$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb2539db-3965-4bf1-baef-b7f85ca967bd/ce992959-553a-3a69-8efa-445f324ebc01.roa File: ce992959-553a-3a69-8efa-445f324ebc01.roa (raw, json) Hash identifier: OVNUMMI3sN/oGWJrd1UJySZ3FYUv2bfBEunIsnIloTs= Subject key identifier: C9:01:E0:F1:54:34:A0:E1:CB:98:4C:EB:D2:96:AB:DF:14:64:9B:4A Certificate issuer: /CN=cb2539db-3965-4bf1-baef-b7f85ca967bd Certificate serial: 010D0C9F4328584F77F8D59A17E325848ED75D00 Authority key identifier: 35:C7:3C:89:B5:63:FF:C4:EA:B1:DA:09:76:E9:EF:ED:1B:BF:26:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb2539db-3965-4bf1-baef-b7f85ca967bd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb2539db-3965-4bf1-baef-b7f85ca967bd/ce992959-553a-3a69-8efa-445f324ebc01.roa Signing time: Sun 11 Oct 2026 16:58:01 +0000 ROA not before: Sun 11 Oct 2026 16:58:01 +0000 ROA not after: Sat 09 Jan 2027 17:58:01 +0000 asID: 32526 IP address blocks: 23.147.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb2539db-3965-4bf1-baef-b7f85ca967bd/cb2539db-3965-4bf1-baef-b7f85ca967bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb2539db-3965-4bf1-baef-b7f85ca967bd/cb2539db-3965-4bf1-baef-b7f85ca967bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb2539db-3965-4bf1-baef-b7f85ca967bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:77:f8:d5:9a:17:e3:25:84:8e:d7:5d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb2539db-3965-4bf1-baef-b7f85ca967bd Validity Not Before: Oct 11 16:58:01 2026 GMT Not After : Jan 9 17:58:01 2027 GMT Subject: CN=c24b5c2f-c3ac-4db4-98ca-94c7c377f7f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:90:d6:b2:cb:4b:02:a4:e0:2f:6d:1d:3b:6c: 87:70:cd:f4:e0:26:9c:d2:d1:63:b9:6f:cc:e4:02: fe:db:e3:af:88:8c:a3:c3:d1:80:11:2a:60:55:cd: e3:ac:03:4d:19:ee:94:c9:d0:1d:4f:64:8a:b2:cf: 78:ff:b7:ff:2c:01:86:a6:7d:61:3d:97:1e:20:c1: a3:41:12:27:1f:5d:94:a3:a3:49:d2:57:00:63:ca: ca:dc:02:d8:a6:37:d0:bc:68:70:a7:d4:8d:59:4c: f4:7f:d1:74:18:6b:cb:6a:c8:7c:93:e0:0d:7b:7b: 3f:f1:b4:bd:b6:40:c8:5b:83:39:fd:4f:00:51:b0: ba:b0:4b:41:b0:d9:5b:e6:04:79:f8:3f:74:35:c8: 64:a2:2c:62:b4:2b:b1:fc:2b:18:85:49:bc:78:6c: ef:56:83:cc:9f:00:73:0d:d2:84:a4:41:08:59:ba: 06:16:06:50:c4:77:7e:c7:ff:c7:37:fd:cb:dc:d8: ec:c5:94:ef:c3:e1:d1:3d:c2:cc:56:e5:4c:ba:b0: 4a:b2:47:75:57:1f:43:55:3f:0c:c6:83:60:9c:dd: 26:af:24:55:a4:c9:e4:ec:a2:cd:91:ac:e0:92:76: 81:6b:73:3d:49:d4:9e:75:61:7c:c1:2d:fb:34:7f: af:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:01:E0:F1:54:34:A0:E1:CB:98:4C:EB:D2:96:AB:DF:14:64:9B:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb2539db-3965-4bf1-baef-b7f85ca967bd/ce992959-553a-3a69-8efa-445f324ebc01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb2539db-3965-4bf1-baef-b7f85ca967bd/cb2539db-3965-4bf1-baef-b7f85ca967bd.crl X509v3 Authority Key Identifier: keyid:35:C7:3C:89:B5:63:FF:C4:EA:B1:DA:09:76:E9:EF:ED:1B:BF:26:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb2539db-3965-4bf1-baef-b7f85ca967bd.cer sbgp-ipAddrBlock: critical IPv4: 23.147.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:68:32:4e:a5:37:b1:52:a3:70:0c:91:75:96:5d:7d:7b:79: cd:48:78:45:8d:f5:70:42:0a:93:48:12:19:48:e4:8f:8f:76: 1f:8e:2a:72:9f:b5:1a:d2:ba:1d:ad:f2:cc:16:df:eb:c6:f8: 66:43:ae:25:a3:33:09:8c:37:53:02:bc:09:90:c1:93:fe:da: 2b:09:6c:d7:49:b4:fb:b8:83:49:94:45:e4:33:5e:84:d4:85: b5:57:93:31:fc:b5:94:a9:14:a9:87:69:e4:30:17:3a:80:7d: 3a:4c:e7:40:ca:25:32:33:1c:89:1c:d9:05:2f:a1:be:13:e6: ff:09:41:97:fc:19:84:d0:a4:13:1f:98:80:74:fa:bc:66:62: ee:10:d6:6d:47:cb:25:3e:1a:e9:f1:bf:22:27:1f:02:89:be: 13:0b:8d:45:af:54:28:c3:9b:03:89:6f:ee:13:77:a7:cb:0c: a3:4d:6c:b7:1c:f0:d3:96:c1:31:7a:be:9a:b5:31:79:4c:e7: 34:c9:fe:af:63:c1:a4:8b:c4:76:a5:01:98:c7:6b:dd:a1:26: d4:3c:ee:21:66:c6:19:7b:fa:b6:b6:c4:1b:41:a2:ac:d3:23: 04:ad:32:eb:58:47:d2:51:00:55:24:0f:56:64:9d:bf:88:27: 43:82:95:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE93+NWaF+MlhI7XXQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2IyNTM5ZGItMzk2NS00YmYxLWJhZWYtYjdmODVjYTk2 N2JkMB4XDTI2MTAxMTE2NTgwMVoXDTI3MDEwOTE3NTgwMVowLzEtMCsGA1UEAxMk YzI0YjVjMmYtYzNhYy00ZGI0LTk4Y2EtOTRjN2MzNzdmN2YwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JDWsstLAqTgL20dO2yHcM304Cac0tFjuW/M 5AL+2+OviIyjw9GAESpgVc3jrANNGe6UydAdT2SKss94/7f/LAGGpn1hPZceIMGj QRInH12Uo6NJ0lcAY8rK3ALYpjfQvGhwp9SNWUz0f9F0GGvLash8k+ANe3s/8bS9 tkDIW4M5/U8AUbC6sEtBsNlb5gR5+D90NchkoixitCux/CsYhUm8eGzvVoPMnwBz DdKEpEEIWboGFgZQxHd+x//HN/3L3NjsxZTvw+HRPcLMVuVMurBKskd1Vx9DVT8M xoNgnN0mryRVpMnk7KLNkazgknaBa3M9SdSedWF8wS37NH+vpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMkB4PFUNKDhy5hM69KWq98UZJtKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9jYjI1 MzlkYi0zOTY1LTRiZjEtYmFlZi1iN2Y4NWNhOTY3YmQvY2U5OTI5NTktNTUzYS0z YTY5LThlZmEtNDQ1ZjMyNGViYzAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvY2IyNTM5ZGItMzk2NS00YmYxLWJh ZWYtYjdmODVjYTk2N2JkL2NiMjUzOWRiLTM5NjUtNGJmMS1iYWVmLWI3Zjg1Y2E5 NjdiZC5jcmwwHwYDVR0jBBgwFoAUNcc8ibVj/8TqsdoJdunv7Ru/JukwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9jYjI1MzlkYi0zOTY1LTRiZjEtYmFlZi1iN2Y4 NWNhOTY3YmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5N8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADJoMk6lN7FSo3AMkXWWXX17ec1IeEWN9XBCCpNIEhlI5I+Pdh+OKnKf tRrSuh2t8swW3+vG+GZDriWjMwmMN1MCvAmQwZP+2isJbNdJtPu4g0mUReQzXoTU hbVXkzH8tZSpFKmHaeQwFzqAfTpM50DKJTIzHIkc2QUvob4T5v8JQZf8GYTQpBMf mIB0+rxmYu4Q1m1HyyU+GunxvyInHwKJvhMLjUWvVCjDmwOJb+4Td6fLDKNNbLcc 8NOWwTF6vpq1MXlM5zTJ/q9jwaSLxHalAZjHa92hJtQ87iFmxhl7+ra2xBtBoqzT IwStMutYR9JRAFUkD1Zknb+IJ0OClUE= -----END CERTIFICATE-----Generated at Tue Oct 13 12:41:58 2026 by rpki-client