$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/121e3378-6d20-3bd5-932f-cf2eb48255d2.roa File: 121e3378-6d20-3bd5-932f-cf2eb48255d2.roa (raw, json) Hash identifier: OIPPn9af15y53KleaavaJiK4za7tGAKOU/MWR8VBADY= Subject key identifier: 50:D2:36:D2:51:0F:A6:E1:4A:14:F2:46:6C:94:C3:E4:D3:97:4E:31 Certificate issuer: /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Certificate serial: 010D0C9F4328584F331D18DD4681EDB299AFB580 Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/121e3378-6d20-3bd5-932f-cf2eb48255d2.roa Signing time: Thu 17 Sep 2026 01:00:11 +0000 ROA not before: Thu 17 Sep 2026 01:00:11 +0000 ROA not after: Wed 16 Dec 2026 02:00:11 +0000 asID: 55081 IP address blocks: 23.236.146.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:33:1d:18:dd:46:81:ed:b2:99:af:b5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Validity Not Before: Sep 17 01:00:11 2026 GMT Not After : Dec 16 02:00:11 2026 GMT Subject: CN=397668fa-896f-4080-80d4-b72d4af6224f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:16:e9:f0:5d:2e:36:2b:12:85:24:ca:0f:bb: fc:ec:d8:ed:d1:66:07:22:2b:ea:75:5f:a6:55:46: 1e:24:c3:4f:67:f8:0a:42:35:b8:98:e0:8a:33:82: 04:1a:0e:66:30:53:e3:28:cc:51:73:cf:ea:96:69: cf:a7:f3:bf:b6:e1:63:e1:fa:d1:c8:54:bb:fd:54: 51:5a:8e:08:6b:20:f8:aa:ee:4a:fb:13:65:f2:b9: 75:1c:73:9f:6d:0c:19:a0:47:af:66:2c:b2:97:87: e6:70:89:f5:49:ac:34:a0:68:2f:9f:38:4f:bd:02: 57:3d:43:d5:41:4b:5e:db:83:9e:7e:fd:74:de:0a: c2:52:cb:7c:e2:72:0f:9a:d7:0d:87:37:01:81:aa: fe:b1:a0:9f:49:9f:6f:ac:8f:9d:45:58:98:00:5b: b2:9a:8e:d8:7c:ff:e1:57:96:f6:79:44:cb:1e:ea: ed:fd:a3:e2:15:db:07:24:92:4a:f2:6d:d4:ed:1d: 29:56:c3:e9:3b:2c:ef:e9:d4:5b:4d:db:b8:0f:9f: 5d:c9:3b:93:9d:53:f5:b9:da:ad:b7:14:0f:fa:b1: ae:04:ec:c1:58:86:61:6a:cc:4e:4c:7c:4d:6c:6a: de:69:5d:aa:22:70:ca:83:45:2f:29:5c:53:3b:be: ab:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:D2:36:D2:51:0F:A6:E1:4A:14:F2:46:6C:94:C3:E4:D3:97:4E:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/121e3378-6d20-3bd5-932f-cf2eb48255d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl X509v3 Authority Key Identifier: keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer sbgp-ipAddrBlock: critical IPv4: 23.236.146.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:9b:b0:d9:40:44:21:4a:f2:73:76:90:47:c5:11:a7:45:bb: 28:52:29:72:aa:83:48:83:a5:e7:7b:0f:f0:7b:73:9b:6a:13: 0d:2f:54:a1:dd:18:0d:51:fc:f0:a0:e3:84:cf:35:db:c2:cd: 1f:24:d4:cf:82:82:c7:d2:55:d1:b4:97:51:c1:91:d0:bd:a8: 1a:c7:bd:dd:9e:79:bb:24:36:d8:f9:71:ee:ac:d6:6a:b1:b4: f6:84:13:04:e7:53:48:f7:d6:54:d3:df:8e:63:c5:ea:dd:a4: 07:67:56:18:8b:e1:7e:31:1f:86:9d:c7:4d:f3:63:d4:5b:a5: 9a:89:e0:3e:23:10:da:86:4a:67:26:df:2f:a8:7b:31:b9:cd: c3:8e:f9:1c:44:c0:6d:72:7c:95:7d:3f:53:7d:ba:0b:73:a0: 71:08:b2:21:e7:4d:08:9b:b4:81:4a:63:bf:90:33:01:71:5b: a4:ed:0a:71:e7:d2:8d:2f:52:75:73:f7:e0:a9:2c:fc:db:73: e5:c6:d4:ad:be:90:af:7f:e1:c6:52:3d:c9:05:68:82:a1:56: 4c:23:e0:48:42:61:2a:9f:bc:fe:97:da:7a:97:dc:0f:b7:cf: 7f:c0:24:61:39:7e:57:40:3f:26:2e:2b:49:2c:f0:e4:5a:8a: a6:ca:d4:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8zHRjdRoHtspmvtYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVlZGYwMjEtMDI5OC00YTgxLTk3ZDUtMWM4NWEyZWI0 NWY1MB4XDTI2MDkxNzAxMDAxMVoXDTI2MTIxNjAyMDAxMVowLzEtMCsGA1UEAxMk Mzk3NjY4ZmEtODk2Zi00MDgwLTgwZDQtYjcyZDRhZjYyMjRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxbp8F0uNisShSTKD7v87Njt0WYHIivqdV+m VUYeJMNPZ/gKQjW4mOCKM4IEGg5mMFPjKMxRc8/qlmnPp/O/tuFj4frRyFS7/VRR Wo4IayD4qu5K+xNl8rl1HHOfbQwZoEevZiyyl4fmcIn1Saw0oGgvnzhPvQJXPUPV QUte24Oefv103grCUst84nIPmtcNhzcBgar+saCfSZ9vrI+dRViYAFuymo7YfP/h V5b2eUTLHurt/aPiFdsHJJJK8m3U7R0pVsPpOyzv6dRbTdu4D59dyTuTnVP1udqt txQP+rGuBOzBWIZhasxOTHxNbGreaV2qInDKg0UvKVxTO76r9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFDSNtJRD6bhShTyRmyUw+TTl04xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVk ZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1YTJlYjQ1ZjUvMTIxZTMzNzgtNmQyMC0z YmQ1LTkzMmYtY2YyZWI0ODI1NWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjVlZGYwMjEtMDI5OC00YTgxLTk3 ZDUtMWM4NWEyZWI0NWY1L2I1ZWRmMDIxLTAyOTgtNGE4MS05N2Q1LTFjODVhMmVi NDVmNS5jcmwwHwYDVR0jBBgwFoAUhAkMQqDZn+raqP3DbTOl+IviID0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVkZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1 YTJlYjQ1ZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF+ySMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD2bsNlARCFK8nN2kEfFEadFuyhSKXKqg0iDped7D/B7c5tqEw0vVKHd GA1R/PCg44TPNdvCzR8k1M+CgsfSVdG0l1HBkdC9qBrHvd2eebskNtj5ce6s1mqx tPaEEwTnU0j31lTT345jxerdpAdnVhiL4X4xH4adx03zY9RbpZqJ4D4jENqGSmcm 3y+oezG5zcOO+RxEwG1yfJV9P1N9ugtzoHEIsiHnTQibtIFKY7+QMwFxW6TtCnHn 0o0vUnVz9+CpLPzbc+XG1K2+kK9/4cZSPckFaIKhVkwj4EhCYSqfvP6X2nqX3A+3 z3/AJGE5fldAPyYuK0ks8ORaiqbK1KQ= -----END CERTIFICATE-----Generated at Tue Sep 22 19:06:42 2026 by rpki-client