$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/89e59193-894d-3421-858e-72e2498d9aa1.roa File: 89e59193-894d-3421-858e-72e2498d9aa1.roa (raw, json) Hash identifier: PNrDrttKpSM9aPSW0Nw2zJQa8cEYjGWbaD9Dg5YEy74= Subject key identifier: 62:FF:E8:F2:E0:4A:36:30:C5:E7:DC:E8:E9:23:50:EF:EC:EF:59:62 Certificate issuer: /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Certificate serial: 010D0C9F4328584B10064C14CE8039C060D96F00 Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/89e59193-894d-3421-858e-72e2498d9aa1.roa Signing time: Tue 02 Sep 2025 16:13:19 +0000 ROA not before: Tue 02 Sep 2025 16:13:19 +0000 ROA not after: Mon 01 Dec 2025 17:13:19 +0000 asID: 55081 IP address blocks: 23.229.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 12 Sep 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:10:06:4c:14:ce:80:39:c0:60:d9:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Validity Not Before: Sep 2 16:13:19 2025 GMT Not After : Dec 1 17:13:19 2025 GMT Subject: CN=f394e769-b319-4505-b5d1-1771f14813b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f1:ec:3e:18:d0:dc:d9:a2:6b:f8:8f:a3:07: b4:7a:19:42:4b:16:5d:99:e9:87:96:b8:bc:96:88: f0:93:18:8c:58:e8:fa:ea:c2:91:51:52:2b:cd:a2: bf:0a:8b:d6:5b:f3:2c:fd:f9:08:72:b1:05:61:50: 2d:bd:a8:c1:24:33:90:7f:cd:b3:6c:c0:25:d7:70: 3d:3f:d0:66:0b:14:ba:2f:a1:86:27:eb:3b:5c:be: ab:bf:67:2b:22:6c:34:17:36:92:10:ea:6e:d8:93: 2f:0f:a2:61:d7:a1:a5:48:a7:a6:bd:1d:e4:07:2d: 21:aa:22:b9:d3:2b:62:c7:08:fd:31:e8:09:94:e3: 2c:38:b7:3a:34:96:68:64:e9:f3:e3:26:2b:65:e3: 69:88:99:ea:e0:b2:e6:5d:96:04:55:c6:57:79:08: d2:20:e0:05:4b:69:1d:80:c5:d7:dc:ff:77:af:45: 48:09:5d:f2:a5:03:c6:56:6c:5b:15:ca:c7:9a:1e: 8d:9d:3d:f7:c1:6f:c4:61:fc:5d:cd:7e:20:9c:00: cf:e9:2a:e3:81:f5:fc:90:ac:a1:73:20:30:5d:50: c0:fe:51:2e:00:11:71:82:c4:7d:ec:79:f3:27:ac: e6:b3:d4:2d:53:94:ef:10:ef:6b:8f:dc:77:2f:10: 38:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:FF:E8:F2:E0:4A:36:30:C5:E7:DC:E8:E9:23:50:EF:EC:EF:59:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/89e59193-894d-3421-858e-72e2498d9aa1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl X509v3 Authority Key Identifier: keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer sbgp-ipAddrBlock: critical IPv4: 23.229.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:c3:99:0f:83:7b:72:72:af:e3:11:04:1a:88:83:0c:26:2c: 6e:10:3d:85:2b:ae:77:a9:50:b7:67:ea:06:e8:d0:25:ce:90: 2d:34:40:30:8f:11:ed:f5:63:36:34:b5:22:81:1f:68:47:8e: 1f:93:c4:82:9a:7c:94:96:75:58:48:1b:90:53:52:0b:5e:8a: 45:65:bd:ea:55:40:06:2d:d5:9d:51:af:84:38:01:37:ea:66: 93:c4:2d:ea:81:96:60:0f:76:a8:bc:bc:0e:32:1d:6e:cc:be: be:9a:9c:65:a3:c9:18:d2:2d:b9:bf:c9:23:a3:15:7e:62:0d: 18:65:04:f2:d4:05:1a:af:b7:2c:33:78:1b:cf:86:4e:fc:7a: 08:57:c4:7d:e8:91:b5:fe:00:c0:ca:98:f0:af:2e:f6:42:19: 51:27:51:dd:ed:7f:b9:99:96:d7:cb:c0:61:a1:6b:21:6d:45: 8f:a5:86:a5:4e:13:dc:14:f8:72:9c:21:44:84:bd:0b:0b:41: 6e:e6:e8:92:d5:c6:f9:68:10:f7:76:de:ab:5d:86:00:8e:10: df:bb:fb:47:98:de:60:e2:0c:60:d9:6c:0f:e4:7e:7c:74:04: e7:f2:12:9f:6f:31:98:bd:3e:88:12:fd:40:ac:58:70:c7:34: 0a:05:17:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsQBkwUzoA5wGDZbwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVlZGYwMjEtMDI5OC00YTgxLTk3ZDUtMWM4NWEyZWI0 NWY1MB4XDTI1MDkwMjE2MTMxOVoXDTI1MTIwMTE3MTMxOVowLzEtMCsGA1UEAxMk ZjM5NGU3NjktYjMxOS00NTA1LWI1ZDEtMTc3MWYxNDgxM2I1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/HsPhjQ3Nmia/iPowe0ehlCSxZdmemHlri8 lojwkxiMWOj66sKRUVIrzaK/CovWW/Ms/fkIcrEFYVAtvajBJDOQf82zbMAl13A9 P9BmCxS6L6GGJ+s7XL6rv2crImw0FzaSEOpu2JMvD6Jh16GlSKemvR3kBy0hqiK5 0ytixwj9MegJlOMsOLc6NJZoZOnz4yYrZeNpiJnq4LLmXZYEVcZXeQjSIOAFS2kd gMXX3P93r0VICV3ypQPGVmxbFcrHmh6NnT33wW/EYfxdzX4gnADP6SrjgfX8kKyh cyAwXVDA/lEuABFxgsR97HnzJ6zms9QtU5TvEO9rj9x3LxA4xwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGL/6PLgSjYwxefc6OkjUO/s71liMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVk ZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1YTJlYjQ1ZjUvODllNTkxOTMtODk0ZC0z NDIxLTg1OGUtNzJlMjQ5OGQ5YWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjVlZGYwMjEtMDI5OC00YTgxLTk3 ZDUtMWM4NWEyZWI0NWY1L2I1ZWRmMDIxLTAyOTgtNGE4MS05N2Q1LTFjODVhMmVi NDVmNS5jcmwwHwYDVR0jBBgwFoAUhAkMQqDZn+raqP3DbTOl+IviID0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVkZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1 YTJlYjQ1ZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+UHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB7DmQ+De3Jyr+MRBBqIgwwmLG4QPYUrrnepULdn6gbo0CXOkC00QDCP Ee31YzY0tSKBH2hHjh+TxIKafJSWdVhIG5BTUgteikVlvepVQAYt1Z1Rr4Q4ATfq ZpPELeqBlmAPdqi8vA4yHW7Mvr6anGWjyRjSLbm/ySOjFX5iDRhlBPLUBRqvtywz eBvPhk78eghXxH3okbX+AMDKmPCvLvZCGVEnUd3tf7mZltfLwGGhayFtRY+lhqVO E9wU+HKcIUSEvQsLQW7m6JLVxvloEPd23qtdhgCOEN+7+0eY3mDiDGDZbA/kfnx0 BOfyEp9vMZi9PogS/UCsWHDHNAoFFyw= -----END CERTIFICATE-----Generated at Thu Sep 11 01:19:38 2025 by rpki-client