$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8830c9a2-abcf-4537-b6e9-c0937a5bb56e/bb4950a9-bd81-3a51-8643-92fc7dc93849.roa File: bb4950a9-bd81-3a51-8643-92fc7dc93849.roa (raw, json) Hash identifier: AwSOWjWwbuwliYGtTrr9erXCyTMTUCF2gZvjRdIGmp4= Subject key identifier: 50:CB:66:DF:B5:6E:64:5E:D1:BE:A2:BD:61:ED:5E:87:75:0A:01:12 Certificate issuer: /CN=8830c9a2-abcf-4537-b6e9-c0937a5bb56e Certificate serial: 010D0C9F4328584F7352D93AF514E226B8CB5998 Authority key identifier: BE:3C:C8:C5:74:B7:69:08:5B:47:79:C9:2B:12:32:AF:0B:EF:D4:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8830c9a2-abcf-4537-b6e9-c0937a5bb56e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8830c9a2-abcf-4537-b6e9-c0937a5bb56e/bb4950a9-bd81-3a51-8643-92fc7dc93849.roa Signing time: Sat 10 Oct 2026 01:00:13 +0000 ROA not before: Sat 10 Oct 2026 01:00:13 +0000 ROA not after: Fri 08 Jan 2027 02:00:13 +0000 asID: 152918 IP address blocks: 23.147.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8830c9a2-abcf-4537-b6e9-c0937a5bb56e/8830c9a2-abcf-4537-b6e9-c0937a5bb56e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8830c9a2-abcf-4537-b6e9-c0937a5bb56e/8830c9a2-abcf-4537-b6e9-c0937a5bb56e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8830c9a2-abcf-4537-b6e9-c0937a5bb56e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:73:52:d9:3a:f5:14:e2:26:b8:cb:59:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8830c9a2-abcf-4537-b6e9-c0937a5bb56e Validity Not Before: Oct 10 01:00:13 2026 GMT Not After : Jan 8 02:00:13 2027 GMT Subject: CN=64eb27f5-e984-40f2-a93f-53297403d0df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:9a:13:72:de:23:d9:58:6f:98:cc:10:5f:f9: be:dd:3b:66:f8:6d:6a:87:b5:c1:2e:96:5c:05:44: 7e:46:25:4b:44:0e:0f:6a:97:b8:99:96:e5:5b:f5: 0d:23:ec:e1:cc:fe:87:ba:5a:82:a5:57:53:0d:67: 9e:7a:14:44:34:08:bd:43:14:b6:ca:6a:7c:56:2a: 9b:c4:f9:11:06:8d:ac:f5:3a:87:7b:18:03:a6:84: 0e:b6:55:af:3b:1b:86:f5:6a:78:f8:55:8d:f2:2d: a3:69:f6:9d:6e:bb:1d:9f:a3:e1:52:3d:2f:30:8f: 8c:90:76:e4:7b:ac:f6:67:42:66:37:e8:5f:2b:74: 32:4d:7b:0e:28:4a:f3:a1:e3:4c:e4:ab:7b:91:b2: ca:25:d9:a2:fd:db:ba:d2:69:b4:d0:69:b8:8d:fb: ce:1c:3c:2b:98:70:bf:bf:21:70:13:b4:f9:b2:62: 17:ee:e6:f0:ee:07:cf:c9:bb:0b:e0:17:bd:1c:1f: 55:b5:da:ac:f2:21:91:9b:f5:b9:b0:53:02:dd:7e: 08:c4:55:a9:fb:a3:07:56:07:84:62:be:31:63:5d: 15:f4:6a:61:5e:d9:d6:5e:46:a0:88:f4:e1:66:66: ee:ea:ce:25:6a:50:ef:f5:fb:7e:b6:c5:16:80:b8: 02:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:CB:66:DF:B5:6E:64:5E:D1:BE:A2:BD:61:ED:5E:87:75:0A:01:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8830c9a2-abcf-4537-b6e9-c0937a5bb56e/bb4950a9-bd81-3a51-8643-92fc7dc93849.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8830c9a2-abcf-4537-b6e9-c0937a5bb56e/8830c9a2-abcf-4537-b6e9-c0937a5bb56e.crl X509v3 Authority Key Identifier: keyid:BE:3C:C8:C5:74:B7:69:08:5B:47:79:C9:2B:12:32:AF:0B:EF:D4:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8830c9a2-abcf-4537-b6e9-c0937a5bb56e.cer sbgp-ipAddrBlock: critical IPv4: 23.147.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:83:33:cd:e8:35:ae:d2:b3:4e:e7:16:bb:6e:56:6e:32:31: 2d:eb:a4:91:82:a0:af:af:f0:88:41:57:c4:6f:ad:b3:95:64: ad:d4:55:5e:cc:ad:b5:b8:d4:76:ee:8b:24:92:b5:7a:21:49: fb:40:67:f4:06:c3:74:44:3e:8f:98:3d:b2:9d:ea:70:7a:05: 03:7b:14:d6:03:02:82:59:e3:3f:c3:9f:2f:6a:85:a9:02:b2: b5:4c:7c:5c:06:8f:76:8a:34:60:2e:67:8c:66:64:e6:e7:0e: a9:90:62:79:86:69:fd:57:74:fe:c4:06:e4:77:23:30:83:8c: eb:42:bb:0c:10:6e:82:e7:de:91:d6:63:12:f1:0e:7b:d0:6d: 5e:33:92:d8:6e:1f:b1:1a:bc:7c:ec:b9:fc:ea:4e:b2:99:1d: 09:9d:16:66:94:6f:08:79:71:9f:cf:0d:f7:05:f4:6e:92:28: c8:62:00:a3:2a:11:d4:59:dd:c5:7c:20:70:6e:3f:c9:fb:13: 4f:c0:f2:49:a1:36:e7:a6:40:17:cc:3f:9b:08:0b:6e:7a:ca: 21:fa:e7:5e:aa:ad:54:5c:a1:01:84:02:7e:d0:35:6a:dc:8d: d7:99:2f:3e:f6:df:15:93:9e:b7:fd:73:96:95:65:bb:f3:26: 14:96:78:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9zUtk69RTiJrjLWZgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODgzMGM5YTItYWJjZi00NTM3LWI2ZTktYzA5MzdhNWJi NTZlMB4XDTI2MTAxMDAxMDAxM1oXDTI3MDEwODAyMDAxM1owLzEtMCsGA1UEAxMk NjRlYjI3ZjUtZTk4NC00MGYyLWE5M2YtNTMyOTc0MDNkMGRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5oTct4j2VhvmMwQX/m+3Ttm+G1qh7XBLpZc BUR+RiVLRA4Pape4mZblW/UNI+zhzP6HulqCpVdTDWeeehRENAi9QxS2ymp8Viqb xPkRBo2s9TqHexgDpoQOtlWvOxuG9Wp4+FWN8i2jafadbrsdn6PhUj0vMI+MkHbk e6z2Z0JmN+hfK3QyTXsOKErzoeNM5Kt7kbLKJdmi/du60mm00Gm4jfvOHDwrmHC/ vyFwE7T5smIX7ubw7gfPybsL4Be9HB9Vtdqs8iGRm/W5sFMC3X4IxFWp+6MHVgeE Yr4xY10V9GphXtnWXkagiPThZmbu6s4lalDv9ft+tsUWgLgC/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFDLZt+1bmRe0b6ivWHtXod1CgESMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84ODMw YzlhMi1hYmNmLTQ1MzctYjZlOS1jMDkzN2E1YmI1NmUvYmI0OTUwYTktYmQ4MS0z YTUxLTg2NDMtOTJmYzdkYzkzODQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvODgzMGM5YTItYWJjZi00NTM3LWI2 ZTktYzA5MzdhNWJiNTZlLzg4MzBjOWEyLWFiY2YtNDUzNy1iNmU5LWMwOTM3YTVi YjU2ZS5jcmwwHwYDVR0jBBgwFoAUvjzIxXS3aQhbR3nJKxIyrwvv1HswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi84ODMwYzlhMi1hYmNmLTQ1MzctYjZlOS1jMDkz N2E1YmI1NmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5PMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACCDM83oNa7Ss07nFrtuVm4yMS3rpJGCoK+v8IhBV8RvrbOVZK3UVV7M rbW41HbuiySStXohSftAZ/QGw3REPo+YPbKd6nB6BQN7FNYDAoJZ4z/Dny9qhakC srVMfFwGj3aKNGAuZ4xmZObnDqmQYnmGaf1XdP7EBuR3IzCDjOtCuwwQboLn3pHW YxLxDnvQbV4zkthuH7EavHzsufzqTrKZHQmdFmaUbwh5cZ/PDfcF9G6SKMhiAKMq EdRZ3cV8IHBuP8n7E0/A8kmhNuemQBfMP5sIC256yiH6516qrVRcoQGEAn7QNWrc jdeZLz723xWTnrf9c5aVZbvzJhSWeA8= -----END CERTIFICATE-----Generated at Wed Oct 21 00:35:26 2026 by rpki-client