$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/d00a901b-6dbf-30fc-82f3-fbcaf0668a09.roa File: d00a901b-6dbf-30fc-82f3-fbcaf0668a09.roa (raw, json) Hash identifier: QQkvfnNEyvNJ81n/vQWzIy5ILr8M1TDGNuTtThn46Cw= Subject key identifier: BF:FF:05:5F:6C:16:BA:FD:A9:84:83:57:88:8E:07:CD:D9:D6:36:39 Certificate issuer: /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Certificate serial: 010D0C9F4328584CAA2732E73D6214F0D78BAC88 Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/d00a901b-6dbf-30fc-82f3-fbcaf0668a09.roa Signing time: Tue 27 Jan 2026 14:00:36 +0000 ROA not before: Tue 27 Jan 2026 14:00:36 +0000 ROA not after: Mon 27 Apr 2026 13:00:36 +0000 asID: 7018 IP address blocks: 23.229.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:aa:27:32:e7:3d:62:14:f0:d7:8b:ac:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Validity Not Before: Jan 27 14:00:36 2026 GMT Not After : Apr 27 13:00:36 2026 GMT Subject: CN=9360d675-c3a6-4acd-92a2-0d7868d80d03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:86:e2:20:cb:bb:81:1c:6d:8d:a6:fb:74:2d: 87:4f:5a:8f:0d:0b:0b:c6:89:9d:68:ee:93:13:c8: 0a:74:10:d5:26:3f:1b:60:22:af:24:e0:70:a3:0b: 72:16:7e:46:6f:bb:18:eb:31:ed:57:8d:b3:17:96: 2f:31:41:d7:b7:e5:62:51:fa:59:3e:20:4b:95:9f: 03:a1:55:5d:09:b4:47:38:a2:cb:9c:6a:65:bb:29: f8:c7:49:45:cf:47:f9:5d:7c:a7:ef:32:76:dc:d7: f4:ed:47:05:b2:c5:77:5a:cf:13:6d:d2:9f:95:f5: 03:a4:ee:f7:1e:42:78:70:5e:42:51:e4:86:bb:a5: f0:e5:60:57:ac:18:4d:4f:06:b3:86:ee:e0:95:2a: ea:8f:fd:6c:6b:06:23:86:97:7a:98:c0:02:db:d3: 95:10:47:d7:0f:5c:ba:5b:ea:64:c8:b5:1a:3e:0a: 08:57:f7:f1:d9:c9:04:0a:3a:2d:c8:af:e5:79:3c: e2:e2:d4:e8:2c:25:f4:21:bb:23:1e:09:d0:ad:14: 2c:39:de:cb:f0:45:72:b5:f3:21:8b:bd:3e:43:e5: e9:2a:f8:51:5c:40:42:07:98:7d:1b:c1:1b:87:e3: 57:0e:01:11:1e:c4:66:2c:ac:3a:d5:ae:d6:3b:e5: e9:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:FF:05:5F:6C:16:BA:FD:A9:84:83:57:88:8E:07:CD:D9:D6:36:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/d00a901b-6dbf-30fc-82f3-fbcaf0668a09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl X509v3 Authority Key Identifier: keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer sbgp-ipAddrBlock: critical IPv4: 23.229.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:fe:3d:3a:5f:6d:9a:d9:7c:09:86:36:ad:25:92:73:99:2d: 3a:77:9a:bd:71:dc:75:8f:b9:e6:66:60:04:cf:79:97:cd:e2: a1:6d:61:48:60:c5:4b:2d:e0:cb:fe:b8:bb:42:ac:30:3a:58: c8:07:87:d8:2d:64:35:e1:26:03:5b:5a:22:0e:9e:4d:b3:63: 02:50:9f:ed:ef:da:52:16:f6:b2:2c:d8:05:35:d1:a4:f9:27: 82:89:8d:35:67:9b:07:ae:4c:e4:5a:4b:f9:04:94:30:a8:cf: 74:83:bc:ac:ae:e3:f0:8a:4d:25:91:15:71:9b:e6:a6:6f:47: c7:76:d6:ff:c6:01:4a:90:86:95:85:7b:58:12:d9:5a:05:fe: 6c:89:df:ce:48:90:1e:87:c9:a5:3e:9e:7a:64:57:6a:a3:55: ba:61:26:6f:6d:ea:75:50:05:5f:b3:d8:59:04:d7:d4:14:fb: e0:ed:4d:00:09:a2:9f:c0:8f:c0:3d:b6:0f:39:db:1b:9a:19: 1e:38:b7:40:34:0d:22:80:15:1c:63:9b:6f:24:1d:1a:e7:b4: 20:35:74:96:65:7b:f6:32:b4:b7:71:4f:6f:17:c9:8c:99:7a: fb:b4:43:83:22:a5:d0:96:67:34:75:78:25:08:fb:2c:2c:74: a1:94:7b:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyqJzLnPWIU8NeLrIgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVlZGYwMjEtMDI5OC00YTgxLTk3ZDUtMWM4NWEyZWI0 NWY1MB4XDTI2MDEyNzE0MDAzNloXDTI2MDQyNzEzMDAzNlowLzEtMCsGA1UEAxMk OTM2MGQ2NzUtYzNhNi00YWNkLTkyYTItMGQ3ODY4ZDgwZDAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3obiIMu7gRxtjab7dC2HT1qPDQsLxomdaO6T E8gKdBDVJj8bYCKvJOBwowtyFn5Gb7sY6zHtV42zF5YvMUHXt+ViUfpZPiBLlZ8D oVVdCbRHOKLLnGpluyn4x0lFz0f5XXyn7zJ23Nf07UcFssV3Ws8TbdKflfUDpO73 HkJ4cF5CUeSGu6Xw5WBXrBhNTwazhu7glSrqj/1sawYjhpd6mMAC29OVEEfXD1y6 W+pkyLUaPgoIV/fx2ckECjotyK/leTzi4tToLCX0IbsjHgnQrRQsOd7L8EVytfMh i70+Q+XpKvhRXEBCB5h9G8Ebh+NXDgERHsRmLKw61a7WO+XpQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL//BV9sFrr9qYSDV4iOB83Z1jY5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVk ZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1YTJlYjQ1ZjUvZDAwYTkwMWItNmRiZi0z MGZjLTgyZjMtZmJjYWYwNjY4YTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjVlZGYwMjEtMDI5OC00YTgxLTk3 ZDUtMWM4NWEyZWI0NWY1L2I1ZWRmMDIxLTAyOTgtNGE4MS05N2Q1LTFjODVhMmVi NDVmNS5jcmwwHwYDVR0jBBgwFoAUhAkMQqDZn+raqP3DbTOl+IviID0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVkZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1 YTJlYjQ1ZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+V/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACz+PTpfbZrZfAmGNq0lknOZLTp3mr1x3HWPueZmYATPeZfN4qFtYUhg xUst4Mv+uLtCrDA6WMgHh9gtZDXhJgNbWiIOnk2zYwJQn+3v2lIW9rIs2AU10aT5 J4KJjTVnmweuTORaS/kElDCoz3SDvKyu4/CKTSWRFXGb5qZvR8d21v/GAUqQhpWF e1gS2VoF/myJ385IkB6HyaU+nnpkV2qjVbphJm9t6nVQBV+z2FkE19QU++DtTQAJ op/Aj8A9tg852xuaGR44t0A0DSKAFRxjm28kHRrntCA1dJZle/YytLdxT28XyYyZ evu0Q4MipdCWZzR1eCUI+ywsdKGUe7M= -----END CERTIFICATE-----Generated at Thu Feb 26 23:48:48 2026 by rpki-client