$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/638448b8-bfd8-3705-b905-a907c87136c0.roa File: 638448b8-bfd8-3705-b905-a907c87136c0.roa (raw, json) Hash identifier: yc4U74OsNXZtWJHadCHzpP+7S3+fb+xk0rAc4RLQ/BU= Subject key identifier: 66:69:DE:81:CF:6E:14:F6:A3:8E:9D:0A:E2:4F:54:8D:58:2E:6B:10 Certificate issuer: /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Certificate serial: 010D0C9F4328584CAA26FE60736CED52DD974600 Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/638448b8-bfd8-3705-b905-a907c87136c0.roa Signing time: Tue 27 Jan 2026 14:00:36 +0000 ROA not before: Tue 27 Jan 2026 14:00:36 +0000 ROA not after: Mon 27 Apr 2026 13:00:36 +0000 asID: 7018 IP address blocks: 23.236.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:aa:26:fe:60:73:6c:ed:52:dd:97:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Validity Not Before: Jan 27 14:00:36 2026 GMT Not After : Apr 27 13:00:36 2026 GMT Subject: CN=caca99b6-cb90-4e4f-b230-a0fdb9262702 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:37:8a:77:d9:e4:01:9a:22:87:6f:9d:83:23: 1b:04:8f:31:34:8c:2f:99:3a:55:89:5f:bd:91:61: 44:eb:56:ed:01:43:93:4d:de:6c:4c:1c:86:b7:60: 69:b8:71:c1:d7:fd:ce:80:14:e4:c2:cf:b8:71:f3: 0c:e7:ed:7d:d5:4a:a1:37:3f:80:37:55:d0:48:4a: 17:6b:00:bc:66:7f:57:a7:df:fd:3e:1b:2a:ae:24: 4d:9c:92:ba:31:8f:f4:eb:c4:70:91:9a:ca:88:ba: 84:d3:f5:3d:5c:96:d9:a3:63:a0:d4:d8:17:97:29: 5a:fa:88:35:de:e5:26:88:98:26:b1:05:21:dd:4d: b4:e2:2f:ce:44:ef:e8:ad:b8:7f:81:28:09:ce:82: 9e:a7:ff:0e:1f:c6:bc:23:01:08:1b:82:5c:a1:72: 74:86:07:78:e2:79:da:df:79:b5:6f:c5:7c:3d:23: 1d:0e:cf:c3:37:cf:f5:df:21:45:f9:62:93:cc:dc: 85:c6:24:da:60:39:86:b2:a0:dc:43:30:39:fb:4a: 42:ae:a8:21:49:9a:1e:cc:82:5b:32:7a:5d:72:16: 75:1f:b0:23:f7:b9:ee:63:01:2b:bc:18:89:67:8a: c4:27:34:ba:e1:a6:63:63:1e:3a:33:8e:75:84:ca: 7c:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:69:DE:81:CF:6E:14:F6:A3:8E:9D:0A:E2:4F:54:8D:58:2E:6B:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/638448b8-bfd8-3705-b905-a907c87136c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl X509v3 Authority Key Identifier: keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer sbgp-ipAddrBlock: critical IPv4: 23.236.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:d3:69:49:28:b8:00:73:30:83:e5:09:65:a2:9f:5f:84:10: 39:dd:83:b8:e3:4c:aa:f9:b8:8e:bc:32:5e:49:3c:c7:8d:e1: c0:5b:58:2a:91:29:17:79:b7:bc:06:5b:2e:a2:6a:6c:a8:ff: 43:8f:ee:c0:eb:ec:a6:fd:a1:09:5a:67:99:eb:16:f4:2c:b2: e9:68:09:df:98:7c:60:04:a4:6f:fa:c9:78:af:35:ec:8f:21: 84:b1:98:04:e2:c3:f3:89:b8:e7:7f:7a:85:1a:f2:af:7b:66: 88:78:b9:b1:45:a6:84:bd:71:b9:0a:5a:61:35:a2:e7:7d:ff: 77:4d:42:c7:63:97:84:77:a1:db:0b:6c:3f:95:ba:7d:6d:67: a1:33:95:af:f0:74:da:fc:fa:f8:9b:4e:99:81:87:c9:f8:11: df:61:9d:39:41:87:a9:c3:9f:04:ca:57:b7:94:18:da:ba:89: cc:04:25:6e:aa:ca:ae:0b:77:9a:e0:6c:a8:ef:e9:8a:97:e1: 24:bb:45:fd:81:ba:64:56:ea:30:27:f4:3d:54:17:7c:3a:d4: 81:20:b2:1d:5b:01:34:8d:44:e0:8d:95:a9:16:49:9e:9f:16: c8:34:bb:f4:5a:ca:b1:a2:f2:ee:3a:d4:5b:57:8d:30:65:d7: 58:8f:70:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyqJv5gc2ztUt2XRgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVlZGYwMjEtMDI5OC00YTgxLTk3ZDUtMWM4NWEyZWI0 NWY1MB4XDTI2MDEyNzE0MDAzNloXDTI2MDQyNzEzMDAzNlowLzEtMCsGA1UEAxMk Y2FjYTk5YjYtY2I5MC00ZTRmLWIyMzAtYTBmZGI5MjYyNzAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0TeKd9nkAZoih2+dgyMbBI8xNIwvmTpViV+9 kWFE61btAUOTTd5sTByGt2BpuHHB1/3OgBTkws+4cfMM5+191UqhNz+AN1XQSEoX awC8Zn9Xp9/9PhsqriRNnJK6MY/068RwkZrKiLqE0/U9XJbZo2Og1NgXlyla+og1 3uUmiJgmsQUh3U204i/ORO/orbh/gSgJzoKep/8OH8a8IwEIG4JcoXJ0hgd44nna 33m1b8V8PSMdDs/DN8/13yFF+WKTzNyFxiTaYDmGsqDcQzA5+0pCrqghSZoezIJb MnpdchZ1H7Aj97nuYwErvBiJZ4rEJzS64aZjYx46M451hMp85QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGZp3oHPbhT2o46dCuJPVI1YLmsQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVk ZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1YTJlYjQ1ZjUvNjM4NDQ4YjgtYmZkOC0z NzA1LWI5MDUtYTkwN2M4NzEzNmMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjVlZGYwMjEtMDI5OC00YTgxLTk3 ZDUtMWM4NWEyZWI0NWY1L2I1ZWRmMDIxLTAyOTgtNGE4MS05N2Q1LTFjODVhMmVi NDVmNS5jcmwwHwYDVR0jBBgwFoAUhAkMQqDZn+raqP3DbTOl+IviID0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVkZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1 YTJlYjQ1ZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+z6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFnTaUkouABzMIPlCWWin1+EEDndg7jjTKr5uI68Ml5JPMeN4cBbWCqR KRd5t7wGWy6iamyo/0OP7sDr7Kb9oQlaZ5nrFvQssuloCd+YfGAEpG/6yXivNeyP IYSxmATiw/OJuOd/eoUa8q97Zoh4ubFFpoS9cbkKWmE1oud9/3dNQsdjl4R3odsL bD+Vun1tZ6Ezla/wdNr8+vibTpmBh8n4Ed9hnTlBh6nDnwTKV7eUGNq6icwEJW6q yq4Ld5rgbKjv6YqX4SS7Rf2BumRW6jAn9D1UF3w61IEgsh1bATSNROCNlakWSZ6f Fsg0u/RayrGi8u461FtXjTBl11iPcIE= -----END CERTIFICATE-----Generated at Thu Feb 26 23:51:41 2026 by rpki-client