$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/efc88068-84b2-310d-8b0e-08f7ea07062f.roa File: efc88068-84b2-310d-8b0e-08f7ea07062f.roa (raw, json) Hash identifier: kS7CyYjFT9/6V3IhHVSvQ8D8CP+SbdPVUeOnSLaYkNE= Subject key identifier: C7:C0:69:55:3F:7F:4E:0B:4D:F1:F3:40:A6:1A:0F:C9:1D:40:12:11 Certificate issuer: /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Certificate serial: 010D0C9F4328584AE8F9088AEEC385144E67B800 Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/efc88068-84b2-310d-8b0e-08f7ea07062f.roa Signing time: Tue 19 Aug 2025 16:30:04 +0000 ROA not before: Tue 19 Aug 2025 16:30:04 +0000 ROA not after: Mon 17 Nov 2025 17:30:04 +0000 asID: 7018 IP address blocks: 23.236.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:f9:08:8a:ee:c3:85:14:4e:67:b8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Validity Not Before: Aug 19 16:30:04 2025 GMT Not After : Nov 17 17:30:04 2025 GMT Subject: CN=95b37d3d-ccdd-483f-b531-d10558c45aef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:24:01:45:ad:4e:52:92:20:03:dd:a7:85:d6: c6:38:e4:da:a7:5f:96:a7:8b:d3:11:2f:e4:63:ac: 59:35:0a:bc:cb:e8:b9:36:e2:b4:37:e7:6c:cd:bb: 50:0a:1d:ca:00:07:dd:ba:7f:25:70:28:43:35:83: c8:c0:e7:d2:86:6f:7b:18:f5:b7:4b:5e:7a:07:03: f9:3e:12:5c:03:9d:02:b1:9e:4e:51:b9:ee:e9:ff: 2e:3d:9c:c7:6f:74:f5:64:0a:f5:49:c1:17:cc:69: 6e:d8:72:ce:1e:f8:81:58:8e:94:82:d5:86:ea:cf: e3:51:24:37:4d:a3:3c:15:09:fa:16:bd:fd:6b:82: 8a:16:9b:e6:2e:29:ce:07:a0:1a:52:c3:21:49:20: 6d:2d:68:80:ad:76:02:05:4a:10:74:8d:50:92:37: 6e:9d:ee:cb:63:e9:77:96:41:e5:2c:7a:19:e2:dc: aa:7a:bc:99:25:0d:4c:55:91:2d:ed:da:5e:80:61: c2:95:fc:f3:52:21:92:1f:e9:8a:9d:8f:b4:26:05: 6d:39:23:14:a0:5f:ae:2d:c7:67:c3:8c:7b:12:01: fa:b6:28:a9:3b:95:1c:09:d1:4c:d6:48:eb:f1:37: 6a:0a:d8:b3:4a:0e:35:68:29:f1:57:5d:28:1c:61: 3c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:C0:69:55:3F:7F:4E:0B:4D:F1:F3:40:A6:1A:0F:C9:1D:40:12:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/efc88068-84b2-310d-8b0e-08f7ea07062f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl X509v3 Authority Key Identifier: keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer sbgp-ipAddrBlock: critical IPv4: 23.236.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:f7:a7:f7:34:03:c8:c2:d0:22:80:dd:8e:62:0b:e4:31:09: 1a:d1:83:39:a9:a9:7b:17:33:f7:06:62:1a:9e:6a:81:e2:64: 36:56:29:a4:61:1a:14:1e:8f:7f:b2:02:ae:b2:e2:5b:4e:1c: b9:23:82:0d:ab:85:66:bc:be:17:b4:f0:3e:d4:60:a2:a7:fb: 09:16:1f:a0:d5:1a:70:82:a8:ac:27:17:0f:40:6f:53:5e:6e: 97:1c:4a:7b:7f:9f:f9:5e:f8:8d:a0:2d:dd:63:79:cc:cd:ec: d8:45:c9:59:24:97:a4:17:c8:60:94:92:63:d5:53:4d:69:aa: cf:b9:32:bb:ed:c6:a3:10:57:fd:8d:96:6b:96:a5:3f:8d:7f: 06:d4:a6:c8:92:5c:07:00:5c:ec:29:a1:9e:c1:96:01:76:aa: 87:c4:61:bc:4b:43:d6:25:ef:5e:b1:31:12:0c:55:93:68:2e: c4:f4:a1:d8:f7:3a:bb:48:6d:bb:6e:09:93:ce:bb:ee:ef:f6: e8:a4:cd:b8:d8:86:bb:04:2b:61:3a:8b:51:94:a0:fc:75:bb: 96:91:44:45:24:39:ef:55:1e:c7:b1:eb:31:9c:0e:5f:57:46: ee:da:4c:94:81:7b:39:33:31:d3:c4:c1:19:96:9f:42:fc:58: 53:27:4f:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEro+QiK7sOFFE5nuAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVlZGYwMjEtMDI5OC00YTgxLTk3ZDUtMWM4NWEyZWI0 NWY1MB4XDTI1MDgxOTE2MzAwNFoXDTI1MTExNzE3MzAwNFowLzEtMCsGA1UEAxMk OTViMzdkM2QtY2NkZC00ODNmLWI1MzEtZDEwNTU4YzQ1YWVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCQBRa1OUpIgA92nhdbGOOTap1+Wp4vTES/k Y6xZNQq8y+i5NuK0N+dszbtQCh3KAAfdun8lcChDNYPIwOfShm97GPW3S156BwP5 PhJcA50CsZ5OUbnu6f8uPZzHb3T1ZAr1ScEXzGlu2HLOHviBWI6UgtWG6s/jUSQ3 TaM8FQn6Fr39a4KKFpvmLinOB6AaUsMhSSBtLWiArXYCBUoQdI1Qkjdune7LY+l3 lkHlLHoZ4tyqeryZJQ1MVZEt7dpegGHClfzzUiGSH+mKnY+0JgVtOSMUoF+uLcdn w4x7EgH6tiipO5UcCdFM1kjr8TdqCtizSg41aCnxV10oHGE87wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMfAaVU/f04LTfHzQKYaD8kdQBIRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVk ZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1YTJlYjQ1ZjUvZWZjODgwNjgtODRiMi0z MTBkLThiMGUtMDhmN2VhMDcwNjJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjVlZGYwMjEtMDI5OC00YTgxLTk3 ZDUtMWM4NWEyZWI0NWY1L2I1ZWRmMDIxLTAyOTgtNGE4MS05N2Q1LTFjODVhMmVi NDVmNS5jcmwwHwYDVR0jBBgwFoAUhAkMQqDZn+raqP3DbTOl+IviID0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVkZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1 YTJlYjQ1ZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+z+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHn3p/c0A8jC0CKA3Y5iC+QxCRrRgzmpqXsXM/cGYhqeaoHiZDZWKaRh GhQej3+yAq6y4ltOHLkjgg2rhWa8vhe08D7UYKKn+wkWH6DVGnCCqKwnFw9Ab1Ne bpccSnt/n/le+I2gLd1jeczN7NhFyVkkl6QXyGCUkmPVU01pqs+5MrvtxqMQV/2N lmuWpT+NfwbUpsiSXAcAXOwpoZ7BlgF2qofEYbxLQ9Yl716xMRIMVZNoLsT0odj3 OrtIbbtuCZPOu+7v9uikzbjYhrsEK2E6i1GUoPx1u5aRREUkOe9VHsex6zGcDl9X Ru7aTJSBezkzMdPEwRmWn0L8WFMnT6U= -----END CERTIFICATE-----Generated at Sat Aug 23 12:13:12 2025 by rpki-client