$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/68504fc1-924b-3826-9b04-0fd258ce8fca.roa File: 68504fc1-924b-3826-9b04-0fd258ce8fca.roa (raw, json) Hash identifier: 3DpNHF62iIhlAGk3suN58aqhMfKhUkvM3z3NEjizggs= Subject key identifier: FF:D4:6C:15:24:FE:97:E1:3C:9D:9A:26:02:D4:1A:46:47:0C:AB:17 Certificate issuer: /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Certificate serial: 010D0C9F4328584E6B0A2BAF331CAFE6E65CCD00 Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/68504fc1-924b-3826-9b04-0fd258ce8fca.roa Signing time: Tue 07 Jul 2026 09:00:12 +0000 ROA not before: Tue 07 Jul 2026 09:00:12 +0000 ROA not after: Mon 05 Oct 2026 09:00:12 +0000 asID: 400072 IP address blocks: 23.236.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6b:0a:2b:af:33:1c:af:e6:e6:5c:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Validity Not Before: Jul 7 09:00:12 2026 GMT Not After : Oct 5 09:00:12 2026 GMT Subject: CN=250b1614-5f10-440c-9e69-7a908609cb34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:50:7b:89:13:d6:d5:6f:55:ea:95:d8:c3:23: 83:82:45:d5:88:a2:fa:46:24:d2:17:65:26:bd:03: 12:81:c1:76:98:48:1f:15:3c:69:63:17:09:4a:de: 6f:59:ff:f5:00:e5:35:97:3f:60:7c:27:9d:65:7b: 81:1a:e5:68:cc:37:0c:98:59:0d:3d:bf:9a:f3:85: 55:72:e7:f2:fc:80:b0:c3:69:9d:3a:37:21:f0:ff: 2c:e8:0f:f3:53:5a:46:37:8f:d0:41:4a:bd:16:49: f3:f1:d7:d0:40:59:cb:61:2a:b6:90:6a:96:d1:27: f9:b6:62:f8:3a:9e:2f:94:48:47:e2:05:eb:4a:bb: 4b:73:30:b3:8c:b2:b9:85:1a:2f:b2:c5:d3:e1:2e: 70:37:69:68:81:db:7e:57:30:10:82:3b:96:b4:79: 4c:37:77:fb:6a:62:ed:9d:06:a6:c6:81:38:ba:5c: 8d:eb:64:8e:1f:e2:10:c6:46:51:d1:3b:b7:e6:e4: ef:a5:3e:4c:32:c5:6f:7f:c9:11:9b:1d:e1:3c:6b: 61:36:7d:73:b7:f8:8b:b6:ca:ec:00:50:72:e0:66: 58:b6:dd:aa:17:47:71:c9:09:7d:86:20:93:1e:c1: e9:f5:b7:23:66:a0:2a:74:86:a5:b4:6b:4c:7f:c1: 22:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:D4:6C:15:24:FE:97:E1:3C:9D:9A:26:02:D4:1A:46:47:0C:AB:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/68504fc1-924b-3826-9b04-0fd258ce8fca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl X509v3 Authority Key Identifier: keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer sbgp-ipAddrBlock: critical IPv4: 23.236.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:11:90:70:a1:f7:95:c8:44:64:be:f4:4b:35:02:e8:4e:53: 0e:4e:25:db:60:85:98:94:6a:61:ee:f0:c8:1e:0f:a1:e5:98: 91:50:f5:b5:5f:49:10:70:36:ec:ce:22:01:82:18:a1:a7:ac: 60:ec:34:23:09:65:83:1e:e6:cc:0a:77:a1:71:77:da:35:65: 6f:ac:bf:86:b6:39:a0:49:76:03:b8:34:a1:d3:0e:b8:c4:8e: 1c:0d:a4:e6:5a:ea:07:5a:03:0b:20:8b:f6:11:ae:2d:aa:c7: 22:66:a7:93:30:04:45:2d:b2:e0:cc:a2:0e:d1:2b:5c:ab:bc: ab:c7:92:a4:65:2a:a5:99:c3:f8:56:e1:7b:ae:42:e3:c3:78: fb:dd:12:a0:4c:48:f5:14:19:83:10:e7:71:33:c0:a9:8f:b6: 39:bf:31:d8:38:20:bf:4e:40:a2:3b:17:8e:bf:1d:94:ad:0a: 38:03:fe:7b:d1:ce:b9:37:b3:ca:78:bd:d4:a0:79:cc:ec:f4: 7f:26:21:5a:aa:57:dc:09:e9:b6:f4:0f:5d:ae:13:23:fe:09: a1:2c:6e:19:ec:c8:9d:f6:5b:be:88:d4:e1:44:27:fc:41:12: e4:b7:ac:ab:64:97:bd:dd:fe:12:33:4b:7d:19:b1:c5:f4:12: f4:0a:20:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5rCiuvMxyv5uZczQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVlZGYwMjEtMDI5OC00YTgxLTk3ZDUtMWM4NWEyZWI0 NWY1MB4XDTI2MDcwNzA5MDAxMloXDTI2MTAwNTA5MDAxMlowLzEtMCsGA1UEAxMk MjUwYjE2MTQtNWYxMC00NDBjLTllNjktN2E5MDg2MDljYjM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1B7iRPW1W9V6pXYwyODgkXViKL6RiTSF2Um vQMSgcF2mEgfFTxpYxcJSt5vWf/1AOU1lz9gfCedZXuBGuVozDcMmFkNPb+a84VV cufy/ICww2mdOjch8P8s6A/zU1pGN4/QQUq9Fknz8dfQQFnLYSq2kGqW0Sf5tmL4 Op4vlEhH4gXrSrtLczCzjLK5hRovssXT4S5wN2logdt+VzAQgjuWtHlMN3f7amLt nQamxoE4ulyN62SOH+IQxkZR0Tu35uTvpT5MMsVvf8kRmx3hPGthNn1zt/iLtsrs AFBy4GZYtt2qF0dxyQl9hiCTHsHp9bcjZqAqdIaltGtMf8EiLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP/UbBUk/pfhPJ2aJgLUGkZHDKsXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVk ZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1YTJlYjQ1ZjUvNjg1MDRmYzEtOTI0Yi0z ODI2LTliMDQtMGZkMjU4Y2U4ZmNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjVlZGYwMjEtMDI5OC00YTgxLTk3 ZDUtMWM4NWEyZWI0NWY1L2I1ZWRmMDIxLTAyOTgtNGE4MS05N2Q1LTFjODVhMmVi NDVmNS5jcmwwHwYDVR0jBBgwFoAUhAkMQqDZn+raqP3DbTOl+IviID0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVkZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1 YTJlYjQ1ZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+z+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACYRkHCh95XIRGS+9Es1AuhOUw5OJdtghZiUamHu8MgeD6HlmJFQ9bVf SRBwNuzOIgGCGKGnrGDsNCMJZYMe5swKd6Fxd9o1ZW+sv4a2OaBJdgO4NKHTDrjE jhwNpOZa6gdaAwsgi/YRri2qxyJmp5MwBEUtsuDMog7RK1yrvKvHkqRlKqWZw/hW 4XuuQuPDePvdEqBMSPUUGYMQ53EzwKmPtjm/Mdg4IL9OQKI7F46/HZStCjgD/nvR zrk3s8p4vdSgeczs9H8mIVqqV9wJ6bb0D12uEyP+CaEsbhnsyJ32W76I1OFEJ/xB EuS3rKtkl73d/hIzS30ZscX0EvQKIJk= -----END CERTIFICATE-----Generated at Tue Jul 14 04:24:14 2026 by rpki-client