$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/68504fc1-924b-3826-9b04-0fd258ce8fca.roa File: 68504fc1-924b-3826-9b04-0fd258ce8fca.roa (raw, json) Hash identifier: TrK6RAYYRjlmePc6sH8S97vkDWVQAzQ62QPz9a4mdaU= Subject key identifier: 3F:EE:3A:BA:70:86:83:03:43:AF:B3:6B:6E:C2:F0:36:DE:5A:5E:84 Certificate issuer: /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Certificate serial: 010D0C9F4328584AE8F928C41569332A9E4EE440 Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/68504fc1-924b-3826-9b04-0fd258ce8fca.roa Signing time: Tue 19 Aug 2025 16:30:19 +0000 ROA not before: Tue 19 Aug 2025 16:30:19 +0000 ROA not after: Mon 17 Nov 2025 17:30:19 +0000 asID: 400072 IP address blocks: 23.236.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:f9:28:c4:15:69:33:2a:9e:4e:e4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Validity Not Before: Aug 19 16:30:19 2025 GMT Not After : Nov 17 17:30:19 2025 GMT Subject: CN=bd94a38a-13e4-4ebb-b7bc-73c31490e40d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:a5:18:d7:65:c7:5d:d0:8d:92:17:81:45:00: 54:35:1c:ff:da:7e:27:9b:4e:87:8e:f1:10:5c:ba: b9:a5:02:85:56:5e:93:ca:38:98:7e:fa:8f:cc:ad: 30:4b:ed:b2:0f:8b:13:fa:85:04:b5:e4:7f:7e:cd: 23:76:53:d6:46:a1:69:e1:e7:72:64:d6:b0:2f:3b: 28:9e:7e:b6:8d:22:10:2e:dd:3d:a7:a3:cc:6e:13: 42:38:c4:88:70:a2:3c:cf:42:89:1d:a4:91:a5:b0: f7:16:3c:43:b2:58:50:be:39:94:f6:fc:54:3d:18: 75:35:3d:ae:ab:d1:7b:58:5a:04:c6:1f:e7:21:d5: bf:a6:b2:da:41:a8:a5:dc:c5:d4:c8:74:0b:11:de: a5:8c:2a:82:ed:f3:7c:c1:3f:1f:f6:bb:30:1e:da: e6:64:20:d7:50:3b:85:03:ba:97:a1:ce:ae:6f:86: 41:d2:b7:6e:27:97:78:cc:38:3b:4d:fb:73:88:5a: 79:cc:1e:f1:a9:f4:a6:e0:30:31:ae:99:08:10:16: 98:eb:a8:16:a9:04:ac:78:c8:b5:b8:bc:36:b3:eb: 64:70:75:95:3d:17:79:ca:d6:c0:2d:89:f6:22:1d: 5d:4e:00:ed:df:7c:8c:75:0b:2f:2f:a8:56:af:8c: 5d:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:EE:3A:BA:70:86:83:03:43:AF:B3:6B:6E:C2:F0:36:DE:5A:5E:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/68504fc1-924b-3826-9b04-0fd258ce8fca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl X509v3 Authority Key Identifier: keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer sbgp-ipAddrBlock: critical IPv4: 23.236.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:a0:c8:4d:c3:af:59:37:2a:27:2d:77:db:10:5a:17:63:62: 0d:34:21:cd:df:d1:23:ff:f5:35:50:f8:12:a0:e9:6f:4d:b4: ea:b7:ca:cf:5f:da:11:db:1c:00:32:d2:8f:25:01:fb:14:8e: 06:94:cc:5b:2a:52:39:18:ab:ec:e7:64:15:cf:dd:50:45:22: ba:64:c5:2b:b6:4d:cc:1f:a2:1d:79:74:ab:14:f8:0c:b2:be: a6:89:bf:05:e2:3c:01:5e:19:e4:8c:7c:de:c9:37:22:5e:fe: 13:3a:a4:45:d1:5a:0f:81:9a:fc:91:53:9d:51:db:e5:a9:12: 10:ec:1c:67:41:85:93:8b:e6:e4:85:88:d8:a6:72:cc:04:d5: 81:bd:07:d3:2e:d0:22:f8:40:50:cf:df:5c:75:81:30:2d:7c: a3:89:2c:2c:6f:7d:27:b4:95:ac:28:dc:85:c3:01:63:36:bb: 46:36:96:58:ac:db:a8:1d:36:59:ce:33:61:ec:60:f2:b4:6a: b5:b7:3e:d7:84:b4:f1:58:a9:68:b7:88:2c:9c:d3:fc:0f:23: 67:d7:26:84:04:c9:78:70:a7:50:a5:ae:87:d1:ab:bf:2e:8e: 23:c7:6a:e6:ed:7e:8a:39:b6:8c:0c:a1:fd:5b:c4:83:a2:f8: 8f:7c:8c:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEro+SjEFWkzKp5O5EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVlZGYwMjEtMDI5OC00YTgxLTk3ZDUtMWM4NWEyZWI0 NWY1MB4XDTI1MDgxOTE2MzAxOVoXDTI1MTExNzE3MzAxOVowLzEtMCsGA1UEAxMk YmQ5NGEzOGEtMTNlNC00ZWJiLWI3YmMtNzNjMzE0OTBlNDBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6UY12XHXdCNkheBRQBUNRz/2n4nm06HjvEQ XLq5pQKFVl6TyjiYfvqPzK0wS+2yD4sT+oUEteR/fs0jdlPWRqFp4edyZNawLzso nn62jSIQLt09p6PMbhNCOMSIcKI8z0KJHaSRpbD3FjxDslhQvjmU9vxUPRh1NT2u q9F7WFoExh/nIdW/prLaQail3MXUyHQLEd6ljCqC7fN8wT8f9rswHtrmZCDXUDuF A7qXoc6ub4ZB0rduJ5d4zDg7TftziFp5zB7xqfSm4DAxrpkIEBaY66gWqQSseMi1 uLw2s+tkcHWVPRd5ytbALYn2Ih1dTgDt33yMdQsvL6hWr4xd1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD/uOrpwhoMDQ6+za27C8DbeWl6EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVk ZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1YTJlYjQ1ZjUvNjg1MDRmYzEtOTI0Yi0z ODI2LTliMDQtMGZkMjU4Y2U4ZmNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjVlZGYwMjEtMDI5OC00YTgxLTk3 ZDUtMWM4NWEyZWI0NWY1L2I1ZWRmMDIxLTAyOTgtNGE4MS05N2Q1LTFjODVhMmVi NDVmNS5jcmwwHwYDVR0jBBgwFoAUhAkMQqDZn+raqP3DbTOl+IviID0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVkZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1 YTJlYjQ1ZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+z+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJmgyE3Dr1k3Kictd9sQWhdjYg00Ic3f0SP/9TVQ+BKg6W9NtOq3ys9f 2hHbHAAy0o8lAfsUjgaUzFsqUjkYq+znZBXP3VBFIrpkxSu2Tcwfoh15dKsU+Ayy vqaJvwXiPAFeGeSMfN7JNyJe/hM6pEXRWg+BmvyRU51R2+WpEhDsHGdBhZOL5uSF iNimcswE1YG9B9Mu0CL4QFDP31x1gTAtfKOJLCxvfSe0lawo3IXDAWM2u0Y2llis 26gdNlnOM2HsYPK0arW3PteEtPFYqWi3iCyc0/wPI2fXJoQEyXhwp1ClrofRq78u jiPHaubtfoo5towMof1bxIOi+I98jCw= -----END CERTIFICATE-----Generated at Thu Aug 21 03:13:49 2025 by rpki-client