$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8830c9a2-abcf-4537-b6e9-c0937a5bb56e/bb4950a9-bd81-3a51-8643-92fc7dc93849.roa File: bb4950a9-bd81-3a51-8643-92fc7dc93849.roa (raw, json) Hash identifier: hiQP7R2aFtIXeCHfsN0RKB9ZaMDJqMvqkM9MDvIMrns= Subject key identifier: E8:7F:12:01:67:6E:B1:EE:F0:58:23:26:AB:5D:29:54:9E:EA:24:62 Certificate issuer: /CN=8830c9a2-abcf-4537-b6e9-c0937a5bb56e Certificate serial: 010D0C9F4328584ED167279E3188DB6810A258C0 Authority key identifier: BE:3C:C8:C5:74:B7:69:08:5B:47:79:C9:2B:12:32:AF:0B:EF:D4:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8830c9a2-abcf-4537-b6e9-c0937a5bb56e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8830c9a2-abcf-4537-b6e9-c0937a5bb56e/bb4950a9-bd81-3a51-8643-92fc7dc93849.roa Signing time: Thu 13 Aug 2026 01:00:11 +0000 ROA not before: Thu 13 Aug 2026 01:00:11 +0000 ROA not after: Wed 11 Nov 2026 02:00:11 +0000 asID: 152918 IP address blocks: 23.147.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8830c9a2-abcf-4537-b6e9-c0937a5bb56e/8830c9a2-abcf-4537-b6e9-c0937a5bb56e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8830c9a2-abcf-4537-b6e9-c0937a5bb56e/8830c9a2-abcf-4537-b6e9-c0937a5bb56e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8830c9a2-abcf-4537-b6e9-c0937a5bb56e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d1:67:27:9e:31:88:db:68:10:a2:58:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8830c9a2-abcf-4537-b6e9-c0937a5bb56e Validity Not Before: Aug 13 01:00:11 2026 GMT Not After : Nov 11 02:00:11 2026 GMT Subject: CN=a7e173e5-c6f3-4caa-95bc-68da82ef18d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:8f:3a:17:4b:44:1a:89:08:eb:c0:05:82:2f: 8d:f2:33:10:18:9f:60:66:24:1a:bb:e2:ad:17:f7: 79:07:04:6a:53:35:14:ae:77:cb:a1:32:39:b5:e3: f0:c0:fa:ad:e1:03:14:8e:93:bc:82:78:09:60:ec: 0c:7a:e7:f1:a4:7c:4d:1c:e7:4a:03:e5:32:4a:90: ee:fa:fc:62:68:89:96:52:cf:ad:4a:cd:85:73:53: 0d:8d:d4:40:81:45:7a:68:21:97:e0:ec:cc:e2:54: 17:14:7f:d8:55:03:f1:3c:f5:70:88:36:97:e6:28: 8e:9e:c5:6e:62:d4:c6:ed:1b:b2:97:5c:09:c6:10: c3:08:c7:f8:6e:49:dd:29:89:88:5a:26:f7:9b:e6: 8c:4b:2c:e2:82:45:b8:b2:cf:ac:cb:d8:97:b1:21: 5b:47:95:0f:15:b1:a7:89:fc:7f:ff:46:77:95:be: d7:ac:20:55:27:85:d9:cd:9d:4a:0a:58:c1:ae:f1: 60:30:b8:07:70:cd:f9:e5:ab:31:e6:b2:5b:d7:e5: 26:4a:b2:2a:3f:f2:65:e5:5a:7b:50:61:b4:39:d7: 76:d6:45:bc:c4:ea:c5:b1:71:81:15:32:ec:18:f6: 85:37:77:d4:70:de:74:87:15:e6:12:13:45:e0:a8: 51:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:7F:12:01:67:6E:B1:EE:F0:58:23:26:AB:5D:29:54:9E:EA:24:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8830c9a2-abcf-4537-b6e9-c0937a5bb56e/bb4950a9-bd81-3a51-8643-92fc7dc93849.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8830c9a2-abcf-4537-b6e9-c0937a5bb56e/8830c9a2-abcf-4537-b6e9-c0937a5bb56e.crl X509v3 Authority Key Identifier: keyid:BE:3C:C8:C5:74:B7:69:08:5B:47:79:C9:2B:12:32:AF:0B:EF:D4:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8830c9a2-abcf-4537-b6e9-c0937a5bb56e.cer sbgp-ipAddrBlock: critical IPv4: 23.147.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:ef:47:a8:8b:e9:2b:6d:ff:3e:f7:b1:31:f6:a7:84:6d:6c: 99:12:ed:37:6a:7f:23:0d:0e:36:da:1b:60:c0:91:d3:5b:2b: 55:9b:27:20:91:b6:fa:b9:47:52:b6:d0:0e:59:dc:cc:5b:8f: 7c:d8:89:d7:be:fc:42:2c:a2:48:8f:e7:92:b2:95:7a:01:4f: f1:30:09:60:d0:28:67:cd:f5:da:e9:d3:5b:19:be:4f:6d:93: 7f:50:eb:46:93:ab:76:86:59:78:a5:a6:e9:e8:10:8d:d7:55: 1b:a7:81:2c:57:3e:9f:8a:f7:16:be:87:6d:95:9c:58:e0:bd: 00:b8:db:6b:a1:d2:5d:fc:4b:db:93:4f:9b:0e:83:9c:59:16: c5:7b:da:a5:6c:44:5b:1c:5e:7d:be:1e:42:7d:29:c0:b5:b7: 3f:5a:73:9c:31:88:50:b0:76:4a:fc:25:f5:d4:dd:94:d3:d4: ee:aa:25:9e:53:b1:fd:98:c3:18:cb:b5:45:87:17:b8:dc:2d: 2c:0d:70:5a:8d:0a:53:dd:a2:b6:9a:85:64:b0:e9:57:e2:1d: 1b:78:52:66:be:d3:18:5a:65:2e:21:21:26:a9:2b:67:d1:2d: 1e:7c:cb:a5:23:8f:5d:5c:46:86:fc:c2:2e:06:e5:a4:8d:97: 32:bd:5b:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7RZyeeMYjbaBCiWMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODgzMGM5YTItYWJjZi00NTM3LWI2ZTktYzA5MzdhNWJi NTZlMB4XDTI2MDgxMzAxMDAxMVoXDTI2MTExMTAyMDAxMVowLzEtMCsGA1UEAxMk YTdlMTczZTUtYzZmMy00Y2FhLTk1YmMtNjhkYTgyZWYxOGQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkY86F0tEGokI68AFgi+N8jMQGJ9gZiQau+Kt F/d5BwRqUzUUrnfLoTI5tePwwPqt4QMUjpO8gngJYOwMeufxpHxNHOdKA+UySpDu +vxiaImWUs+tSs2Fc1MNjdRAgUV6aCGX4OzM4lQXFH/YVQPxPPVwiDaX5iiOnsVu YtTG7Ruyl1wJxhDDCMf4bkndKYmIWib3m+aMSyzigkW4ss+sy9iXsSFbR5UPFbGn ifx//0Z3lb7XrCBVJ4XZzZ1KCljBrvFgMLgHcM355asx5rJb1+UmSrIqP/Jl5Vp7 UGG0Odd21kW8xOrFsXGBFTLsGPaFN3fUcN50hxXmEhNF4KhR1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOh/EgFnbrHu8FgjJqtdKVSe6iRiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84ODMw YzlhMi1hYmNmLTQ1MzctYjZlOS1jMDkzN2E1YmI1NmUvYmI0OTUwYTktYmQ4MS0z YTUxLTg2NDMtOTJmYzdkYzkzODQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvODgzMGM5YTItYWJjZi00NTM3LWI2 ZTktYzA5MzdhNWJiNTZlLzg4MzBjOWEyLWFiY2YtNDUzNy1iNmU5LWMwOTM3YTVi YjU2ZS5jcmwwHwYDVR0jBBgwFoAUvjzIxXS3aQhbR3nJKxIyrwvv1HswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi84ODMwYzlhMi1hYmNmLTQ1MzctYjZlOS1jMDkz N2E1YmI1NmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5PMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABPvR6iL6Stt/z73sTH2p4RtbJkS7TdqfyMNDjbaG2DAkdNbK1WbJyCR tvq5R1K20A5Z3Mxbj3zYide+/EIsokiP55KylXoBT/EwCWDQKGfN9drp01sZvk9t k39Q60aTq3aGWXilpunoEI3XVRungSxXPp+K9xa+h22VnFjgvQC422uh0l38S9uT T5sOg5xZFsV72qVsRFscXn2+HkJ9KcC1tz9ac5wxiFCwdkr8JfXU3ZTT1O6qJZ5T sf2YwxjLtUWHF7jcLSwNcFqNClPdoraahWSw6VfiHRt4Uma+0xhaZS4hISapK2fR LR58y6Ujj11cRob8wi4G5aSNlzK9Wy4= -----END CERTIFICATE-----Generated at Fri Sep 4 23:23:56 2026 by rpki-client