$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8830c9a2-abcf-4537-b6e9-c0937a5bb56e/bb4950a9-bd81-3a51-8643-92fc7dc93849.roa File: bb4950a9-bd81-3a51-8643-92fc7dc93849.roa (raw, json) Hash identifier: Xgia6ulEOImOqzXk5zsKl4s94Yc4rEeYvEBAKp04jIM= Subject key identifier: B2:F7:8D:32:46:20:BE:FE:85:04:44:A4:E4:CF:78:BD:E2:2D:CA:6B Certificate issuer: /CN=8830c9a2-abcf-4537-b6e9-c0937a5bb56e Certificate serial: 010D0C9F4328584D4EBFAA1728A286EC045BDF00 Authority key identifier: BE:3C:C8:C5:74:B7:69:08:5B:47:79:C9:2B:12:32:AF:0B:EF:D4:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8830c9a2-abcf-4537-b6e9-c0937a5bb56e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8830c9a2-abcf-4537-b6e9-c0937a5bb56e/bb4950a9-bd81-3a51-8643-92fc7dc93849.roa Signing time: Fri 27 Mar 2026 13:00:40 +0000 ROA not before: Fri 27 Mar 2026 13:00:40 +0000 ROA not after: Thu 25 Jun 2026 13:00:40 +0000 asID: 152918 IP address blocks: 23.147.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8830c9a2-abcf-4537-b6e9-c0937a5bb56e/8830c9a2-abcf-4537-b6e9-c0937a5bb56e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8830c9a2-abcf-4537-b6e9-c0937a5bb56e/8830c9a2-abcf-4537-b6e9-c0937a5bb56e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8830c9a2-abcf-4537-b6e9-c0937a5bb56e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Apr 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4e:bf:aa:17:28:a2:86:ec:04:5b:df:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8830c9a2-abcf-4537-b6e9-c0937a5bb56e Validity Not Before: Mar 27 13:00:40 2026 GMT Not After : Jun 25 13:00:40 2026 GMT Subject: CN=a333fe64-7c54-4b14-a424-790a75b2c341 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:02:7c:98:bf:1b:c7:6c:17:6d:00:39:9e:ce: da:c7:62:61:e2:d0:b7:82:43:3a:88:cf:cd:3d:59: 36:87:d3:41:ca:47:22:60:83:db:e2:36:b7:3b:29: c4:4a:22:0b:9e:4c:ba:83:2e:23:90:12:d9:fb:8d: 07:6b:44:ba:02:94:3d:3f:2a:20:56:68:f0:d2:32: da:49:79:a2:69:68:2e:93:d7:fe:00:b5:d6:e2:00: 50:54:5f:80:e6:cc:12:9c:4e:07:6a:8c:72:aa:72: d7:c5:71:14:1b:9b:84:bd:16:56:08:2e:13:6d:14: b3:b0:42:34:7c:7d:41:17:14:25:cb:66:9d:45:cc: d3:8f:a8:1e:38:24:bb:04:d0:c3:a9:74:29:0f:0b: 5c:d5:f0:da:28:8c:bd:cf:23:21:56:7b:72:09:f2: 60:b4:ba:cf:f8:b5:7c:49:5f:b9:da:22:7a:10:19: 55:32:3a:e0:22:6b:a1:2a:8c:13:a2:3f:30:0e:f6: 2d:78:a9:1e:a1:c8:1b:80:95:26:ce:a7:70:40:c4: cf:45:bd:6f:84:69:f5:a3:ac:62:11:dc:bd:e5:36: 19:1a:df:a0:be:41:5c:50:c9:ca:c0:47:54:6b:2f: d4:ff:83:92:90:2c:9b:ff:61:3a:0b:ca:a9:25:67: 02:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:F7:8D:32:46:20:BE:FE:85:04:44:A4:E4:CF:78:BD:E2:2D:CA:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8830c9a2-abcf-4537-b6e9-c0937a5bb56e/bb4950a9-bd81-3a51-8643-92fc7dc93849.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8830c9a2-abcf-4537-b6e9-c0937a5bb56e/8830c9a2-abcf-4537-b6e9-c0937a5bb56e.crl X509v3 Authority Key Identifier: keyid:BE:3C:C8:C5:74:B7:69:08:5B:47:79:C9:2B:12:32:AF:0B:EF:D4:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8830c9a2-abcf-4537-b6e9-c0937a5bb56e.cer sbgp-ipAddrBlock: critical IPv4: 23.147.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:e4:9d:4a:ec:ba:7c:a7:18:a8:54:6c:a3:02:93:a0:8d:92: e4:11:8b:26:08:ff:43:85:58:51:2a:32:90:64:2b:49:44:d8: f6:e9:9d:a3:6c:7f:db:d6:9e:94:0e:81:a0:76:ce:9e:b4:3b: d9:9b:84:59:64:2f:d2:8a:9b:40:0e:6c:26:d1:2c:4e:08:7d: c4:b1:2c:53:1c:83:47:39:a1:09:23:68:7d:aa:8d:05:dd:46: 74:ee:60:ed:c4:e9:cd:1c:ad:fa:39:a7:7b:fd:93:a9:c7:46: 2c:d6:a1:3b:22:87:8a:bd:d3:44:ea:3a:0b:b4:8d:d1:f1:66: 74:72:e9:97:65:8f:61:35:3a:8f:17:2c:98:91:f2:29:1a:8d: 83:49:a2:07:b2:81:cf:0c:5a:6c:40:d2:c5:21:36:5e:66:17: 65:e1:65:c9:f5:3f:69:d9:fd:c8:5d:b8:cb:de:7c:dc:e4:d4: 35:1d:75:74:56:b3:a0:fb:b2:40:df:3f:b4:d0:7e:a2:da:51: 8b:81:e8:57:91:37:de:b4:44:16:e9:1c:23:d1:63:d1:54:ec: d6:4b:8c:71:fc:56:c3:b9:f2:d6:b7:67:c3:c2:f5:d5:4e:ee: f9:53:80:a0:dc:d8:1e:03:48:30:2d:77:45:6c:d7:b4:a7:cd: b1:78:83:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Ov6oXKKKG7ARb3wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODgzMGM5YTItYWJjZi00NTM3LWI2ZTktYzA5MzdhNWJi NTZlMB4XDTI2MDMyNzEzMDA0MFoXDTI2MDYyNTEzMDA0MFowLzEtMCsGA1UEAxMk YTMzM2ZlNjQtN2M1NC00YjE0LWE0MjQtNzkwYTc1YjJjMzQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQJ8mL8bx2wXbQA5ns7ax2Jh4tC3gkM6iM/N PVk2h9NBykciYIPb4ja3OynESiILnky6gy4jkBLZ+40Ha0S6ApQ9PyogVmjw0jLa SXmiaWguk9f+ALXW4gBQVF+A5swSnE4HaoxyqnLXxXEUG5uEvRZWCC4TbRSzsEI0 fH1BFxQly2adRczTj6geOCS7BNDDqXQpDwtc1fDaKIy9zyMhVntyCfJgtLrP+LV8 SV+52iJ6EBlVMjrgImuhKowToj8wDvYteKkeocgbgJUmzqdwQMTPRb1vhGn1o6xi Edy95TYZGt+gvkFcUMnKwEdUay/U/4OSkCyb/2E6C8qpJWcCnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLL3jTJGIL7+hQREpOTPeL3iLcprMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84ODMw YzlhMi1hYmNmLTQ1MzctYjZlOS1jMDkzN2E1YmI1NmUvYmI0OTUwYTktYmQ4MS0z YTUxLTg2NDMtOTJmYzdkYzkzODQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvODgzMGM5YTItYWJjZi00NTM3LWI2 ZTktYzA5MzdhNWJiNTZlLzg4MzBjOWEyLWFiY2YtNDUzNy1iNmU5LWMwOTM3YTVi YjU2ZS5jcmwwHwYDVR0jBBgwFoAUvjzIxXS3aQhbR3nJKxIyrwvv1HswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi84ODMwYzlhMi1hYmNmLTQ1MzctYjZlOS1jMDkz N2E1YmI1NmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5PMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACHknUrsunynGKhUbKMCk6CNkuQRiyYI/0OFWFEqMpBkK0lE2PbpnaNs f9vWnpQOgaB2zp60O9mbhFlkL9KKm0AObCbRLE4IfcSxLFMcg0c5oQkjaH2qjQXd RnTuYO3E6c0crfo5p3v9k6nHRizWoTsih4q900TqOgu0jdHxZnRy6Zdlj2E1Oo8X LJiR8ikajYNJogeygc8MWmxA0sUhNl5mF2XhZcn1P2nZ/chduMvefNzk1DUddXRW s6D7skDfP7TQfqLaUYuB6FeRN960RBbpHCPRY9FU7NZLjHH8VsO58ta3Z8PC9dVO 7vlTgKDc2B4DSDAtd0Vs17SnzbF4g1Q= -----END CERTIFICATE-----Generated at Mon Apr 13 12:07:33 2026 by rpki-client