$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bb678ebe-0d8f-4513-aec9-decdadbd1e1c/05ce43ff-ab24-3b50-ae65-c77439766681.roa File: 05ce43ff-ab24-3b50-ae65-c77439766681.roa (raw, json) Hash identifier: PFfdu4lbJmDpJfqr8d/buSUUnjRmLfUcmj5C1kMhYUY= Subject key identifier: 33:4F:07:2B:FD:F8:BF:97:89:08:83:17:69:D9:4E:57:55:26:AA:0F Certificate issuer: /CN=bb678ebe-0d8f-4513-aec9-decdadbd1e1c Certificate serial: 010D0C9F4328584ECD372DB9014F6BE2607B6F80 Authority key identifier: 54:31:AB:87:54:53:F8:07:D0:F3:F2:DF:90:AE:C7:CD:C7:96:04:5B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bb678ebe-0d8f-4513-aec9-decdadbd1e1c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bb678ebe-0d8f-4513-aec9-decdadbd1e1c/05ce43ff-ab24-3b50-ae65-c77439766681.roa Signing time: Tue 11 Aug 2026 13:00:11 +0000 ROA not before: Tue 11 Aug 2026 13:00:11 +0000 ROA not after: Mon 09 Nov 2026 14:00:11 +0000 asID: 32212 IP address blocks: 165.140.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bb678ebe-0d8f-4513-aec9-decdadbd1e1c/bb678ebe-0d8f-4513-aec9-decdadbd1e1c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bb678ebe-0d8f-4513-aec9-decdadbd1e1c/bb678ebe-0d8f-4513-aec9-decdadbd1e1c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bb678ebe-0d8f-4513-aec9-decdadbd1e1c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:cd:37:2d:b9:01:4f:6b:e2:60:7b:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb678ebe-0d8f-4513-aec9-decdadbd1e1c Validity Not Before: Aug 11 13:00:11 2026 GMT Not After : Nov 9 14:00:11 2026 GMT Subject: CN=d46be528-4f6a-42a6-a91b-0263ec197681 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:7a:7c:b2:3f:74:64:f1:3f:b4:9a:d8:59:5a: 64:1f:c8:d1:d7:b6:f7:c6:eb:d8:37:bc:ed:5c:84: 7e:29:65:c5:1c:78:53:b2:69:7a:8d:c0:74:55:d0: 7f:e8:87:c6:12:c5:a7:31:39:19:5a:3a:a7:4d:ed: e9:6d:02:f7:7f:cf:f5:92:50:3a:8a:3d:65:9c:8a: 6e:07:67:1c:c6:da:ab:41:2c:89:38:b3:a7:ed:0e: e3:2d:f1:68:8c:21:0c:8f:63:e1:df:56:41:1f:b8: d1:6c:b6:9c:10:04:74:cb:c0:45:cb:18:d1:3c:36: 2b:44:a7:07:d7:62:d9:ca:38:17:b2:ea:27:7c:69: 12:30:9c:e6:a0:27:6c:3a:d4:25:5f:45:6f:ca:c1: 95:8c:85:cf:9b:fd:a9:d0:51:22:bd:8f:42:dc:10: 09:2b:56:16:61:98:ad:ca:b5:e9:c4:96:cb:b0:fd: 38:81:ff:1d:96:9e:91:ac:02:8e:4a:c6:ed:03:1f: f7:d8:3a:f1:46:92:18:31:c6:c4:19:4e:07:d6:85: 9d:ed:87:cd:6a:be:2b:32:89:eb:cb:ad:51:3d:16: 78:bc:a7:f3:86:04:03:76:c2:42:bf:1d:04:b2:a3: 5e:20:13:de:68:e5:1e:8c:85:2a:6c:71:fb:b5:e7: 70:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:4F:07:2B:FD:F8:BF:97:89:08:83:17:69:D9:4E:57:55:26:AA:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bb678ebe-0d8f-4513-aec9-decdadbd1e1c/05ce43ff-ab24-3b50-ae65-c77439766681.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bb678ebe-0d8f-4513-aec9-decdadbd1e1c/bb678ebe-0d8f-4513-aec9-decdadbd1e1c.crl X509v3 Authority Key Identifier: keyid:54:31:AB:87:54:53:F8:07:D0:F3:F2:DF:90:AE:C7:CD:C7:96:04:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bb678ebe-0d8f-4513-aec9-decdadbd1e1c.cer sbgp-ipAddrBlock: critical IPv4: 165.140.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:7d:b0:13:a9:0c:25:f6:da:70:d1:74:9d:9a:d2:4d:e4:5a: 03:70:a4:8f:cc:b6:9c:80:74:66:b3:ec:63:9f:d1:94:af:cf: 6e:8d:73:9d:77:73:2a:85:57:e6:71:de:ee:67:9e:34:ff:3f: 19:4b:a3:a6:03:65:f2:ff:da:de:61:f3:10:98:c6:26:e5:7b: 82:52:3d:89:4b:95:f2:aa:a3:38:3a:9f:73:29:82:be:0d:82: d2:61:5d:e4:3f:08:47:ea:81:93:65:3d:7f:58:8d:f1:a8:a8: 12:d8:17:bf:c0:d6:96:04:4e:3e:cf:72:a1:52:a3:ac:2c:6a: 02:11:07:69:6c:f4:bf:b1:e9:f0:24:c0:d9:65:88:4a:03:89: 63:b0:78:5e:9d:00:ca:4d:9b:2d:8c:54:23:d7:24:06:a7:ff: a2:16:53:f1:f8:13:1c:1c:f8:88:e8:e4:1f:52:2b:2c:e7:c9: 87:d7:0e:05:f2:c9:e3:25:e4:cd:c5:78:e1:8b:08:31:39:6a: f6:0e:49:a0:f9:6c:af:b6:5a:3e:78:70:cd:ee:86:f9:ae:b2: 10:8c:3d:77:a5:02:a4:5e:65:55:54:7b:a6:c7:c0:1d:9d:3a: eb:9d:a0:f9:07:c8:b6:e0:7c:27:88:6e:db:c7:f2:50:96:a6: 91:fd:44:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7NNy25AU9r4mB7b4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmI2NzhlYmUtMGQ4Zi00NTEzLWFlYzktZGVjZGFkYmQx ZTFjMB4XDTI2MDgxMTEzMDAxMVoXDTI2MTEwOTE0MDAxMVowLzEtMCsGA1UEAxMk ZDQ2YmU1MjgtNGY2YS00MmE2LWE5MWItMDI2M2VjMTk3NjgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA83p8sj90ZPE/tJrYWVpkH8jR17b3xuvYN7zt XIR+KWXFHHhTsml6jcB0VdB/6IfGEsWnMTkZWjqnTe3pbQL3f8/1klA6ij1lnIpu B2ccxtqrQSyJOLOn7Q7jLfFojCEMj2Ph31ZBH7jRbLacEAR0y8BFyxjRPDYrRKcH 12LZyjgXsuonfGkSMJzmoCdsOtQlX0VvysGVjIXPm/2p0FEivY9C3BAJK1YWYZit yrXpxJbLsP04gf8dlp6RrAKOSsbtAx/32DrxRpIYMcbEGU4H1oWd7YfNar4rMonr y61RPRZ4vKfzhgQDdsJCvx0EsqNeIBPeaOUejIUqbHH7tedw+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDNPByv9+L+XiQiDF2nZTldVJqoPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iYjY3 OGViZS0wZDhmLTQ1MTMtYWVjOS1kZWNkYWRiZDFlMWMvMDVjZTQzZmYtYWIyNC0z YjUwLWFlNjUtYzc3NDM5NzY2NjgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmI2NzhlYmUtMGQ4Zi00NTEzLWFl YzktZGVjZGFkYmQxZTFjL2JiNjc4ZWJlLTBkOGYtNDUxMy1hZWM5LWRlY2RhZGJk MWUxYy5jcmwwHwYDVR0jBBgwFoAUVDGrh1RT+AfQ8/LfkK7HzceWBFswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iYjY3OGViZS0wZDhmLTQ1MTMtYWVjOS1kZWNk YWRiZDFlMWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApYx4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFF9sBOpDCX22nDRdJ2a0k3kWgNwpI/MtpyAdGaz7GOf0ZSvz26Nc513 cyqFV+Zx3u5nnjT/PxlLo6YDZfL/2t5h8xCYxible4JSPYlLlfKqozg6n3Mpgr4N gtJhXeQ/CEfqgZNlPX9YjfGoqBLYF7/A1pYETj7PcqFSo6wsagIRB2ls9L+x6fAk wNlliEoDiWOweF6dAMpNmy2MVCPXJAan/6IWU/H4Exwc+Ijo5B9SKyznyYfXDgXy yeMl5M3FeOGLCDE5avYOSaD5bK+2Wj54cM3uhvmushCMPXelAqReZVVUe6bHwB2d OuudoPkHyLbgfCeIbtvH8lCWppH9RKw= -----END CERTIFICATE-----Generated at Tue Aug 18 02:08:24 2026 by rpki-client