$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/5b89f385-412c-3ed9-a4bb-edcc50d12a28.roa File: 5b89f385-412c-3ed9-a4bb-edcc50d12a28.roa (raw, json) Hash identifier: jX/crLwtKNQ/vVmQGa8vRcYsU2uoIaAdHT59uQoBBGs= Subject key identifier: 1E:50:BD:26:B9:EB:6A:1B:B7:01:E2:9E:3B:00:80:07:69:5C:9D:81 Certificate issuer: /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Certificate serial: 010D0C9F4328584E90BA562AF29F71C7B0157880 Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/5b89f385-412c-3ed9-a4bb-edcc50d12a28.roa Signing time: Mon 20 Jul 2026 21:00:11 +0000 ROA not before: Mon 20 Jul 2026 21:00:11 +0000 ROA not after: Sun 18 Oct 2026 21:00:11 +0000 asID: 55081 IP address blocks: 23.229.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:90:ba:56:2a:f2:9f:71:c7:b0:15:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Validity Not Before: Jul 20 21:00:11 2026 GMT Not After : Oct 18 21:00:11 2026 GMT Subject: CN=22f15ea3-f77c-47cb-b662-4dd10e819168 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:83:a4:1b:34:cb:54:cf:3d:9b:d2:f9:12:fb: 52:47:7a:70:99:25:a4:c5:47:ec:78:36:54:1a:6e: 17:dd:c8:b4:1b:8b:f5:74:1f:5f:1c:2d:f5:a5:21: 69:c0:27:97:17:56:3b:b2:16:08:e9:31:3c:48:a4: b5:c4:8c:dd:bf:a5:c1:fe:d5:31:b4:57:f0:53:eb: 10:1c:c6:cd:97:a2:b6:3a:32:0b:c1:6b:20:da:2a: 1e:4e:49:9b:5b:1c:5b:59:b7:56:4b:d2:b1:ad:2c: c6:5c:22:14:77:18:0c:71:28:e8:a9:28:52:c5:67: f5:a2:c2:a4:0f:74:39:4c:b7:95:f5:ba:56:9b:02: 80:53:b0:3a:43:78:20:c9:ff:0c:13:e3:08:c0:52: 72:22:f9:35:00:11:0a:e4:2e:c9:09:e4:a3:f1:5c: b2:e0:7e:5e:df:04:91:a1:6d:97:6e:20:e5:22:a4: a9:28:01:5c:8f:d6:b3:a1:58:5c:8a:9b:bd:b0:8d: 94:01:6d:fa:75:81:de:45:63:42:42:bf:44:ff:7f: 8c:71:3e:40:c1:88:24:1b:0a:39:52:18:fb:8e:42: 15:cb:54:f0:98:a8:3c:1d:81:99:ec:2f:c2:ad:3c: 8e:e1:21:fc:bb:f6:32:52:7d:03:a2:a9:9e:a1:b5: b2:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:50:BD:26:B9:EB:6A:1B:B7:01:E2:9E:3B:00:80:07:69:5C:9D:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/5b89f385-412c-3ed9-a4bb-edcc50d12a28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl X509v3 Authority Key Identifier: keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer sbgp-ipAddrBlock: critical IPv4: 23.229.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:f1:e9:ea:88:ae:cd:19:d8:e2:cc:f4:e5:08:f2:32:3c:3f: 1c:37:df:b0:78:05:93:78:31:1b:99:ab:9a:d9:f9:7f:b7:e5: 92:db:34:10:cf:7e:31:91:d6:16:1e:a0:92:3f:21:b7:fa:cc: 39:15:ea:63:ad:86:63:32:8b:ec:a9:c0:9c:04:50:67:3a:65: 99:5a:57:d0:0b:7e:3f:c6:5e:7e:d8:76:4e:09:3d:2d:eb:9e: 8b:84:2b:e0:8d:df:05:4c:0f:fe:52:d9:0d:11:62:52:c1:79: 7b:59:4d:c8:ef:7f:30:b9:13:d7:24:61:28:a4:df:ef:55:24: 11:4b:3a:c1:eb:ba:62:91:66:97:95:fc:7a:27:e3:53:32:75: f5:b9:47:34:32:95:38:9f:e7:51:59:d6:53:a5:2a:30:a2:28: 54:40:84:a3:9a:76:5f:56:c0:4b:02:bc:d9:83:95:69:77:86: ad:81:46:f3:b7:69:51:35:19:c5:6a:7b:58:e0:d3:73:2b:3b: 21:2c:67:1c:62:64:51:c2:20:c7:4d:95:d3:06:30:bc:55:6f: e9:d3:a0:4e:7d:f8:61:61:6f:64:28:d8:2a:d6:b4:b3:10:2d: 6d:f0:e4:38:5f:0b:2c:2f:dd:e5:16:0f:19:40:a2:3b:a2:4a: 48:04:5b:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6QulYq8p9xx7AVeIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVlZGYwMjEtMDI5OC00YTgxLTk3ZDUtMWM4NWEyZWI0 NWY1MB4XDTI2MDcyMDIxMDAxMVoXDTI2MTAxODIxMDAxMVowLzEtMCsGA1UEAxMk MjJmMTVlYTMtZjc3Yy00N2NiLWI2NjItNGRkMTBlODE5MTY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIOkGzTLVM89m9L5EvtSR3pwmSWkxUfseDZU Gm4X3ci0G4v1dB9fHC31pSFpwCeXF1Y7shYI6TE8SKS1xIzdv6XB/tUxtFfwU+sQ HMbNl6K2OjILwWsg2ioeTkmbWxxbWbdWS9KxrSzGXCIUdxgMcSjoqShSxWf1osKk D3Q5TLeV9bpWmwKAU7A6Q3ggyf8ME+MIwFJyIvk1ABEK5C7JCeSj8Vyy4H5e3wSR oW2XbiDlIqSpKAFcj9azoVhcipu9sI2UAW36dYHeRWNCQr9E/3+McT5AwYgkGwo5 Uhj7jkIVy1TwmKg8HYGZ7C/CrTyO4SH8u/YyUn0DoqmeobWyUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB5QvSa562obtwHinjsAgAdpXJ2BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVk ZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1YTJlYjQ1ZjUvNWI4OWYzODUtNDEyYy0z ZWQ5LWE0YmItZWRjYzUwZDEyYTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjVlZGYwMjEtMDI5OC00YTgxLTk3 ZDUtMWM4NWEyZWI0NWY1L2I1ZWRmMDIxLTAyOTgtNGE4MS05N2Q1LTFjODVhMmVi NDVmNS5jcmwwHwYDVR0jBBgwFoAUhAkMQqDZn+raqP3DbTOl+IviID0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVkZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1 YTJlYjQ1ZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+VCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABzx6eqIrs0Z2OLM9OUI8jI8Pxw337B4BZN4MRuZq5rZ+X+35ZLbNBDP fjGR1hYeoJI/Ibf6zDkV6mOthmMyi+ypwJwEUGc6ZZlaV9ALfj/GXn7Ydk4JPS3r nouEK+CN3wVMD/5S2Q0RYlLBeXtZTcjvfzC5E9ckYSik3+9VJBFLOsHrumKRZpeV /Hon41MydfW5RzQylTif51FZ1lOlKjCiKFRAhKOadl9WwEsCvNmDlWl3hq2BRvO3 aVE1GcVqe1jg03MrOyEsZxxiZFHCIMdNldMGMLxVb+nToE59+GFhb2Qo2CrWtLMQ LW3w5DhfCywv3eUWDxlAojuiSkgEWxc= -----END CERTIFICATE-----Generated at Fri Jul 24 15:09:59 2026 by rpki-client