$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f0c28c0-bbce-4871-aef3-c112abc2be5d/bb1446ec-203d-312c-8541-36f60d5e2778.roa File: bb1446ec-203d-312c-8541-36f60d5e2778.roa (raw, json) Hash identifier: o6XLS6MWzQe4lq2ZJLmvUSsob9iLRN0D+pvjNowNrD8= Subject key identifier: 54:EC:D8:5F:B8:89:54:A7:A3:E1:CE:BB:43:C4:F6:E9:C2:3E:73:E4 Certificate issuer: /CN=8f0c28c0-bbce-4871-aef3-c112abc2be5d Certificate serial: 010D0C9F4328584B6E91FE82A9DAE794DF2FCD80 Authority key identifier: FA:5F:A6:60:9D:B9:61:A1:23:A2:6F:BA:92:D1:68:1D:39:8F:6E:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f0c28c0-bbce-4871-aef3-c112abc2be5d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f0c28c0-bbce-4871-aef3-c112abc2be5d/bb1446ec-203d-312c-8541-36f60d5e2778.roa Signing time: Mon 06 Oct 2025 13:00:41 +0000 ROA not before: Mon 06 Oct 2025 13:00:41 +0000 ROA not after: Sun 04 Jan 2026 14:00:41 +0000 asID: 21665 IP address blocks: 23.133.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f0c28c0-bbce-4871-aef3-c112abc2be5d/8f0c28c0-bbce-4871-aef3-c112abc2be5d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f0c28c0-bbce-4871-aef3-c112abc2be5d/8f0c28c0-bbce-4871-aef3-c112abc2be5d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f0c28c0-bbce-4871-aef3-c112abc2be5d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6e:91:fe:82:a9:da:e7:94:df:2f:cd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f0c28c0-bbce-4871-aef3-c112abc2be5d Validity Not Before: Oct 6 13:00:41 2025 GMT Not After : Jan 4 14:00:41 2026 GMT Subject: CN=3440f68d-1454-4ea8-b91a-9ab6f7347c84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:43:c5:b7:36:e1:03:98:69:6c:46:a6:31:fb: 5e:b2:3d:d1:55:f4:8b:80:e4:30:8b:27:52:3a:7e: fe:56:ce:38:86:d3:26:d7:18:6d:75:31:96:77:76: d8:72:ae:98:53:2e:d9:a5:7d:2e:4c:26:9a:89:95: db:23:b5:3f:8a:74:50:4a:cc:84:27:04:64:80:76: 3d:1e:ca:30:65:6e:d8:74:29:57:c2:28:01:bf:c6: 84:d2:dd:d5:6c:4f:b2:dd:ae:c1:a4:e8:ad:5d:6c: 37:cc:0d:37:fe:8d:ab:2a:5b:43:9f:e4:c7:5e:a9: bf:47:2c:be:c0:41:f1:a6:2c:61:fa:04:30:ac:24: 97:a2:9b:10:aa:96:58:f6:e2:36:0e:ae:76:b6:fa: 1a:dc:34:87:eb:02:a0:9a:15:f4:1e:f0:1d:c7:2c: ec:67:85:ca:aa:4a:4e:3c:01:d8:25:b6:8c:49:79: fe:67:38:60:96:c1:c9:99:fc:ab:06:92:71:de:1f: e1:e0:e2:5c:67:84:bf:9a:08:b6:7a:63:66:31:8e: 2b:b1:c2:cf:dc:7f:ad:95:6a:09:93:74:ad:67:e4: c7:28:3c:39:43:6f:3f:9d:c4:8c:a3:e7:56:85:44: b6:0f:bd:60:11:02:f8:0d:db:eb:0f:ec:39:b6:f3: 28:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:EC:D8:5F:B8:89:54:A7:A3:E1:CE:BB:43:C4:F6:E9:C2:3E:73:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f0c28c0-bbce-4871-aef3-c112abc2be5d/bb1446ec-203d-312c-8541-36f60d5e2778.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f0c28c0-bbce-4871-aef3-c112abc2be5d/8f0c28c0-bbce-4871-aef3-c112abc2be5d.crl X509v3 Authority Key Identifier: keyid:FA:5F:A6:60:9D:B9:61:A1:23:A2:6F:BA:92:D1:68:1D:39:8F:6E:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f0c28c0-bbce-4871-aef3-c112abc2be5d.cer sbgp-ipAddrBlock: critical IPv4: 23.133.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:82:a1:30:9a:04:7a:c8:d8:2f:6e:4d:40:ca:b2:e6:64:d8: 60:7d:82:40:fe:31:ae:e3:98:fd:15:7f:51:ee:56:b3:59:56: 03:48:20:58:de:5f:58:83:e9:cb:7f:d4:a3:28:69:cd:96:94: 44:fa:1e:3e:53:82:53:55:d0:4b:05:b5:ca:24:8d:14:a6:64: 66:df:f1:eb:cb:2d:79:71:5a:db:83:27:3a:bf:76:6d:92:51: bd:0c:d7:51:6c:30:97:18:cc:d9:3f:54:ce:aa:a3:62:5d:89: 4a:2a:a1:e4:22:e1:f1:79:37:2a:35:26:74:01:c1:49:c5:97: df:db:23:45:02:12:78:ae:97:20:a5:c5:b6:c5:dc:7a:b4:d8: f2:e2:47:73:54:02:b9:70:70:66:e6:fe:be:e7:eb:e3:23:eb: b6:9a:07:3a:71:fc:0f:1a:86:e3:d5:ca:bd:26:de:f2:c0:b5: 7d:dc:05:0f:dd:47:7f:64:7f:20:4a:eb:5f:d7:83:3a:1f:9e: 3b:b3:58:49:5e:5c:72:e5:3c:95:1c:86:39:af:33:99:6f:30: a4:c6:6a:b2:13:80:1b:04:98:bf:dc:dc:0f:8f:ad:a7:86:c2: 6f:72:e9:97:77:47:0b:f6:7a:58:c0:42:73:81:69:3e:a5:05: 4f:fd:bd:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtukf6CqdrnlN8vzYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGYwYzI4YzAtYmJjZS00ODcxLWFlZjMtYzExMmFiYzJi ZTVkMB4XDTI1MTAwNjEzMDA0MVoXDTI2MDEwNDE0MDA0MVowLzEtMCsGA1UEAxMk MzQ0MGY2OGQtMTQ1NC00ZWE4LWI5MWEtOWFiNmY3MzQ3Yzg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgkPFtzbhA5hpbEamMftesj3RVfSLgOQwiydS On7+Vs44htMm1xhtdTGWd3bYcq6YUy7ZpX0uTCaaiZXbI7U/inRQSsyEJwRkgHY9 HsowZW7YdClXwigBv8aE0t3VbE+y3a7BpOitXWw3zA03/o2rKltDn+THXqm/Ryy+ wEHxpixh+gQwrCSXopsQqpZY9uI2Dq52tvoa3DSH6wKgmhX0HvAdxyzsZ4XKqkpO PAHYJbaMSXn+ZzhglsHJmfyrBpJx3h/h4OJcZ4S/mgi2emNmMY4rscLP3H+tlWoJ k3StZ+THKDw5Q28/ncSMo+dWhUS2D71gEQL4DdvrD+w5tvMoFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFTs2F+4iVSno+HOu0PE9unCPnPkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84ZjBj MjhjMC1iYmNlLTQ4NzEtYWVmMy1jMTEyYWJjMmJlNWQvYmIxNDQ2ZWMtMjAzZC0z MTJjLTg1NDEtMzZmNjBkNWUyNzc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOGYwYzI4YzAtYmJjZS00ODcxLWFl ZjMtYzExMmFiYzJiZTVkLzhmMGMyOGMwLWJiY2UtNDg3MS1hZWYzLWMxMTJhYmMy YmU1ZC5jcmwwHwYDVR0jBBgwFoAU+l+mYJ25YaEjom+6ktFoHTmPbhQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84ZjBjMjhjMC1iYmNlLTQ4NzEtYWVmMy1jMTEy YWJjMmJlNWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4WMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGOCoTCaBHrI2C9uTUDKsuZk2GB9gkD+Ma7jmP0Vf1HuVrNZVgNIIFje X1iD6ct/1KMoac2WlET6Hj5TglNV0EsFtcokjRSmZGbf8evLLXlxWtuDJzq/dm2S Ub0M11FsMJcYzNk/VM6qo2JdiUoqoeQi4fF5Nyo1JnQBwUnFl9/bI0UCEniulyCl xbbF3Hq02PLiR3NUArlwcGbm/r7n6+Mj67aaBzpx/A8ahuPVyr0m3vLAtX3cBQ/d R39kfyBK61/XgzofnjuzWEleXHLlPJUchjmvM5lvMKTGarITgBsEmL/c3A+PraeG wm9y6Zd3Rwv2eljAQnOBaT6lBU/9veQ= -----END CERTIFICATE-----Generated at Fri Oct 10 16:16:40 2025 by rpki-client