$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d7b3ea-8cf6-44c4-b681-7b6272e688f6/bd4c0156-1e13-3368-a399-5dcfc75f4825.roa File: bd4c0156-1e13-3368-a399-5dcfc75f4825.roa (raw, json) Hash identifier: ZMXyEn8m9FYzSO61/iDcJQ6qPPRZvFsP0qe0ui+5F8I= Subject key identifier: 9E:43:3E:47:9C:94:9B:10:3B:B5:6E:D0:8B:0F:12:F2:1E:07:AD:37 Certificate issuer: /CN=40d7b3ea-8cf6-44c4-b681-7b6272e688f6 Certificate serial: 010D0C9F4328584E46BF249471D7AF7986520EC0 Authority key identifier: FD:2C:6C:4D:10:C9:EC:50:61:C1:EB:5D:84:52:24:3B:62:7B:2E:43 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d7b3ea-8cf6-44c4-b681-7b6272e688f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d7b3ea-8cf6-44c4-b681-7b6272e688f6/bd4c0156-1e13-3368-a399-5dcfc75f4825.roa Signing time: Wed 24 Jun 2026 09:00:12 +0000 ROA not before: Wed 24 Jun 2026 09:00:12 +0000 ROA not after: Tue 22 Sep 2026 09:00:12 +0000 asID: 2914 IP address blocks: 23.133.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d7b3ea-8cf6-44c4-b681-7b6272e688f6/40d7b3ea-8cf6-44c4-b681-7b6272e688f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d7b3ea-8cf6-44c4-b681-7b6272e688f6/40d7b3ea-8cf6-44c4-b681-7b6272e688f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d7b3ea-8cf6-44c4-b681-7b6272e688f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:46:bf:24:94:71:d7:af:79:86:52:0e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40d7b3ea-8cf6-44c4-b681-7b6272e688f6 Validity Not Before: Jun 24 09:00:12 2026 GMT Not After : Sep 22 09:00:12 2026 GMT Subject: CN=9908ab8c-b13d-439a-a142-cdbd2c6842cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:18:d1:b0:a6:f2:52:2b:5e:88:ae:06:83:20: 05:70:10:60:d3:25:82:57:77:33:c5:e5:23:ce:ce: 0d:d5:d1:95:e3:b6:92:85:91:7f:8e:88:93:fc:55: a4:29:4a:70:b5:53:04:e9:cf:b4:f5:0a:eb:fe:65: 98:e7:bb:76:10:35:9b:fb:ad:ae:3e:af:e7:e6:04: 9c:68:a3:31:e3:e1:37:b8:32:ab:f4:b4:c5:c1:8a: 41:f9:1e:59:49:3e:40:6c:55:ee:1b:65:65:ec:b7: 13:23:29:27:2d:cb:f0:47:46:29:6c:2f:44:36:19: 88:9f:db:ec:28:55:42:d2:fd:82:53:9e:f8:05:5a: ac:32:24:db:66:4d:b4:e5:2b:6a:c8:28:c5:1c:b1: 31:5f:d2:fd:49:b0:89:e4:03:51:47:0c:cb:6d:51: 54:c5:5b:43:ce:eb:12:b4:7a:83:df:94:75:48:9e: b5:74:35:c0:e1:83:50:a5:d9:ee:94:e6:b0:f9:f6: 53:0d:82:c2:6e:b6:86:45:7a:8a:3b:cb:a8:ff:67: fb:ec:79:c7:33:a3:1c:88:96:51:e5:a8:4f:2a:83: f5:6b:0e:7e:98:39:34:ee:24:81:27:c3:ca:60:69: 83:d3:de:2b:e5:21:05:51:d3:0d:95:88:32:4e:d9: c9:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:43:3E:47:9C:94:9B:10:3B:B5:6E:D0:8B:0F:12:F2:1E:07:AD:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d7b3ea-8cf6-44c4-b681-7b6272e688f6/bd4c0156-1e13-3368-a399-5dcfc75f4825.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d7b3ea-8cf6-44c4-b681-7b6272e688f6/40d7b3ea-8cf6-44c4-b681-7b6272e688f6.crl X509v3 Authority Key Identifier: keyid:FD:2C:6C:4D:10:C9:EC:50:61:C1:EB:5D:84:52:24:3B:62:7B:2E:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d7b3ea-8cf6-44c4-b681-7b6272e688f6.cer sbgp-ipAddrBlock: critical IPv4: 23.133.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:90:86:6e:86:65:94:68:08:71:e4:4c:f5:20:cc:24:62:9f: 45:ee:97:a3:9b:14:14:5e:10:3c:8a:ab:f9:00:3d:de:19:24: 10:80:8d:c9:53:bb:8e:7f:c6:a3:46:48:09:21:64:8c:e7:d7: 3b:aa:4a:67:ee:aa:1d:7b:ca:07:73:da:bc:04:10:4e:5e:f0: cd:b1:ab:6a:19:94:4d:f8:ba:56:50:b7:dc:84:d2:ed:d9:57: 6f:82:10:f8:97:8e:5f:96:5b:96:61:5e:cf:7f:6a:4e:e6:5b: d8:ec:42:92:69:db:4c:43:45:bb:1f:fb:88:6c:01:f2:26:9e: e4:3a:de:79:76:6e:c2:8d:b8:dc:31:3b:69:96:88:41:18:f5: 9e:25:b6:7f:33:63:70:fc:49:f7:d7:7a:9a:ee:5e:b2:4b:d8: cf:47:19:62:1c:38:de:f5:40:59:08:b7:ac:ac:8c:43:72:b7: 1b:8a:62:f2:7a:2c:63:49:f7:f1:45:d8:b6:a2:81:4d:41:a9: d2:b9:89:16:e4:5e:1c:f6:75:81:9a:6c:40:34:92:9b:1b:07: 35:fe:f3:91:ca:2a:e7:67:87:3b:98:18:5b:aa:77:3e:3f:4a: 1b:92:ab:55:8c:73:29:8c:78:85:84:a1:aa:42:6f:4a:36:c0: ab:df:d2:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5GvySUcdeveYZSDsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBkN2IzZWEtOGNmNi00NGM0LWI2ODEtN2I2MjcyZTY4 OGY2MB4XDTI2MDYyNDA5MDAxMloXDTI2MDkyMjA5MDAxMlowLzEtMCsGA1UEAxMk OTkwOGFiOGMtYjEzZC00MzlhLWExNDItY2RiZDJjNjg0MmNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4BjRsKbyUiteiK4GgyAFcBBg0yWCV3czxeUj zs4N1dGV47aShZF/joiT/FWkKUpwtVME6c+09Qrr/mWY57t2EDWb+62uPq/n5gSc aKMx4+E3uDKr9LTFwYpB+R5ZST5AbFXuG2Vl7LcTIyknLcvwR0YpbC9ENhmIn9vs KFVC0v2CU574BVqsMiTbZk205StqyCjFHLExX9L9SbCJ5ANRRwzLbVFUxVtDzusS tHqD35R1SJ61dDXA4YNQpdnulOaw+fZTDYLCbraGRXqKO8uo/2f77HnHM6MciJZR 5ahPKoP1aw5+mDk07iSBJ8PKYGmD094r5SEFUdMNlYgyTtnJiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ5DPkeclJsQO7Vu0IsPEvIeB603MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80MGQ3 YjNlYS04Y2Y2LTQ0YzQtYjY4MS03YjYyNzJlNjg4ZjYvYmQ0YzAxNTYtMWUxMy0z MzY4LWEzOTktNWRjZmM3NWY0ODI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNDBkN2IzZWEtOGNmNi00NGM0LWI2 ODEtN2I2MjcyZTY4OGY2LzQwZDdiM2VhLThjZjYtNDRjNC1iNjgxLTdiNjI3MmU2 ODhmNi5jcmwwHwYDVR0jBBgwFoAU/SxsTRDJ7FBhwetdhFIkO2J7LkMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80MGQ3YjNlYS04Y2Y2LTQ0YzQtYjY4MS03YjYy NzJlNjg4ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4WkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG2Qhm6GZZRoCHHkTPUgzCRin0Xul6ObFBReEDyKq/kAPd4ZJBCAjclT u45/xqNGSAkhZIzn1zuqSmfuqh17ygdz2rwEEE5e8M2xq2oZlE34ulZQt9yE0u3Z V2+CEPiXjl+WW5ZhXs9/ak7mW9jsQpJp20xDRbsf+4hsAfImnuQ63nl2bsKNuNwx O2mWiEEY9Z4ltn8zY3D8SffXepruXrJL2M9HGWIcON71QFkIt6ysjENytxuKYvJ6 LGNJ9/FF2LaigU1BqdK5iRbkXhz2dYGabEA0kpsbBzX+85HKKudnhzuYGFuqdz4/ ShuSq1WMcymMeIWEoapCb0o2wKvf0v4= -----END CERTIFICATE-----Generated at Tue Jul 7 20:07:25 2026 by rpki-client