$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bb678ebe-0d8f-4513-aec9-decdadbd1e1c/05ce43ff-ab24-3b50-ae65-c77439766681.roa File: 05ce43ff-ab24-3b50-ae65-c77439766681.roa (raw, json) Hash identifier: cxihkcWX75jl3gPxAQQGdIy0oKDmQuxxUSs2QwLLcZA= Subject key identifier: 09:A0:49:CB:D0:C8:D5:AE:1B:4B:B9:A9:29:95:D9:F7:ED:01:FE:E0 Certificate issuer: /CN=bb678ebe-0d8f-4513-aec9-decdadbd1e1c Certificate serial: 010D0C9F4328584F6F230F71CBF4F404096CE500 Authority key identifier: 54:31:AB:87:54:53:F8:07:D0:F3:F2:DF:90:AE:C7:CD:C7:96:04:5B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bb678ebe-0d8f-4513-aec9-decdadbd1e1c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bb678ebe-0d8f-4513-aec9-decdadbd1e1c/05ce43ff-ab24-3b50-ae65-c77439766681.roa Signing time: Thu 08 Oct 2026 13:00:12 +0000 ROA not before: Thu 08 Oct 2026 13:00:12 +0000 ROA not after: Wed 06 Jan 2027 14:00:12 +0000 asID: 32212 IP address blocks: 165.140.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bb678ebe-0d8f-4513-aec9-decdadbd1e1c/bb678ebe-0d8f-4513-aec9-decdadbd1e1c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bb678ebe-0d8f-4513-aec9-decdadbd1e1c/bb678ebe-0d8f-4513-aec9-decdadbd1e1c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bb678ebe-0d8f-4513-aec9-decdadbd1e1c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6f:23:0f:71:cb:f4:f4:04:09:6c:e5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb678ebe-0d8f-4513-aec9-decdadbd1e1c Validity Not Before: Oct 8 13:00:12 2026 GMT Not After : Jan 6 14:00:12 2027 GMT Subject: CN=42e21e35-302b-4305-b4d0-67cb00f1891d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:62:0c:36:83:a9:f6:52:9d:66:e7:1b:14:d2: bf:cc:01:7f:ef:62:e4:fa:aa:54:22:11:f6:22:8e: af:7b:94:37:c8:3b:62:81:f7:a2:d1:38:02:a2:2c: fe:20:ef:ea:0f:72:e0:86:9a:a0:1e:ac:e3:aa:37: 99:90:d3:9c:8e:e8:45:dc:86:b4:cf:b5:37:89:53: 18:08:77:ff:a3:e6:68:a9:eb:90:94:50:e1:73:5e: 9c:ae:b7:0c:93:f2:60:39:05:a1:ef:5b:07:08:0d: 3b:b1:36:fa:65:c7:f9:0c:30:a0:c8:68:42:06:f5: f3:b9:0a:a6:36:f5:74:8a:a9:3a:6b:fa:d9:bf:30: e8:fa:48:3e:40:be:0a:ff:b8:84:6d:db:d7:c1:54: 61:e1:82:f0:2b:fa:aa:18:5f:0e:0c:95:cc:d4:20: 04:10:7d:b6:99:ab:90:2b:8b:19:e3:95:04:60:7a: ae:ee:f9:22:f3:82:7c:3c:9e:4d:99:bd:b3:1f:79: f7:51:83:ac:5c:da:fb:58:f0:43:78:53:98:bb:41: ef:30:7a:44:28:45:0f:21:8a:1c:06:23:aa:a1:c2: c0:01:d0:1b:00:a6:45:03:80:a8:91:11:ed:d5:05: c2:3b:fa:a5:05:d8:c3:a1:36:3a:55:cf:df:84:ff: 7b:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:A0:49:CB:D0:C8:D5:AE:1B:4B:B9:A9:29:95:D9:F7:ED:01:FE:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bb678ebe-0d8f-4513-aec9-decdadbd1e1c/05ce43ff-ab24-3b50-ae65-c77439766681.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bb678ebe-0d8f-4513-aec9-decdadbd1e1c/bb678ebe-0d8f-4513-aec9-decdadbd1e1c.crl X509v3 Authority Key Identifier: keyid:54:31:AB:87:54:53:F8:07:D0:F3:F2:DF:90:AE:C7:CD:C7:96:04:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bb678ebe-0d8f-4513-aec9-decdadbd1e1c.cer sbgp-ipAddrBlock: critical IPv4: 165.140.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:b5:7e:4d:ed:e8:dc:ce:83:c5:d8:cb:a1:3a:d1:04:26:cc: 0a:6a:f9:e4:71:9b:bc:2c:9a:0c:3a:70:c0:b8:5e:93:e6:66: 05:9b:4c:65:87:cf:f1:bd:ff:3e:1b:d5:41:d9:17:2c:d9:0f: ef:db:bc:1d:8d:fc:77:c2:19:c2:53:15:41:c7:91:e7:42:21: 6d:96:d5:3c:ce:04:4f:5f:a8:f9:20:b3:1e:85:6d:f2:62:64: c4:6f:44:97:6b:76:81:af:30:15:58:24:94:5c:06:6e:50:a4: 32:f6:dc:d9:a9:42:6e:f7:04:0c:cc:dd:1b:83:5a:1f:0a:4f: 30:76:aa:3f:37:f3:b7:d8:ee:59:21:ad:1e:7b:ce:8f:08:19: 3f:c8:65:89:a6:ce:a3:59:a6:8f:c0:5d:5b:6c:a5:37:68:44: ef:61:4f:cb:93:bd:44:47:34:9b:53:58:f7:f2:22:d8:07:7a: 45:f0:a7:2c:d0:be:bb:0e:ab:74:52:83:83:b7:f9:c2:14:5f: 7d:47:c0:bf:8e:cd:9d:5d:6b:12:eb:5f:3c:40:41:e6:ca:f8: e4:55:08:6d:f1:b8:62:de:61:71:23:49:65:96:7e:14:2c:69: 6c:77:0e:31:17:43:d6:1a:2f:0e:9c:db:d7:14:a5:2c:0d:04: 9a:4e:11:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9vIw9xy/T0BAls5QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmI2NzhlYmUtMGQ4Zi00NTEzLWFlYzktZGVjZGFkYmQx ZTFjMB4XDTI2MTAwODEzMDAxMloXDTI3MDEwNjE0MDAxMlowLzEtMCsGA1UEAxMk NDJlMjFlMzUtMzAyYi00MzA1LWI0ZDAtNjdjYjAwZjE4OTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGIMNoOp9lKdZucbFNK/zAF/72Lk+qpUIhH2 Io6ve5Q3yDtigfei0TgCoiz+IO/qD3LghpqgHqzjqjeZkNOcjuhF3Ia0z7U3iVMY CHf/o+ZoqeuQlFDhc16crrcMk/JgOQWh71sHCA07sTb6Zcf5DDCgyGhCBvXzuQqm NvV0iqk6a/rZvzDo+kg+QL4K/7iEbdvXwVRh4YLwK/qqGF8ODJXM1CAEEH22mauQ K4sZ45UEYHqu7vki84J8PJ5Nmb2zH3n3UYOsXNr7WPBDeFOYu0HvMHpEKEUPIYoc BiOqocLAAdAbAKZFA4CokRHt1QXCO/qlBdjDoTY6Vc/fhP97CQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAmgScvQyNWuG0u5qSmV2fftAf7gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iYjY3 OGViZS0wZDhmLTQ1MTMtYWVjOS1kZWNkYWRiZDFlMWMvMDVjZTQzZmYtYWIyNC0z YjUwLWFlNjUtYzc3NDM5NzY2NjgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmI2NzhlYmUtMGQ4Zi00NTEzLWFl YzktZGVjZGFkYmQxZTFjL2JiNjc4ZWJlLTBkOGYtNDUxMy1hZWM5LWRlY2RhZGJk MWUxYy5jcmwwHwYDVR0jBBgwFoAUVDGrh1RT+AfQ8/LfkK7HzceWBFswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iYjY3OGViZS0wZDhmLTQ1MTMtYWVjOS1kZWNk YWRiZDFlMWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApYx4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJO1fk3t6NzOg8XYy6E60QQmzApq+eRxm7wsmgw6cMC4XpPmZgWbTGWH z/G9/z4b1UHZFyzZD+/bvB2N/HfCGcJTFUHHkedCIW2W1TzOBE9fqPkgsx6FbfJi ZMRvRJdrdoGvMBVYJJRcBm5QpDL23NmpQm73BAzM3RuDWh8KTzB2qj8387fY7lkh rR57zo8IGT/IZYmmzqNZpo/AXVtspTdoRO9hT8uTvURHNJtTWPfyItgHekXwpyzQ vrsOq3RSg4O3+cIUX31HwL+OzZ1daxLrXzxAQebK+ORVCG3xuGLeYXEjSWWWfhQs aWx3DjEXQ9YaLw6c29cUpSwNBJpOEaE= -----END CERTIFICATE-----Generated at Wed Oct 28 11:43:43 2026 by rpki-client