$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/89e59193-894d-3421-858e-72e2498d9aa1.roa File: 89e59193-894d-3421-858e-72e2498d9aa1.roa (raw, json) Hash identifier: dQb3iNhBnokWiNmlCPT0vjr2QtEdU4QOoQaQD0zqris= Subject key identifier: 97:7B:62:FB:2C:60:E4:11:B9:F0:A4:8C:45:92:AA:95:1D:0F:07:B6 Certificate issuer: /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Certificate serial: 010D0C9F4328584CCFD73D4C03F8E6577551BC80 Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/89e59193-894d-3421-858e-72e2498d9aa1.roa Signing time: Tue 10 Feb 2026 02:00:31 +0000 ROA not before: Tue 10 Feb 2026 02:00:31 +0000 ROA not after: Mon 11 May 2026 01:00:31 +0000 asID: 55081 IP address blocks: 23.229.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:cf:d7:3d:4c:03:f8:e6:57:75:51:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Validity Not Before: Feb 10 02:00:31 2026 GMT Not After : May 11 01:00:31 2026 GMT Subject: CN=8c7d467f-0b11-4a8a-851f-c631efb2aabe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:99:7c:30:19:80:3f:c3:9d:37:45:76:89:14: 35:3e:79:12:1c:ee:42:ec:4d:7f:84:76:bb:52:89: ae:5e:69:15:05:ae:89:a9:73:24:0d:6d:d3:94:2b: f0:da:d8:93:73:69:d2:83:15:8c:84:d7:dc:68:0c: 83:14:cf:ca:61:25:d4:4b:e8:5e:d8:96:be:65:a3: e9:cb:ab:60:ef:97:63:cd:a7:e6:66:d5:e4:29:29: 26:b3:79:15:bf:26:0f:d1:5d:0f:7b:45:80:a2:3a: 21:09:eb:4c:3f:92:16:d5:64:57:98:66:6c:29:c6: 33:5b:a6:6b:b7:82:69:5f:b3:b1:15:d0:49:74:78: 7e:a6:74:3d:cc:6f:aa:e3:22:38:c7:9f:64:33:07: aa:50:58:95:26:ca:97:b5:47:dc:63:d5:ce:8e:66: 42:d9:32:fb:2c:20:54:bc:3e:2c:a1:7f:a5:c1:8a: d9:0b:1d:e4:d0:1d:2a:74:c1:98:f6:32:ef:6c:82: b0:7e:55:24:7e:e4:ef:e2:e7:cd:ae:08:56:72:59: 27:71:58:b9:a3:61:9c:75:fb:1f:7b:c7:e7:63:ad: fc:9f:16:eb:b3:99:37:e0:4f:93:87:bf:ec:d3:fa: d5:35:af:e1:ea:28:60:f6:5d:de:1a:04:75:14:72: 6b:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:7B:62:FB:2C:60:E4:11:B9:F0:A4:8C:45:92:AA:95:1D:0F:07:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/89e59193-894d-3421-858e-72e2498d9aa1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl X509v3 Authority Key Identifier: keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer sbgp-ipAddrBlock: critical IPv4: 23.229.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:dc:f7:a1:84:90:48:24:07:b1:86:9e:0f:bc:0b:20:8c:ac: 14:a3:31:b8:4d:dd:8d:7f:5f:75:ed:66:1b:9a:19:ab:8c:c6: 6c:ca:25:ea:bd:bb:0d:81:f2:f2:77:6a:c4:39:b8:98:6e:59: bc:61:6f:cd:ff:9c:39:d0:d2:fd:c4:d2:4c:7a:56:35:ea:a5: 06:88:bc:94:d9:1f:84:75:09:ad:6f:49:14:95:7b:ab:85:52: bc:05:43:ea:a3:2e:2c:cf:de:ac:7f:b5:ff:64:15:18:de:13: 33:53:85:00:e2:18:1c:dc:91:5d:91:05:de:ce:4d:b1:10:3b: 1c:e8:ee:e7:25:f9:fa:24:6a:c5:d9:c8:3b:72:89:bf:32:61: 5b:b1:02:26:30:a7:40:9e:9b:9b:c1:1a:27:d7:3a:b3:06:81: 0a:0c:04:0d:0f:d3:e7:2b:f2:97:75:ec:6b:9d:0f:30:68:4b: 30:f3:b2:38:0a:c6:8c:2d:82:70:bb:52:4f:15:cc:00:69:c6: 23:86:55:4a:21:34:f2:18:1b:93:fb:ed:fe:18:fe:fc:dd:78: 69:cd:d1:c8:09:84:54:48:18:0b:7b:dc:c1:c7:31:0f:9d:a0: c8:37:09:1c:a5:76:c1:2b:c5:1e:cc:75:ea:a7:58:68:e8:a0: 65:fa:1a:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzP1z1MA/jmV3VRvIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVlZGYwMjEtMDI5OC00YTgxLTk3ZDUtMWM4NWEyZWI0 NWY1MB4XDTI2MDIxMDAyMDAzMVoXDTI2MDUxMTAxMDAzMVowLzEtMCsGA1UEAxMk OGM3ZDQ2N2YtMGIxMS00YThhLTg1MWYtYzYzMWVmYjJhYWJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJl8MBmAP8OdN0V2iRQ1PnkSHO5C7E1/hHa7 UomuXmkVBa6JqXMkDW3TlCvw2tiTc2nSgxWMhNfcaAyDFM/KYSXUS+he2Ja+ZaPp y6tg75djzafmZtXkKSkms3kVvyYP0V0Pe0WAojohCetMP5IW1WRXmGZsKcYzW6Zr t4JpX7OxFdBJdHh+pnQ9zG+q4yI4x59kMweqUFiVJsqXtUfcY9XOjmZC2TL7LCBU vD4soX+lwYrZCx3k0B0qdMGY9jLvbIKwflUkfuTv4ufNrghWclkncVi5o2Gcdfsf e8fnY638nxbrs5k34E+Th7/s0/rVNa/h6ihg9l3eGgR1FHJrmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJd7YvssYOQRufCkjEWSqpUdDwe2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVk ZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1YTJlYjQ1ZjUvODllNTkxOTMtODk0ZC0z NDIxLTg1OGUtNzJlMjQ5OGQ5YWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjVlZGYwMjEtMDI5OC00YTgxLTk3 ZDUtMWM4NWEyZWI0NWY1L2I1ZWRmMDIxLTAyOTgtNGE4MS05N2Q1LTFjODVhMmVi NDVmNS5jcmwwHwYDVR0jBBgwFoAUhAkMQqDZn+raqP3DbTOl+IviID0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVkZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1 YTJlYjQ1ZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+UHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEbc96GEkEgkB7GGng+8CyCMrBSjMbhN3Y1/X3XtZhuaGauMxmzKJeq9 uw2B8vJ3asQ5uJhuWbxhb83/nDnQ0v3E0kx6VjXqpQaIvJTZH4R1Ca1vSRSVe6uF UrwFQ+qjLizP3qx/tf9kFRjeEzNThQDiGBzckV2RBd7OTbEQOxzo7ucl+fokasXZ yDtyib8yYVuxAiYwp0Cem5vBGifXOrMGgQoMBA0P0+cr8pd17GudDzBoSzDzsjgK xowtgnC7Uk8VzABpxiOGVUohNPIYG5P77f4Y/vzdeGnN0cgJhFRIGAt73MHHMQ+d oMg3CRyldsErxR7MdeqnWGjooGX6Grg= -----END CERTIFICATE-----Generated at Sun Mar 1 20:56:16 2026 by rpki-client