$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/3cab4024-3784-37e5-93cb-6dc6b786bf2b.roa File: 3cab4024-3784-37e5-93cb-6dc6b786bf2b.roa (raw, json) Hash identifier: kL9AtczcHI3ry5nLAp9g/1yB2/hSdTfpzShOUxc85p8= Subject key identifier: D3:EB:3F:37:0F:30:25:0B:39:11:DB:AA:8C:B2:A1:F3:32:A1:44:D2 Certificate issuer: /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Certificate serial: 010D0C9F4328584CAA2711F992500D409801AA40 Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/3cab4024-3784-37e5-93cb-6dc6b786bf2b.roa Signing time: Tue 27 Jan 2026 14:00:36 +0000 ROA not before: Tue 27 Jan 2026 14:00:36 +0000 ROA not after: Mon 27 Apr 2026 13:00:36 +0000 asID: 400072 IP address blocks: 23.229.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:aa:27:11:f9:92:50:0d:40:98:01:aa:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Validity Not Before: Jan 27 14:00:36 2026 GMT Not After : Apr 27 13:00:36 2026 GMT Subject: CN=62326a9e-a57c-48e4-882c-b1a167d6f611 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:47:f0:d1:4d:47:d4:f1:56:70:53:4f:42:b5: 70:ae:72:1d:5c:9b:53:2a:2d:11:be:f0:ca:a4:43: f3:d9:49:ca:4a:e8:de:d8:00:18:f7:95:a6:dd:1a: 63:3b:5a:bb:39:df:f1:11:a8:de:c3:17:f0:f9:f4: 42:0b:2c:e2:a2:61:1e:9d:57:b0:c4:92:21:e9:dd: d8:08:b4:ca:70:1c:21:0b:f0:a8:15:aa:c6:bf:0a: fd:4a:26:32:5d:64:a8:5e:61:fc:31:7d:1b:a0:31: 60:31:90:7a:66:e4:49:f1:52:df:41:e7:71:b4:f7: 1e:e3:f8:70:08:07:1a:ce:7c:6d:19:6d:d7:5e:49: 00:d7:dc:82:44:8e:34:b3:bc:af:2b:27:50:41:9e: 9e:73:7b:44:6c:91:25:be:a1:b0:2b:b7:1b:92:0b: 09:b5:e8:07:31:6e:a8:f2:58:5b:ad:e1:d4:79:a8: a1:09:fa:24:82:51:03:1d:48:30:68:3f:c0:1c:7a: 40:6e:3e:7b:90:da:d6:9c:6e:32:c8:99:b2:91:dc: 59:86:ad:e5:ad:91:df:1e:9f:fc:cd:e6:80:42:9f: 99:43:00:24:1e:5a:af:54:4e:27:d6:c9:90:d3:ce: 17:9b:a9:73:ec:22:e5:4c:11:45:5f:ea:9e:be:e4: e5:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:EB:3F:37:0F:30:25:0B:39:11:DB:AA:8C:B2:A1:F3:32:A1:44:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/3cab4024-3784-37e5-93cb-6dc6b786bf2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl X509v3 Authority Key Identifier: keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer sbgp-ipAddrBlock: critical IPv4: 23.229.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:c2:6f:42:e4:b1:fc:88:95:d5:86:23:f3:2b:6c:9d:b4:c6: db:e3:ce:57:b2:00:b6:8c:20:10:34:ed:01:13:34:04:3a:e6: d9:b9:a4:70:2b:9a:ab:88:01:a6:f4:0b:47:d0:00:33:49:41: 96:d0:b7:24:74:5b:f1:ae:58:1a:ea:76:0f:32:a7:7e:41:6b: 38:61:ed:5d:c3:83:31:9e:8f:ca:f3:5d:97:45:21:0d:68:b0: b3:51:5d:f6:1e:e5:0c:51:59:84:df:9c:92:27:a7:b6:c8:39: 17:57:3a:f4:21:77:3d:89:0b:52:43:30:28:44:12:8e:8f:28: c6:eb:48:cb:d1:93:4a:ae:34:16:3c:57:a2:30:3f:62:af:40: 57:01:5f:9a:21:73:01:ae:8f:db:29:64:81:97:a9:34:31:33: a1:c5:ae:cb:37:f6:78:79:fe:bd:dc:90:6a:cd:85:0b:8e:d5: ed:68:25:9b:7e:67:c1:a8:20:f4:b5:5a:79:17:f9:cc:a1:92: a5:14:5f:e3:40:1d:41:96:69:c4:21:3d:a3:09:09:cb:ac:f1: 3a:dd:1e:03:6e:ca:c3:53:bf:32:47:06:b4:af:71:a5:97:9f: 6c:0d:0d:e8:69:75:fd:f7:bc:c8:6d:09:15:cb:d6:fb:04:47: 56:88:a8:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyqJxH5klANQJgBqkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVlZGYwMjEtMDI5OC00YTgxLTk3ZDUtMWM4NWEyZWI0 NWY1MB4XDTI2MDEyNzE0MDAzNloXDTI2MDQyNzEzMDAzNlowLzEtMCsGA1UEAxMk NjIzMjZhOWUtYTU3Yy00OGU0LTg4MmMtYjFhMTY3ZDZmNjExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkfw0U1H1PFWcFNPQrVwrnIdXJtTKi0RvvDK pEPz2UnKSuje2AAY95Wm3RpjO1q7Od/xEajewxfw+fRCCyziomEenVewxJIh6d3Y CLTKcBwhC/CoFarGvwr9SiYyXWSoXmH8MX0boDFgMZB6ZuRJ8VLfQedxtPce4/hw CAcaznxtGW3XXkkA19yCRI40s7yvKydQQZ6ec3tEbJElvqGwK7cbkgsJtegHMW6o 8lhbreHUeaihCfokglEDHUgwaD/AHHpAbj57kNrWnG4yyJmykdxZhq3lrZHfHp/8 zeaAQp+ZQwAkHlqvVE4n1smQ084Xm6lz7CLlTBFFX+qevuTlGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNPrPzcPMCULORHbqoyyofMyoUTSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVk ZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1YTJlYjQ1ZjUvM2NhYjQwMjQtMzc4NC0z N2U1LTkzY2ItNmRjNmI3ODZiZjJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjVlZGYwMjEtMDI5OC00YTgxLTk3 ZDUtMWM4NWEyZWI0NWY1L2I1ZWRmMDIxLTAyOTgtNGE4MS05N2Q1LTFjODVhMmVi NDVmNS5jcmwwHwYDVR0jBBgwFoAUhAkMQqDZn+raqP3DbTOl+IviID0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVkZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1 YTJlYjQ1ZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+V/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACTCb0LksfyIldWGI/MrbJ20xtvjzleyALaMIBA07QETNAQ65tm5pHAr mquIAab0C0fQADNJQZbQtyR0W/GuWBrqdg8yp35Bazhh7V3DgzGej8rzXZdFIQ1o sLNRXfYe5QxRWYTfnJInp7bIORdXOvQhdz2JC1JDMChEEo6PKMbrSMvRk0quNBY8 V6IwP2KvQFcBX5ohcwGuj9spZIGXqTQxM6HFrss39nh5/r3ckGrNhQuO1e1oJZt+ Z8GoIPS1WnkX+cyhkqUUX+NAHUGWacQhPaMJCcus8TrdHgNuysNTvzJHBrSvcaWX n2wNDehpdf33vMhtCRXL1vsER1aIqAM= -----END CERTIFICATE-----Generated at Thu Feb 26 20:54:54 2026 by rpki-client