$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/68504fc1-924b-3826-9b04-0fd258ce8fca.roa File: 68504fc1-924b-3826-9b04-0fd258ce8fca.roa (raw, json) Hash identifier: 8n24ubSnA359j1pl7I+AxISge+Z6fqDbw3IlPD5a4RI= Subject key identifier: A7:D8:37:FE:5B:43:0B:62:5D:9E:06:CD:46:43:AD:63:C1:5F:70:1F Certificate issuer: /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Certificate serial: 010D0C9F4328584F0D6CF781F4B5863186A82EE0 Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/68504fc1-924b-3826-9b04-0fd258ce8fca.roa Signing time: Thu 03 Sep 2026 13:00:12 +0000 ROA not before: Thu 03 Sep 2026 13:00:12 +0000 ROA not after: Wed 02 Dec 2026 14:00:12 +0000 asID: 400072 IP address blocks: 23.236.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:6c:f7:81:f4:b5:86:31:86:a8:2e:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Validity Not Before: Sep 3 13:00:12 2026 GMT Not After : Dec 2 14:00:12 2026 GMT Subject: CN=f43fba8f-c165-48b0-9b5e-5b65d69a0197 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:47:ad:1b:9e:04:71:fd:2a:ae:85:01:37:97: e7:68:b2:a9:e3:51:db:01:48:e7:20:f3:f6:2b:2d: f4:cd:02:c2:c1:d9:ed:60:6a:6f:ce:dd:89:98:a9: 8d:51:ae:6e:34:67:86:88:75:b0:c8:e3:55:dc:3d: 93:7c:36:44:85:9c:ac:9c:4e:5f:ed:4b:63:7b:18: 2c:80:43:6a:c0:cc:76:41:e2:3f:8a:d0:59:92:3a: a5:0d:98:5a:7e:10:b0:44:86:5e:df:22:ee:aa:35: 9e:cc:c9:2d:00:a0:ce:28:36:0e:96:56:41:da:13: ac:f7:d3:6a:32:b7:53:f4:8c:74:eb:7f:83:80:a8: 5a:0b:99:5c:f9:16:b5:55:6b:a7:ff:48:28:0b:bd: 3f:21:c1:cc:53:fd:5e:4c:94:c0:a4:ee:6f:37:8b: c0:38:cd:92:a3:14:0e:f2:e8:8b:71:c7:c8:a9:83: 36:68:68:4e:c1:f4:d0:70:85:44:98:e7:3a:85:be: b5:56:0d:cf:c0:58:c8:67:ca:15:43:62:0d:70:43: c3:30:e1:35:3f:c7:49:0c:20:47:0f:cd:09:22:bc: 0d:ba:64:ee:49:bc:59:ee:4a:04:45:9d:fd:73:dc: 2e:f4:ee:5b:5c:ca:7b:74:92:c2:96:23:a1:94:b5: 90:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:D8:37:FE:5B:43:0B:62:5D:9E:06:CD:46:43:AD:63:C1:5F:70:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/68504fc1-924b-3826-9b04-0fd258ce8fca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl X509v3 Authority Key Identifier: keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer sbgp-ipAddrBlock: critical IPv4: 23.236.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:59:1b:d7:fd:4c:15:11:7a:9a:a1:45:39:cd:38:33:a3:74: fe:3a:d8:ec:84:1f:1b:63:cf:3a:c8:ee:de:e8:80:6b:97:a5: df:cb:75:00:22:28:40:e8:4c:a4:c3:3c:cc:66:20:7f:a5:29: 0d:38:5e:f0:12:b2:9b:4a:90:7c:3f:67:89:b7:b1:48:f1:a7: b2:c9:8e:14:86:04:3d:65:52:6d:47:49:d6:06:6f:0e:bc:6f: f6:35:1f:02:0a:aa:07:00:27:ab:75:be:7b:3d:65:d4:69:0f: 0a:50:58:ab:14:e9:e8:9e:b8:fd:85:d3:b5:13:38:76:cf:0d: 52:e9:b4:e6:b8:0c:87:33:3c:7e:10:25:ce:41:17:3d:06:84: 53:7a:73:91:4d:17:62:28:16:06:2a:09:54:c2:46:6d:66:ff: 0a:cc:ff:eb:33:99:a6:76:a2:aa:31:5c:81:20:52:8b:df:ee: 14:02:53:ed:8b:9c:c8:a0:02:e3:c1:5d:b6:ed:84:40:d1:49: f3:b8:23:1e:be:4a:65:82:dd:71:db:2f:b1:a6:15:2a:cf:27: 8f:ea:3b:7c:ae:6b:92:0b:37:31:c6:9f:5c:36:8a:4f:f2:e1: a9:92:ec:fe:01:85:a8:1d:ff:bc:d6:ca:f3:df:6d:c9:f7:d2: b3:e0:07:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8NbPeB9LWGMYaoLuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVlZGYwMjEtMDI5OC00YTgxLTk3ZDUtMWM4NWEyZWI0 NWY1MB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk ZjQzZmJhOGYtYzE2NS00OGIwLTliNWUtNWI2NWQ2OWEwMTk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0etG54Ecf0qroUBN5fnaLKp41HbAUjnIPP2 Ky30zQLCwdntYGpvzt2JmKmNUa5uNGeGiHWwyONV3D2TfDZEhZysnE5f7Utjexgs gENqwMx2QeI/itBZkjqlDZhafhCwRIZe3yLuqjWezMktAKDOKDYOllZB2hOs99Nq MrdT9Ix063+DgKhaC5lc+Ra1VWun/0goC70/IcHMU/1eTJTApO5vN4vAOM2SoxQO 8uiLccfIqYM2aGhOwfTQcIVEmOc6hb61Vg3PwFjIZ8oVQ2INcEPDMOE1P8dJDCBH D80JIrwNumTuSbxZ7koERZ39c9wu9O5bXMp7dJLCliOhlLWQYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKfYN/5bQwtiXZ4GzUZDrWPBX3AfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVk ZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1YTJlYjQ1ZjUvNjg1MDRmYzEtOTI0Yi0z ODI2LTliMDQtMGZkMjU4Y2U4ZmNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjVlZGYwMjEtMDI5OC00YTgxLTk3 ZDUtMWM4NWEyZWI0NWY1L2I1ZWRmMDIxLTAyOTgtNGE4MS05N2Q1LTFjODVhMmVi NDVmNS5jcmwwHwYDVR0jBBgwFoAUhAkMQqDZn+raqP3DbTOl+IviID0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVkZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1 YTJlYjQ1ZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+z+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALhZG9f9TBURepqhRTnNODOjdP462OyEHxtjzzrI7t7ogGuXpd/LdQAi KEDoTKTDPMxmIH+lKQ04XvASsptKkHw/Z4m3sUjxp7LJjhSGBD1lUm1HSdYGbw68 b/Y1HwIKqgcAJ6t1vns9ZdRpDwpQWKsU6eieuP2F07UTOHbPDVLptOa4DIczPH4Q Jc5BFz0GhFN6c5FNF2IoFgYqCVTCRm1m/wrM/+szmaZ2oqoxXIEgUovf7hQCU+2L nMigAuPBXbbthEDRSfO4Ix6+SmWC3XHbL7GmFSrPJ4/qO3yua5ILNzHGn1w2ik/y 4amS7P4Bhagd/7zWyvPfbcn30rPgB80= -----END CERTIFICATE-----Generated at Sun Sep 27 12:45:11 2026 by rpki-client