$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7a4a24fd-e3f2-483c-a5bc-835d7a0beeda/cb9d7922-ef33-343f-bf62-8ae45ba74037.roa File: cb9d7922-ef33-343f-bf62-8ae45ba74037.roa (raw, json) Hash identifier: 1vTiQ2bDntu7fGBqzpV5uVqwdYYWuBoxfyNVoOKdrJ4= Subject key identifier: 13:E6:39:34:42:6E:46:FD:A8:37:40:5F:51:90:40:09:9B:85:DC:A5 Certificate issuer: /CN=7a4a24fd-e3f2-483c-a5bc-835d7a0beeda Certificate serial: 010D0C9F4328584D8265241AECE2D69394075060 Authority key identifier: 36:19:7F:0B:E4:B6:15:DD:F3:75:66:64:4E:70:1B:E5:C2:D6:E6:9C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7a4a24fd-e3f2-483c-a5bc-835d7a0beeda.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7a4a24fd-e3f2-483c-a5bc-835d7a0beeda/cb9d7922-ef33-343f-bf62-8ae45ba74037.roa Signing time: Wed 15 Apr 2026 01:00:24 +0000 ROA not before: Wed 15 Apr 2026 01:00:24 +0000 ROA not after: Tue 14 Jul 2026 01:00:24 +0000 asID: 153391 IP address blocks: 23.129.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7a4a24fd-e3f2-483c-a5bc-835d7a0beeda/7a4a24fd-e3f2-483c-a5bc-835d7a0beeda.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7a4a24fd-e3f2-483c-a5bc-835d7a0beeda/7a4a24fd-e3f2-483c-a5bc-835d7a0beeda.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7a4a24fd-e3f2-483c-a5bc-835d7a0beeda.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:82:65:24:1a:ec:e2:d6:93:94:07:50:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a4a24fd-e3f2-483c-a5bc-835d7a0beeda Validity Not Before: Apr 15 01:00:24 2026 GMT Not After : Jul 14 01:00:24 2026 GMT Subject: CN=2898c4ab-75b0-4d99-9f8c-0a0622107b01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:4f:87:ce:8b:f1:9f:66:66:4e:44:f7:54:dd: e2:90:b2:ec:fe:52:85:e3:5b:7f:a0:89:5f:3a:29: ae:92:9a:25:de:4f:66:94:53:10:b4:b7:07:e7:8b: 5f:f0:70:63:ec:aa:58:29:8b:c1:82:41:ec:69:e1: 8c:d3:b1:11:a6:fb:49:f9:12:e7:91:7b:64:32:4e: 87:6d:16:18:2a:30:f7:14:76:8b:12:22:38:b3:68: 72:48:3b:f1:a3:bc:14:fa:a1:e2:05:f5:3a:a5:02: fe:64:0f:6d:d9:70:b8:be:48:a8:a8:6c:7d:0b:d7: e1:2a:82:76:6c:a3:a7:20:2a:8d:e2:c3:18:60:a3: 2c:f8:cf:fe:2f:8c:0e:f6:10:06:80:b7:fd:b5:63: 0d:b9:72:98:86:42:d8:f1:b7:fb:ba:99:e1:c9:54: 47:9f:ff:75:a6:83:6a:ec:f4:40:1e:97:90:c0:33: 08:19:f3:dd:f4:a4:f4:e4:46:c8:70:cf:5a:a1:27: 46:ef:30:c5:39:76:7b:22:79:78:b8:70:f8:85:52: 71:68:4e:17:10:ea:6d:a8:1a:d0:6b:18:47:bb:89: 89:be:1d:d9:f8:9c:78:86:b4:41:c1:1b:16:bc:80: bb:7c:85:70:24:8e:92:35:31:14:75:d9:26:07:43: 20:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:E6:39:34:42:6E:46:FD:A8:37:40:5F:51:90:40:09:9B:85:DC:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7a4a24fd-e3f2-483c-a5bc-835d7a0beeda/cb9d7922-ef33-343f-bf62-8ae45ba74037.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7a4a24fd-e3f2-483c-a5bc-835d7a0beeda/7a4a24fd-e3f2-483c-a5bc-835d7a0beeda.crl X509v3 Authority Key Identifier: keyid:36:19:7F:0B:E4:B6:15:DD:F3:75:66:64:4E:70:1B:E5:C2:D6:E6:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7a4a24fd-e3f2-483c-a5bc-835d7a0beeda.cer sbgp-ipAddrBlock: critical IPv4: 23.129.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:8b:f3:78:bc:a2:3a:03:3a:8e:4f:51:3a:af:90:55:27:b6: dd:69:b3:63:26:3d:d5:97:6b:7e:fa:ef:b9:cd:78:9f:1c:52: 97:b1:b1:4e:94:72:70:11:59:69:e1:05:a4:aa:2c:24:f6:68: 79:8a:23:e3:09:09:46:68:c7:6b:59:2a:33:b9:bb:d8:cf:73: db:f7:e6:bb:6e:32:cd:a1:d7:51:30:f5:91:25:a5:33:97:18: cc:5d:fd:ee:b2:43:eb:a9:d1:ed:6a:93:81:19:5b:76:56:43: 70:ad:26:0b:73:4a:51:2d:93:7d:d5:fd:5d:36:36:60:ff:f4: 3a:36:de:30:15:17:7c:c4:7a:28:f3:42:94:ad:bd:ec:51:44: 2b:c7:1f:e3:7d:9e:11:b9:79:e8:ab:25:c3:c0:68:c2:3d:76: 2f:28:23:7e:7c:b2:43:3b:a1:c5:97:5c:d6:0d:50:db:ca:c7: f5:3f:58:1c:0a:3a:34:a6:e3:5a:cc:37:c9:57:af:a2:7b:82: 94:5b:bd:0e:b4:fb:0c:17:7d:42:d0:87:f6:59:1c:d6:ac:c3: ac:c6:12:35:f6:1a:8a:ab:c5:01:4f:63:3f:f6:cc:ba:d7:6b: 29:68:26:a9:ec:9e:12:eb:49:cf:3d:18:19:d1:4a:7e:da:0d: 38:b7:21:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2CZSQa7OLWk5QHUGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2E0YTI0ZmQtZTNmMi00ODNjLWE1YmMtODM1ZDdhMGJl ZWRhMB4XDTI2MDQxNTAxMDAyNFoXDTI2MDcxNDAxMDAyNFowLzEtMCsGA1UEAxMk Mjg5OGM0YWItNzViMC00ZDk5LTlmOGMtMGEwNjIyMTA3YjAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiU+Hzovxn2ZmTkT3VN3ikLLs/lKF41t/oIlf Oimukpol3k9mlFMQtLcH54tf8HBj7KpYKYvBgkHsaeGM07ERpvtJ+RLnkXtkMk6H bRYYKjD3FHaLEiI4s2hySDvxo7wU+qHiBfU6pQL+ZA9t2XC4vkioqGx9C9fhKoJ2 bKOnICqN4sMYYKMs+M/+L4wO9hAGgLf9tWMNuXKYhkLY8bf7upnhyVRHn/91poNq 7PRAHpeQwDMIGfPd9KT05EbIcM9aoSdG7zDFOXZ7Inl4uHD4hVJxaE4XEOptqBrQ axhHu4mJvh3Z+Jx4hrRBwRsWvIC7fIVwJI6SNTEUddkmB0MgXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBPmOTRCbkb9qDdAX1GQQAmbhdylMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi83YTRh MjRmZC1lM2YyLTQ4M2MtYTViYy04MzVkN2EwYmVlZGEvY2I5ZDc5MjItZWYzMy0z NDNmLWJmNjItOGFlNDViYTc0MDM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvN2E0YTI0ZmQtZTNmMi00ODNjLWE1 YmMtODM1ZDdhMGJlZWRhLzdhNGEyNGZkLWUzZjItNDgzYy1hNWJjLTgzNWQ3YTBi ZWVkYS5jcmwwHwYDVR0jBBgwFoAUNhl/C+S2Fd3zdWZkTnAb5cLW5pwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi83YTRhMjRmZC1lM2YyLTQ4M2MtYTViYy04MzVk N2EwYmVlZGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4GUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAaL83i8ojoDOo5PUTqvkFUntt1ps2MmPdWXa37677nNeJ8cUpexsU6U cnARWWnhBaSqLCT2aHmKI+MJCUZox2tZKjO5u9jPc9v35rtuMs2h11Ew9ZElpTOX GMxd/e6yQ+up0e1qk4EZW3ZWQ3CtJgtzSlEtk33V/V02NmD/9Do23jAVF3zEeijz QpStvexRRCvHH+N9nhG5eeirJcPAaMI9di8oI358skM7ocWXXNYNUNvKx/U/WBwK OjSm41rMN8lXr6J7gpRbvQ60+wwXfULQh/ZZHNasw6zGEjX2GoqrxQFPYz/2zLrX ayloJqnsnhLrSc89GBnRSn7aDTi3ISw= -----END CERTIFICATE-----Generated at Fri Apr 17 16:32:19 2026 by rpki-client