$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb2539db-3965-4bf1-baef-b7f85ca967bd/21d3146c-b803-3260-b98f-e8fae0d54835.roa File: 21d3146c-b803-3260-b98f-e8fae0d54835.roa (raw, json) Hash identifier: pdK3Q243SBQaLqwmG19H0motPORA+WtHAOSSOAUzraA= Subject key identifier: 06:05:DC:3E:C9:D8:E2:76:DE:AF:8F:26:4A:D5:AD:34:7C:88:2E:74 Certificate issuer: /CN=cb2539db-3965-4bf1-baef-b7f85ca967bd Certificate serial: 010D0C9F4328584D789FCAAE434565BBB4C84FE0 Authority key identifier: 35:C7:3C:89:B5:63:FF:C4:EA:B1:DA:09:76:E9:EF:ED:1B:BF:26:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb2539db-3965-4bf1-baef-b7f85ca967bd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb2539db-3965-4bf1-baef-b7f85ca967bd/21d3146c-b803-3260-b98f-e8fae0d54835.roa Signing time: Sat 11 Apr 2026 13:00:31 +0000 ROA not before: Sat 11 Apr 2026 13:00:31 +0000 ROA not after: Fri 10 Jul 2026 13:00:31 +0000 asID: 401143 IP address blocks: 23.147.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb2539db-3965-4bf1-baef-b7f85ca967bd/cb2539db-3965-4bf1-baef-b7f85ca967bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb2539db-3965-4bf1-baef-b7f85ca967bd/cb2539db-3965-4bf1-baef-b7f85ca967bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb2539db-3965-4bf1-baef-b7f85ca967bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:78:9f:ca:ae:43:45:65:bb:b4:c8:4f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb2539db-3965-4bf1-baef-b7f85ca967bd Validity Not Before: Apr 11 13:00:31 2026 GMT Not After : Jul 10 13:00:31 2026 GMT Subject: CN=a89c24cb-5b13-47fa-bf55-4ba81b48b582 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:39:9d:3a:2e:88:9b:97:1f:95:08:b5:06:7f: dd:50:7c:55:39:13:fd:53:88:c3:65:fc:3c:44:c2: 8a:ba:c3:1c:e4:5e:d4:e0:3e:e6:13:8a:f7:32:7f: 02:82:2a:80:37:b4:77:7b:fe:ea:da:82:6c:c2:62: 61:c8:fc:0f:cd:af:6d:cd:23:fd:20:63:af:d6:22: 64:a7:01:ea:cb:c5:0b:19:29:4c:ed:60:0c:28:a1: 44:d1:ec:c1:e1:8f:c6:a4:01:48:a7:c3:22:bb:ef: 10:9f:87:80:ca:dc:d5:56:e2:7b:12:4a:05:fc:ba: 0c:8a:b8:cb:b7:07:2b:75:35:54:71:15:ca:ba:d1: 3b:16:8c:e6:ef:07:14:11:1a:5f:fc:ba:b9:c3:c2: 95:ac:85:ac:3c:89:b7:ae:36:d8:f0:53:5a:d0:98: 7b:f6:ea:e4:25:3e:9b:d4:a3:cc:c2:c9:0a:c6:21: c5:79:94:cb:b3:e3:63:da:c2:c6:a9:b6:62:e8:2f: a8:b2:ea:ed:66:f3:65:3a:5c:3d:b7:14:7a:f4:ed: 5c:6a:6c:8f:70:18:d3:9c:37:64:ad:6a:7a:1f:5e: a0:fe:66:e9:ef:1e:77:fc:3c:68:f5:2d:32:f6:5e: 26:68:51:23:a8:58:42:3e:c8:3b:b3:f9:c4:61:2d: bd:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:05:DC:3E:C9:D8:E2:76:DE:AF:8F:26:4A:D5:AD:34:7C:88:2E:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb2539db-3965-4bf1-baef-b7f85ca967bd/21d3146c-b803-3260-b98f-e8fae0d54835.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb2539db-3965-4bf1-baef-b7f85ca967bd/cb2539db-3965-4bf1-baef-b7f85ca967bd.crl X509v3 Authority Key Identifier: keyid:35:C7:3C:89:B5:63:FF:C4:EA:B1:DA:09:76:E9:EF:ED:1B:BF:26:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb2539db-3965-4bf1-baef-b7f85ca967bd.cer sbgp-ipAddrBlock: critical IPv4: 23.147.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:31:10:bd:4f:87:38:2d:81:19:c8:45:44:5d:87:8b:46:9d: 44:5e:ee:d9:a4:9a:3e:38:2b:4e:76:87:db:d5:e3:5b:28:7d: 3a:9f:03:57:3e:d8:a4:a8:90:d2:db:13:81:bc:2d:33:01:d7: 3c:b4:a8:37:32:83:5b:6f:4f:e2:ed:d0:36:0f:27:70:1a:d0: d7:42:81:2d:6b:60:27:ce:79:4a:de:a5:02:15:64:94:09:9d: 5c:24:bd:e3:01:f4:3e:04:fb:75:af:9b:2f:50:97:0b:04:58: 59:89:79:79:a3:9f:4c:a3:44:54:6c:1c:a4:98:25:6b:fb:73: 18:27:d4:64:67:76:fb:ab:38:68:f1:db:d1:ab:af:9c:c3:18: b0:ef:35:19:bb:9a:29:dc:69:d6:1c:5d:26:0e:f4:09:5d:70: 7a:9b:27:b0:f6:8d:41:23:09:b4:6e:9d:07:66:57:8f:e6:01: 8c:20:8f:6b:6f:20:f6:c9:17:b0:e5:2d:7f:55:74:0f:ec:fb: 38:bb:fb:01:6c:af:4a:02:93:1b:72:52:84:37:57:ee:b2:fc: 07:ea:f5:33:20:19:4b:b9:d5:2a:f6:68:99:3f:c1:77:41:98: 69:ca:d9:1d:f1:a3:43:f4:06:25:bc:25:c6:a5:07:53:f0:04: 2f:d9:5a:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE14n8quQ0Vlu7TIT+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2IyNTM5ZGItMzk2NS00YmYxLWJhZWYtYjdmODVjYTk2 N2JkMB4XDTI2MDQxMTEzMDAzMVoXDTI2MDcxMDEzMDAzMVowLzEtMCsGA1UEAxMk YTg5YzI0Y2ItNWIxMy00N2ZhLWJmNTUtNGJhODFiNDhiNTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDmdOi6Im5cflQi1Bn/dUHxVORP9U4jDZfw8 RMKKusMc5F7U4D7mE4r3Mn8CgiqAN7R3e/7q2oJswmJhyPwPza9tzSP9IGOv1iJk pwHqy8ULGSlM7WAMKKFE0ezB4Y/GpAFIp8Miu+8Qn4eAytzVVuJ7EkoF/LoMirjL twcrdTVUcRXKutE7Fozm7wcUERpf/Lq5w8KVrIWsPIm3rjbY8FNa0Jh79urkJT6b 1KPMwskKxiHFeZTLs+Nj2sLGqbZi6C+osurtZvNlOlw9txR69O1camyPcBjTnDdk rWp6H16g/mbp7x53/Dxo9S0y9l4maFEjqFhCPsg7s/nEYS29dwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAYF3D7J2OJ23q+PJkrVrTR8iC50MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9jYjI1 MzlkYi0zOTY1LTRiZjEtYmFlZi1iN2Y4NWNhOTY3YmQvMjFkMzE0NmMtYjgwMy0z MjYwLWI5OGYtZThmYWUwZDU0ODM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvY2IyNTM5ZGItMzk2NS00YmYxLWJh ZWYtYjdmODVjYTk2N2JkL2NiMjUzOWRiLTM5NjUtNGJmMS1iYWVmLWI3Zjg1Y2E5 NjdiZC5jcmwwHwYDVR0jBBgwFoAUNcc8ibVj/8TqsdoJdunv7Ru/JukwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9jYjI1MzlkYi0zOTY1LTRiZjEtYmFlZi1iN2Y4 NWNhOTY3YmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5N8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJUxEL1PhzgtgRnIRURdh4tGnURe7tmkmj44K052h9vV41sofTqfA1c+ 2KSokNLbE4G8LTMB1zy0qDcyg1tvT+Lt0DYPJ3Aa0NdCgS1rYCfOeUrepQIVZJQJ nVwkveMB9D4E+3Wvmy9QlwsEWFmJeXmjn0yjRFRsHKSYJWv7cxgn1GRndvurOGjx 29Grr5zDGLDvNRm7mincadYcXSYO9AldcHqbJ7D2jUEjCbRunQdmV4/mAYwgj2tv IPbJF7DlLX9VdA/s+zi7+wFsr0oCkxtyUoQ3V+6y/Afq9TMgGUu51Sr2aJk/wXdB mGnK2R3xo0P0BiW8JcalB1PwBC/ZWuo= -----END CERTIFICATE-----Generated at Mon Apr 13 12:01:30 2026 by rpki-client