$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7a4a24fd-e3f2-483c-a5bc-835d7a0beeda/cb9d7922-ef33-343f-bf62-8ae45ba74037.roa File: cb9d7922-ef33-343f-bf62-8ae45ba74037.roa (raw, json) Hash identifier: VlJLbGYAHMJJk0cmicu89ZkXqqbMkZFVLArBCAYlKAI= Subject key identifier: FC:42:39:0F:7E:6B:A0:98:15:3E:0C:94:F2:5D:68:3E:70:17:02:18 Certificate issuer: /CN=7a4a24fd-e3f2-483c-a5bc-835d7a0beeda Certificate serial: 010D0C9F4328584F050CC7A907204DB46A0672A0 Authority key identifier: 36:19:7F:0B:E4:B6:15:DD:F3:75:66:64:4E:70:1B:E5:C2:D6:E6:9C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7a4a24fd-e3f2-483c-a5bc-835d7a0beeda.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7a4a24fd-e3f2-483c-a5bc-835d7a0beeda/cb9d7922-ef33-343f-bf62-8ae45ba74037.roa Signing time: Mon 31 Aug 2026 13:00:12 +0000 ROA not before: Mon 31 Aug 2026 13:00:12 +0000 ROA not after: Sun 29 Nov 2026 14:00:12 +0000 asID: 153391 IP address blocks: 23.129.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7a4a24fd-e3f2-483c-a5bc-835d7a0beeda/7a4a24fd-e3f2-483c-a5bc-835d7a0beeda.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7a4a24fd-e3f2-483c-a5bc-835d7a0beeda/7a4a24fd-e3f2-483c-a5bc-835d7a0beeda.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7a4a24fd-e3f2-483c-a5bc-835d7a0beeda.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:05:0c:c7:a9:07:20:4d:b4:6a:06:72:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a4a24fd-e3f2-483c-a5bc-835d7a0beeda Validity Not Before: Aug 31 13:00:12 2026 GMT Not After : Nov 29 14:00:12 2026 GMT Subject: CN=df732cd3-6463-4223-81b7-69b89ff5c013 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:87:2b:10:8c:b1:44:63:9d:7a:8d:18:cc:cc: 0f:49:a7:32:f8:bf:c0:f4:1c:54:5e:23:3f:db:3d: 14:17:dd:49:b0:b1:45:31:d6:16:1b:4a:a6:13:51: 3c:f0:0c:27:3b:55:af:86:78:1f:fe:76:9e:1f:99: 57:7e:e4:c1:07:aa:c5:02:49:be:1e:4d:c2:cb:4a: bc:44:44:8e:c4:e6:c1:36:6c:d9:08:30:1b:87:45: 95:15:46:4c:c4:0a:1e:8a:62:97:4a:b0:68:f1:6a: 3b:75:5e:e1:0b:55:fd:6e:29:26:9e:18:6b:3b:a1: 4a:70:27:42:78:84:9f:00:c2:a8:5f:7e:ba:7f:b9: be:e4:b7:9b:e4:e8:8b:f1:bd:63:dd:ea:71:95:13: 6c:dd:eb:3b:e8:bc:67:91:87:e2:32:49:71:97:83: 14:6f:94:14:48:1e:76:1c:23:bb:fc:3d:cb:66:f1: 15:bf:b4:91:2b:f0:1d:d7:24:24:c5:eb:3f:8f:70: cb:68:16:7b:a5:61:49:c3:42:4f:4a:b5:52:6a:29: 47:d8:1b:9b:10:b5:df:f3:a3:14:06:45:e9:f9:7b: 05:05:ff:0f:c5:99:ff:27:2e:d7:67:b9:15:e3:67: 35:1f:01:50:96:5c:c4:99:1f:61:a7:ba:1a:af:5a: 04:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:42:39:0F:7E:6B:A0:98:15:3E:0C:94:F2:5D:68:3E:70:17:02:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7a4a24fd-e3f2-483c-a5bc-835d7a0beeda/cb9d7922-ef33-343f-bf62-8ae45ba74037.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7a4a24fd-e3f2-483c-a5bc-835d7a0beeda/7a4a24fd-e3f2-483c-a5bc-835d7a0beeda.crl X509v3 Authority Key Identifier: keyid:36:19:7F:0B:E4:B6:15:DD:F3:75:66:64:4E:70:1B:E5:C2:D6:E6:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7a4a24fd-e3f2-483c-a5bc-835d7a0beeda.cer sbgp-ipAddrBlock: critical IPv4: 23.129.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:ac:36:46:12:f4:87:75:fb:c1:04:af:59:10:f3:f1:2d:13: 45:bc:2f:25:51:7d:fb:b0:c0:39:7c:f8:d7:f1:fc:61:55:64: bc:7f:de:c8:f2:db:49:26:46:31:c8:6a:6d:53:00:a4:56:76: 9d:97:9f:6c:5e:d9:b4:39:10:ef:54:91:15:c3:e8:d6:c0:21: 20:df:b0:50:ad:0b:04:17:61:4c:b9:81:45:8f:0a:45:44:03: e9:c7:79:48:28:5a:af:a0:a8:5f:a7:55:4f:fc:a9:7d:fc:38: dc:b7:65:af:e6:1b:e7:b8:30:12:b7:02:f8:f1:56:cd:b1:46: e9:59:6a:aa:c6:c5:20:15:ed:e0:71:b7:5f:b7:9a:fa:fe:2e: d5:d7:f7:13:3c:77:09:0b:03:59:77:83:eb:08:a7:01:bd:d8: 68:8a:b8:47:dd:eb:a4:d4:fb:ac:86:a7:29:55:a6:d4:96:4d: 1a:88:9f:4e:5d:18:8c:f0:47:f6:7d:49:8f:68:b4:55:de:b9: 5b:e5:62:3b:6e:9e:71:7e:50:93:bb:85:af:99:91:26:8e:46: 71:e9:f0:21:bf:e7:cf:8d:a1:56:26:42:e7:78:3e:22:00:0b: 5c:99:ca:f2:51:7f:10:fe:a2:24:2b:e6:6a:0c:40:18:1e:01: 69:09:dd:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8FDMepByBNtGoGcqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2E0YTI0ZmQtZTNmMi00ODNjLWE1YmMtODM1ZDdhMGJl ZWRhMB4XDTI2MDgzMTEzMDAxMloXDTI2MTEyOTE0MDAxMlowLzEtMCsGA1UEAxMk ZGY3MzJjZDMtNjQ2My00MjIzLTgxYjctNjliODlmZjVjMDEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIcrEIyxRGOdeo0YzMwPSacy+L/A9BxUXiM/ 2z0UF91JsLFFMdYWG0qmE1E88AwnO1Wvhngf/naeH5lXfuTBB6rFAkm+Hk3Cy0q8 RESOxObBNmzZCDAbh0WVFUZMxAoeimKXSrBo8Wo7dV7hC1X9bikmnhhrO6FKcCdC eISfAMKoX366f7m+5Leb5OiL8b1j3epxlRNs3es76LxnkYfiMklxl4MUb5QUSB52 HCO7/D3LZvEVv7SRK/Ad1yQkxes/j3DLaBZ7pWFJw0JPSrVSailH2BubELXf86MU BkXp+XsFBf8PxZn/Jy7XZ7kV42c1HwFQllzEmR9hp7oar1oEmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPxCOQ9+a6CYFT4MlPJdaD5wFwIYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi83YTRh MjRmZC1lM2YyLTQ4M2MtYTViYy04MzVkN2EwYmVlZGEvY2I5ZDc5MjItZWYzMy0z NDNmLWJmNjItOGFlNDViYTc0MDM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvN2E0YTI0ZmQtZTNmMi00ODNjLWE1 YmMtODM1ZDdhMGJlZWRhLzdhNGEyNGZkLWUzZjItNDgzYy1hNWJjLTgzNWQ3YTBi ZWVkYS5jcmwwHwYDVR0jBBgwFoAUNhl/C+S2Fd3zdWZkTnAb5cLW5pwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi83YTRhMjRmZC1lM2YyLTQ4M2MtYTViYy04MzVk N2EwYmVlZGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4GUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABasNkYS9Id1+8EEr1kQ8/EtE0W8LyVRffuwwDl8+Nfx/GFVZLx/3sjy 20kmRjHIam1TAKRWdp2Xn2xe2bQ5EO9UkRXD6NbAISDfsFCtCwQXYUy5gUWPCkVE A+nHeUgoWq+gqF+nVU/8qX38ONy3Za/mG+e4MBK3AvjxVs2xRulZaqrGxSAV7eBx t1+3mvr+LtXX9xM8dwkLA1l3g+sIpwG92GiKuEfd66TU+6yGpylVptSWTRqIn05d GIzwR/Z9SY9otFXeuVvlYjtunnF+UJO7ha+ZkSaORnHp8CG/58+NoVYmQud4PiIA C1yZyvJRfxD+oiQr5moMQBgeAWkJ3dk= -----END CERTIFICATE-----Generated at Mon Sep 21 18:26:50 2026 by rpki-client