$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/3cab4024-3784-37e5-93cb-6dc6b786bf2b.roa File: 3cab4024-3784-37e5-93cb-6dc6b786bf2b.roa (raw, json) Hash identifier: Iw7fl6k49Tq6LUtaOar9I9LKHM1BmeTpNu7/XgHxR2Y= Subject key identifier: B8:BA:10:6A:1A:AC:5F:3C:66:43:CC:30:87:E7:06:46:CD:C4:12:0D Certificate issuer: /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Certificate serial: 010D0C9F4328584F0D6CE2F3D023355A63A7FE00 Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/3cab4024-3784-37e5-93cb-6dc6b786bf2b.roa Signing time: Thu 03 Sep 2026 13:00:12 +0000 ROA not before: Thu 03 Sep 2026 13:00:12 +0000 ROA not after: Wed 02 Dec 2026 14:00:12 +0000 asID: 400072 IP address blocks: 23.229.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:6c:e2:f3:d0:23:35:5a:63:a7:fe:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Validity Not Before: Sep 3 13:00:12 2026 GMT Not After : Dec 2 14:00:12 2026 GMT Subject: CN=6cb6b570-db4b-4d5f-b663-be94cddd3a11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:9d:0b:f8:7c:14:ae:53:2b:fb:63:f2:ba:63: a3:e6:d1:3e:90:2a:cc:30:6a:1a:df:36:b7:53:e7: f8:ac:f5:83:08:17:d6:6f:74:81:d2:4c:c1:a1:dd: cc:e0:61:b6:fa:f6:69:40:d3:8f:6e:92:d4:31:44: 26:9b:77:3c:61:6d:04:1d:ee:8f:c9:46:86:de:ab: 22:ec:8d:ec:67:8a:0c:97:1b:ac:ac:f2:f3:df:94: 1e:d4:29:eb:c6:0b:1d:bf:bc:23:07:8a:90:1b:72: 61:1c:96:e3:ed:29:87:f1:b7:73:10:63:84:21:80: 33:59:47:3d:95:c7:05:37:e0:f2:1c:0b:a8:c0:08: ad:d3:40:3c:f0:3c:76:a8:e1:6f:47:6d:8a:5b:85: de:c6:1d:a2:17:f8:fa:2d:d6:ae:ad:e7:81:16:b4: 2c:cf:ea:7e:f0:9c:8f:fa:20:b4:fa:71:dc:35:d7: 1d:84:7a:62:fe:06:58:4b:19:3c:ab:5c:35:1f:0e: a7:44:18:91:ad:e0:da:66:fe:b9:46:a4:ea:78:32: 06:c5:b1:78:25:8c:26:91:87:99:d3:a0:15:3c:7f: 73:fc:b9:af:4f:46:58:7f:cb:c8:7d:7b:ca:c8:db: 8f:c4:77:bd:88:f6:92:cb:6f:0e:37:7e:d6:80:02: 88:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:BA:10:6A:1A:AC:5F:3C:66:43:CC:30:87:E7:06:46:CD:C4:12:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/3cab4024-3784-37e5-93cb-6dc6b786bf2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl X509v3 Authority Key Identifier: keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer sbgp-ipAddrBlock: critical IPv4: 23.229.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:0e:79:99:ec:52:40:6b:e1:2a:64:97:43:f1:51:e4:e2:12: a7:96:62:77:71:6b:de:c3:7c:03:3b:15:eb:9e:c5:b1:eb:49: f5:55:d7:09:73:de:ba:19:aa:80:f5:7f:bc:5a:91:c6:a7:6e: 8e:34:1c:d5:e6:1e:fc:b2:7f:70:e1:52:d5:ed:f3:49:81:63: 26:ea:69:73:62:0c:09:c6:4e:9f:e4:5e:d7:45:f8:30:be:d4: 10:b1:19:69:37:2b:ed:66:56:13:e4:6f:53:f9:82:de:ae:f5: 2b:f8:30:f4:61:af:6e:79:c3:62:2c:87:1f:a0:46:53:0a:8f: 64:a7:02:80:df:33:1e:67:9e:b4:e4:ef:95:28:27:7d:bb:2d: ec:e6:e9:7a:9a:72:64:b6:31:9d:97:d7:80:c8:2d:5c:48:b0: 48:b6:00:d7:7d:79:0b:bf:90:7d:ef:ca:5a:6c:6f:4a:c1:b5: 81:80:be:c2:12:d6:b9:41:91:fa:c3:a7:ca:2e:92:4b:3c:19: 9c:46:66:46:fe:d8:72:1d:10:ff:91:ac:26:28:08:ad:8c:01: 61:64:ec:c1:c7:11:2a:9e:d4:58:1d:dc:28:6f:01:fa:b9:39: f8:e7:cf:1e:ca:6b:ae:18:66:ec:02:e5:9d:e4:f4:a3:b8:43: ed:c1:38:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8NbOLz0CM1WmOn/gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVlZGYwMjEtMDI5OC00YTgxLTk3ZDUtMWM4NWEyZWI0 NWY1MB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk NmNiNmI1NzAtZGI0Yi00ZDVmLWI2NjMtYmU5NGNkZGQzYTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJ0L+HwUrlMr+2PyumOj5tE+kCrMMGoa3za3 U+f4rPWDCBfWb3SB0kzBod3M4GG2+vZpQNOPbpLUMUQmm3c8YW0EHe6PyUaG3qsi 7I3sZ4oMlxusrPLz35Qe1Cnrxgsdv7wjB4qQG3JhHJbj7SmH8bdzEGOEIYAzWUc9 lccFN+DyHAuowAit00A88Dx2qOFvR22KW4Xexh2iF/j6LdaureeBFrQsz+p+8JyP +iC0+nHcNdcdhHpi/gZYSxk8q1w1Hw6nRBiRreDaZv65RqTqeDIGxbF4JYwmkYeZ 06AVPH9z/LmvT0ZYf8vIfXvKyNuPxHe9iPaSy28ON37WgAKIvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLi6EGoarF88ZkPMMIfnBkbNxBINMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVk ZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1YTJlYjQ1ZjUvM2NhYjQwMjQtMzc4NC0z N2U1LTkzY2ItNmRjNmI3ODZiZjJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjVlZGYwMjEtMDI5OC00YTgxLTk3 ZDUtMWM4NWEyZWI0NWY1L2I1ZWRmMDIxLTAyOTgtNGE4MS05N2Q1LTFjODVhMmVi NDVmNS5jcmwwHwYDVR0jBBgwFoAUhAkMQqDZn+raqP3DbTOl+IviID0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVkZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1 YTJlYjQ1ZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+V/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABQOeZnsUkBr4Spkl0PxUeTiEqeWYndxa97DfAM7FeuexbHrSfVV1wlz 3roZqoD1f7xakcanbo40HNXmHvyyf3DhUtXt80mBYybqaXNiDAnGTp/kXtdF+DC+ 1BCxGWk3K+1mVhPkb1P5gt6u9Sv4MPRhr255w2Ishx+gRlMKj2SnAoDfMx5nnrTk 75UoJ327Lezm6XqacmS2MZ2X14DILVxIsEi2ANd9eQu/kH3vylpsb0rBtYGAvsIS 1rlBkfrDp8oukks8GZxGZkb+2HIdEP+RrCYoCK2MAWFk7MHHESqe1Fgd3ChvAfq5 Ofjnzx7Ka64YZuwC5Z3k9KO4Q+3BOAw= -----END CERTIFICATE-----Generated at Sat Sep 26 12:57:48 2026 by rpki-client