$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7f2f39b0-dcdd-4151-ab75-a882715cfa1c/cb2509d2-81b1-3735-90e7-da08c2517b1e.roa File: cb2509d2-81b1-3735-90e7-da08c2517b1e.roa (raw, json) Hash identifier: riRjBsWjA2q3CHklZOCwDOcgI3EVsEAKDKXNHIK+oy4= Subject key identifier: 81:DD:75:39:EB:79:09:E3:B0:49:8B:70:12:3D:A9:A4:2B:14:16:47 Certificate issuer: /CN=7f2f39b0-dcdd-4151-ab75-a882715cfa1c Certificate serial: 010D0C9F4328584FC3014DA6B3886696BED76280 Authority key identifier: F7:31:4B:65:C0:9B:55:D7:D4:8C:AD:E8:55:CD:A0:2F:B6:D1:F4:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7f2f39b0-dcdd-4151-ab75-a882715cfa1c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7f2f39b0-dcdd-4151-ab75-a882715cfa1c/cb2509d2-81b1-3735-90e7-da08c2517b1e.roa Signing time: Sat 07 Nov 2026 14:00:12 +0000 ROA not before: Sat 07 Nov 2026 14:00:12 +0000 ROA not after: Fri 05 Feb 2027 14:00:12 +0000 asID: 214483 IP address blocks: 23.150.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7f2f39b0-dcdd-4151-ab75-a882715cfa1c/7f2f39b0-dcdd-4151-ab75-a882715cfa1c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7f2f39b0-dcdd-4151-ab75-a882715cfa1c/7f2f39b0-dcdd-4151-ab75-a882715cfa1c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7f2f39b0-dcdd-4151-ab75-a882715cfa1c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:c3:01:4d:a6:b3:88:66:96:be:d7:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f2f39b0-dcdd-4151-ab75-a882715cfa1c Validity Not Before: Nov 7 14:00:12 2026 GMT Not After : Feb 5 14:00:12 2027 GMT Subject: CN=c8ad7c06-d65c-4849-8a87-848b73a9ffa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:1e:41:c2:67:ba:26:14:67:9e:31:3e:b7:47: 59:30:c6:5c:6a:9d:6e:a1:4b:a5:27:78:12:57:a3: 06:a2:57:fe:ec:f3:f1:9c:e5:e0:a2:42:3d:24:21: 4f:42:cd:c4:0f:4d:2a:52:72:35:e8:43:95:41:39: c2:ef:07:eb:28:c7:6b:c2:ed:d2:cd:84:f8:8b:65: 3e:62:c4:a0:15:65:0f:61:72:9b:c5:37:2d:74:bc: b8:a6:f8:a6:e4:1c:d9:e2:e3:a1:4c:76:c1:7f:e5: a4:86:84:51:7e:1d:c5:ad:3a:29:49:0a:2e:08:55: 42:0d:e2:19:2c:1a:23:81:66:b3:b2:a0:79:95:f4: 11:34:e7:8a:fa:50:10:3f:fd:ed:3e:9f:5b:09:bf: d9:f0:54:41:9f:3f:6f:8f:1e:e0:92:d2:52:91:e1: f7:30:5f:58:10:44:c0:79:25:75:f6:b0:05:24:94: b4:54:d8:aa:18:d3:42:d6:3a:c3:1e:99:22:cb:7b: fb:82:eb:69:d0:97:bc:c5:97:c3:bf:69:3c:a0:94: 93:cb:2b:39:b8:0f:dc:47:7d:5d:4c:7a:af:be:ee: ca:a9:c1:95:aa:22:dd:d9:8a:78:c0:5e:53:27:68: a7:86:9c:a0:07:a9:1b:4a:db:d1:aa:5a:56:28:e9: 87:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:DD:75:39:EB:79:09:E3:B0:49:8B:70:12:3D:A9:A4:2B:14:16:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7f2f39b0-dcdd-4151-ab75-a882715cfa1c/cb2509d2-81b1-3735-90e7-da08c2517b1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7f2f39b0-dcdd-4151-ab75-a882715cfa1c/7f2f39b0-dcdd-4151-ab75-a882715cfa1c.crl X509v3 Authority Key Identifier: keyid:F7:31:4B:65:C0:9B:55:D7:D4:8C:AD:E8:55:CD:A0:2F:B6:D1:F4:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7f2f39b0-dcdd-4151-ab75-a882715cfa1c.cer sbgp-ipAddrBlock: critical IPv4: 23.150.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:6c:96:c9:c5:9e:ea:22:68:3b:9d:c7:96:df:6f:61:bd:99: 09:a0:fd:10:c5:9c:1e:58:f5:33:6b:82:6b:6c:4f:48:09:9c: 1d:12:17:5f:a5:4e:00:d9:dd:4a:8c:34:e3:0e:d7:a6:4a:14: d8:70:1e:eb:bf:3c:46:6f:bc:f0:6a:c5:6c:cb:5a:e6:9a:6f: de:bd:a9:7e:eb:fe:05:3a:00:27:ec:b0:5d:7c:f7:a2:6a:36: 8d:2c:2e:1c:56:e3:0c:3b:5d:16:e3:5f:47:a1:22:84:c6:aa: 32:f1:e5:40:e2:57:55:f7:01:1e:f8:f4:da:df:72:4f:2e:86: d3:18:b6:58:bb:f5:56:8b:b2:a2:a1:d4:a2:6a:40:56:33:2b: 26:45:b8:05:31:c7:2a:a7:6b:b3:1f:9a:b8:a2:fc:24:ab:8a: 3b:38:ca:f2:a5:c4:dd:e3:5f:1b:07:29:b6:45:19:46:0b:e0: ff:42:2d:9e:e8:a2:a1:bb:b1:55:02:97:5f:43:12:f9:6e:aa: 58:3e:3b:14:5c:57:dc:85:f7:35:f0:ed:a0:94:fd:a8:f5:5d: 97:c5:f6:2a:96:c3:0f:88:f5:4e:83:a0:63:6d:bd:29:b0:49: 5a:2e:38:34:22:b9:74:14:8f:5e:66:1c:14:20:52:0d:b3:2e: f4:fc:3f:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE/DAU2ms4hmlr7XYoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2YyZjM5YjAtZGNkZC00MTUxLWFiNzUtYTg4MjcxNWNm YTFjMB4XDTI2MTEwNzE0MDAxMloXDTI3MDIwNTE0MDAxMlowLzEtMCsGA1UEAxMk YzhhZDdjMDYtZDY1Yy00ODQ5LThhODctODQ4YjczYTlmZmEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArh5Bwme6JhRnnjE+t0dZMMZcap1uoUulJ3gS V6MGolf+7PPxnOXgokI9JCFPQs3ED00qUnI16EOVQTnC7wfrKMdrwu3SzYT4i2U+ YsSgFWUPYXKbxTctdLy4pvim5BzZ4uOhTHbBf+WkhoRRfh3FrTopSQouCFVCDeIZ LBojgWazsqB5lfQRNOeK+lAQP/3tPp9bCb/Z8FRBnz9vjx7gktJSkeH3MF9YEETA eSV19rAFJJS0VNiqGNNC1jrDHpkiy3v7gutp0Je8xZfDv2k8oJSTyys5uA/cR31d THqvvu7KqcGVqiLd2Yp4wF5TJ2inhpygB6kbStvRqlpWKOmHSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIHddTnreQnjsEmLcBI9qaQrFBZHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi83ZjJm MzliMC1kY2RkLTQxNTEtYWI3NS1hODgyNzE1Y2ZhMWMvY2IyNTA5ZDItODFiMS0z NzM1LTkwZTctZGEwOGMyNTE3YjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvN2YyZjM5YjAtZGNkZC00MTUxLWFi NzUtYTg4MjcxNWNmYTFjLzdmMmYzOWIwLWRjZGQtNDE1MS1hYjc1LWE4ODI3MTVj ZmExYy5jcmwwHwYDVR0jBBgwFoAU9zFLZcCbVdfUjK3oVc2gL7bR9DcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi83ZjJmMzliMC1kY2RkLTQxNTEtYWI3NS1hODgy NzE1Y2ZhMWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5ZsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABBslsnFnuoiaDudx5bfb2G9mQmg/RDFnB5Y9TNrgmtsT0gJnB0SF1+l TgDZ3UqMNOMO16ZKFNhwHuu/PEZvvPBqxWzLWuaab969qX7r/gU6ACfssF1896Jq No0sLhxW4ww7XRbjX0ehIoTGqjLx5UDiV1X3AR749Nrfck8uhtMYtli79VaLsqKh 1KJqQFYzKyZFuAUxxyqna7Mfmrii/CSrijs4yvKlxN3jXxsHKbZFGUYL4P9CLZ7o oqG7sVUCl19DEvluqlg+OxRcV9yF9zXw7aCU/aj1XZfF9iqWww+I9U6DoGNtvSmw SVouODQiuXQUj15mHBQgUg2zLvT8PzE= -----END CERTIFICATE-----Generated at Sun Nov 15 10:26:29 2026 by rpki-client