$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/efc88068-84b2-310d-8b0e-08f7ea07062f.roa File: efc88068-84b2-310d-8b0e-08f7ea07062f.roa (raw, json) Hash identifier: mAcorD2+OOGQAol2YA0XC4U+YpMWZEI/E7g2MGZ+HYI= Subject key identifier: B9:9D:9B:90:A0:4B:CC:11:D6:58:EF:EB:96:B9:3A:40:E9:C6:7B:34 Certificate issuer: /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Certificate serial: 010D0C9F4328584F0D6CE30BAAD77590F32B9D00 Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/efc88068-84b2-310d-8b0e-08f7ea07062f.roa Signing time: Thu 03 Sep 2026 13:00:12 +0000 ROA not before: Thu 03 Sep 2026 13:00:12 +0000 ROA not after: Wed 02 Dec 2026 14:00:12 +0000 asID: 7018 IP address blocks: 23.236.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:6c:e3:0b:aa:d7:75:90:f3:2b:9d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Validity Not Before: Sep 3 13:00:12 2026 GMT Not After : Dec 2 14:00:12 2026 GMT Subject: CN=963dc3ce-33fb-45a0-a9e9-ebbd4e54beef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:8e:82:a1:d6:21:a7:9a:7e:7a:d2:94:a5:89: f9:1b:fc:b0:03:0e:fe:cd:f3:d5:f8:f0:72:aa:6c: 78:f4:f8:44:53:d6:d1:80:f4:1e:04:be:4a:f1:7f: 1a:2e:7a:c9:07:f2:4a:17:20:2d:83:f9:9e:0b:2e: 78:51:cc:b1:c3:00:6d:98:99:cd:4b:a1:a1:80:98: 87:f3:e2:f6:52:67:aa:95:96:71:c4:66:8c:93:d6: 9c:a8:56:f9:99:e0:df:74:58:76:b9:b4:8d:47:51: be:86:db:f9:ab:fa:e0:55:73:15:ab:c7:bc:41:72: c4:d9:d8:25:27:c7:38:b5:6a:a2:19:78:8b:25:da: 56:1b:74:c3:67:0b:5c:4e:f5:56:5d:10:60:ed:2a: 78:8c:13:25:92:db:b9:be:30:b5:34:99:82:71:78: 8f:81:ca:5a:d2:1d:c9:e3:8f:79:73:fd:56:22:6b: 40:ce:e7:c8:85:84:89:b4:31:90:b6:81:43:1e:b9: f7:1a:20:ad:9e:ce:9b:ab:12:68:4f:b6:2b:8a:4d: f0:5b:d7:0f:9a:f7:8d:25:5b:ca:d1:1a:4a:09:5d: 90:b5:e8:2d:22:a0:9a:e5:36:d8:12:a6:dc:dd:34: a9:a2:5e:18:68:7a:25:95:6f:55:52:24:50:36:11: 8e:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:9D:9B:90:A0:4B:CC:11:D6:58:EF:EB:96:B9:3A:40:E9:C6:7B:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/efc88068-84b2-310d-8b0e-08f7ea07062f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl X509v3 Authority Key Identifier: keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer sbgp-ipAddrBlock: critical IPv4: 23.236.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:b3:d3:b3:ea:8c:98:f2:e8:10:56:02:fd:b6:39:58:79:0c: a8:8b:16:ae:d8:c5:b3:e4:be:b7:74:c8:6b:48:f2:ca:b5:7c: 1b:0a:68:ba:2e:f9:67:40:a1:eb:0f:fc:7a:e1:7a:e0:56:d3: 05:07:b3:c0:75:70:cf:31:e2:70:e5:c5:cb:d3:e9:35:97:9a: 65:27:55:af:f9:76:79:7c:1e:3c:d5:43:91:19:cc:a1:1f:8a: b4:4e:8d:5d:30:98:04:b9:6a:64:60:51:fd:94:e2:bb:31:22: 53:e1:8d:ef:07:ca:75:96:a0:90:c8:ef:da:90:1c:9c:31:f0: 90:86:3a:5d:3a:4d:fd:6c:52:d1:3f:51:62:9f:44:ff:06:4a: 64:df:04:69:10:53:10:e3:8e:07:46:04:c9:b8:1c:5e:69:05: 73:77:6a:35:8a:ed:d0:d6:84:b8:8d:66:92:84:70:48:5f:18: 33:ec:76:3a:f2:8c:45:ff:17:9e:04:a6:76:de:f8:83:9b:1a: dc:28:4f:a7:a6:86:5a:b1:fd:23:16:31:95:ed:83:7f:98:52: 70:99:3c:d8:69:de:1e:c8:9b:16:f9:19:13:d1:8f:ec:66:7f: 2e:2d:0a:2c:59:78:25:51:7e:45:ee:62:3c:be:2c:69:34:ca: e9:4b:b6:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8NbOMLqtd1kPMrnQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVlZGYwMjEtMDI5OC00YTgxLTk3ZDUtMWM4NWEyZWI0 NWY1MB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk OTYzZGMzY2UtMzNmYi00NWEwLWE5ZTktZWJiZDRlNTRiZWVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi46CodYhp5p+etKUpYn5G/ywAw7+zfPV+PBy qmx49PhEU9bRgPQeBL5K8X8aLnrJB/JKFyAtg/meCy54UcyxwwBtmJnNS6GhgJiH 8+L2UmeqlZZxxGaMk9acqFb5meDfdFh2ubSNR1G+htv5q/rgVXMVq8e8QXLE2dgl J8c4tWqiGXiLJdpWG3TDZwtcTvVWXRBg7Sp4jBMlktu5vjC1NJmCcXiPgcpa0h3J 4495c/1WImtAzufIhYSJtDGQtoFDHrn3GiCtns6bqxJoT7Yrik3wW9cPmveNJVvK 0RpKCV2QtegtIqCa5TbYEqbc3TSpol4YaHollW9VUiRQNhGO8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLmdm5CgS8wR1ljv65a5OkDpxns0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVk ZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1YTJlYjQ1ZjUvZWZjODgwNjgtODRiMi0z MTBkLThiMGUtMDhmN2VhMDcwNjJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjVlZGYwMjEtMDI5OC00YTgxLTk3 ZDUtMWM4NWEyZWI0NWY1L2I1ZWRmMDIxLTAyOTgtNGE4MS05N2Q1LTFjODVhMmVi NDVmNS5jcmwwHwYDVR0jBBgwFoAUhAkMQqDZn+raqP3DbTOl+IviID0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVkZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1 YTJlYjQ1ZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+z+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACKz07PqjJjy6BBWAv22OVh5DKiLFq7YxbPkvrd0yGtI8sq1fBsKaLou +WdAoesP/HrheuBW0wUHs8B1cM8x4nDlxcvT6TWXmmUnVa/5dnl8HjzVQ5EZzKEf irROjV0wmAS5amRgUf2U4rsxIlPhje8HynWWoJDI79qQHJwx8JCGOl06Tf1sUtE/ UWKfRP8GSmTfBGkQUxDjjgdGBMm4HF5pBXN3ajWK7dDWhLiNZpKEcEhfGDPsdjry jEX/F54Epnbe+IObGtwoT6emhlqx/SMWMZXtg3+YUnCZPNhp3h7Imxb5GRPRj+xm fy4tCixZeCVRfkXuYjy+LGk0yulLtrk= -----END CERTIFICATE-----Generated at Sun Sep 20 19:57:48 2026 by rpki-client