$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/68504fc1-924b-3826-9b04-0fd258ce8fca.roa File: 68504fc1-924b-3826-9b04-0fd258ce8fca.roa (raw, json) Hash identifier: epEAX88OMgRCg2qKNpW53XaFyab5JimwF7h0fW+jMMM= Subject key identifier: 63:14:73:1D:84:63:7B:F2:9B:29:55:E2:36:5E:C2:BE:ED:4B:FC:65 Certificate issuer: /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Certificate serial: 010D0C9F4328584CAA272E98A1234B7AD17FE580 Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/68504fc1-924b-3826-9b04-0fd258ce8fca.roa Signing time: Tue 27 Jan 2026 14:00:36 +0000 ROA not before: Tue 27 Jan 2026 14:00:36 +0000 ROA not after: Mon 27 Apr 2026 13:00:36 +0000 asID: 400072 IP address blocks: 23.236.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:aa:27:2e:98:a1:23:4b:7a:d1:7f:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Validity Not Before: Jan 27 14:00:36 2026 GMT Not After : Apr 27 13:00:36 2026 GMT Subject: CN=b3f1e9cc-91ad-4fdf-93a8-a802992080e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:19:be:bf:f4:b2:ca:45:14:4b:78:19:73:18: b4:78:d4:37:2a:73:94:11:c3:8c:55:94:1b:2d:68: 1a:7c:4e:8e:01:ca:1e:55:1a:2f:22:fa:91:86:65: 33:c2:ca:4a:0e:78:de:8f:db:74:26:d6:62:4c:c0: 44:1e:5f:ad:b9:d8:04:b1:c2:29:27:a2:45:8a:fa: e5:b4:6b:02:eb:4a:d3:44:8c:9f:0d:80:d4:f8:53: f9:8d:ec:07:03:20:f2:7a:3e:82:9a:78:97:e9:43: 3f:ae:b2:13:90:34:4b:26:bd:61:43:47:6d:1a:f3: e2:85:ab:58:3f:b1:e4:75:48:8c:82:67:85:b9:06: 6d:24:40:7d:64:73:e1:08:3b:40:d2:a7:c8:73:1d: 3e:1f:73:d0:ae:d2:60:10:db:d9:21:a8:21:fb:c3: 1b:4b:9b:b3:a6:e3:18:19:8d:80:0f:ae:e4:2e:f1: 17:e7:ab:27:99:19:b9:6a:90:c0:96:e8:2e:42:8d: d5:c2:35:1f:4c:0b:35:02:70:37:de:db:a8:a3:3a: c8:41:71:ca:84:9d:cb:ad:0e:fe:b3:4d:80:60:8d: 2f:a9:5f:5a:40:72:21:4e:be:f5:11:5a:0b:3e:9d: 02:02:49:32:ff:80:29:ac:b4:fe:94:a4:95:74:c2: 47:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:14:73:1D:84:63:7B:F2:9B:29:55:E2:36:5E:C2:BE:ED:4B:FC:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/68504fc1-924b-3826-9b04-0fd258ce8fca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl X509v3 Authority Key Identifier: keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer sbgp-ipAddrBlock: critical IPv4: 23.236.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:90:fb:ce:9c:fb:65:43:7a:ea:91:19:8a:da:9c:49:52:b8: 25:57:22:35:2c:14:a2:01:ff:cd:06:cf:b5:08:8b:eb:6d:ed: 44:38:e2:56:e1:cd:82:7c:ee:af:1c:3a:59:aa:de:44:84:7d: 7d:3d:62:82:57:21:90:58:b1:a8:13:a8:26:49:41:89:cc:33: fd:28:5e:32:7d:f5:1d:c5:f6:d2:0f:bf:79:bf:76:d0:9a:7a: e9:20:64:c3:af:c9:30:43:a6:36:cf:fa:3b:8a:aa:9f:76:47: b2:07:0a:ff:33:b1:08:bd:a9:f0:d1:d0:44:b0:c6:9f:61:f8: 0f:97:e9:be:1c:23:a2:30:c5:45:ec:d8:66:df:b7:8e:b5:31: d0:cf:ec:c9:81:fa:46:6d:d1:bc:4e:ce:76:ee:8f:3b:1a:5b: cf:c0:58:36:f3:68:0e:32:5e:c2:a8:0a:34:5f:54:d0:62:d9: 04:2c:81:00:8d:7b:f6:c6:6e:57:75:fb:e7:71:9d:6c:7d:38: e2:dd:4d:2c:a2:d0:16:61:5d:5c:9c:29:0c:db:76:a4:31:dc: 64:ce:3b:ca:c9:88:05:85:ca:89:e7:34:fc:ce:a7:89:49:b8: cf:98:c0:99:bf:b8:af:b6:44:e2:46:7e:72:5c:0a:36:8d:8c: 48:38:94:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyqJy6YoSNLetF/5YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVlZGYwMjEtMDI5OC00YTgxLTk3ZDUtMWM4NWEyZWI0 NWY1MB4XDTI2MDEyNzE0MDAzNloXDTI2MDQyNzEzMDAzNlowLzEtMCsGA1UEAxMk YjNmMWU5Y2MtOTFhZC00ZmRmLTkzYTgtYTgwMjk5MjA4MGUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBm+v/SyykUUS3gZcxi0eNQ3KnOUEcOMVZQb LWgafE6OAcoeVRovIvqRhmUzwspKDnjej9t0JtZiTMBEHl+tudgEscIpJ6JFivrl tGsC60rTRIyfDYDU+FP5jewHAyDyej6CmniX6UM/rrITkDRLJr1hQ0dtGvPihatY P7HkdUiMgmeFuQZtJEB9ZHPhCDtA0qfIcx0+H3PQrtJgENvZIagh+8MbS5uzpuMY GY2AD67kLvEX56snmRm5apDAluguQo3VwjUfTAs1AnA33tuoozrIQXHKhJ3LrQ7+ s02AYI0vqV9aQHIhTr71EVoLPp0CAkky/4AprLT+lKSVdMJH3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGMUcx2EY3vymylV4jZewr7tS/xlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVk ZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1YTJlYjQ1ZjUvNjg1MDRmYzEtOTI0Yi0z ODI2LTliMDQtMGZkMjU4Y2U4ZmNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjVlZGYwMjEtMDI5OC00YTgxLTk3 ZDUtMWM4NWEyZWI0NWY1L2I1ZWRmMDIxLTAyOTgtNGE4MS05N2Q1LTFjODVhMmVi NDVmNS5jcmwwHwYDVR0jBBgwFoAUhAkMQqDZn+raqP3DbTOl+IviID0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVkZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1 YTJlYjQ1ZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+z+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIWQ+86c+2VDeuqRGYranElSuCVXIjUsFKIB/80Gz7UIi+tt7UQ44lbh zYJ87q8cOlmq3kSEfX09YoJXIZBYsagTqCZJQYnMM/0oXjJ99R3F9tIPv3m/dtCa eukgZMOvyTBDpjbP+juKqp92R7IHCv8zsQi9qfDR0ESwxp9h+A+X6b4cI6IwxUXs 2Gbft461MdDP7MmB+kZt0bxOznbujzsaW8/AWDbzaA4yXsKoCjRfVNBi2QQsgQCN e/bGbld1++dxnWx9OOLdTSyi0BZhXVycKQzbdqQx3GTOO8rJiAWFyonnNPzOp4lJ uM+YwJm/uK+2ROJGfnJcCjaNjEg4lFs= -----END CERTIFICATE-----Generated at Thu Feb 26 20:56:02 2026 by rpki-client