$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b6a10872-6477-3316-8b26-a4a5d54f2477.roa File: b6a10872-6477-3316-8b26-a4a5d54f2477.roa (raw, json) Hash identifier: 1Nh8pnsb4y5Q1R/IpR/U7YeGP00Uc2jY3zoDNBM6ZNk= Subject key identifier: 4E:8F:EB:78:D8:1B:5A:9A:0B:99:F3:21:08:21:B1:5C:29:20:C1:CD Certificate issuer: /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Certificate serial: 010D0C9F4328584CAA2702CE8A1614FFF0F56500 Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b6a10872-6477-3316-8b26-a4a5d54f2477.roa Signing time: Tue 27 Jan 2026 14:00:36 +0000 ROA not before: Tue 27 Jan 2026 14:00:36 +0000 ROA not after: Mon 27 Apr 2026 13:00:36 +0000 asID: 7018 IP address blocks: 23.229.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:aa:27:02:ce:8a:16:14:ff:f0:f5:65:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Validity Not Before: Jan 27 14:00:36 2026 GMT Not After : Apr 27 13:00:36 2026 GMT Subject: CN=ae3bece0-9533-4396-af77-d9f9c94891dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e9:e1:65:f3:49:e3:e6:db:17:86:f0:df:11: c4:58:de:06:61:ad:6a:38:5f:1b:4c:56:00:81:7f: fd:fd:e2:74:8e:91:56:e0:a0:39:cd:5e:81:07:5a: 73:91:b1:4b:a4:35:49:c6:9f:5b:02:4b:c2:05:24: d9:6e:d8:00:db:18:32:ec:28:11:d4:39:e3:82:6d: a4:44:e4:9d:32:5d:15:09:76:e7:18:f5:0d:fb:64: 15:8a:8f:68:00:6f:a7:45:7d:ac:dc:fa:f8:2a:c8: 2a:40:5b:d5:e5:a4:fe:43:94:c5:7d:e2:8b:fc:f7: 62:c6:5b:46:5a:06:5c:f4:fc:d7:2d:2b:6f:b0:80: 04:79:f1:d3:d3:10:4f:72:3a:93:2f:43:c0:be:00: 3e:76:5c:c5:4e:cc:86:13:b4:a9:d0:09:92:82:45: 8b:8a:bd:90:9c:97:cc:14:85:ab:1e:b8:7f:4d:50: 30:8d:ae:37:36:4b:23:6b:72:3f:5b:8c:28:ad:af: a6:b3:e9:b3:84:b5:4f:b6:34:b8:90:25:0e:04:43: bf:57:59:9f:9b:6f:ce:b3:34:dc:bb:22:4d:b6:81: 78:ed:70:9a:57:e0:2d:40:73:a0:37:3f:e1:07:87: 75:0f:27:d1:2c:3e:56:8e:e4:9a:3e:3c:dd:f4:df: 8e:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:8F:EB:78:D8:1B:5A:9A:0B:99:F3:21:08:21:B1:5C:29:20:C1:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b6a10872-6477-3316-8b26-a4a5d54f2477.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl X509v3 Authority Key Identifier: keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer sbgp-ipAddrBlock: critical IPv4: 23.229.118.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:d6:82:98:cc:7d:22:0c:a7:59:51:7b:2d:1d:00:56:92:8d: ef:69:fe:68:2a:03:59:bc:57:32:c8:9e:e5:12:65:d3:fc:c1: 19:3d:fe:d9:4e:22:ea:e6:b8:88:00:ce:23:e4:0c:fd:df:5a: e7:ee:fd:ac:d8:7c:8b:b3:a8:bf:88:3d:ac:6f:87:4c:26:94: 52:6f:74:93:ee:3d:0a:f5:80:b6:13:34:6f:90:b5:60:2a:d8: 24:20:88:d6:02:a9:ff:2b:9a:41:6c:3c:7e:c1:aa:f9:04:d2: 28:45:e8:24:25:1e:a6:78:7d:53:fe:0e:83:c9:08:2b:10:4f: 2f:cd:56:c8:6f:72:44:14:fd:dd:46:33:29:c8:86:f1:ea:79: e8:1d:03:22:3b:09:da:9d:60:b0:d5:6a:fd:e9:22:a4:83:15: 45:de:81:f9:eb:67:b0:a0:b2:a0:75:4d:2f:01:0a:59:f9:03: 80:2e:57:09:0e:6d:a4:c7:24:65:cf:40:dd:b0:49:59:6b:84: 31:a1:cf:ba:0c:dd:6d:2a:8f:4c:69:b0:18:a7:a6:ee:d1:9e: 4c:d1:34:b6:33:2e:05:bc:ad:09:60:9f:05:2e:79:7b:e1:ef: df:65:0b:c3:94:7d:e2:93:b9:7b:4b:88:7d:db:3c:f5:72:64: 88:62:a9:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyqJwLOihYU//D1ZQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVlZGYwMjEtMDI5OC00YTgxLTk3ZDUtMWM4NWEyZWI0 NWY1MB4XDTI2MDEyNzE0MDAzNloXDTI2MDQyNzEzMDAzNlowLzEtMCsGA1UEAxMk YWUzYmVjZTAtOTUzMy00Mzk2LWFmNzctZDlmOWM5NDg5MWRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOnhZfNJ4+bbF4bw3xHEWN4GYa1qOF8bTFYA gX/9/eJ0jpFW4KA5zV6BB1pzkbFLpDVJxp9bAkvCBSTZbtgA2xgy7CgR1Dnjgm2k ROSdMl0VCXbnGPUN+2QVio9oAG+nRX2s3Pr4KsgqQFvV5aT+Q5TFfeKL/PdixltG WgZc9PzXLStvsIAEefHT0xBPcjqTL0PAvgA+dlzFTsyGE7Sp0AmSgkWLir2QnJfM FIWrHrh/TVAwja43Nksja3I/W4wora+ms+mzhLVPtjS4kCUOBEO/V1mfm2/OszTc uyJNtoF47XCaV+AtQHOgNz/hB4d1DyfRLD5WjuSaPjzd9N+OsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE6P63jYG1qaC5nzIQghsVwpIMHNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVk ZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1YTJlYjQ1ZjUvYjZhMTA4NzItNjQ3Ny0z MzE2LThiMjYtYTRhNWQ1NGYyNDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjVlZGYwMjEtMDI5OC00YTgxLTk3 ZDUtMWM4NWEyZWI0NWY1L2I1ZWRmMDIxLTAyOTgtNGE4MS05N2Q1LTFjODVhMmVi NDVmNS5jcmwwHwYDVR0jBBgwFoAUhAkMQqDZn+raqP3DbTOl+IviID0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVkZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1 YTJlYjQ1ZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+V2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE/WgpjMfSIMp1lRey0dAFaSje9p/mgqA1m8VzLInuUSZdP8wRk9/tlO IurmuIgAziPkDP3fWufu/azYfIuzqL+IPaxvh0wmlFJvdJPuPQr1gLYTNG+QtWAq 2CQgiNYCqf8rmkFsPH7BqvkE0ihF6CQlHqZ4fVP+DoPJCCsQTy/NVshvckQU/d1G MynIhvHqeegdAyI7CdqdYLDVav3pIqSDFUXegfnrZ7CgsqB1TS8BCln5A4AuVwkO baTHJGXPQN2wSVlrhDGhz7oM3W0qj0xpsBinpu7RnkzRNLYzLgW8rQlgnwUueXvh 799lC8OUfeKTuXtLiH3bPPVyZIhiqd0= -----END CERTIFICATE-----Generated at Thu Feb 26 23:51:27 2026 by rpki-client