$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8830c9a2-abcf-4537-b6e9-c0937a5bb56e/bb4950a9-bd81-3a51-8643-92fc7dc93849.roa File: bb4950a9-bd81-3a51-8643-92fc7dc93849.roa (raw, json) Hash identifier: 5+BEsMPeaxUFMRFbQXV8FGXZFR26Uxuu4Kdb4XLCBB0= Subject key identifier: 85:F8:7C:67:9A:CA:3B:68:CE:A7:F4:97:CB:30:CC:D1:38:15:95:2B Certificate issuer: /CN=8830c9a2-abcf-4537-b6e9-c0937a5bb56e Certificate serial: 010D0C9F4328584E2F0458C17BD155522D3F2DA0 Authority key identifier: BE:3C:C8:C5:74:B7:69:08:5B:47:79:C9:2B:12:32:AF:0B:EF:D4:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8830c9a2-abcf-4537-b6e9-c0937a5bb56e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8830c9a2-abcf-4537-b6e9-c0937a5bb56e/bb4950a9-bd81-3a51-8643-92fc7dc93849.roa Signing time: Mon 15 Jun 2026 21:00:12 +0000 ROA not before: Mon 15 Jun 2026 21:00:12 +0000 ROA not after: Sun 13 Sep 2026 21:00:12 +0000 asID: 152918 IP address blocks: 23.147.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8830c9a2-abcf-4537-b6e9-c0937a5bb56e/8830c9a2-abcf-4537-b6e9-c0937a5bb56e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8830c9a2-abcf-4537-b6e9-c0937a5bb56e/8830c9a2-abcf-4537-b6e9-c0937a5bb56e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8830c9a2-abcf-4537-b6e9-c0937a5bb56e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:2f:04:58:c1:7b:d1:55:52:2d:3f:2d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8830c9a2-abcf-4537-b6e9-c0937a5bb56e Validity Not Before: Jun 15 21:00:12 2026 GMT Not After : Sep 13 21:00:12 2026 GMT Subject: CN=2e5c8758-fcf7-4f41-8e11-818c868de359 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:06:c4:d8:c7:44:eb:60:9c:dd:de:e7:72:53: 14:ce:c5:fc:d6:25:b8:90:1b:a5:ee:aa:9c:a7:3e: 1b:e7:09:84:5b:57:d7:09:97:b1:5c:d5:19:b0:74: af:3b:43:df:a4:55:20:c6:1e:e8:65:39:3a:62:95: e3:e6:e0:3c:db:83:8b:ca:93:c3:81:50:9a:3a:ca: 80:8d:fd:c3:c4:ec:ca:f7:d2:2e:25:0d:9e:75:93: dc:7e:39:ed:ee:b1:07:38:f8:98:e3:d0:69:41:0c: 69:a6:07:75:bd:48:08:30:44:4b:60:3b:74:0a:75: 3d:98:5d:8a:72:d7:de:a5:59:7c:43:bd:a5:5c:58: b7:54:82:11:be:da:40:a1:ab:e5:86:fc:35:11:4c: 0b:45:1b:c1:f4:4d:77:52:bc:82:81:90:02:fd:1a: cb:dd:16:d7:f9:8b:4c:4b:93:47:d0:e5:a6:0b:38: 20:11:48:37:f1:af:70:a9:33:0d:f9:99:a9:67:f0: 21:3d:cc:1c:ad:9e:7a:e9:3f:80:b6:53:14:95:cd: 08:03:31:2c:15:be:58:f2:03:bf:db:69:ca:89:6c: 78:77:57:06:92:49:bf:8e:c7:79:16:df:a2:af:1b: c9:f9:4c:13:7e:49:4a:fe:f1:97:5d:a6:4d:18:fa: 04:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:F8:7C:67:9A:CA:3B:68:CE:A7:F4:97:CB:30:CC:D1:38:15:95:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8830c9a2-abcf-4537-b6e9-c0937a5bb56e/bb4950a9-bd81-3a51-8643-92fc7dc93849.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8830c9a2-abcf-4537-b6e9-c0937a5bb56e/8830c9a2-abcf-4537-b6e9-c0937a5bb56e.crl X509v3 Authority Key Identifier: keyid:BE:3C:C8:C5:74:B7:69:08:5B:47:79:C9:2B:12:32:AF:0B:EF:D4:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8830c9a2-abcf-4537-b6e9-c0937a5bb56e.cer sbgp-ipAddrBlock: critical IPv4: 23.147.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:08:bc:36:4f:1c:40:58:ae:3b:45:8e:49:ae:cf:7c:82:1b: 36:e1:fc:6f:fc:ef:15:8c:65:a0:f3:c1:f7:1e:7e:8a:81:54: bb:77:6f:45:14:d8:81:f3:92:22:13:2f:8c:d2:fb:a1:42:fc: ee:f4:ca:ca:0a:d0:12:6c:92:dd:7f:e8:83:1e:f5:87:35:68: 14:fa:73:9a:66:d4:fa:af:19:3b:69:38:ab:be:5d:e2:1f:b5: ee:0a:3e:38:66:92:66:a2:90:12:e3:2a:24:2d:ed:40:b3:8c: 05:28:53:52:b7:50:a6:0c:8d:25:6d:bb:d8:77:cd:46:7a:67: 7a:fe:0d:ed:78:2d:61:86:92:af:39:14:44:50:b0:2f:76:7f: 27:7b:90:e7:af:f4:fd:18:a5:06:85:fa:96:62:35:07:41:43: cb:a7:33:c9:f5:b2:2a:3d:2b:4f:e1:48:4a:0a:65:18:24:c8: 79:05:14:a1:d4:7c:19:a2:08:bf:87:02:a3:48:eb:e6:97:8b: 89:9b:b0:dd:ec:d7:83:9d:3c:07:60:fc:76:7e:03:1c:ce:21: c9:65:f5:c9:7e:18:86:4a:98:9c:de:f0:03:23:2f:dd:c2:ae: 48:d8:0f:b3:02:dc:18:68:d6:92:35:00:75:bf:3d:64:cd:74: ee:24:4c:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4vBFjBe9FVUi0/LaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODgzMGM5YTItYWJjZi00NTM3LWI2ZTktYzA5MzdhNWJi NTZlMB4XDTI2MDYxNTIxMDAxMloXDTI2MDkxMzIxMDAxMlowLzEtMCsGA1UEAxMk MmU1Yzg3NTgtZmNmNy00ZjQxLThlMTEtODE4Yzg2OGRlMzU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQbE2MdE62Cc3d7nclMUzsX81iW4kBul7qqc pz4b5wmEW1fXCZexXNUZsHSvO0PfpFUgxh7oZTk6YpXj5uA824OLypPDgVCaOsqA jf3DxOzK99IuJQ2edZPcfjnt7rEHOPiY49BpQQxppgd1vUgIMERLYDt0CnU9mF2K ctfepVl8Q72lXFi3VIIRvtpAoavlhvw1EUwLRRvB9E13UryCgZAC/RrL3RbX+YtM S5NH0OWmCzggEUg38a9wqTMN+ZmpZ/AhPcwcrZ566T+AtlMUlc0IAzEsFb5Y8gO/ 22nKiWx4d1cGkkm/jsd5Ft+irxvJ+UwTfklK/vGXXaZNGPoEmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIX4fGeayjtozqf0l8swzNE4FZUrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84ODMw YzlhMi1hYmNmLTQ1MzctYjZlOS1jMDkzN2E1YmI1NmUvYmI0OTUwYTktYmQ4MS0z YTUxLTg2NDMtOTJmYzdkYzkzODQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvODgzMGM5YTItYWJjZi00NTM3LWI2 ZTktYzA5MzdhNWJiNTZlLzg4MzBjOWEyLWFiY2YtNDUzNy1iNmU5LWMwOTM3YTVi YjU2ZS5jcmwwHwYDVR0jBBgwFoAUvjzIxXS3aQhbR3nJKxIyrwvv1HswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi84ODMwYzlhMi1hYmNmLTQ1MzctYjZlOS1jMDkz N2E1YmI1NmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5PMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACEIvDZPHEBYrjtFjkmuz3yCGzbh/G/87xWMZaDzwfcefoqBVLt3b0UU 2IHzkiITL4zS+6FC/O70ysoK0BJskt1/6IMe9Yc1aBT6c5pm1PqvGTtpOKu+XeIf te4KPjhmkmaikBLjKiQt7UCzjAUoU1K3UKYMjSVtu9h3zUZ6Z3r+De14LWGGkq85 FERQsC92fyd7kOev9P0YpQaF+pZiNQdBQ8unM8n1sio9K0/hSEoKZRgkyHkFFKHU fBmiCL+HAqNI6+aXi4mbsN3s14OdPAdg/HZ+AxzOIcll9cl+GIZKmJze8AMjL93C rkjYD7MC3Bho1pI1AHW/PWTNdO4kTGs= -----END CERTIFICATE-----Generated at Tue Jul 21 15:15:12 2026 by rpki-client