
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb2539db-3965-4bf1-baef-b7f85ca967bd/21d3146c-b803-3260-b98f-e8fae0d54835.roa
File: 21d3146c-b803-3260-b98f-e8fae0d54835.roa (raw, json)
Hash identifier: vS88FJ6Z0/E9dPMgsviVgLl9dav0/ggXBhMVi0+V9kI=
Subject key identifier: 02:96:2C:8A:CA:01:FC:E6:CB:20:37:B8:E2:5B:08:16:C9:69:F7:B2
Certificate issuer: /CN=cb2539db-3965-4bf1-baef-b7f85ca967bd
Certificate serial: 010D0C9F4328584E58E494738BE8DF8F47FD8F80
Authority key identifier: 35:C7:3C:89:B5:63:FF:C4:EA:B1:DA:09:76:E9:EF:ED:1B:BF:26:E9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb2539db-3965-4bf1-baef-b7f85ca967bd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb2539db-3965-4bf1-baef-b7f85ca967bd/21d3146c-b803-3260-b98f-e8fae0d54835.roa
Signing time: Tue 30 Jun 2026 21:00:12 +0000
ROA not before: Tue 30 Jun 2026 21:00:12 +0000
ROA not after: Mon 28 Sep 2026 21:00:12 +0000
asID: 401143
IP address blocks: 23.147.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb2539db-3965-4bf1-baef-b7f85ca967bd/cb2539db-3965-4bf1-baef-b7f85ca967bd.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb2539db-3965-4bf1-baef-b7f85ca967bd/cb2539db-3965-4bf1-baef-b7f85ca967bd.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb2539db-3965-4bf1-baef-b7f85ca967bd.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 14 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:58:e4:94:73:8b:e8:df:8f:47:fd:8f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb2539db-3965-4bf1-baef-b7f85ca967bd
Validity
Not Before: Jun 30 21:00:12 2026 GMT
Not After : Sep 28 21:00:12 2026 GMT
Subject: CN=46e55aca-4082-44fb-8527-6398d626cde6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fd:45:44:f5:66:62:d0:5d:6a:55:42:b7:1f:
e8:9e:77:c6:71:a6:96:97:ef:54:66:2e:a9:22:a4:
81:6d:21:5b:d8:b5:79:62:46:91:44:46:c1:3e:7f:
17:88:e1:23:44:85:af:b7:aa:01:3b:3f:45:48:1d:
dc:b4:3d:4d:99:f2:48:07:00:29:4b:ec:55:9c:0b:
73:15:07:a1:e4:64:01:2d:4e:05:f3:0d:41:90:04:
e9:f7:91:90:b7:50:3d:ee:0f:33:18:ce:42:4c:d5:
38:5a:09:d0:14:46:72:79:07:8e:04:ee:6d:05:a9:
95:7c:87:76:10:57:0c:14:c0:aa:bb:13:23:8c:04:
6f:e6:07:6d:bc:51:1f:0e:d3:96:f2:31:5b:c0:0f:
b6:3a:f6:ba:67:64:27:1b:51:02:79:2e:df:0a:33:
d3:a1:4c:e6:6d:8d:5c:e9:67:2b:b7:e5:c5:67:5a:
f1:8c:3f:ec:04:58:2b:05:e5:97:1d:30:ae:6c:53:
eb:94:b3:6a:71:c2:84:d8:49:2d:53:bf:ce:8f:1d:
64:72:3a:49:48:9e:ad:fd:2c:58:df:5c:7c:3a:3f:
3e:8d:5f:e7:bd:97:c8:49:80:61:b2:1b:8e:04:63:
1b:f7:7d:e6:8f:73:64:b0:cc:c7:1a:61:84:3d:ce:
3b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:96:2C:8A:CA:01:FC:E6:CB:20:37:B8:E2:5B:08:16:C9:69:F7:B2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb2539db-3965-4bf1-baef-b7f85ca967bd/21d3146c-b803-3260-b98f-e8fae0d54835.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb2539db-3965-4bf1-baef-b7f85ca967bd/cb2539db-3965-4bf1-baef-b7f85ca967bd.crl
X509v3 Authority Key Identifier:
keyid:35:C7:3C:89:B5:63:FF:C4:EA:B1:DA:09:76:E9:EF:ED:1B:BF:26:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb2539db-3965-4bf1-baef-b7f85ca967bd.cer
sbgp-ipAddrBlock: critical
IPv4:
23.147.124.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:0c:a6:59:48:a0:7a:d9:40:7a:e3:24:c8:37:97:69:40:eb:
58:c5:c3:a7:a1:d1:95:e8:a2:72:d3:b2:74:00:77:bb:5f:ec:
32:f1:2e:b5:97:5a:87:f7:3c:88:4a:03:9b:a4:05:11:31:98:
3b:84:cf:15:0d:ed:17:dc:00:3e:30:ea:ba:b8:36:f6:4a:98:
61:33:c9:35:e6:d1:49:b7:b7:e6:50:07:1f:73:9e:f5:d3:c0:
19:e8:28:14:a8:b5:4e:bc:6e:49:df:cb:b7:47:89:e6:27:78:
ae:f6:24:5c:89:8a:e7:ab:a4:2c:9b:c3:ba:2e:89:08:c3:cd:
27:f7:d0:ca:e9:0d:a8:49:ac:7f:b6:87:6d:84:d5:8e:42:f4:
ac:9a:1f:86:36:db:5a:a2:91:28:f8:ca:c6:a6:da:cf:77:bb:
3c:40:4c:10:a0:6e:eb:94:73:93:66:8f:25:3d:e8:ce:18:39:
12:7f:53:62:e8:52:88:1a:6d:e2:69:a6:8d:38:6b:e9:25:43:
24:41:16:49:ae:33:ae:72:8a:d4:84:71:30:00:81:a4:86:5e:
62:e4:5c:ee:db:0f:c3:19:43:14:c1:99:02:80:36:f6:4c:da:
81:1b:1d:8f:63:35:04:c9:bf:2a:26:42:1f:c6:bd:89:a8:90:
ef:16:94:33
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5Y5JRzi+jfj0f9j4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2IyNTM5ZGItMzk2NS00YmYxLWJhZWYtYjdmODVjYTk2
N2JkMB4XDTI2MDYzMDIxMDAxMloXDTI2MDkyODIxMDAxMlowLzEtMCsGA1UEAxMk
NDZlNTVhY2EtNDA4Mi00NGZiLTg1MjctNjM5OGQ2MjZjZGU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxP1FRPVmYtBdalVCtx/onnfGcaaWl+9UZi6p
IqSBbSFb2LV5YkaRREbBPn8XiOEjRIWvt6oBOz9FSB3ctD1NmfJIBwApS+xVnAtz
FQeh5GQBLU4F8w1BkATp95GQt1A97g8zGM5CTNU4WgnQFEZyeQeOBO5tBamVfId2
EFcMFMCquxMjjARv5gdtvFEfDtOW8jFbwA+2Ova6Z2QnG1ECeS7fCjPToUzmbY1c
6Wcrt+XFZ1rxjD/sBFgrBeWXHTCubFPrlLNqccKE2EktU7/Ojx1kcjpJSJ6t/SxY
31x8Oj8+jV/nvZfISYBhshuOBGMb933mj3NksMzHGmGEPc47NwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAKWLIrKAfzmyyA3uOJbCBbJafeyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9jYjI1
MzlkYi0zOTY1LTRiZjEtYmFlZi1iN2Y4NWNhOTY3YmQvMjFkMzE0NmMtYjgwMy0z
MjYwLWI5OGYtZThmYWUwZDU0ODM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvY2IyNTM5ZGItMzk2NS00YmYxLWJh
ZWYtYjdmODVjYTk2N2JkL2NiMjUzOWRiLTM5NjUtNGJmMS1iYWVmLWI3Zjg1Y2E5
NjdiZC5jcmwwHwYDVR0jBBgwFoAUNcc8ibVj/8TqsdoJdunv7Ru/JukwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi9jYjI1MzlkYi0zOTY1LTRiZjEtYmFlZi1iN2Y4
NWNhOTY3YmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5N8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHgMpllIoHrZQHrjJMg3l2lA61jFw6eh0ZXoonLTsnQAd7tf7DLxLrWX
Wof3PIhKA5ukBRExmDuEzxUN7RfcAD4w6rq4NvZKmGEzyTXm0Um3t+ZQBx9znvXT
wBnoKBSotU68bknfy7dHieYneK72JFyJiuerpCybw7ouiQjDzSf30MrpDahJrH+2
h22E1Y5C9KyaH4Y221qikSj4ysam2s93uzxATBCgbuuUc5NmjyU96M4YORJ/U2Lo
UogabeJppo04a+klQyRBFkmuM65yitSEcTAAgaSGXmLkXO7bD8MZQxTBmQKANvZM
2oEbHY9jNQTJvyomQh/GvYmokO8WlDM=
-----END CERTIFICATE-----
Generated at Sun Jul 12 23:46:16 2026 by rpki-client