$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7f2f39b0-dcdd-4151-ab75-a882715cfa1c/cb2509d2-81b1-3735-90e7-da08c2517b1e.roa File: cb2509d2-81b1-3735-90e7-da08c2517b1e.roa (raw, json) Hash identifier: C4fp5BexEmv0JOlnXaCfx/Nj9P09ZUIVGlgEkogFJZA= Subject key identifier: 84:25:44:C7:96:13:09:08:F9:DD:DB:60:16:F4:D9:10:03:22:4B:75 Certificate issuer: /CN=7f2f39b0-dcdd-4151-ab75-a882715cfa1c Certificate serial: 010D0C9F4328584F20F7D75358E76363D66455C0 Authority key identifier: F7:31:4B:65:C0:9B:55:D7:D4:8C:AD:E8:55:CD:A0:2F:B6:D1:F4:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7f2f39b0-dcdd-4151-ab75-a882715cfa1c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7f2f39b0-dcdd-4151-ab75-a882715cfa1c/cb2509d2-81b1-3735-90e7-da08c2517b1e.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 214483 IP address blocks: 23.150.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7f2f39b0-dcdd-4151-ab75-a882715cfa1c/7f2f39b0-dcdd-4151-ab75-a882715cfa1c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7f2f39b0-dcdd-4151-ab75-a882715cfa1c/7f2f39b0-dcdd-4151-ab75-a882715cfa1c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7f2f39b0-dcdd-4151-ab75-a882715cfa1c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:d7:53:58:e7:63:63:d6:64:55:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f2f39b0-dcdd-4151-ab75-a882715cfa1c Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=137e1b7a-6361-456d-81da-72a569bbeb15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:85:9a:c0:57:7d:f6:e1:00:16:e6:67:d7:00: 35:ec:ca:42:0b:dd:5c:b1:31:9f:16:d0:33:69:23: a6:33:3a:0f:75:08:f9:81:dd:d5:a9:88:ac:d9:03: 12:53:77:2e:77:05:61:6f:64:7f:7a:de:6f:70:02: 82:7a:82:c6:e9:24:a1:d9:13:c9:d9:f5:d2:27:6d: ac:d4:cd:37:61:85:e9:6b:87:4e:8b:ad:a1:64:36: 68:ea:fd:98:3e:46:3e:18:51:dd:fe:a8:5e:9d:39: 55:35:ef:bd:82:c4:8e:c1:bb:47:c8:79:fb:c3:32: 0e:c7:89:e6:5a:cc:1c:a6:41:0f:04:ce:c3:62:df: d6:0a:7e:61:2e:a4:da:db:3e:e1:49:2c:28:99:93: 3b:c8:64:26:a3:71:59:9b:79:44:f1:14:c9:4f:d8: 11:6f:35:8f:83:e9:39:8c:d8:70:be:31:d3:ec:04: 5e:ff:64:57:f5:b6:89:da:c1:ce:8b:f6:1f:63:69: 81:ee:26:8b:81:cb:4a:f9:a1:1c:d1:c5:ea:ea:8e: 84:58:88:9d:e4:fa:d5:a5:f7:59:b7:16:c5:61:fc: 21:ce:d4:1e:d9:f5:03:6e:09:db:0b:f2:5b:3e:9c: bb:bb:39:70:1f:7c:50:6d:b3:cf:7d:2a:d0:91:07: 5e:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:25:44:C7:96:13:09:08:F9:DD:DB:60:16:F4:D9:10:03:22:4B:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7f2f39b0-dcdd-4151-ab75-a882715cfa1c/cb2509d2-81b1-3735-90e7-da08c2517b1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7f2f39b0-dcdd-4151-ab75-a882715cfa1c/7f2f39b0-dcdd-4151-ab75-a882715cfa1c.crl X509v3 Authority Key Identifier: keyid:F7:31:4B:65:C0:9B:55:D7:D4:8C:AD:E8:55:CD:A0:2F:B6:D1:F4:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7f2f39b0-dcdd-4151-ab75-a882715cfa1c.cer sbgp-ipAddrBlock: critical IPv4: 23.150.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:6c:79:af:1c:63:82:24:89:06:dc:ec:9d:a8:dc:5b:83:68: fb:a1:84:4d:9d:5f:19:6a:92:1d:8c:03:26:31:42:3b:9b:8e: 94:a2:3b:b4:92:6c:bb:00:7d:16:48:f3:11:e8:79:a9:59:c9: 9b:d0:62:ad:da:6d:bd:5b:01:2d:7d:e3:7e:52:b8:58:77:c7: 5b:15:54:52:8a:57:81:ce:a4:d4:12:23:c2:1b:97:99:95:c8: b2:6e:5d:d1:20:04:d1:0d:77:4f:f1:a4:0f:01:68:50:6b:2f: d5:de:db:87:bd:4c:ec:52:eb:dc:69:24:b5:14:e7:e7:7e:1b: c1:37:84:c9:ad:ed:eb:0b:79:2e:f4:89:ec:19:73:67:ad:b5: d0:d4:ca:ca:29:02:1e:47:be:c0:ab:f8:ca:c7:da:89:15:cb: 79:d9:3c:75:6a:d9:06:9e:c1:2f:0b:d9:4d:c6:94:8c:e0:0f: 0c:71:7b:4e:3a:2c:c4:98:c0:bc:a8:87:20:50:af:1b:0d:68: b4:c9:1d:86:0e:df:d5:7b:7c:5c:f1:e3:0a:d2:9e:aa:3f:d7: 5d:58:0d:af:49:8d:16:27:ff:80:1b:c5:f8:bd:5f:a7:b0:c5: 4f:35:72:d5:0a:f7:3b:0d:8c:80:af:71:38:19:c1:01:a1:27: 59:b8:20:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g99dTWOdjY9ZkVcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2YyZjM5YjAtZGNkZC00MTUxLWFiNzUtYTg4MjcxNWNm YTFjMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk MTM3ZTFiN2EtNjM2MS00NTZkLTgxZGEtNzJhNTY5YmJlYjE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYWawFd99uEAFuZn1wA17MpCC91csTGfFtAz aSOmMzoPdQj5gd3VqYis2QMSU3cudwVhb2R/et5vcAKCeoLG6SSh2RPJ2fXSJ22s 1M03YYXpa4dOi62hZDZo6v2YPkY+GFHd/qhenTlVNe+9gsSOwbtHyHn7wzIOx4nm WswcpkEPBM7DYt/WCn5hLqTa2z7hSSwomZM7yGQmo3FZm3lE8RTJT9gRbzWPg+k5 jNhwvjHT7ARe/2RX9baJ2sHOi/YfY2mB7iaLgctK+aEc0cXq6o6EWIid5PrVpfdZ txbFYfwhztQe2fUDbgnbC/JbPpy7uzlwH3xQbbPPfSrQkQde2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIQlRMeWEwkI+d3bYBb02RADIkt1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi83ZjJm MzliMC1kY2RkLTQxNTEtYWI3NS1hODgyNzE1Y2ZhMWMvY2IyNTA5ZDItODFiMS0z NzM1LTkwZTctZGEwOGMyNTE3YjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvN2YyZjM5YjAtZGNkZC00MTUxLWFi NzUtYTg4MjcxNWNmYTFjLzdmMmYzOWIwLWRjZGQtNDE1MS1hYjc1LWE4ODI3MTVj ZmExYy5jcmwwHwYDVR0jBBgwFoAU9zFLZcCbVdfUjK3oVc2gL7bR9DcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi83ZjJmMzliMC1kY2RkLTQxNTEtYWI3NS1hODgy NzE1Y2ZhMWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5ZsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKlsea8cY4IkiQbc7J2o3FuDaPuhhE2dXxlqkh2MAyYxQjubjpSiO7SS bLsAfRZI8xHoealZyZvQYq3abb1bAS19435SuFh3x1sVVFKKV4HOpNQSI8Ibl5mV yLJuXdEgBNENd0/xpA8BaFBrL9Xe24e9TOxS69xpJLUU5+d+G8E3hMmt7esLeS70 iewZc2ettdDUysopAh5HvsCr+MrH2okVy3nZPHVq2QaewS8L2U3GlIzgDwxxe046 LMSYwLyohyBQrxsNaLTJHYYO39V7fFzx4wrSnqo/111YDa9JjRYn/4Abxfi9X6ew xU81ctUK9zsNjICvcTgZwQGhJ1m4IEQ= -----END CERTIFICATE-----Generated at Fri Sep 11 03:31:17 2026 by rpki-client