$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/5b89f385-412c-3ed9-a4bb-edcc50d12a28.roa File: 5b89f385-412c-3ed9-a4bb-edcc50d12a28.roa (raw, json) Hash identifier: pkhJB37bN6NVRpALOwdEimPUzF4Rd35uJlCpL13XPwQ= Subject key identifier: 30:DB:12:F6:63:FA:BE:09:27:28:DA:7C:C9:02:0A:5F:E1:3A:50:9C Certificate issuer: /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Certificate serial: 010D0C9F4328584B10065C3BE73E52DB01769848 Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/5b89f385-412c-3ed9-a4bb-edcc50d12a28.roa Signing time: Tue 02 Sep 2025 16:13:27 +0000 ROA not before: Tue 02 Sep 2025 16:13:27 +0000 ROA not after: Mon 01 Dec 2025 17:13:27 +0000 asID: 55081 IP address blocks: 23.229.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 12 Sep 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:10:06:5c:3b:e7:3e:52:db:01:76:98:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Validity Not Before: Sep 2 16:13:27 2025 GMT Not After : Dec 1 17:13:27 2025 GMT Subject: CN=7966d384-08ce-4a7c-a66c-d45cc17ec3bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d1:12:2a:a4:14:84:31:6e:4c:db:41:6d:3a: b0:d2:57:5b:f7:36:c5:28:ac:28:e2:47:52:9f:9d: e0:7d:b3:2c:ab:a4:de:21:a9:36:8b:80:38:ee:81: c6:a6:ad:f0:67:b2:6a:e1:f5:d1:c4:99:33:3e:ab: 3a:0d:2c:e0:89:6a:9d:7e:33:07:50:32:8b:0b:7c: 3b:39:d0:94:89:d5:c9:53:a5:30:27:9d:f8:a2:eb: 97:ab:81:67:90:4c:16:c8:04:97:68:f1:78:e2:38: 26:d8:88:89:33:84:71:3d:44:ba:e4:fe:c0:da:d1: 1a:a2:99:fb:86:e5:0b:06:28:3b:c6:d4:fb:fb:4d: 4c:0c:57:41:94:2f:46:74:be:d3:db:e0:84:c4:f6: 6f:bb:10:3f:fb:3a:9f:76:66:3d:52:87:da:38:60: 61:a1:6c:cc:20:35:70:3b:c2:3d:81:c0:ea:e1:38: ff:8b:bf:ef:4f:b0:4b:ee:bd:85:9c:1c:d7:0d:82: f0:a7:2f:45:2e:71:de:2a:e1:1b:a3:5e:81:c5:cf: f0:57:d6:56:94:3d:c0:a1:e0:45:75:c8:b2:f0:c1: 7e:ba:90:f0:11:74:38:69:3f:dd:36:d8:1a:bd:a5: 2f:a2:4d:ea:9c:93:95:f4:f1:e6:3a:88:58:75:2f: 82:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:DB:12:F6:63:FA:BE:09:27:28:DA:7C:C9:02:0A:5F:E1:3A:50:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/5b89f385-412c-3ed9-a4bb-edcc50d12a28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl X509v3 Authority Key Identifier: keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer sbgp-ipAddrBlock: critical IPv4: 23.229.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:65:b5:68:45:a7:02:63:d1:29:f6:67:b3:06:46:99:ce:33: b9:aa:ec:23:bb:9b:e8:17:bd:1c:00:13:f9:69:a3:40:0a:8d: b0:9f:fe:41:b6:35:cb:17:4a:a7:75:2e:e5:cb:02:70:b4:1d: d7:5f:93:fe:39:2c:f5:9d:1a:a8:a8:7f:03:26:b2:02:0b:03: 4a:80:75:84:ec:55:08:7b:d5:5b:1e:39:6b:ec:8e:ef:73:e1: a2:28:c1:36:fc:ef:fa:2e:84:63:00:5e:98:cb:57:67:bb:90: ee:8a:65:23:1f:49:70:6c:52:fd:d2:bb:64:e8:a4:fc:2c:2f: 6a:e8:02:ff:46:a1:9f:d6:ad:be:af:1f:33:cd:b0:8b:aa:46: 7f:c7:49:bf:f7:65:0b:1c:ba:6e:1c:b0:f7:16:bd:3a:b6:9a: a0:10:a7:08:6c:c2:9e:8e:76:81:e0:74:48:9a:2d:97:9a:24: 06:a5:3d:6d:01:3d:40:df:25:65:a7:c8:b6:1f:28:48:cd:ca: 8f:ff:0a:4b:fe:dc:c8:b8:6e:10:f5:d2:04:95:96:0d:c5:08: 86:e6:b9:4f:d6:97:b9:1a:28:a4:ce:81:9b:9f:22:d8:bf:0b: fd:7c:67:bb:82:b0:ef:71:98:bf:9d:4a:b0:3e:d2:cf:0a:4c: 77:bc:9e:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsQBlw75z5S2wF2mEgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVlZGYwMjEtMDI5OC00YTgxLTk3ZDUtMWM4NWEyZWI0 NWY1MB4XDTI1MDkwMjE2MTMyN1oXDTI1MTIwMTE3MTMyN1owLzEtMCsGA1UEAxMk Nzk2NmQzODQtMDhjZS00YTdjLWE2NmMtZDQ1Y2MxN2VjM2JmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdESKqQUhDFuTNtBbTqw0ldb9zbFKKwo4kdS n53gfbMsq6TeIak2i4A47oHGpq3wZ7Jq4fXRxJkzPqs6DSzgiWqdfjMHUDKLC3w7 OdCUidXJU6UwJ534ouuXq4FnkEwWyASXaPF44jgm2IiJM4RxPUS65P7A2tEaopn7 huULBig7xtT7+01MDFdBlC9GdL7T2+CExPZvuxA/+zqfdmY9UofaOGBhoWzMIDVw O8I9gcDq4Tj/i7/vT7BL7r2FnBzXDYLwpy9FLnHeKuEbo16Bxc/wV9ZWlD3AoeBF dciy8MF+upDwEXQ4aT/dNtgavaUvok3qnJOV9PHmOohYdS+CNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDDbEvZj+r4JJyjafMkCCl/hOlCcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVk ZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1YTJlYjQ1ZjUvNWI4OWYzODUtNDEyYy0z ZWQ5LWE0YmItZWRjYzUwZDEyYTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjVlZGYwMjEtMDI5OC00YTgxLTk3 ZDUtMWM4NWEyZWI0NWY1L2I1ZWRmMDIxLTAyOTgtNGE4MS05N2Q1LTFjODVhMmVi NDVmNS5jcmwwHwYDVR0jBBgwFoAUhAkMQqDZn+raqP3DbTOl+IviID0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVkZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1 YTJlYjQ1ZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+VCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAClltWhFpwJj0Sn2Z7MGRpnOM7mq7CO7m+gXvRwAE/lpo0AKjbCf/kG2 NcsXSqd1LuXLAnC0Hddfk/45LPWdGqiofwMmsgILA0qAdYTsVQh71VseOWvsju9z 4aIowTb87/ouhGMAXpjLV2e7kO6KZSMfSXBsUv3Su2TopPwsL2roAv9GoZ/Wrb6v HzPNsIuqRn/HSb/3ZQscum4csPcWvTq2mqAQpwhswp6OdoHgdEiaLZeaJAalPW0B PUDfJWWnyLYfKEjNyo//Ckv+3Mi4bhD10gSVlg3FCIbmuU/Wl7kaKKTOgZufIti/ C/18Z7uCsO9xmL+dSrA+0s8KTHe8nhw= -----END CERTIFICATE-----Generated at Thu Sep 11 01:23:48 2025 by rpki-client