$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f0c28c0-bbce-4871-aef3-c112abc2be5d/bb1446ec-203d-312c-8541-36f60d5e2778.roa File: bb1446ec-203d-312c-8541-36f60d5e2778.roa (raw, json) Hash identifier: ifLhM/IPAGl2BnSAUjl+cq58uSi0d2VrQOHpRnq/w7k= Subject key identifier: 99:37:07:1E:59:97:EA:2F:36:66:5F:D1:65:49:C5:DE:BF:10:14:B3 Certificate issuer: /CN=8f0c28c0-bbce-4871-aef3-c112abc2be5d Certificate serial: 010D0C9F4328584EB2B1F2BF770045DB80300C00 Authority key identifier: FA:5F:A6:60:9D:B9:61:A1:23:A2:6F:BA:92:D1:68:1D:39:8F:6E:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f0c28c0-bbce-4871-aef3-c112abc2be5d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f0c28c0-bbce-4871-aef3-c112abc2be5d/bb1446ec-203d-312c-8541-36f60d5e2778.roa Signing time: Sun 02 Aug 2026 01:00:11 +0000 ROA not before: Sun 02 Aug 2026 01:00:11 +0000 ROA not after: Sat 31 Oct 2026 01:00:11 +0000 asID: 21665 IP address blocks: 23.133.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f0c28c0-bbce-4871-aef3-c112abc2be5d/8f0c28c0-bbce-4871-aef3-c112abc2be5d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f0c28c0-bbce-4871-aef3-c112abc2be5d/8f0c28c0-bbce-4871-aef3-c112abc2be5d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f0c28c0-bbce-4871-aef3-c112abc2be5d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b2:b1:f2:bf:77:00:45:db:80:30:0c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f0c28c0-bbce-4871-aef3-c112abc2be5d Validity Not Before: Aug 2 01:00:11 2026 GMT Not After : Oct 31 01:00:11 2026 GMT Subject: CN=c848268e-d1ec-4c38-b5a6-8bf2095bc84f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:00:a5:3e:66:65:a1:96:2d:68:dc:a9:8d:7c: 77:05:c4:eb:9c:b9:29:a0:be:fe:02:31:a2:d5:6f: 11:0f:a9:17:36:c0:6f:d4:7d:2d:aa:c1:ea:33:2c: 87:71:36:99:b3:95:14:40:60:48:13:f8:69:a0:de: 47:d5:87:c0:f6:5c:2c:1b:50:b1:73:ec:2a:f5:cf: ad:e7:2a:19:ef:56:01:4c:51:58:d4:9e:99:5d:14: c8:e8:34:09:d3:28:71:b4:91:14:09:29:c9:cd:af: 78:f4:cb:a8:8f:d4:20:1d:38:1b:1b:77:d0:44:7d: ce:fa:b7:01:73:6d:47:3a:54:03:44:c0:ee:0d:86: a3:c1:32:f8:9f:24:0b:d0:c3:e1:d8:f2:8c:cd:47: ab:a3:f3:cd:33:b1:45:cf:14:66:66:06:a4:1c:bf: ec:d3:37:5c:47:89:d9:87:9b:c7:01:a4:12:8f:59: 9e:13:20:de:88:77:66:8c:dc:2f:1d:9e:4a:04:74: 66:f8:27:3c:e0:0d:c6:15:78:3e:57:a2:2d:4e:5f: 36:3d:2e:66:ce:a1:be:71:5e:2d:00:81:c4:04:f5: 33:e4:1e:ed:89:74:d2:c8:a1:a9:2f:7b:c3:c2:b3: 25:a7:2c:15:df:df:ef:b8:ec:d8:92:cb:fb:a0:91: ea:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:37:07:1E:59:97:EA:2F:36:66:5F:D1:65:49:C5:DE:BF:10:14:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f0c28c0-bbce-4871-aef3-c112abc2be5d/bb1446ec-203d-312c-8541-36f60d5e2778.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f0c28c0-bbce-4871-aef3-c112abc2be5d/8f0c28c0-bbce-4871-aef3-c112abc2be5d.crl X509v3 Authority Key Identifier: keyid:FA:5F:A6:60:9D:B9:61:A1:23:A2:6F:BA:92:D1:68:1D:39:8F:6E:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f0c28c0-bbce-4871-aef3-c112abc2be5d.cer sbgp-ipAddrBlock: critical IPv4: 23.133.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:f9:63:fe:94:10:e0:f5:44:47:25:bc:16:bb:14:35:cf:04: 54:89:ae:4e:41:93:14:db:03:dc:07:03:92:6d:75:4c:5e:6a: 24:09:f0:40:12:b9:6f:1e:f1:10:e0:98:70:39:2c:bc:c4:a8: 5b:79:69:10:2f:81:e0:07:4e:63:d5:51:34:03:45:e6:77:20: 47:8d:96:5a:75:95:1d:5f:0b:4a:54:6d:24:92:8d:35:22:cf: 66:c6:d2:c4:d0:1f:e0:0a:f4:b9:37:0a:3e:0b:4b:63:24:1f: 2e:19:35:33:51:0a:e3:6a:d8:50:bc:62:5d:f7:3a:6f:71:a5: aa:93:e4:57:de:b9:f0:83:29:1b:a8:7c:cb:5e:df:be:1b:de: 3b:2e:77:6c:ac:e6:e7:a7:f8:1f:c5:c4:63:81:7f:83:a4:b2: 1b:df:56:e0:29:be:14:22:77:8e:1c:e7:c4:9b:ad:e7:92:1e: ca:72:e3:74:d5:5d:5d:a8:31:8a:90:0e:6b:7e:f4:8a:16:47: 68:8f:33:95:b4:fb:d6:55:a6:9d:fb:ec:a1:2e:d3:e4:89:a3: 79:42:93:f4:94:3c:24:49:fc:c4:3f:71:0a:c2:94:91:ad:f4: 92:fd:10:71:4f:18:21:17:ce:83:d1:e0:e4:a7:4f:98:33:d9: d1:e8:c4:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ysfK/dwBF24AwDAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGYwYzI4YzAtYmJjZS00ODcxLWFlZjMtYzExMmFiYzJi ZTVkMB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk Yzg0ODI2OGUtZDFlYy00YzM4LWI1YTYtOGJmMjA5NWJjODRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigClPmZloZYtaNypjXx3BcTrnLkpoL7+AjGi 1W8RD6kXNsBv1H0tqsHqMyyHcTaZs5UUQGBIE/hpoN5H1YfA9lwsG1Cxc+wq9c+t 5yoZ71YBTFFY1J6ZXRTI6DQJ0yhxtJEUCSnJza949Muoj9QgHTgbG3fQRH3O+rcB c21HOlQDRMDuDYajwTL4nyQL0MPh2PKMzUero/PNM7FFzxRmZgakHL/s0zdcR4nZ h5vHAaQSj1meEyDeiHdmjNwvHZ5KBHRm+Cc84A3GFXg+V6ItTl82PS5mzqG+cV4t AIHEBPUz5B7tiXTSyKGpL3vDwrMlpywV39/vuOzYksv7oJHqywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJk3Bx5Zl+ovNmZf0WVJxd6/EBSzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84ZjBj MjhjMC1iYmNlLTQ4NzEtYWVmMy1jMTEyYWJjMmJlNWQvYmIxNDQ2ZWMtMjAzZC0z MTJjLTg1NDEtMzZmNjBkNWUyNzc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOGYwYzI4YzAtYmJjZS00ODcxLWFl ZjMtYzExMmFiYzJiZTVkLzhmMGMyOGMwLWJiY2UtNDg3MS1hZWYzLWMxMTJhYmMy YmU1ZC5jcmwwHwYDVR0jBBgwFoAU+l+mYJ25YaEjom+6ktFoHTmPbhQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84ZjBjMjhjMC1iYmNlLTQ4NzEtYWVmMy1jMTEy YWJjMmJlNWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4WMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEn5Y/6UEOD1REclvBa7FDXPBFSJrk5BkxTbA9wHA5JtdUxeaiQJ8EAS uW8e8RDgmHA5LLzEqFt5aRAvgeAHTmPVUTQDReZ3IEeNllp1lR1fC0pUbSSSjTUi z2bG0sTQH+AK9Lk3Cj4LS2MkHy4ZNTNRCuNq2FC8Yl33Om9xpaqT5FfeufCDKRuo fMte374b3jsud2ys5uen+B/FxGOBf4OkshvfVuApvhQid44c58SbreeSHspy43TV XV2oMYqQDmt+9IoWR2iPM5W0+9ZVpp377KEu0+SJo3lCk/SUPCRJ/MQ/cQrClJGt 9JL9EHFPGCEXzoPR4OSnT5gz2dHoxEo= -----END CERTIFICATE-----Generated at Tue Aug 25 21:54:28 2026 by rpki-client