$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/66a2d060-ca2a-3281-9515-d6a3d54b78a4.roa File: 66a2d060-ca2a-3281-9515-d6a3d54b78a4.roa (raw, json) Hash identifier: gWssRQavuQq+mAl8YNTbrVQHZOS0D10aALwOm6fe3qg= Subject key identifier: 2F:79:07:B2:37:EF:63:E5:66:4E:3E:51:B8:87:61:E9:91:67:F5:C7 Certificate issuer: /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Certificate serial: 010D0C9F4328584F4973946231CF7D286E5F5E90 Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/66a2d060-ca2a-3281-9515-d6a3d54b78a4.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 55286 IP address blocks: 23.236.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:94:62:31:cf:7d:28:6e:5f:5e:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=bee965aa-c9ad-40d5-83a4-6fa0f135d5e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e2:2d:8a:d4:33:e9:99:f1:ab:94:5b:a1:42: 6c:bf:4f:20:5b:95:fb:04:a0:fc:4a:15:c7:93:18: 9d:f3:05:88:fe:e1:08:e3:6a:64:4e:8e:c2:3d:21: 93:36:3e:3d:5c:4f:01:22:df:8a:84:da:73:70:8e: a2:0b:dc:7b:31:69:bd:b4:0e:8a:f0:cc:34:76:d5: 44:14:14:15:77:32:34:09:d1:07:64:b7:e0:16:c6: d7:6e:bd:f8:b8:6c:89:c5:47:bb:fe:9d:29:13:7c: b2:aa:b2:5b:24:19:f5:f0:d8:d8:01:ff:ec:c9:e7: 0a:4f:ba:9f:2b:7f:27:a8:e2:64:e3:be:98:f1:6c: 2f:63:37:bb:d9:c8:0d:25:b0:6e:a7:14:93:84:c1: d9:13:6e:b8:d1:86:50:37:82:f3:d1:b7:e6:22:8f: 35:52:a8:1b:c8:d6:7b:78:4f:29:79:93:b5:9a:51: 5d:9c:1a:ee:b2:25:c9:34:73:5f:64:13:75:83:b7: 0f:25:d9:e4:af:b3:1f:20:21:ff:b7:59:d3:0d:6e: d9:e3:9d:17:af:49:07:73:a6:05:3f:ad:29:ce:c2: a1:2e:4d:4f:c9:4e:d9:2a:fe:49:ef:d2:8f:1e:fe: 9d:d2:0b:cb:4f:6d:d8:76:3f:52:9d:bb:39:98:97: 60:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:79:07:B2:37:EF:63:E5:66:4E:3E:51:B8:87:61:E9:91:67:F5:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/66a2d060-ca2a-3281-9515-d6a3d54b78a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl X509v3 Authority Key Identifier: keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer sbgp-ipAddrBlock: critical IPv4: 23.236.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:89:54:50:41:01:91:d5:7d:14:a3:0b:24:85:e3:d9:6f:0e: 2d:32:ec:28:f9:f4:16:16:ef:03:5a:66:84:59:63:92:81:3b: b9:14:b8:92:be:a2:b5:83:dc:b4:33:c0:21:74:44:79:57:0f: d8:44:f6:b5:fa:0b:bd:17:6e:ee:26:2e:5f:8d:a4:5b:60:d5: b1:9a:c2:df:1a:39:b7:52:d1:13:62:48:69:3e:7c:74:88:e7: 56:31:d8:26:32:d6:21:56:b8:26:aa:4e:f9:2b:a6:11:bd:3b: 4d:44:72:a4:ac:31:36:36:43:32:59:b1:ff:26:11:9e:c0:c2: ee:57:f4:f8:d0:f2:bc:56:9d:a8:1b:1d:1d:d4:fc:4b:97:fd: b8:fb:4b:f2:c3:1b:b6:f9:1a:e9:0e:0e:de:26:fb:0f:44:42: 30:a4:7e:f4:9b:86:04:2d:dd:85:8d:df:ac:c4:5f:b1:2d:29: 32:0a:b8:28:e1:e7:40:4d:3e:f1:f7:83:8d:19:7c:64:b0:6f: 1c:9d:50:cd:1f:f6:90:a8:f8:87:91:c9:a4:17:25:8f:ec:04: 75:d5:d2:8f:a1:2e:a6:85:33:2b:9d:c9:24:17:07:9f:a6:8e: 5b:94:a0:eb:54:a6:c2:f3:8f:c2:7f:f3:6b:7f:47:0d:a8:89: 01:b9:33:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc5RiMc99KG5fXpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVlZGYwMjEtMDI5OC00YTgxLTk3ZDUtMWM4NWEyZWI0 NWY1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YmVlOTY1YWEtYzlhZC00MGQ1LTgzYTQtNmZhMGYxMzVkNWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveItitQz6Znxq5RboUJsv08gW5X7BKD8ShXH kxid8wWI/uEI42pkTo7CPSGTNj49XE8BIt+KhNpzcI6iC9x7MWm9tA6K8Mw0dtVE FBQVdzI0CdEHZLfgFsbXbr34uGyJxUe7/p0pE3yyqrJbJBn18NjYAf/syecKT7qf K38nqOJk476Y8WwvYze72cgNJbBupxSThMHZE2640YZQN4Lz0bfmIo81UqgbyNZ7 eE8peZO1mlFdnBrusiXJNHNfZBN1g7cPJdnkr7MfICH/t1nTDW7Z450Xr0kHc6YF P60pzsKhLk1PyU7ZKv5J79KPHv6d0gvLT23Ydj9Snbs5mJdgsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC95B7I372PlZk4+UbiHYemRZ/XHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVk ZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1YTJlYjQ1ZjUvNjZhMmQwNjAtY2EyYS0z MjgxLTk1MTUtZDZhM2Q1NGI3OGE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjVlZGYwMjEtMDI5OC00YTgxLTk3 ZDUtMWM4NWEyZWI0NWY1L2I1ZWRmMDIxLTAyOTgtNGE4MS05N2Q1LTFjODVhMmVi NDVmNS5jcmwwHwYDVR0jBBgwFoAUhAkMQqDZn+raqP3DbTOl+IviID0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVkZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1 YTJlYjQ1ZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+yRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEGJVFBBAZHVfRSjCySF49lvDi0y7Cj59BYW7wNaZoRZY5KBO7kUuJK+ orWD3LQzwCF0RHlXD9hE9rX6C70Xbu4mLl+NpFtg1bGawt8aObdS0RNiSGk+fHSI 51Yx2CYy1iFWuCaqTvkrphG9O01EcqSsMTY2QzJZsf8mEZ7Awu5X9PjQ8rxWnagb HR3U/EuX/bj7S/LDG7b5GukODt4m+w9EQjCkfvSbhgQt3YWN36zEX7EtKTIKuCjh 50BNPvH3g40ZfGSwbxydUM0f9pCo+IeRyaQXJY/sBHXV0o+hLqaFMyudySQXB5+m jluUoOtUpsLzj8J/82t/Rw2oiQG5M+A= -----END CERTIFICATE-----Generated at Mon Sep 28 03:26:13 2026 by rpki-client