$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7a4a24fd-e3f2-483c-a5bc-835d7a0beeda/cb9d7922-ef33-343f-bf62-8ae45ba74037.roa File: cb9d7922-ef33-343f-bf62-8ae45ba74037.roa (raw, json) Hash identifier: rQnfXGjxezsdGeIcq7pB33mSiDm2GYtkE4/FyOkL0bc= Subject key identifier: 71:5F:BC:B9:DC:43:D2:8C:2A:D9:CA:50:F9:3E:45:BC:8B:27:CA:4C Certificate issuer: /CN=7a4a24fd-e3f2-483c-a5bc-835d7a0beeda Certificate serial: 010D0C9F4328584E62A9FB10F364CEA511365200 Authority key identifier: 36:19:7F:0B:E4:B6:15:DD:F3:75:66:64:4E:70:1B:E5:C2:D6:E6:9C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7a4a24fd-e3f2-483c-a5bc-835d7a0beeda.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7a4a24fd-e3f2-483c-a5bc-835d7a0beeda/cb9d7922-ef33-343f-bf62-8ae45ba74037.roa Signing time: Sat 04 Jul 2026 09:00:11 +0000 ROA not before: Sat 04 Jul 2026 09:00:11 +0000 ROA not after: Fri 02 Oct 2026 09:00:11 +0000 asID: 153391 IP address blocks: 23.129.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7a4a24fd-e3f2-483c-a5bc-835d7a0beeda/7a4a24fd-e3f2-483c-a5bc-835d7a0beeda.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7a4a24fd-e3f2-483c-a5bc-835d7a0beeda/7a4a24fd-e3f2-483c-a5bc-835d7a0beeda.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7a4a24fd-e3f2-483c-a5bc-835d7a0beeda.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 16 Jul 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:62:a9:fb:10:f3:64:ce:a5:11:36:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a4a24fd-e3f2-483c-a5bc-835d7a0beeda Validity Not Before: Jul 4 09:00:11 2026 GMT Not After : Oct 2 09:00:11 2026 GMT Subject: CN=0f473246-6008-4f85-a4da-ba3917d0c960 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:74:44:8a:52:9d:97:03:8b:a4:2c:81:58:27: 42:96:dc:bd:76:f1:c9:8b:03:6e:3f:f4:84:0e:c1: f7:9f:47:5b:99:9c:bf:a3:8c:70:d4:25:1e:98:f8: e3:2d:c5:57:ae:25:a5:df:fd:94:1f:e1:a0:4e:ed: 12:00:80:7c:a0:8d:74:f0:19:46:21:29:b0:90:75: fc:5f:b8:e5:5f:c2:56:e0:d1:dd:6c:b0:87:1a:33: 95:12:15:5b:80:a5:fd:5a:f9:f2:4f:cd:da:bb:5a: 2b:86:84:08:3e:0f:d8:ec:87:47:84:d3:c1:c9:3c: 8a:9b:a5:ab:4f:d0:17:70:7e:71:82:3d:9f:9b:67: 0f:3c:f8:3c:7f:85:8b:a2:72:70:75:bb:c9:25:60: fa:63:21:8d:59:0a:96:bd:99:b0:4a:32:63:fd:83: fe:e9:3d:76:7e:69:89:0d:7a:fd:1b:53:c5:85:89: 71:32:fd:ae:09:e2:b9:f7:8e:76:40:96:61:2a:61: 27:c0:72:02:57:d0:88:fb:2c:17:1e:18:c7:da:55: cf:b1:f6:f7:b2:74:4e:6b:4a:9b:59:f3:55:54:24: a2:fe:4d:b0:90:47:a0:fd:c9:47:f0:68:68:cd:fe: 01:ff:08:f1:a8:c5:5e:c3:e9:ba:36:5f:16:f9:b3: a4:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:5F:BC:B9:DC:43:D2:8C:2A:D9:CA:50:F9:3E:45:BC:8B:27:CA:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7a4a24fd-e3f2-483c-a5bc-835d7a0beeda/cb9d7922-ef33-343f-bf62-8ae45ba74037.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7a4a24fd-e3f2-483c-a5bc-835d7a0beeda/7a4a24fd-e3f2-483c-a5bc-835d7a0beeda.crl X509v3 Authority Key Identifier: keyid:36:19:7F:0B:E4:B6:15:DD:F3:75:66:64:4E:70:1B:E5:C2:D6:E6:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7a4a24fd-e3f2-483c-a5bc-835d7a0beeda.cer sbgp-ipAddrBlock: critical IPv4: 23.129.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:e8:e8:06:8e:dd:e7:29:c6:c1:51:ad:c1:c0:78:f5:32:86: 57:c3:73:c8:66:eb:72:3b:8f:11:29:ab:e8:7d:5b:17:be:3b: 16:26:a3:ea:12:99:81:a3:4d:28:2c:31:2b:21:29:f2:1b:57: d0:0a:fd:dc:25:fd:ab:03:93:42:92:92:8a:6f:61:be:4c:89: 68:0d:e2:e0:a7:72:75:cb:33:40:84:41:fd:1b:79:57:36:bc: d3:31:fb:d4:b7:9e:37:8a:22:8b:e2:95:98:e5:a7:a8:58:37: 4b:7d:21:c6:bb:06:19:9c:46:4b:b8:74:02:8a:2b:72:07:6c: 92:32:a6:d6:2c:b4:2b:ec:4e:49:12:63:fb:49:e2:7d:03:84: 4f:34:0b:50:f1:30:d8:09:a5:41:ce:c5:6d:12:a3:ac:aa:90: e1:48:59:7a:1b:74:10:76:76:f6:22:33:ea:73:55:ab:4d:e4: 7f:ad:af:1c:bf:6b:a1:d7:04:58:cd:70:18:44:e8:09:c8:db: ec:b8:43:11:91:bf:af:ca:03:26:6d:8a:cf:e7:8e:03:46:98: aa:99:db:c6:c0:5f:2d:85:3b:b8:ae:f1:d2:a6:a4:55:05:2e: 06:6f:8d:b9:2a:97:92:93:61:9b:44:ff:dd:95:c6:12:48:62: ee:52:08:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5iqfsQ82TOpRE2UgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2E0YTI0ZmQtZTNmMi00ODNjLWE1YmMtODM1ZDdhMGJl ZWRhMB4XDTI2MDcwNDA5MDAxMVoXDTI2MTAwMjA5MDAxMVowLzEtMCsGA1UEAxMk MGY0NzMyNDYtNjAwOC00Zjg1LWE0ZGEtYmEzOTE3ZDBjOTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXREilKdlwOLpCyBWCdClty9dvHJiwNuP/SE DsH3n0dbmZy/o4xw1CUemPjjLcVXriWl3/2UH+GgTu0SAIB8oI108BlGISmwkHX8 X7jlX8JW4NHdbLCHGjOVEhVbgKX9WvnyT83au1orhoQIPg/Y7IdHhNPByTyKm6Wr T9AXcH5xgj2fm2cPPPg8f4WLonJwdbvJJWD6YyGNWQqWvZmwSjJj/YP+6T12fmmJ DXr9G1PFhYlxMv2uCeK59452QJZhKmEnwHICV9CI+ywXHhjH2lXPsfb3snROa0qb WfNVVCSi/k2wkEeg/clH8Ghozf4B/wjxqMVew+m6Nl8W+bOklQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHFfvLncQ9KMKtnKUPk+RbyLJ8pMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi83YTRh MjRmZC1lM2YyLTQ4M2MtYTViYy04MzVkN2EwYmVlZGEvY2I5ZDc5MjItZWYzMy0z NDNmLWJmNjItOGFlNDViYTc0MDM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvN2E0YTI0ZmQtZTNmMi00ODNjLWE1 YmMtODM1ZDdhMGJlZWRhLzdhNGEyNGZkLWUzZjItNDgzYy1hNWJjLTgzNWQ3YTBi ZWVkYS5jcmwwHwYDVR0jBBgwFoAUNhl/C+S2Fd3zdWZkTnAb5cLW5pwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi83YTRhMjRmZC1lM2YyLTQ4M2MtYTViYy04MzVk N2EwYmVlZGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4GUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADbo6AaO3ecpxsFRrcHAePUyhlfDc8hm63I7jxEpq+h9Wxe+OxYmo+oS mYGjTSgsMSshKfIbV9AK/dwl/asDk0KSkopvYb5MiWgN4uCncnXLM0CEQf0beVc2 vNMx+9S3njeKIovilZjlp6hYN0t9Ica7BhmcRku4dAKKK3IHbJIyptYstCvsTkkS Y/tJ4n0DhE80C1DxMNgJpUHOxW0So6yqkOFIWXobdBB2dvYiM+pzVatN5H+trxy/ a6HXBFjNcBhE6AnI2+y4QxGRv6/KAyZtis/njgNGmKqZ28bAXy2FO7iu8dKmpFUF LgZvjbkql5KTYZtE/92VxhJIYu5SCHA= -----END CERTIFICATE-----Generated at Wed Jul 15 03:00:35 2026 by rpki-client