$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/638448b8-bfd8-3705-b905-a907c87136c0.roa File: 638448b8-bfd8-3705-b905-a907c87136c0.roa (raw, json) Hash identifier: hMeJBYgVCdCwTbHrw7RdVdl60uOppnXehmSylYNAjWc= Subject key identifier: 64:86:01:F7:5E:51:35:3A:FB:03:73:A2:1D:63:EB:1D:63:95:30:08 Certificate issuer: /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Certificate serial: 010D0C9F4328584AE8FA225E169C44323CCF5E80 Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/638448b8-bfd8-3705-b905-a907c87136c0.roa Signing time: Tue 19 Aug 2025 16:32:17 +0000 ROA not before: Tue 19 Aug 2025 16:32:17 +0000 ROA not after: Mon 17 Nov 2025 17:32:17 +0000 asID: 7018 IP address blocks: 23.236.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:fa:22:5e:16:9c:44:32:3c:cf:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Validity Not Before: Aug 19 16:32:17 2025 GMT Not After : Nov 17 17:32:17 2025 GMT Subject: CN=54a81dae-b528-4e58-8d1c-00a284c7e68b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:42:62:43:5a:ae:b3:68:31:5b:99:98:d3:e1: fd:f1:dc:da:89:8d:35:b1:22:6e:c3:6b:93:24:f2: 10:94:84:bb:9a:8f:2a:cf:f6:fd:84:17:58:b5:4c: af:f7:56:c0:db:2e:16:f0:1f:93:ce:01:d3:1a:bf: 94:f4:93:ec:a2:dd:0f:45:94:db:b1:4e:e4:da:e9: 86:f1:d9:94:1a:48:47:98:09:f9:8b:71:02:e6:c3: e7:85:f0:cb:89:aa:88:4d:e4:88:8c:55:df:da:28: 65:2f:2f:ca:ed:a7:8a:f4:b1:69:3d:67:5c:e2:80: b0:d0:6e:97:91:06:d7:48:39:19:7d:4a:50:ca:62: 74:c3:1a:4a:5f:48:58:0c:6a:76:b3:06:6e:8c:43: 07:2d:40:cf:63:05:92:7b:69:53:0c:01:28:c6:1f: a6:f4:a0:cb:59:a1:a2:b5:44:35:81:45:9b:e8:ea: 9f:09:27:a6:46:f9:83:44:59:d9:9f:6d:a1:12:d5: 34:c4:87:10:2b:e9:f4:e1:70:29:3f:3e:d9:bc:66: 34:02:d3:2a:d7:7c:ed:ac:55:b3:12:10:c8:b9:36: 04:e8:81:e0:08:a1:f6:17:80:0e:07:6f:b9:0e:c1: b0:99:bc:08:2d:7c:31:29:ae:a8:8c:8b:d1:5c:a8: d6:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:86:01:F7:5E:51:35:3A:FB:03:73:A2:1D:63:EB:1D:63:95:30:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/638448b8-bfd8-3705-b905-a907c87136c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl X509v3 Authority Key Identifier: keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer sbgp-ipAddrBlock: critical IPv4: 23.236.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ca:98:ff:15:fb:43:39:b9:89:b2:1b:39:2d:90:93:0f:d1:28: e8:cc:bd:60:2f:a8:27:2d:a9:f8:83:53:c7:78:5a:5d:1e:28: 6c:b7:0f:44:58:1d:99:61:03:16:a2:5d:a3:d2:99:ab:b5:46: 91:42:52:46:84:34:16:26:a9:59:5e:ab:7f:17:c4:05:2a:b3: cb:c5:c4:ae:47:52:b4:c7:53:fe:d0:7c:d8:14:87:4c:16:76: 25:5a:67:c1:87:7e:15:d6:13:6e:c5:ee:79:a0:5b:6a:4b:5f: 62:ad:f7:41:f3:c1:36:f9:ea:b3:88:3d:46:73:43:25:46:25: 5d:b1:90:44:8f:e0:7a:6d:71:5d:1d:cb:0c:d7:09:c0:47:b2: f2:e0:4c:91:e7:1e:36:3c:5a:18:44:b0:db:b6:4b:12:27:d2: bc:52:a2:f8:b5:66:67:1f:1c:f2:5e:4e:54:aa:ab:8d:20:d9: be:80:2e:8f:6b:8b:3f:9a:37:b3:dd:60:b3:d5:a8:03:d0:0a: ad:c1:c0:46:0b:60:02:51:51:32:54:b9:41:e7:58:1c:cf:f1: e3:74:81:ca:bf:f5:a1:c6:9c:bc:be:cd:b9:31:5f:ad:fa:40: 95:b3:47:81:3c:bd:91:fd:2c:dc:c8:79:6d:00:0c:9e:8b:1e: 17:45:60:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEro+iJeFpxEMjzPXoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVlZGYwMjEtMDI5OC00YTgxLTk3ZDUtMWM4NWEyZWI0 NWY1MB4XDTI1MDgxOTE2MzIxN1oXDTI1MTExNzE3MzIxN1owLzEtMCsGA1UEAxMk NTRhODFkYWUtYjUyOC00ZTU4LThkMWMtMDBhMjg0YzdlNjhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgEJiQ1qus2gxW5mY0+H98dzaiY01sSJuw2uT JPIQlIS7mo8qz/b9hBdYtUyv91bA2y4W8B+TzgHTGr+U9JPsot0PRZTbsU7k2umG 8dmUGkhHmAn5i3EC5sPnhfDLiaqITeSIjFXf2ihlLy/K7aeK9LFpPWdc4oCw0G6X kQbXSDkZfUpQymJ0wxpKX0hYDGp2swZujEMHLUDPYwWSe2lTDAEoxh+m9KDLWaGi tUQ1gUWb6OqfCSemRvmDRFnZn22hEtU0xIcQK+n04XApPz7ZvGY0AtMq13ztrFWz EhDIuTYE6IHgCKH2F4AOB2+5DsGwmbwILXwxKa6ojIvRXKjWMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGSGAfdeUTU6+wNzoh1j6x1jlTAIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVk ZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1YTJlYjQ1ZjUvNjM4NDQ4YjgtYmZkOC0z NzA1LWI5MDUtYTkwN2M4NzEzNmMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjVlZGYwMjEtMDI5OC00YTgxLTk3 ZDUtMWM4NWEyZWI0NWY1L2I1ZWRmMDIxLTAyOTgtNGE4MS05N2Q1LTFjODVhMmVi NDVmNS5jcmwwHwYDVR0jBBgwFoAUhAkMQqDZn+raqP3DbTOl+IviID0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVkZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1 YTJlYjQ1ZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+z6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMqY/xX7Qzm5ibIbOS2Qkw/RKOjMvWAvqCctqfiDU8d4Wl0eKGy3D0RY HZlhAxaiXaPSmau1RpFCUkaENBYmqVleq38XxAUqs8vFxK5HUrTHU/7QfNgUh0wW diVaZ8GHfhXWE27F7nmgW2pLX2Kt90HzwTb56rOIPUZzQyVGJV2xkESP4HptcV0d ywzXCcBHsvLgTJHnHjY8WhhEsNu2SxIn0rxSovi1ZmcfHPJeTlSqq40g2b6ALo9r iz+aN7PdYLPVqAPQCq3BwEYLYAJRUTJUuUHnWBzP8eN0gcq/9aHGnLy+zbkxX636 QJWzR4E8vZH9LNzIeW0ADJ6LHhdFYN8= -----END CERTIFICATE-----Generated at Sat Aug 23 12:10:56 2025 by rpki-client