$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b6a10872-6477-3316-8b26-a4a5d54f2477.roa File: b6a10872-6477-3316-8b26-a4a5d54f2477.roa (raw, json) Hash identifier: rkVOu7sduW+w6nxjAdf0dsAUoFDlM5dPBdSSQ75lPlw= Subject key identifier: 53:C6:FE:01:86:17:80:C7:8B:15:70:36:4A:55:15:CF:5B:68:32:86 Certificate issuer: /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Certificate serial: 010D0C9F4328584AE8F9E989325431146EE02880 Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b6a10872-6477-3316-8b26-a4a5d54f2477.roa Signing time: Tue 19 Aug 2025 16:31:50 +0000 ROA not before: Tue 19 Aug 2025 16:31:50 +0000 ROA not after: Mon 17 Nov 2025 17:31:50 +0000 asID: 7018 IP address blocks: 23.229.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:f9:e9:89:32:54:31:14:6e:e0:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Validity Not Before: Aug 19 16:31:50 2025 GMT Not After : Nov 17 17:31:50 2025 GMT Subject: CN=c4147158-b155-48f9-8af9-44b80626e8ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:ac:9b:a1:c8:3e:fc:3a:7d:40:97:a9:08:9d: fa:d4:02:b9:8d:cf:14:7c:45:7d:f9:8a:78:a3:3e: f6:73:8c:6a:21:b6:ad:07:60:02:8a:80:7e:c2:59: 34:e1:dc:31:58:dd:3c:98:5a:f8:84:2a:2d:34:ff: cb:f4:cd:68:9b:83:48:49:29:8a:e1:70:c2:f7:fa: 75:6e:f1:cb:36:06:7f:a0:61:be:52:54:a8:b8:88: da:43:42:49:a7:99:87:c5:d4:65:89:91:64:a9:6e: 4f:69:6a:41:7f:75:97:07:29:fe:f6:3e:1a:98:03: 39:39:3d:4d:55:fc:7d:1b:ff:12:1d:1f:97:97:4f: e8:27:39:e6:92:58:5f:39:8e:db:69:92:0b:52:e6: 7f:62:f5:c0:6a:4c:1c:9f:62:79:4d:17:de:58:d0: 7b:93:d0:30:b6:93:32:1e:71:a3:3d:60:d7:77:a3: 36:9b:fa:b2:96:b5:bf:f5:76:05:9b:55:2d:c2:7a: 42:1f:ab:48:29:c3:06:21:35:bb:50:f0:b3:4e:83: 8e:a2:95:26:3e:80:dc:0a:55:d5:fa:46:46:00:54: 6d:2b:c2:d9:85:5a:1e:ba:97:0d:c1:d7:44:4c:d1: 5b:95:14:65:ad:30:77:29:df:0e:38:be:e5:a1:87: 28:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:C6:FE:01:86:17:80:C7:8B:15:70:36:4A:55:15:CF:5B:68:32:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b6a10872-6477-3316-8b26-a4a5d54f2477.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl X509v3 Authority Key Identifier: keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer sbgp-ipAddrBlock: critical IPv4: 23.229.118.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:59:82:34:0a:c3:96:4f:5e:bf:dc:cb:14:5a:ae:88:8a:77: e5:7a:3f:fb:3b:93:ff:11:46:79:b4:9d:3d:b1:3a:9f:c4:95: 0f:8d:f9:15:2d:1e:85:79:b9:9c:c6:c1:b3:3c:ae:e3:7d:29: d4:77:1d:86:e0:78:62:da:a3:3d:1c:aa:71:9b:09:70:a6:80: a8:72:b0:b1:24:6a:44:d1:ac:96:eb:02:8b:0c:6c:32:63:df: 42:7c:a1:c8:ab:d6:95:db:df:68:7d:0d:88:3b:52:92:f8:a2: 5f:60:75:aa:e0:fa:e5:cc:3b:f4:d8:2a:05:11:6b:40:7b:4a: ab:43:3f:44:fe:6f:c2:79:0b:85:32:fe:ff:e5:f0:6d:be:cb: 4e:9f:14:1d:87:67:e5:91:5e:1f:88:68:a9:04:f9:1e:ee:15: 70:b6:14:6f:1d:2f:8d:30:1e:d7:0f:23:5a:51:52:61:1e:81: 0f:f9:e5:01:62:61:5a:db:6b:c9:ca:74:69:97:c4:31:80:c7: ce:37:d3:3b:5c:9b:1a:6b:aa:ee:10:67:e8:71:3e:6a:22:ad: a2:48:d0:10:13:6e:84:ef:7d:8c:49:6a:b4:1f:ea:52:cd:bd: ee:0e:97:63:dd:6c:fc:4d:b5:ed:0e:09:dd:d3:b9:47:1f:b6: 57:39:db:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEro+emJMlQxFG7gKIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVlZGYwMjEtMDI5OC00YTgxLTk3ZDUtMWM4NWEyZWI0 NWY1MB4XDTI1MDgxOTE2MzE1MFoXDTI1MTExNzE3MzE1MFowLzEtMCsGA1UEAxMk YzQxNDcxNTgtYjE1NS00OGY5LThhZjktNDRiODA2MjZlOGNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgaybocg+/Dp9QJepCJ361AK5jc8UfEV9+Yp4 oz72c4xqIbatB2ACioB+wlk04dwxWN08mFr4hCotNP/L9M1om4NISSmK4XDC9/p1 bvHLNgZ/oGG+UlSouIjaQ0JJp5mHxdRliZFkqW5PaWpBf3WXByn+9j4amAM5OT1N Vfx9G/8SHR+Xl0/oJznmklhfOY7baZILUuZ/YvXAakwcn2J5TRfeWNB7k9AwtpMy HnGjPWDXd6M2m/qylrW/9XYFm1UtwnpCH6tIKcMGITW7UPCzToOOopUmPoDcClXV +kZGAFRtK8LZhVoeupcNwddETNFblRRlrTB3Kd8OOL7loYco/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFPG/gGGF4DHixVwNkpVFc9baDKGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVk ZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1YTJlYjQ1ZjUvYjZhMTA4NzItNjQ3Ny0z MzE2LThiMjYtYTRhNWQ1NGYyNDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjVlZGYwMjEtMDI5OC00YTgxLTk3 ZDUtMWM4NWEyZWI0NWY1L2I1ZWRmMDIxLTAyOTgtNGE4MS05N2Q1LTFjODVhMmVi NDVmNS5jcmwwHwYDVR0jBBgwFoAUhAkMQqDZn+raqP3DbTOl+IviID0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVkZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1 YTJlYjQ1ZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+V2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFhZgjQKw5ZPXr/cyxRaroiKd+V6P/s7k/8RRnm0nT2xOp/ElQ+N+RUt HoV5uZzGwbM8ruN9KdR3HYbgeGLaoz0cqnGbCXCmgKhysLEkakTRrJbrAosMbDJj 30J8ocir1pXb32h9DYg7UpL4ol9gdarg+uXMO/TYKgURa0B7SqtDP0T+b8J5C4Uy /v/l8G2+y06fFB2HZ+WRXh+IaKkE+R7uFXC2FG8dL40wHtcPI1pRUmEegQ/55QFi YVrba8nKdGmXxDGAx8430ztcmxprqu4QZ+hxPmoiraJI0BATboTvfYxJarQf6lLN ve4Ol2PdbPxNte0OCd3TuUcftlc522k= -----END CERTIFICATE-----Generated at Thu Aug 21 07:56:39 2025 by rpki-client