$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/9f4ae3ed-c0b2-3444-a2a8-5961ec5b4f0e.roa File: 9f4ae3ed-c0b2-3444-a2a8-5961ec5b4f0e.roa (raw, json) Hash identifier: hirv1zb1jKY8hClAGdvZA82i8RNTUnPzZdKsXsFU2jE= Subject key identifier: D2:9C:9B:46:66:11:84:23:93:0E:33:D3:EB:FE:D2:89:4A:91:09:C4 Certificate issuer: /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Certificate serial: 010D0C9F4328584B291C1D5DD61574926B414640 Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/9f4ae3ed-c0b2-3444-a2a8-5961ec5b4f0e.roa Signing time: Thu 11 Sep 2025 15:52:29 +0000 ROA not before: Thu 11 Sep 2025 15:52:29 +0000 ROA not after: Wed 10 Dec 2025 16:52:29 +0000 asID: 55286 IP address blocks: 23.236.146.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:29:1c:1d:5d:d6:15:74:92:6b:41:46:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Validity Not Before: Sep 11 15:52:29 2025 GMT Not After : Dec 10 16:52:29 2025 GMT Subject: CN=7330ea55-8a96-470c-9f88-6bf3d7219619 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:50:84:6b:99:4d:39:eb:b5:db:7d:a3:90:56: 57:89:1a:40:6a:22:06:d4:0a:43:3a:a6:b8:a5:a8: e8:fd:16:e8:79:ef:61:ce:0a:53:1f:f2:09:90:84: 9a:1f:78:bd:1a:44:9d:c7:73:2e:57:7a:72:ce:4f: e0:62:e7:a6:2e:62:a1:53:10:f9:e1:3e:53:9c:c5: 9a:7a:ea:6b:e6:ea:fe:96:84:0c:99:7e:11:91:8f: 4e:aa:88:ab:d9:c6:64:02:12:bd:89:21:5b:bc:82: 02:92:e0:4e:82:26:4c:2b:20:c5:a8:25:b9:5a:b9: 03:9a:88:9f:e5:2f:c9:95:ee:4d:89:1e:1d:86:68: 15:4f:7c:80:b9:44:fc:ae:b2:bc:7e:d3:fd:b2:03: 7e:fb:80:3a:cd:31:da:92:93:d6:03:7f:37:ef:06: ca:c1:e9:d4:5e:6d:eb:c2:a6:32:8a:94:0e:73:67: eb:f2:19:39:c1:76:90:73:04:b1:b7:c0:ef:8f:54: 38:fb:31:e0:26:1d:c3:2d:e3:d9:65:71:ea:ba:13: fa:a9:a4:f0:44:6c:f5:9f:c2:84:39:e9:ac:08:02: b5:59:b8:d1:de:c8:98:fa:8c:62:32:89:6b:96:fb: 94:2e:a6:cb:fe:8d:c3:20:fb:68:d4:89:84:82:3e: a0:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:9C:9B:46:66:11:84:23:93:0E:33:D3:EB:FE:D2:89:4A:91:09:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/9f4ae3ed-c0b2-3444-a2a8-5961ec5b4f0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl X509v3 Authority Key Identifier: keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer sbgp-ipAddrBlock: critical IPv4: 23.236.146.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:a0:f6:72:d1:45:0e:15:cf:7d:3a:97:7a:20:c3:48:15:ee: 7d:66:8b:67:04:48:69:db:7f:01:87:2f:87:1c:6d:70:88:95: 3b:8a:3b:f3:df:c2:12:19:b8:32:64:3a:7b:2c:26:8c:2f:cf: 3f:a9:42:18:36:c7:91:2f:e0:12:d3:3a:c6:e9:bb:cf:41:e5: 76:34:68:1d:1a:06:6e:1a:9d:9b:e8:d5:ff:57:aa:89:10:b2: 58:b8:d1:77:90:d3:5b:16:81:76:a0:ff:cb:af:ea:9d:96:d3: fb:50:cc:17:64:00:dd:1b:34:ab:10:4a:47:c2:d4:0d:16:ae: c7:ca:91:de:62:07:27:af:e9:bb:0e:4f:d5:a6:ae:29:d3:82: 7c:77:62:4d:7b:31:a7:0c:5b:86:f0:fe:4e:b8:ab:da:6d:d6: c4:41:26:da:3f:bc:dd:fe:e2:8c:22:ef:4b:83:30:60:b0:0a: 73:e9:b2:8c:dc:30:ce:ff:c1:10:33:f9:86:fc:78:44:6f:54: 62:77:d1:db:28:d8:1c:94:a7:d7:b7:94:f3:0f:f5:52:ff:d3: 18:68:2d:87:a4:f2:42:98:0a:78:16:4d:11:f3:06:4e:f9:3a: 03:84:f1:32:2d:7b:02:24:a9:25:7a:d7:df:8d:b2:71:4a:5e: d4:32:15:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEspHB1d1hV0kmtBRkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVlZGYwMjEtMDI5OC00YTgxLTk3ZDUtMWM4NWEyZWI0 NWY1MB4XDTI1MDkxMTE1NTIyOVoXDTI1MTIxMDE2NTIyOVowLzEtMCsGA1UEAxMk NzMzMGVhNTUtOGE5Ni00NzBjLTlmODgtNmJmM2Q3MjE5NjE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1CEa5lNOeu1232jkFZXiRpAaiIG1ApDOqa4 pajo/Rboee9hzgpTH/IJkISaH3i9GkSdx3MuV3pyzk/gYuemLmKhUxD54T5TnMWa eupr5ur+loQMmX4RkY9Oqoir2cZkAhK9iSFbvIICkuBOgiZMKyDFqCW5WrkDmoif 5S/Jle5NiR4dhmgVT3yAuUT8rrK8ftP9sgN++4A6zTHakpPWA3837wbKwenUXm3r wqYyipQOc2fr8hk5wXaQcwSxt8Dvj1Q4+zHgJh3DLePZZXHquhP6qaTwRGz1n8KE OemsCAK1WbjR3siY+oxiMolrlvuULqbL/o3DIPto1ImEgj6gKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNKcm0ZmEYQjkw4z0+v+0olKkQnEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVk ZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1YTJlYjQ1ZjUvOWY0YWUzZWQtYzBiMi0z NDQ0LWEyYTgtNTk2MWVjNWI0ZjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjVlZGYwMjEtMDI5OC00YTgxLTk3 ZDUtMWM4NWEyZWI0NWY1L2I1ZWRmMDIxLTAyOTgtNGE4MS05N2Q1LTFjODVhMmVi NDVmNS5jcmwwHwYDVR0jBBgwFoAUhAkMQqDZn+raqP3DbTOl+IviID0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVkZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1 YTJlYjQ1ZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF+ySMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFmg9nLRRQ4Vz306l3ogw0gV7n1mi2cESGnbfwGHL4ccbXCIlTuKO/Pf whIZuDJkOnssJowvzz+pQhg2x5Ev4BLTOsbpu89B5XY0aB0aBm4anZvo1f9XqokQ sli40XeQ01sWgXag/8uv6p2W0/tQzBdkAN0bNKsQSkfC1A0WrsfKkd5iByev6bsO T9WmrinTgnx3Yk17MacMW4bw/k64q9pt1sRBJto/vN3+4owi70uDMGCwCnPpsozc MM7/wRAz+Yb8eERvVGJ30dso2ByUp9e3lPMP9VL/0xhoLYek8kKYCngWTRHzBk75 OgOE8TItewIkqSV619+NsnFKXtQyFVQ= -----END CERTIFICATE-----Generated at Thu Oct 9 07:41:57 2025 by rpki-client