Subject key identifier: 30:48:99:8F:84:48:40:F6:15:58:CB:BE:C3:0F:00:B5:56:E3:FB:93 Certificate issuer: /CN=27e70452-5e7e-4070-905f-86c708cbebd5 Certificate serial: 010D0C9F4328584DE580859FCD465EB53BD93B80 Authority key identifier: 17:12:EF:47:C7:61:2F:3E:82:65:90:AB:12:22:2A:57:26:08:3D:97 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/27e70452-5e7e-4070-905f-86c708cbebd5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/27e70452-5e7e-4070-905f-86c708cbebd5/d505f680-ddd9-361d-8240-9518d17f6b9a.roa Signing time: Wed 20 May 2026 13:00:31 +0000 ROA not before: Wed 20 May 2026 13:00:31 +0000 ROA not after: Tue 18 Aug 2026 13:00:31 +0000 asID: 400586 IP address blocks: 23.134.104.0/24 maxlen: 24 2602:fb98::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/27e70452-5e7e-4070-905f-86c708cbebd5/27e70452-5e7e-4070-905f-86c708cbebd5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/27e70452-5e7e-4070-905f-86c708cbebd5/27e70452-5e7e-4070-905f-86c708cbebd5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/27e70452-5e7e-4070-905f-86c708cbebd5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e5:80:85:9f:cd:46:5e:b5:3b:d9:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27e70452-5e7e-4070-905f-86c708cbebd5 Validity Not Before: May 20 13:00:31 2026 GMT Not After : Aug 18 13:00:31 2026 GMT Subject: CN=28faa789-2991-4fce-be98-9002de6078d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:b8:38:b0:de:a8:53:ea:17:10:e3:63:00:c5: 59:36:c6:2b:ef:76:18:b4:b6:63:de:34:fa:f7:cc: ac:3e:e1:95:7b:1d:93:63:af:b4:e3:de:59:eb:2e: 3a:18:d7:7f:fe:5c:0c:62:90:a2:5b:64:b3:e8:24: 71:ed:db:85:e1:01:5c:31:a6:57:24:78:29:c4:9d: 5f:8c:23:53:27:85:dc:7c:63:f2:d2:94:e0:14:78: f2:63:18:c0:a5:d1:20:83:d7:51:d1:02:a6:59:87: 88:07:bd:53:fc:e7:c8:b4:13:b1:a4:58:6c:9b:e1: bd:09:43:36:5b:fb:f2:f1:2f:13:cd:0b:95:a9:b6: ac:07:b5:b1:5d:a6:4f:af:35:0c:66:37:19:e5:19: d6:3a:c9:9c:51:b2:61:35:81:9b:5a:d8:2a:b6:79: 76:01:38:01:b6:73:3e:db:32:bf:a0:dc:a8:5e:cc: e6:43:5a:ea:c7:f0:58:27:63:c9:ad:6d:64:c8:14: ee:dd:ee:88:49:23:71:a5:5a:ed:90:9c:6f:61:e0: 19:2c:77:fd:04:6b:58:75:36:38:fa:1e:cc:d2:ae: 68:44:fe:8b:98:ad:12:c7:bc:56:8e:eb:cc:3e:e2: 15:ed:89:08:c5:fe:ce:95:e5:3e:47:76:18:7c:ed: 7c:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:48:99:8F:84:48:40:F6:15:58:CB:BE:C3:0F:00:B5:56:E3:FB:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/27e70452-5e7e-4070-905f-86c708cbebd5/d505f680-ddd9-361d-8240-9518d17f6b9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/27e70452-5e7e-4070-905f-86c708cbebd5/27e70452-5e7e-4070-905f-86c708cbebd5.crl X509v3 Authority Key Identifier: keyid:17:12:EF:47:C7:61:2F:3E:82:65:90:AB:12:22:2A:57:26:08:3D:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/27e70452-5e7e-4070-905f-86c708cbebd5.cer sbgp-ipAddrBlock: critical IPv4: 23.134.104.0/24 IPv6: 2602:fb98::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:89:a6:45:70:fd:55:5d:6c:38:7d:86:8f:4b:5e:f9:08:79: 9c:62:64:5f:d3:ed:68:4a:7f:78:59:9a:fa:24:9d:15:47:67: 14:48:8e:93:2c:d8:b3:aa:a6:9e:7c:ee:cd:52:38:a3:5f:1a: d7:ff:7a:51:37:9f:40:5d:5f:00:a4:89:e6:3f:ac:cb:ab:52: 53:57:bd:07:70:2c:47:87:5b:2b:42:a1:3f:8c:89:e0:b4:09: ae:06:99:4e:c8:b2:59:05:3f:fb:09:e0:ba:68:9a:cf:27:62: 87:7f:ef:ac:43:71:96:e3:11:7e:e3:66:37:2b:3e:bf:74:4f: 0a:7e:b7:b0:49:05:6c:b7:58:b8:4e:e8:5b:2c:77:c9:9c:ff: d2:a6:8b:0b:99:cf:89:4b:bc:a6:bc:22:4f:b8:89:d9:63:14: 39:31:46:c8:ab:11:08:d0:b4:1b:59:6c:c3:00:1a:f4:95:bd: 3d:40:d3:64:e4:67:19:6c:8d:9a:f7:e5:6d:38:ef:17:d6:30: d6:6d:92:6c:c8:68:d0:25:14:e0:36:a2:12:d5:da:72:a8:d3: 95:5b:97:68:74:9d:93:b8:61:21:5d:a8:3b:ca:a4:48:8b:75: 42:33:73:ea:4c:21:7c:b1:66:cf:33:19:34:5b:73:5f:ff:cc: 80:86:59:9f -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE3lgIWfzUZetTvZO4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjdlNzA0NTItNWU3ZS00MDcwLTkwNWYtODZjNzA4Y2Jl YmQ1MB4XDTI2MDUyMDEzMDAzMVoXDTI2MDgxODEzMDAzMVowLzEtMCsGA1UEAxMk MjhmYWE3ODktMjk5MS00ZmNlLWJlOTgtOTAwMmRlNjA3OGQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4rg4sN6oU+oXEONjAMVZNsYr73YYtLZj3jT6 98ysPuGVex2TY6+0495Z6y46GNd//lwMYpCiW2Sz6CRx7duF4QFcMaZXJHgpxJ1f jCNTJ4XcfGPy0pTgFHjyYxjApdEgg9dR0QKmWYeIB71T/OfItBOxpFhsm+G9CUM2 W/vy8S8TzQuVqbasB7WxXaZPrzUMZjcZ5RnWOsmcUbJhNYGbWtgqtnl2ATgBtnM+ 2zK/oNyoXszmQ1rqx/BYJ2PJrW1kyBTu3e6ISSNxpVrtkJxvYeAZLHf9BGtYdTY4 +h7M0q5oRP6LmK0Sx7xWjuvMPuIV7YkIxf7OleU+R3YYfO18BwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFDBImY+ESED2FVjLvsMPALVW4/uTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yN2U3 MDQ1Mi01ZTdlLTQwNzAtOTA1Zi04NmM3MDhjYmViZDUvZDUwNWY2ODAtZGRkOS0z NjFkLTgyNDAtOTUxOGQxN2Y2YjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjdlNzA0NTItNWU3ZS00MDcwLTkw NWYtODZjNzA4Y2JlYmQ1LzI3ZTcwNDUyLTVlN2UtNDA3MC05MDVmLTg2YzcwOGNi ZWJkNS5jcmwwHwYDVR0jBBgwFoAUFxLvR8dhLz6CZZCrEiIqVyYIPZcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yN2U3MDQ1Mi01ZTdlLTQwNzAtOTA1Zi04NmM3 MDhjYmViZDUuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4ZoMA4E AgACMAgDBgAmAvuYADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB+iaZFcP1VXWw4fYaPS175CHmcYmRf0+1o Sn94WZr6JJ0VR2cUSI6TLNizqqaefO7NUjijXxrX/3pRN59AXV8ApInmP6zLq1JT V70HcCxHh1srQqE/jIngtAmuBplOyLJZBT/7CeC6aJrPJ2KHf++sQ3GW4xF+42Y3 Kz6/dE8KfrewSQVst1i4TuhbLHfJnP/SposLmc+JS7ymvCJPuInZYxQ5MUbIqxEI 0LQbWWzDABr0lb09QNNk5GcZbI2a9+VtOO8X1jDWbZJsyGjQJRTgNqIS1dpyqNOV W5dodJ2TuGEhXag7yqRIi3VCM3PqTCF8sWbPMxk0W3Nf/8yAhlmf -----END CERTIFICATE-----Generated at Sun May 24 06:45:45 2026 by rpki-client