$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/3cab4024-3784-37e5-93cb-6dc6b786bf2b.roa File: 3cab4024-3784-37e5-93cb-6dc6b786bf2b.roa (raw, json) Hash identifier: ieLLG1XX1kj/6u9igH4d3MKyEfJVnw3AdOtks/nxhak= Subject key identifier: 89:34:0A:1D:74:09:A7:C7:D9:80:7E:0C:54:99:08:7C:BA:5B:BB:03 Certificate issuer: /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Certificate serial: 010D0C9F4328584E6B0A17B8D211C0AB95C28700 Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/3cab4024-3784-37e5-93cb-6dc6b786bf2b.roa Signing time: Tue 07 Jul 2026 09:00:12 +0000 ROA not before: Tue 07 Jul 2026 09:00:12 +0000 ROA not after: Mon 05 Oct 2026 09:00:12 +0000 asID: 400072 IP address blocks: 23.229.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6b:0a:17:b8:d2:11:c0:ab:95:c2:87:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Validity Not Before: Jul 7 09:00:12 2026 GMT Not After : Oct 5 09:00:12 2026 GMT Subject: CN=4bc55b0f-9c2c-4cf7-83bc-0c926af663f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:71:b6:27:ab:a4:ce:4b:a5:52:2f:76:30:c8: b5:e8:8d:ee:4a:2b:d1:bf:04:6a:bd:01:86:2b:a2: 26:2b:8f:9f:31:18:3a:75:bf:ec:43:3d:9f:58:fd: 93:10:d6:85:7f:fc:e8:a7:e9:f6:07:03:d8:dd:98: 07:c8:22:db:78:23:14:9a:84:61:71:08:dd:ff:28: 28:f9:6f:e1:71:1d:44:d9:43:42:24:ad:c3:14:7d: 4a:e9:6b:59:a2:f5:6c:9b:85:a3:e5:87:36:dc:d2: 11:b8:2e:e1:50:8f:f2:ed:5f:8d:e9:9c:c1:d8:42: 27:82:5d:a0:83:fc:a5:c2:f6:85:80:68:a8:3c:77: 47:e8:87:a7:0b:bc:3c:2b:d8:4c:a0:35:4d:36:e6: ec:ff:23:51:17:a7:97:fd:c4:8d:10:96:9a:1e:37: 15:bc:27:86:d2:ce:6f:29:c6:2e:cc:a3:aa:2e:17: df:7a:30:34:a4:2c:e4:16:12:b2:fc:e7:c1:2f:c4: 4a:17:2b:7c:97:aa:31:06:39:45:64:22:8b:d9:48: ec:cd:e5:cc:a7:cf:f3:42:9e:ca:eb:09:25:91:c1: 7a:c3:0f:2d:59:8c:33:5f:d0:3a:c5:8e:7b:7b:09: a5:74:b9:30:c8:db:ce:d0:6b:8c:9a:0d:2f:6e:65: 88:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:34:0A:1D:74:09:A7:C7:D9:80:7E:0C:54:99:08:7C:BA:5B:BB:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/3cab4024-3784-37e5-93cb-6dc6b786bf2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl X509v3 Authority Key Identifier: keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer sbgp-ipAddrBlock: critical IPv4: 23.229.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:12:8d:d8:eb:4b:bc:db:f0:3d:99:c4:2d:f7:d9:46:ab:b7: 7c:28:d5:6c:70:90:25:0f:70:4c:fa:6e:22:65:21:39:05:e1: 80:10:3d:b4:35:17:af:59:81:85:1f:35:12:89:03:7b:9d:3a: 45:6d:18:9c:f0:22:41:f4:f3:de:fe:1e:ce:07:d3:1a:df:2b: 11:e0:ee:d8:0d:97:7b:30:42:60:e3:12:31:ca:36:70:f0:f2: 13:ca:e2:5c:37:f6:cc:f6:38:d5:45:85:4d:6a:5b:3e:45:f9: 21:3c:2c:6a:f1:fb:d7:42:d9:43:ff:61:d0:1f:4f:1d:6d:30: a8:0e:66:cc:e5:30:c9:57:31:d8:dd:95:f0:84:e3:4c:d6:39: 39:17:0d:ca:1f:e2:43:ac:3d:ed:6d:27:8f:43:91:51:a8:fb: ab:70:4c:75:56:32:c3:e8:2e:ca:9e:d6:92:44:4f:db:db:c3: cc:8d:59:c0:0a:24:7f:41:54:ea:c2:4f:9f:27:38:1c:9a:1c: 32:64:3e:dd:9c:8e:5c:8c:58:03:61:28:02:d9:2c:79:29:56: f6:9d:67:49:35:20:df:81:d7:6e:ea:d3:1e:39:54:52:af:a8: 05:b8:17:d2:ce:c2:aa:1e:37:85:73:2e:2b:89:e4:16:7e:56: fb:d0:fd:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5rChe40hHAq5XChwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVlZGYwMjEtMDI5OC00YTgxLTk3ZDUtMWM4NWEyZWI0 NWY1MB4XDTI2MDcwNzA5MDAxMloXDTI2MTAwNTA5MDAxMlowLzEtMCsGA1UEAxMk NGJjNTViMGYtOWMyYy00Y2Y3LTgzYmMtMGM5MjZhZjY2M2Y1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHG2J6ukzkulUi92MMi16I3uSivRvwRqvQGG K6ImK4+fMRg6db/sQz2fWP2TENaFf/zop+n2BwPY3ZgHyCLbeCMUmoRhcQjd/ygo +W/hcR1E2UNCJK3DFH1K6WtZovVsm4Wj5Yc23NIRuC7hUI/y7V+N6ZzB2EIngl2g g/ylwvaFgGioPHdH6IenC7w8K9hMoDVNNubs/yNRF6eX/cSNEJaaHjcVvCeG0s5v KcYuzKOqLhffejA0pCzkFhKy/OfBL8RKFyt8l6oxBjlFZCKL2UjszeXMp8/zQp7K 6wklkcF6ww8tWYwzX9A6xY57ewmldLkwyNvO0GuMmg0vbmWIiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIk0Ch10CafH2YB+DFSZCHy6W7sDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVk ZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1YTJlYjQ1ZjUvM2NhYjQwMjQtMzc4NC0z N2U1LTkzY2ItNmRjNmI3ODZiZjJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjVlZGYwMjEtMDI5OC00YTgxLTk3 ZDUtMWM4NWEyZWI0NWY1L2I1ZWRmMDIxLTAyOTgtNGE4MS05N2Q1LTFjODVhMmVi NDVmNS5jcmwwHwYDVR0jBBgwFoAUhAkMQqDZn+raqP3DbTOl+IviID0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVkZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1 YTJlYjQ1ZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+V/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKwSjdjrS7zb8D2ZxC332Uart3wo1WxwkCUPcEz6biJlITkF4YAQPbQ1 F69ZgYUfNRKJA3udOkVtGJzwIkH0897+Hs4H0xrfKxHg7tgNl3swQmDjEjHKNnDw 8hPK4lw39sz2ONVFhU1qWz5F+SE8LGrx+9dC2UP/YdAfTx1tMKgOZszlMMlXMdjd lfCE40zWOTkXDcof4kOsPe1tJ49DkVGo+6twTHVWMsPoLsqe1pJET9vbw8yNWcAK JH9BVOrCT58nOByaHDJkPt2cjlyMWANhKALZLHkpVvadZ0k1IN+B127q0x45VFKv qAW4F9LOwqoeN4VzLiuJ5BZ+VvvQ/Us= -----END CERTIFICATE-----Generated at Tue Jul 14 04:22:53 2026 by rpki-client