$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d7b3ea-8cf6-44c4-b681-7b6272e688f6/bd4c0156-1e13-3368-a399-5dcfc75f4825.roa File: bd4c0156-1e13-3368-a399-5dcfc75f4825.roa (raw, json) Hash identifier: v9zKqm9PL/1NhROahNdwxjk0DNEkG1SgOxFcqJQs2q8= Subject key identifier: 3A:31:C1:92:2A:97:F6:52:FF:1E:48:4D:8A:F2:61:4C:8E:80:28:39 Certificate issuer: /CN=40d7b3ea-8cf6-44c4-b681-7b6272e688f6 Certificate serial: 010D0C9F4328584EE921EE9F4BD74199F4A67B00 Authority key identifier: FD:2C:6C:4D:10:C9:EC:50:61:C1:EB:5D:84:52:24:3B:62:7B:2E:43 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d7b3ea-8cf6-44c4-b681-7b6272e688f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d7b3ea-8cf6-44c4-b681-7b6272e688f6/bd4c0156-1e13-3368-a399-5dcfc75f4825.roa Signing time: Fri 21 Aug 2026 13:00:11 +0000 ROA not before: Fri 21 Aug 2026 13:00:11 +0000 ROA not after: Thu 19 Nov 2026 14:00:11 +0000 asID: 2914 IP address blocks: 23.133.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d7b3ea-8cf6-44c4-b681-7b6272e688f6/40d7b3ea-8cf6-44c4-b681-7b6272e688f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d7b3ea-8cf6-44c4-b681-7b6272e688f6/40d7b3ea-8cf6-44c4-b681-7b6272e688f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d7b3ea-8cf6-44c4-b681-7b6272e688f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 23 Aug 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e9:21:ee:9f:4b:d7:41:99:f4:a6:7b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40d7b3ea-8cf6-44c4-b681-7b6272e688f6 Validity Not Before: Aug 21 13:00:11 2026 GMT Not After : Nov 19 14:00:11 2026 GMT Subject: CN=612db8a1-cc84-4c23-b108-a8c3d8e7522e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:65:a9:49:41:8d:e7:e5:bc:76:39:7b:77:46: 6e:9e:e0:3c:27:e1:3c:0d:96:28:1f:10:f3:4c:89: c2:af:29:de:02:fe:b7:65:64:25:3d:69:49:36:43: 64:c5:0c:3e:2a:ec:e1:66:7f:0b:ac:58:2e:23:e5: 3d:0d:82:b6:1e:76:f0:b0:1e:da:90:a8:69:b4:c1: a7:cb:4b:80:71:8c:8a:13:8b:0a:8c:75:29:f2:2f: f9:17:c5:8d:7f:19:62:ef:b2:2f:d3:79:25:f1:de: e3:eb:cb:65:ee:df:b8:7f:00:2c:7c:2e:61:d9:68: 3f:13:e0:81:e1:0c:6a:5a:ea:c9:c9:e4:29:41:0d: cf:bf:06:42:5f:aa:58:8a:53:58:38:a5:d9:ab:71: af:65:b1:e6:4b:b4:1d:76:0f:7a:7a:d8:de:1a:9b: 53:a4:aa:4d:f8:cd:17:25:65:b3:d1:f3:d5:24:a3: 61:c7:33:4c:08:6e:c9:84:12:4b:6e:8d:03:d4:5c: da:6e:01:fd:b0:3c:f8:e4:3d:c1:dd:ea:81:cd:b8: 38:c4:7e:1f:1a:8c:d3:e9:97:df:e3:c0:76:f9:41: 3c:ed:bb:85:16:02:b9:c6:d1:fe:8f:f1:f9:48:61: 28:78:b8:a8:ed:20:17:3f:7c:7b:e1:64:1d:5e:59: 3d:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:31:C1:92:2A:97:F6:52:FF:1E:48:4D:8A:F2:61:4C:8E:80:28:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d7b3ea-8cf6-44c4-b681-7b6272e688f6/bd4c0156-1e13-3368-a399-5dcfc75f4825.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d7b3ea-8cf6-44c4-b681-7b6272e688f6/40d7b3ea-8cf6-44c4-b681-7b6272e688f6.crl X509v3 Authority Key Identifier: keyid:FD:2C:6C:4D:10:C9:EC:50:61:C1:EB:5D:84:52:24:3B:62:7B:2E:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d7b3ea-8cf6-44c4-b681-7b6272e688f6.cer sbgp-ipAddrBlock: critical IPv4: 23.133.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:9a:11:02:d8:7d:f7:d8:44:16:a2:65:a7:d4:8a:b6:be:e2: ad:91:64:c7:e8:54:6e:ef:ee:b3:94:e8:9e:64:9d:2c:ef:0c: 05:74:f5:4f:2b:70:59:79:2d:d7:26:4e:9e:76:b0:a6:08:17: ab:de:95:1d:dd:e9:97:4f:4d:57:07:e7:fd:36:a9:d9:09:51: 50:7e:6d:7c:7c:9b:d6:12:f3:a6:bf:d1:93:cf:7b:6e:1b:25: 2d:63:69:aa:79:fd:6e:d2:51:5b:a9:d4:5a:96:60:0b:be:9f: f1:55:9d:dd:a4:c9:e5:ba:97:7d:75:71:d1:fd:6e:ab:e2:05: 14:72:2b:a2:2a:b2:6d:a4:89:87:24:e7:1d:93:7b:85:2c:d3: df:c2:ef:b7:f7:24:37:67:cf:b3:dd:51:9e:5d:f3:a0:39:6a: fe:75:af:95:c7:c6:10:7a:bc:c5:af:7b:9b:79:f1:2c:e2:f7: 29:77:e9:4c:cb:25:9d:06:84:b8:a9:32:7f:69:41:3a:50:cc: 32:7c:89:9c:84:45:64:a6:82:4a:04:10:9a:a7:f2:ef:b0:24: a3:8f:a6:c2:e2:4f:cc:e5:8d:b4:cc:53:bc:18:70:fe:62:ff: 4b:1b:7a:7e:4e:f2:64:7a:f8:5f:94:98:ea:ac:35:0c:96:12: d8:66:0b:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7pIe6fS9dBmfSmewAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBkN2IzZWEtOGNmNi00NGM0LWI2ODEtN2I2MjcyZTY4 OGY2MB4XDTI2MDgyMTEzMDAxMVoXDTI2MTExOTE0MDAxMVowLzEtMCsGA1UEAxMk NjEyZGI4YTEtY2M4NC00YzIzLWIxMDgtYThjM2Q4ZTc1MjJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmWpSUGN5+W8djl7d0ZunuA8J+E8DZYoHxDz TInCryneAv63ZWQlPWlJNkNkxQw+KuzhZn8LrFguI+U9DYK2HnbwsB7akKhptMGn y0uAcYyKE4sKjHUp8i/5F8WNfxli77Iv03kl8d7j68tl7t+4fwAsfC5h2Wg/E+CB 4QxqWurJyeQpQQ3PvwZCX6pYilNYOKXZq3GvZbHmS7Qddg96etjeGptTpKpN+M0X JWWz0fPVJKNhxzNMCG7JhBJLbo0D1FzabgH9sDz45D3B3eqBzbg4xH4fGozT6Zff 48B2+UE87buFFgK5xtH+j/H5SGEoeLio7SAXP3x74WQdXlk9dwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDoxwZIql/ZS/x5ITYryYUyOgCg5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80MGQ3 YjNlYS04Y2Y2LTQ0YzQtYjY4MS03YjYyNzJlNjg4ZjYvYmQ0YzAxNTYtMWUxMy0z MzY4LWEzOTktNWRjZmM3NWY0ODI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNDBkN2IzZWEtOGNmNi00NGM0LWI2 ODEtN2I2MjcyZTY4OGY2LzQwZDdiM2VhLThjZjYtNDRjNC1iNjgxLTdiNjI3MmU2 ODhmNi5jcmwwHwYDVR0jBBgwFoAU/SxsTRDJ7FBhwetdhFIkO2J7LkMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80MGQ3YjNlYS04Y2Y2LTQ0YzQtYjY4MS03YjYy NzJlNjg4ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4WkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADKaEQLYfffYRBaiZafUira+4q2RZMfoVG7v7rOU6J5knSzvDAV09U8r cFl5LdcmTp52sKYIF6velR3d6ZdPTVcH5/02qdkJUVB+bXx8m9YS86a/0ZPPe24b JS1jaap5/W7SUVup1FqWYAu+n/FVnd2kyeW6l311cdH9bqviBRRyK6Iqsm2kiYck 5x2Te4Us09/C77f3JDdnz7PdUZ5d86A5av51r5XHxhB6vMWve5t58Szi9yl36UzL JZ0GhLipMn9pQTpQzDJ8iZyERWSmgkoEEJqn8u+wJKOPpsLiT8zljbTMU7wYcP5i /0sben5O8mR6+F+UmOqsNQyWEthmC6I= -----END CERTIFICATE-----Generated at Fri Aug 21 22:06:17 2026 by rpki-client