$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d7b3ea-8cf6-44c4-b681-7b6272e688f6/bd4c0156-1e13-3368-a399-5dcfc75f4825.roa File: bd4c0156-1e13-3368-a399-5dcfc75f4825.roa (raw, json) Hash identifier: yXIExO79SnvWz/saNhZZEb6EkIza0PqPmSgb74QUkxQ= Subject key identifier: 29:70:D7:47:EE:B0:42:A2:B9:CE:60:03:A2:C3:56:2F:82:B0:48:D1 Certificate issuer: /CN=40d7b3ea-8cf6-44c4-b681-7b6272e688f6 Certificate serial: 010D0C9F4328584BA50238C782B2F1F4986579C0 Authority key identifier: FD:2C:6C:4D:10:C9:EC:50:61:C1:EB:5D:84:52:24:3B:62:7B:2E:43 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d7b3ea-8cf6-44c4-b681-7b6272e688f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d7b3ea-8cf6-44c4-b681-7b6272e688f6/bd4c0156-1e13-3368-a399-5dcfc75f4825.roa Signing time: Sun 26 Oct 2025 01:00:31 +0000 ROA not before: Sun 26 Oct 2025 01:00:31 +0000 ROA not after: Sat 24 Jan 2026 02:00:31 +0000 asID: 2914 IP address blocks: 23.133.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d7b3ea-8cf6-44c4-b681-7b6272e688f6/40d7b3ea-8cf6-44c4-b681-7b6272e688f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d7b3ea-8cf6-44c4-b681-7b6272e688f6/40d7b3ea-8cf6-44c4-b681-7b6272e688f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d7b3ea-8cf6-44c4-b681-7b6272e688f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a5:02:38:c7:82:b2:f1:f4:98:65:79:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40d7b3ea-8cf6-44c4-b681-7b6272e688f6 Validity Not Before: Oct 26 01:00:31 2025 GMT Not After : Jan 24 02:00:31 2026 GMT Subject: CN=d40be062-73d9-4c00-819b-5c778cebe13d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a7:2e:72:f7:78:f2:c5:1f:5a:8c:4e:32:7a: 8a:99:43:e8:a8:63:6d:df:62:52:b9:01:42:7a:9a: 7d:10:f9:d7:da:99:82:ea:ba:79:02:7b:27:53:bd: ff:9e:2e:31:ad:59:89:ce:5f:22:77:5a:33:88:ea: 60:49:2f:db:13:17:95:1e:73:6d:c5:32:93:f7:a2: 8e:96:23:f7:10:b1:3b:9f:cd:0d:5a:ab:da:29:11: c2:5b:e9:5b:41:0c:2e:74:e3:da:65:2e:ee:ce:28: 55:43:e8:1b:6a:75:7f:ce:ab:91:0a:00:ca:b9:ec: 20:76:4b:05:60:91:ff:96:a6:8f:df:c2:aa:0f:7b: 57:58:4a:22:2b:a5:f4:79:4b:a9:9c:bd:1b:c0:5e: 82:c9:53:e7:e1:11:83:16:c9:51:05:26:78:3d:90: 4b:20:c0:d9:5a:53:65:f2:40:2a:bb:f1:94:33:54: 1f:3d:ad:57:78:3a:20:4f:5e:a3:2b:2b:6d:f0:5e: c1:5d:eb:b3:ba:75:e2:27:8b:51:3d:f2:66:2b:34: f2:37:a5:1f:7c:79:13:22:df:7e:2f:09:ac:2c:ac: c9:bb:a5:b3:29:d4:00:f0:56:26:6e:23:c4:b9:e4: 61:e1:fc:f5:35:36:e5:02:fd:d2:fd:5e:e5:3d:a2: 2a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:70:D7:47:EE:B0:42:A2:B9:CE:60:03:A2:C3:56:2F:82:B0:48:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d7b3ea-8cf6-44c4-b681-7b6272e688f6/bd4c0156-1e13-3368-a399-5dcfc75f4825.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d7b3ea-8cf6-44c4-b681-7b6272e688f6/40d7b3ea-8cf6-44c4-b681-7b6272e688f6.crl X509v3 Authority Key Identifier: keyid:FD:2C:6C:4D:10:C9:EC:50:61:C1:EB:5D:84:52:24:3B:62:7B:2E:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d7b3ea-8cf6-44c4-b681-7b6272e688f6.cer sbgp-ipAddrBlock: critical IPv4: 23.133.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:19:a2:87:dd:ba:3b:d7:92:f8:d3:67:f7:51:58:41:5a:a2: 89:54:53:15:97:fc:72:32:a9:5d:f2:45:7d:1e:04:82:ef:0b: 0d:34:e1:9f:0e:36:2f:17:68:30:c6:2d:04:87:8c:20:54:f3: 37:fe:c2:85:bb:ef:ac:c4:86:28:35:ab:05:a3:bb:96:30:e2: 8e:e3:42:7e:e5:83:27:c7:ee:88:a6:2e:9c:ab:66:ab:2b:13: 94:76:81:c1:91:14:92:f2:5b:26:6e:01:a7:31:19:36:92:8b: ba:48:7d:d6:32:21:f5:8d:6d:bb:00:64:73:f0:78:b0:87:ed: 8c:b0:21:b1:af:d6:75:75:b1:87:18:58:d3:93:cc:1e:b3:1a: a4:a9:e0:c2:0e:df:1c:08:4a:28:9f:38:95:c8:26:fa:a2:f6: 1a:61:8a:25:f9:ae:2d:22:25:e5:4f:37:a4:8c:d0:12:0a:82: 8e:8a:db:ea:f9:ab:a3:98:3e:c6:51:5d:19:9c:92:80:bc:2c: fc:9d:fe:3c:bc:44:77:3e:fb:82:d8:49:23:06:68:a8:24:5a: db:75:9d:ef:a6:0c:e0:62:04:0a:9e:35:18:32:b6:2a:8c:f2: 0b:d0:ba:8d:61:48:45:97:f0:b0:6b:da:68:7f:b6:f2:76:53: 8c:de:eb:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEulAjjHgrLx9JhlecAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBkN2IzZWEtOGNmNi00NGM0LWI2ODEtN2I2MjcyZTY4 OGY2MB4XDTI1MTAyNjAxMDAzMVoXDTI2MDEyNDAyMDAzMVowLzEtMCsGA1UEAxMk ZDQwYmUwNjItNzNkOS00YzAwLTgxOWItNWM3NzhjZWJlMTNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAracucvd48sUfWoxOMnqKmUPoqGNt32JSuQFC epp9EPnX2pmC6rp5AnsnU73/ni4xrVmJzl8id1oziOpgSS/bExeVHnNtxTKT96KO liP3ELE7n80NWqvaKRHCW+lbQQwudOPaZS7uzihVQ+gbanV/zquRCgDKuewgdksF YJH/lqaP38KqD3tXWEoiK6X0eUupnL0bwF6CyVPn4RGDFslRBSZ4PZBLIMDZWlNl 8kAqu/GUM1QfPa1XeDogT16jKytt8F7BXeuzunXiJ4tRPfJmKzTyN6UffHkTIt9+ LwmsLKzJu6WzKdQA8FYmbiPEueRh4fz1NTblAv3S/V7lPaIqPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFClw10fusEKiuc5gA6LDVi+CsEjRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80MGQ3 YjNlYS04Y2Y2LTQ0YzQtYjY4MS03YjYyNzJlNjg4ZjYvYmQ0YzAxNTYtMWUxMy0z MzY4LWEzOTktNWRjZmM3NWY0ODI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNDBkN2IzZWEtOGNmNi00NGM0LWI2 ODEtN2I2MjcyZTY4OGY2LzQwZDdiM2VhLThjZjYtNDRjNC1iNjgxLTdiNjI3MmU2 ODhmNi5jcmwwHwYDVR0jBBgwFoAU/SxsTRDJ7FBhwetdhFIkO2J7LkMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80MGQ3YjNlYS04Y2Y2LTQ0YzQtYjY4MS03YjYy NzJlNjg4ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4WkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGgZoofdujvXkvjTZ/dRWEFaoolUUxWX/HIyqV3yRX0eBILvCw004Z8O Ni8XaDDGLQSHjCBU8zf+woW776zEhig1qwWju5Yw4o7jQn7lgyfH7oimLpyrZqsr E5R2gcGRFJLyWyZuAacxGTaSi7pIfdYyIfWNbbsAZHPweLCH7YywIbGv1nV1sYcY WNOTzB6zGqSp4MIO3xwISiifOJXIJvqi9hphiiX5ri0iJeVPN6SM0BIKgo6K2+r5 q6OYPsZRXRmckoC8LPyd/jy8RHc++4LYSSMGaKgkWtt1ne+mDOBiBAqeNRgytiqM 8gvQuo1hSEWX8LBr2mh/tvJ2U4ze61M= -----END CERTIFICATE-----Generated at Wed Nov 5 01:43:09 2025 by rpki-client