$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/66a2d060-ca2a-3281-9515-d6a3d54b78a4.roa File: 66a2d060-ca2a-3281-9515-d6a3d54b78a4.roa (raw, json) Hash identifier: rWcvapzqVE0qhilcFksrxxaMB5TRpqOA/fJxdt4RcD0= Subject key identifier: 0C:5E:F6:EA:06:AA:EC:21:6F:90:85:5E:3A:A6:5F:27:E8:8F:86:B1 Certificate issuer: /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Certificate serial: 010D0C9F4328584B617AE01F0ED66F477E68F700 Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/66a2d060-ca2a-3281-9515-d6a3d54b78a4.roa Signing time: Wed 01 Oct 2025 20:28:41 +0000 ROA not before: Wed 01 Oct 2025 20:28:41 +0000 ROA not after: Tue 30 Dec 2025 21:28:41 +0000 asID: 55286 IP address blocks: 23.236.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:61:7a:e0:1f:0e:d6:6f:47:7e:68:f7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Validity Not Before: Oct 1 20:28:41 2025 GMT Not After : Dec 30 21:28:41 2025 GMT Subject: CN=9c8af80e-cc7c-4ec4-a369-d390932cd4a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:7e:6c:e2:c7:07:75:f8:d5:3a:4c:ad:7a:d5: d9:bf:b8:8d:bf:6a:31:60:33:62:84:7d:75:c8:5d: 51:5b:17:46:0e:b5:aa:88:22:c2:88:c4:09:20:9c: ff:d3:64:7a:d1:ee:e5:30:31:3b:54:3a:b2:df:14: 79:e1:db:40:fe:4d:b6:b9:5b:67:8b:e3:e3:45:75: ca:eb:28:e2:9e:f7:27:99:d2:14:75:ae:26:09:21: e6:b7:0e:13:24:75:2c:74:ba:42:d6:0f:ae:08:0b: 4f:29:7a:3b:8e:ed:ae:1a:0b:15:9e:6a:72:ed:20: 68:90:e0:e0:53:fb:18:fd:50:73:6c:12:e9:88:7a: 7e:39:b1:e5:76:78:8a:66:39:00:b7:e3:77:41:92: 81:60:78:34:cc:12:e2:26:54:ae:3e:d3:a9:e3:bc: e2:85:46:8b:99:e8:fc:1b:e6:5e:2d:2e:94:e5:00: 4e:a7:d6:dd:75:77:0f:1c:45:ca:d0:d2:8b:77:40: ed:75:a4:62:15:40:95:b5:f5:dc:e1:cf:75:d5:55: 58:2d:41:43:65:b7:d1:d0:3b:72:24:46:7d:0c:be: ee:bb:3b:6a:9c:27:91:44:c9:23:3e:3d:c1:d5:12: f0:fd:d1:d3:3f:3f:34:b6:b5:2e:9d:b3:fa:26:e5: 2c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:5E:F6:EA:06:AA:EC:21:6F:90:85:5E:3A:A6:5F:27:E8:8F:86:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/66a2d060-ca2a-3281-9515-d6a3d54b78a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl X509v3 Authority Key Identifier: keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer sbgp-ipAddrBlock: critical IPv4: 23.236.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:79:e5:bd:ca:aa:d4:cc:c0:e0:1f:23:b4:df:b8:29:f0:64: 96:95:77:b7:9d:c7:5a:04:20:28:c3:30:53:54:f7:e0:c9:9c: a7:02:17:cc:45:95:4f:7a:7c:01:20:18:3d:9b:a6:57:72:98: b1:a9:75:76:27:25:17:1d:96:c3:89:d2:a4:59:f2:f6:4a:15: a2:ee:5b:15:7b:de:07:f0:c4:92:fa:ca:36:8a:54:dd:68:20: a7:e2:10:62:1b:42:68:f6:24:b1:2b:3c:3c:5b:b7:15:65:0d: e4:be:7c:6c:a3:9f:ab:d0:11:55:90:55:20:a0:b6:71:a8:07: 5f:08:35:be:e7:05:ee:20:1a:3f:a4:88:c7:d4:35:77:9d:d0: 16:8c:86:b2:2d:4f:ed:92:ac:d8:ba:83:35:d8:2d:f0:6c:97: 10:da:22:87:be:10:a6:db:7c:e7:3f:61:e4:84:58:22:5a:dc: 45:4f:87:79:43:47:d1:26:b8:0d:7b:2e:41:2c:e0:f0:68:4c: 55:08:c1:bf:14:2e:4f:97:f9:d4:df:4e:ad:34:a9:0d:6f:84: 10:ca:ad:c8:d6:3c:90:c7:ab:ff:2d:be:98:9a:b3:d0:21:42: 5e:95:ab:27:9a:5c:3b:c7:5d:3f:6a:9d:0d:61:7a:de:cc:55: 80:4a:aa:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtheuAfDtZvR35o9wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVlZGYwMjEtMDI5OC00YTgxLTk3ZDUtMWM4NWEyZWI0 NWY1MB4XDTI1MTAwMTIwMjg0MVoXDTI1MTIzMDIxMjg0MVowLzEtMCsGA1UEAxMk OWM4YWY4MGUtY2M3Yy00ZWM0LWEzNjktZDM5MDkzMmNkNGE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3H5s4scHdfjVOkytetXZv7iNv2oxYDNihH11 yF1RWxdGDrWqiCLCiMQJIJz/02R60e7lMDE7VDqy3xR54dtA/k22uVtni+PjRXXK 6yjinvcnmdIUda4mCSHmtw4TJHUsdLpC1g+uCAtPKXo7ju2uGgsVnmpy7SBokODg U/sY/VBzbBLpiHp+ObHldniKZjkAt+N3QZKBYHg0zBLiJlSuPtOp47zihUaLmej8 G+ZeLS6U5QBOp9bddXcPHEXK0NKLd0DtdaRiFUCVtfXc4c911VVYLUFDZbfR0Dty JEZ9DL7uuztqnCeRRMkjPj3B1RLw/dHTPz80trUunbP6JuUsEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAxe9uoGquwhb5CFXjqmXyfoj4axMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVk ZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1YTJlYjQ1ZjUvNjZhMmQwNjAtY2EyYS0z MjgxLTk1MTUtZDZhM2Q1NGI3OGE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjVlZGYwMjEtMDI5OC00YTgxLTk3 ZDUtMWM4NWEyZWI0NWY1L2I1ZWRmMDIxLTAyOTgtNGE4MS05N2Q1LTFjODVhMmVi NDVmNS5jcmwwHwYDVR0jBBgwFoAUhAkMQqDZn+raqP3DbTOl+IviID0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVkZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1 YTJlYjQ1ZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+yRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKJ55b3KqtTMwOAfI7TfuCnwZJaVd7edx1oEICjDMFNU9+DJnKcCF8xF lU96fAEgGD2bpldymLGpdXYnJRcdlsOJ0qRZ8vZKFaLuWxV73gfwxJL6yjaKVN1o IKfiEGIbQmj2JLErPDxbtxVlDeS+fGyjn6vQEVWQVSCgtnGoB18INb7nBe4gGj+k iMfUNXed0BaMhrItT+2SrNi6gzXYLfBslxDaIoe+EKbbfOc/YeSEWCJa3EVPh3lD R9EmuA17LkEs4PBoTFUIwb8ULk+X+dTfTq00qQ1vhBDKrcjWPJDHq/8tvpias9Ah Ql6VqyeaXDvHXT9qnQ1het7MVYBKqqw= -----END CERTIFICATE-----Generated at Thu Oct 9 07:41:57 2025 by rpki-client