$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/89e59193-894d-3421-858e-72e2498d9aa1.roa File: 89e59193-894d-3421-858e-72e2498d9aa1.roa (raw, json) Hash identifier: D4Oj77cArfjhVMtc+x4DXuwAPqg+UvfQXqgZQf3reso= Subject key identifier: 00:31:F4:BC:73:EA:5B:EF:91:04:2F:0E:C2:4F:2F:36:07:99:1B:46 Certificate issuer: /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Certificate serial: 010D0C9F4328584E90BA44CD2D94862565B81F80 Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/89e59193-894d-3421-858e-72e2498d9aa1.roa Signing time: Mon 20 Jul 2026 21:00:11 +0000 ROA not before: Mon 20 Jul 2026 21:00:11 +0000 ROA not after: Sun 18 Oct 2026 21:00:11 +0000 asID: 55081 IP address blocks: 23.229.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:90:ba:44:cd:2d:94:86:25:65:b8:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Validity Not Before: Jul 20 21:00:11 2026 GMT Not After : Oct 18 21:00:11 2026 GMT Subject: CN=242f9e90-6552-42f0-8789-58f4486024e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:2f:eb:f1:ee:a4:b2:5f:f5:10:6c:c8:6d:a5: a5:87:5c:19:f9:18:d9:2b:e6:13:ea:b7:77:47:a8: d5:5b:54:b6:c0:25:c2:2b:10:00:f1:a1:17:a6:2e: 8c:2f:1c:15:66:d2:dd:1b:26:79:02:36:22:8b:21: 63:08:98:0b:34:12:6a:bd:b5:ba:f4:30:cd:26:23: 1f:8c:46:80:54:ec:31:49:8c:b5:60:62:58:d1:7a: ac:44:5e:a1:bf:63:e5:2f:b5:37:2f:db:cb:dd:a9: 09:20:62:8c:15:8e:40:10:ef:69:35:83:90:79:bb: fa:76:c1:0e:ee:06:c7:12:ee:66:b9:59:77:53:6a: 99:2b:7c:b3:45:21:f8:e5:7e:95:21:63:45:0a:07: f5:03:7d:83:4e:de:8f:d7:72:a9:22:c4:4d:a5:6e: 7b:ae:8f:71:ed:ec:2c:94:6e:ba:05:1d:64:b3:9e: 3a:f7:31:5e:11:63:86:9f:b3:58:41:e3:5e:de:47: da:d0:8a:06:9b:7e:c8:03:e3:23:ab:cd:33:4a:15: ec:f1:6b:b2:f6:ea:55:3e:a7:29:5e:a6:d4:f7:61: b1:81:1f:61:8c:db:10:8c:f4:f1:d5:00:ee:dd:75: 9c:b7:66:e7:57:fc:7b:72:96:a1:0c:5c:c2:77:44: ca:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:31:F4:BC:73:EA:5B:EF:91:04:2F:0E:C2:4F:2F:36:07:99:1B:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/89e59193-894d-3421-858e-72e2498d9aa1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl X509v3 Authority Key Identifier: keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer sbgp-ipAddrBlock: critical IPv4: 23.229.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:9f:87:51:8d:eb:96:99:4a:22:b8:09:40:93:a4:1a:d5:c8: f2:50:94:3d:c2:8e:4e:c8:58:0f:2d:6f:54:d3:d3:e7:c0:a9: ee:74:e9:47:cd:5c:a8:47:d9:3b:aa:f2:10:f8:77:c8:7c:45: 7e:f2:42:80:97:5f:22:c9:0c:cb:32:cd:c9:8f:94:c0:04:a6: d3:71:bc:20:c9:81:b6:bb:2d:9b:e3:a2:8a:e8:33:8a:a8:f9: 52:5c:9c:9e:67:7a:c5:65:07:6d:8a:01:a3:01:54:84:cb:cd: 9f:15:c2:5d:19:25:d7:7c:7d:4b:c8:4c:0f:dd:90:73:66:19: 4c:12:d5:91:27:6e:ba:48:c3:9e:05:d1:5c:18:01:73:83:ab: 1a:94:03:05:78:c7:d1:c1:e3:da:dd:34:d1:94:22:91:f8:9e: 70:68:87:f4:42:ea:b8:e7:21:8d:85:52:f4:79:8e:f5:bd:9f: 01:c2:09:f5:b3:a1:a9:1a:3a:99:53:59:08:17:71:c2:83:5a: 46:10:b7:96:c8:9b:1c:df:09:3f:bc:c8:d1:8b:fc:d4:7c:9c: d0:01:2f:5f:2a:91:13:89:97:a8:df:70:7f:23:51:13:31:b6: c7:e1:1a:e4:b4:6c:6d:a2:1b:20:72:57:97:6f:4a:85:2f:07: 63:0f:5e:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6QukTNLZSGJWW4H4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVlZGYwMjEtMDI5OC00YTgxLTk3ZDUtMWM4NWEyZWI0 NWY1MB4XDTI2MDcyMDIxMDAxMVoXDTI2MTAxODIxMDAxMVowLzEtMCsGA1UEAxMk MjQyZjllOTAtNjU1Mi00MmYwLTg3ODktNThmNDQ4NjAyNGU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoC/r8e6ksl/1EGzIbaWlh1wZ+RjZK+YT6rd3 R6jVW1S2wCXCKxAA8aEXpi6MLxwVZtLdGyZ5AjYiiyFjCJgLNBJqvbW69DDNJiMf jEaAVOwxSYy1YGJY0XqsRF6hv2PlL7U3L9vL3akJIGKMFY5AEO9pNYOQebv6dsEO 7gbHEu5muVl3U2qZK3yzRSH45X6VIWNFCgf1A32DTt6P13KpIsRNpW57ro9x7ews lG66BR1ks5469zFeEWOGn7NYQeNe3kfa0IoGm37IA+Mjq80zShXs8Wuy9upVPqcp XqbU92GxgR9hjNsQjPTx1QDu3XWct2bnV/x7cpahDFzCd0TKawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAAx9Lxz6lvvkQQvDsJPLzYHmRtGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVk ZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1YTJlYjQ1ZjUvODllNTkxOTMtODk0ZC0z NDIxLTg1OGUtNzJlMjQ5OGQ5YWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjVlZGYwMjEtMDI5OC00YTgxLTk3 ZDUtMWM4NWEyZWI0NWY1L2I1ZWRmMDIxLTAyOTgtNGE4MS05N2Q1LTFjODVhMmVi NDVmNS5jcmwwHwYDVR0jBBgwFoAUhAkMQqDZn+raqP3DbTOl+IviID0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVkZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1 YTJlYjQ1ZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+UHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAefh1GN65aZSiK4CUCTpBrVyPJQlD3Cjk7IWA8tb1TT0+fAqe506UfN XKhH2Tuq8hD4d8h8RX7yQoCXXyLJDMsyzcmPlMAEptNxvCDJgba7LZvjooroM4qo +VJcnJ5nesVlB22KAaMBVITLzZ8Vwl0ZJdd8fUvITA/dkHNmGUwS1ZEnbrpIw54F 0VwYAXODqxqUAwV4x9HB49rdNNGUIpH4nnBoh/RC6rjnIY2FUvR5jvW9nwHCCfWz oakaOplTWQgXccKDWkYQt5bImxzfCT+8yNGL/NR8nNABL18qkROJl6jfcH8jURMx tsfhGuS0bG2iGyByV5dvSoUvB2MPXrc= -----END CERTIFICATE-----Generated at Fri Jul 24 12:53:45 2026 by rpki-client