$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/121e3378-6d20-3bd5-932f-cf2eb48255d2.roa File: 121e3378-6d20-3bd5-932f-cf2eb48255d2.roa (raw, json) Hash identifier: hYtgXH3bnKnLvUTrTQ5bohxKkBtdtEMG1bfyIzBwugo= Subject key identifier: 57:56:E6:8A:B7:38:CE:72:D9:40:33:29:EC:69:46:D8:7A:57:38:0A Certificate issuer: /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Certificate serial: 010D0C9F4328584B10062108F345E6EE679B6C00 Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/121e3378-6d20-3bd5-932f-cf2eb48255d2.roa Signing time: Tue 02 Sep 2025 16:12:59 +0000 ROA not before: Tue 02 Sep 2025 16:12:59 +0000 ROA not after: Mon 01 Dec 2025 17:12:59 +0000 asID: 55081 IP address blocks: 23.236.146.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 12 Sep 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:10:06:21:08:f3:45:e6:ee:67:9b:6c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Validity Not Before: Sep 2 16:12:59 2025 GMT Not After : Dec 1 17:12:59 2025 GMT Subject: CN=c84930c1-6c9d-4b86-add1-bed23ba814ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:bf:48:1d:b0:45:09:16:ef:b0:af:5f:bb:c0: 1d:ae:91:32:05:89:af:64:e9:e5:1a:a7:22:92:04: 67:e9:37:eb:bc:c2:d8:d6:88:0c:da:12:f8:22:dc: 80:de:32:e0:01:a7:55:60:41:f8:3a:0d:cf:34:d9: d1:ab:4c:08:fb:d9:de:d8:b1:90:d9:ea:aa:5e:3a: fb:89:9f:e4:f9:52:fa:70:19:89:fb:b4:b9:98:d7: 24:89:ef:4f:b8:4c:d2:df:c4:1d:9e:13:ed:ad:42: 32:a0:76:df:7a:50:df:69:58:47:68:ca:db:fb:a1: 9f:69:49:e7:d2:26:09:8a:f7:51:b0:8b:1d:08:72: 3b:5c:a0:56:68:cb:90:8a:bb:58:c4:98:ec:e2:71: d8:c7:62:11:e5:3b:e3:fb:35:5f:70:1e:38:8f:45: 26:aa:46:59:be:1d:be:39:ab:dc:ae:38:f7:09:03: 5a:07:4c:67:6f:6d:80:a9:36:54:48:37:d4:35:af: 60:79:b2:48:c4:bb:b2:33:7b:c9:33:58:b1:50:97: 89:92:c1:92:69:df:17:76:d2:d3:53:cf:1c:01:c7: cc:24:83:bb:fe:f2:fb:6f:10:8c:90:b7:29:34:0b: 66:8c:a9:f7:a0:8d:bd:ce:50:f2:f6:a0:3b:05:0a: cc:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:56:E6:8A:B7:38:CE:72:D9:40:33:29:EC:69:46:D8:7A:57:38:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/121e3378-6d20-3bd5-932f-cf2eb48255d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl X509v3 Authority Key Identifier: keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer sbgp-ipAddrBlock: critical IPv4: 23.236.146.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:de:53:32:1e:da:f7:1d:c9:81:9b:fb:bb:b1:73:39:2a:44: e8:4d:ac:55:cf:04:16:0d:3a:c7:36:95:58:83:46:7e:cd:20: 13:ac:14:02:fa:7b:84:e7:0d:29:cc:ee:a1:4e:f4:1f:78:71: 92:58:4f:b6:7c:80:d2:f1:36:8d:7e:7f:d6:52:eb:bd:a3:45: 83:1b:21:dc:83:ac:de:ad:03:35:6d:63:e8:f4:c7:72:a8:75: 97:90:61:f7:f0:b2:69:a1:96:84:38:d6:1b:c4:23:03:0c:02: 76:8e:3e:63:fe:25:94:44:08:b3:50:42:e5:62:a7:04:3d:0e: a6:88:e3:d9:2e:28:c5:79:ae:a8:55:48:1f:24:60:8c:a3:ae: 32:8d:42:78:c2:fe:b8:10:6d:11:a0:60:8e:11:47:89:3f:80: 25:b6:f0:da:68:8a:99:5a:24:7b:ba:c9:d7:1a:40:e8:49:d6: d4:37:5d:d7:22:f7:32:1b:6d:81:eb:b3:f2:70:0f:e3:01:b8: 84:a1:8a:59:ac:d3:1c:3a:2e:d0:04:5f:72:d7:c0:55:39:0e: ba:20:53:22:74:7f:1f:88:0c:49:c5:05:c6:1d:d1:32:e9:f7: 4e:8a:5a:40:86:37:e9:ac:43:4a:da:4a:0b:dd:cf:8b:93:0b: cf:a1:2d:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsQBiEI80Xm7mebbAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVlZGYwMjEtMDI5OC00YTgxLTk3ZDUtMWM4NWEyZWI0 NWY1MB4XDTI1MDkwMjE2MTI1OVoXDTI1MTIwMTE3MTI1OVowLzEtMCsGA1UEAxMk Yzg0OTMwYzEtNmM5ZC00Yjg2LWFkZDEtYmVkMjNiYTgxNGFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhr9IHbBFCRbvsK9fu8AdrpEyBYmvZOnlGqci kgRn6TfrvMLY1ogM2hL4ItyA3jLgAadVYEH4Og3PNNnRq0wI+9ne2LGQ2eqqXjr7 iZ/k+VL6cBmJ+7S5mNckie9PuEzS38QdnhPtrUIyoHbfelDfaVhHaMrb+6GfaUnn 0iYJivdRsIsdCHI7XKBWaMuQirtYxJjs4nHYx2IR5Tvj+zVfcB44j0UmqkZZvh2+ Oavcrjj3CQNaB0xnb22AqTZUSDfUNa9gebJIxLuyM3vJM1ixUJeJksGSad8XdtLT U88cAcfMJIO7/vL7bxCMkLcpNAtmjKn3oI29zlDy9qA7BQrMoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFdW5oq3OM5y2UAzKexpRth6VzgKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVk ZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1YTJlYjQ1ZjUvMTIxZTMzNzgtNmQyMC0z YmQ1LTkzMmYtY2YyZWI0ODI1NWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjVlZGYwMjEtMDI5OC00YTgxLTk3 ZDUtMWM4NWEyZWI0NWY1L2I1ZWRmMDIxLTAyOTgtNGE4MS05N2Q1LTFjODVhMmVi NDVmNS5jcmwwHwYDVR0jBBgwFoAUhAkMQqDZn+raqP3DbTOl+IviID0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVkZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1 YTJlYjQ1ZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF+ySMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALLeUzIe2vcdyYGb+7uxczkqROhNrFXPBBYNOsc2lViDRn7NIBOsFAL6 e4TnDSnM7qFO9B94cZJYT7Z8gNLxNo1+f9ZS672jRYMbIdyDrN6tAzVtY+j0x3Ko dZeQYffwsmmhloQ41hvEIwMMAnaOPmP+JZRECLNQQuVipwQ9DqaI49kuKMV5rqhV SB8kYIyjrjKNQnjC/rgQbRGgYI4RR4k/gCW28NpoiplaJHu6ydcaQOhJ1tQ3Xdci 9zIbbYHrs/JwD+MBuIShilms0xw6LtAEX3LXwFU5DrogUyJ0fx+IDEnFBcYd0TLp 906KWkCGN+msQ0raSgvdz4uTC8+hLY8= -----END CERTIFICATE-----Generated at Thu Sep 11 01:18:31 2025 by rpki-client