$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a7316ed4-ecc5-464f-87e6-f49a668b2299/bbc96059-726a-375e-b134-a7505d885131.roa File: bbc96059-726a-375e-b134-a7505d885131.roa (raw, json) Hash identifier: fQGZTuF0gddHTqzam1g8Q8rYZI2zg0iVPSnjZNgS1EU= Subject key identifier: AA:FA:9D:5C:59:09:9A:36:E9:EB:16:05:65:FC:79:4D:F1:90:2D:69 Certificate issuer: /CN=a7316ed4-ecc5-464f-87e6-f49a668b2299 Certificate serial: 010D0C9F4328584B94421F2DC88BEA634BB9A880 Authority key identifier: F8:DD:87:54:34:D4:14:84:C8:1C:0C:BD:D0:A0:AA:81:8E:12:76:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a7316ed4-ecc5-464f-87e6-f49a668b2299.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a7316ed4-ecc5-464f-87e6-f49a668b2299/bbc96059-726a-375e-b134-a7505d885131.roa Signing time: Mon 20 Oct 2025 01:00:31 +0000 ROA not before: Mon 20 Oct 2025 01:00:31 +0000 ROA not after: Sun 18 Jan 2026 02:00:31 +0000 asID: 2914 IP address blocks: 23.133.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a7316ed4-ecc5-464f-87e6-f49a668b2299/a7316ed4-ecc5-464f-87e6-f49a668b2299.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a7316ed4-ecc5-464f-87e6-f49a668b2299/a7316ed4-ecc5-464f-87e6-f49a668b2299.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a7316ed4-ecc5-464f-87e6-f49a668b2299.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:94:42:1f:2d:c8:8b:ea:63:4b:b9:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7316ed4-ecc5-464f-87e6-f49a668b2299 Validity Not Before: Oct 20 01:00:31 2025 GMT Not After : Jan 18 02:00:31 2026 GMT Subject: CN=a0fd8863-43e1-4214-beb0-786501e4e0af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:fa:27:b1:22:ac:9a:4a:bc:b3:7c:91:87:ea: e0:b7:9e:69:bb:05:75:0b:6d:c6:72:ac:78:c6:56: d0:50:0c:18:28:69:f0:00:ef:88:18:1f:9b:07:c1: 1c:88:9c:60:90:12:2e:84:fb:f7:34:49:01:2c:dc: 7a:ea:09:ba:06:7b:d1:04:dc:ef:c2:19:87:03:a7: 60:08:70:60:92:44:76:5f:89:f6:15:b2:97:ad:a6: f2:52:4b:5c:6d:39:64:77:8a:a6:6a:dc:c1:84:db: ac:f6:7e:82:cb:23:79:f1:7a:2f:29:7e:31:33:74: 51:d8:6a:6c:93:be:63:48:60:19:4b:4c:26:7e:85: 26:9e:00:cf:60:48:59:0d:81:3a:c0:e4:72:32:11: 3d:d9:8d:96:85:23:20:d1:ed:a1:d9:4d:3d:10:0f: 55:60:4e:d8:fb:b9:ae:78:09:41:eb:5e:64:96:1a: e1:f7:f1:ee:39:5d:cb:2f:1f:a1:e8:30:04:11:5d: ff:bc:35:42:d4:1c:87:97:22:63:9a:26:fe:5d:60: 7f:a4:59:0f:24:e3:28:95:93:0f:ae:2c:18:d9:ef: bb:8d:2f:24:de:57:5a:8a:3a:70:79:2c:50:c7:b2: 85:30:93:c4:02:af:eb:2d:06:7f:58:92:35:f7:64: ba:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:FA:9D:5C:59:09:9A:36:E9:EB:16:05:65:FC:79:4D:F1:90:2D:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a7316ed4-ecc5-464f-87e6-f49a668b2299/bbc96059-726a-375e-b134-a7505d885131.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a7316ed4-ecc5-464f-87e6-f49a668b2299/a7316ed4-ecc5-464f-87e6-f49a668b2299.crl X509v3 Authority Key Identifier: keyid:F8:DD:87:54:34:D4:14:84:C8:1C:0C:BD:D0:A0:AA:81:8E:12:76:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a7316ed4-ecc5-464f-87e6-f49a668b2299.cer sbgp-ipAddrBlock: critical IPv4: 23.133.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:5b:ba:2a:24:e6:68:a9:17:31:26:d2:c0:07:67:41:1e:88: 30:8b:7e:5f:d5:0e:ac:c3:37:5f:7b:b4:c0:44:03:74:2b:61: be:ee:2f:9c:e8:f2:30:bf:60:c7:76:82:8b:f6:1c:9f:cb:68: 7c:8a:3e:ab:7c:9c:ee:69:a4:75:09:8d:37:bd:2f:8d:bb:5e: 73:56:a6:b7:20:f0:72:66:e3:94:37:fc:4a:c3:eb:08:f4:66: 36:5b:27:8f:24:ba:82:63:d8:47:19:ae:34:ed:a7:3f:23:b6: 02:e8:55:8d:56:d9:95:99:54:fe:fb:50:55:96:91:da:15:21: fd:0f:2c:de:f0:09:d8:bc:51:8a:46:a3:12:7d:78:13:8b:69: ec:ba:92:a5:24:1a:02:43:3e:70:df:00:01:2f:43:5e:90:6d: 33:02:1f:82:4a:12:43:7e:9c:51:e1:eb:68:3d:73:24:97:5b: d0:ca:67:8d:c4:30:89:90:2b:fb:52:eb:b3:ba:93:02:67:58: 62:9b:6f:50:ca:bb:db:09:60:b5:55:08:7f:49:09:1f:b0:74: 62:d4:3e:fb:84:f6:05:a3:15:5d:68:47:c6:6d:30:9e:1c:63: 40:9c:21:1c:49:a6:a8:c4:d0:63:e8:84:f1:e8:e3:6c:61:3d: 82:f2:13:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuUQh8tyIvqY0u5qIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczMTZlZDQtZWNjNS00NjRmLTg3ZTYtZjQ5YTY2OGIy Mjk5MB4XDTI1MTAyMDAxMDAzMVoXDTI2MDExODAyMDAzMVowLzEtMCsGA1UEAxMk YTBmZDg4NjMtNDNlMS00MjE0LWJlYjAtNzg2NTAxZTRlMGFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPonsSKsmkq8s3yRh+rgt55puwV1C23Gcqx4 xlbQUAwYKGnwAO+IGB+bB8EciJxgkBIuhPv3NEkBLNx66gm6BnvRBNzvwhmHA6dg CHBgkkR2X4n2FbKXrabyUktcbTlkd4qmatzBhNus9n6CyyN58XovKX4xM3RR2Gps k75jSGAZS0wmfoUmngDPYEhZDYE6wORyMhE92Y2WhSMg0e2h2U09EA9VYE7Y+7mu eAlB615klhrh9/HuOV3LLx+h6DAEEV3/vDVC1ByHlyJjmib+XWB/pFkPJOMolZMP riwY2e+7jS8k3ldaijpweSxQx7KFMJPEAq/rLQZ/WJI192S6GwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKr6nVxZCZo26esWBWX8eU3xkC1pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hNzMx NmVkNC1lY2M1LTQ2NGYtODdlNi1mNDlhNjY4YjIyOTkvYmJjOTYwNTktNzI2YS0z NzVlLWIxMzQtYTc1MDVkODg1MTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYTczMTZlZDQtZWNjNS00NjRmLTg3 ZTYtZjQ5YTY2OGIyMjk5L2E3MzE2ZWQ0LWVjYzUtNDY0Zi04N2U2LWY0OWE2Njhi MjI5OS5jcmwwHwYDVR0jBBgwFoAU+N2HVDTUFITIHAy90KCqgY4SdnMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hNzMxNmVkNC1lY2M1LTQ2NGYtODdlNi1mNDlh NjY4YjIyOTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4UcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHFbuiok5mipFzEm0sAHZ0EeiDCLfl/VDqzDN197tMBEA3QrYb7uL5zo 8jC/YMd2gov2HJ/LaHyKPqt8nO5ppHUJjTe9L427XnNWprcg8HJm45Q3/ErD6wj0 ZjZbJ48kuoJj2EcZrjTtpz8jtgLoVY1W2ZWZVP77UFWWkdoVIf0PLN7wCdi8UYpG oxJ9eBOLaey6kqUkGgJDPnDfAAEvQ16QbTMCH4JKEkN+nFHh62g9cySXW9DKZ43E MImQK/tS67O6kwJnWGKbb1DKu9sJYLVVCH9JCR+wdGLUPvuE9gWjFV1oR8ZtMJ4c Y0CcIRxJpqjE0GPohPHo42xhPYLyE7k= -----END CERTIFICATE-----Generated at Wed Nov 5 05:16:17 2025 by rpki-client