$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f0c28c0-bbce-4871-aef3-c112abc2be5d/bb1446ec-203d-312c-8541-36f60d5e2778.roa File: bb1446ec-203d-312c-8541-36f60d5e2778.roa (raw, json) Hash identifier: k4+56lQPA03qSybJiSSJxAhvQbj1e4EZqxV6wdsWmsk= Subject key identifier: 02:CE:89:22:C5:45:AB:22:69:2E:D2:34:7D:52:7D:85:C1:13:99:94 Certificate issuer: /CN=8f0c28c0-bbce-4871-aef3-c112abc2be5d Certificate serial: 010D0C9F4328584A8DD600A77DC128274B37B800 Authority key identifier: FA:5F:A6:60:9D:B9:61:A1:23:A2:6F:BA:92:D1:68:1D:39:8F:6E:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f0c28c0-bbce-4871-aef3-c112abc2be5d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f0c28c0-bbce-4871-aef3-c112abc2be5d/bb1446ec-203d-312c-8541-36f60d5e2778.roa Signing time: Fri 18 Jul 2025 01:00:48 +0000 ROA not before: Fri 18 Jul 2025 01:00:48 +0000 ROA not after: Thu 16 Oct 2025 01:00:48 +0000 asID: 21665 IP address blocks: 23.133.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f0c28c0-bbce-4871-aef3-c112abc2be5d/8f0c28c0-bbce-4871-aef3-c112abc2be5d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f0c28c0-bbce-4871-aef3-c112abc2be5d/8f0c28c0-bbce-4871-aef3-c112abc2be5d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f0c28c0-bbce-4871-aef3-c112abc2be5d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8d:d6:00:a7:7d:c1:28:27:4b:37:b8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f0c28c0-bbce-4871-aef3-c112abc2be5d Validity Not Before: Jul 18 01:00:48 2025 GMT Not After : Oct 16 01:00:48 2025 GMT Subject: CN=771eb6d5-9b19-4233-97e5-ada85cb04d39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:33:69:e8:67:ed:3b:7c:cc:ac:cc:15:8f:4c: e7:10:07:d0:be:76:ca:b0:35:d2:21:8a:f9:de:10: 73:f4:37:97:a4:77:c0:b6:82:c3:a0:2f:47:eb:1f: dd:8e:85:14:25:80:e9:db:af:32:a0:72:a1:fe:c7: 95:93:a5:ef:f0:83:3c:84:08:50:64:ae:f1:7e:f7: c1:8d:82:c4:de:9c:74:6f:d0:c3:5f:f1:ff:6d:8d: ba:54:54:8f:22:d7:04:6d:ef:f5:b3:bb:fb:50:71: a7:cf:84:8e:79:40:5e:21:ae:3c:d4:a9:5f:85:50: 2d:7a:cd:9c:25:80:d1:39:7c:2a:83:74:d8:4e:ba: 6b:8a:3f:02:96:e6:25:5c:54:ca:08:ba:34:f1:de: 48:0b:4a:c6:33:c1:86:e6:8f:9d:ae:ad:e1:1d:41: a8:a2:00:15:bf:23:9d:0a:dd:b3:e2:2f:fc:ca:6b: ec:65:c2:39:74:b5:98:e5:d4:37:1f:24:68:a5:15: 4e:df:7e:78:fb:d0:c5:d8:32:17:57:89:0d:5f:74: 1e:7f:f1:05:82:a0:68:2c:0e:43:61:5b:12:88:b6: f1:0f:17:00:48:1d:49:c7:11:2b:4b:9d:f2:25:9f: 85:2a:8a:b2:3c:b7:2f:e3:90:f4:71:33:5c:14:17: 7d:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:CE:89:22:C5:45:AB:22:69:2E:D2:34:7D:52:7D:85:C1:13:99:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f0c28c0-bbce-4871-aef3-c112abc2be5d/bb1446ec-203d-312c-8541-36f60d5e2778.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f0c28c0-bbce-4871-aef3-c112abc2be5d/8f0c28c0-bbce-4871-aef3-c112abc2be5d.crl X509v3 Authority Key Identifier: keyid:FA:5F:A6:60:9D:B9:61:A1:23:A2:6F:BA:92:D1:68:1D:39:8F:6E:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f0c28c0-bbce-4871-aef3-c112abc2be5d.cer sbgp-ipAddrBlock: critical IPv4: 23.133.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:dc:d7:4b:6f:ba:2c:e3:1e:6a:a4:10:db:e4:a8:11:1f:52: b5:b0:b0:78:94:6b:2c:f4:a2:83:9d:a2:43:08:5a:3c:01:ca: c5:99:5c:a2:46:ae:10:a1:d5:c7:f2:c1:c5:43:d6:d8:4a:62: cc:08:dc:e0:2c:e3:73:55:e1:98:8b:43:62:f2:80:15:7c:58: 4b:14:6d:a8:80:ee:d5:14:5a:96:36:ba:b7:6b:12:71:6b:11: 83:46:ed:57:25:ad:40:b6:11:08:3c:c8:13:bc:90:74:92:93: 03:23:a0:3e:38:be:4f:1e:72:68:31:52:92:99:62:99:a0:c8: be:78:95:2f:82:1a:1e:a6:9a:52:78:48:d7:e4:ce:00:b7:fd: 19:07:3f:94:8c:5a:d1:6a:a6:96:df:43:f8:1c:7e:b1:b4:14: 04:bb:b0:b3:23:1c:9a:98:75:82:1a:76:f4:68:66:bc:d1:3b: 9f:bb:6a:93:ef:2c:ed:b9:09:3d:3a:0c:82:e1:b2:e3:01:5b: 92:29:d8:ee:8d:a4:9c:40:92:a8:7b:a3:df:9f:d9:bc:53:f7: 17:cf:0a:48:ab:3d:3a:5a:59:4f:00:1a:8d:35:30:d9:d1:4f: 87:e3:c0:55:80:dd:63:6e:7a:2a:a0:78:06:b2:13:ad:18:40: a9:af:4a:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqN1gCnfcEoJ0s3uAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGYwYzI4YzAtYmJjZS00ODcxLWFlZjMtYzExMmFiYzJi ZTVkMB4XDTI1MDcxODAxMDA0OFoXDTI1MTAxNjAxMDA0OFowLzEtMCsGA1UEAxMk NzcxZWI2ZDUtOWIxOS00MjMzLTk3ZTUtYWRhODVjYjA0ZDM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDNp6GftO3zMrMwVj0znEAfQvnbKsDXSIYr5 3hBz9DeXpHfAtoLDoC9H6x/djoUUJYDp268yoHKh/seVk6Xv8IM8hAhQZK7xfvfB jYLE3px0b9DDX/H/bY26VFSPItcEbe/1s7v7UHGnz4SOeUBeIa481KlfhVAtes2c JYDROXwqg3TYTrprij8CluYlXFTKCLo08d5IC0rGM8GG5o+drq3hHUGoogAVvyOd Ct2z4i/8ymvsZcI5dLWY5dQ3HyRopRVO3354+9DF2DIXV4kNX3Qef/EFgqBoLA5D YVsSiLbxDxcASB1JxxErS53yJZ+FKoqyPLcv45D0cTNcFBd9GQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFALOiSLFRasiaS7SNH1SfYXBE5mUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84ZjBj MjhjMC1iYmNlLTQ4NzEtYWVmMy1jMTEyYWJjMmJlNWQvYmIxNDQ2ZWMtMjAzZC0z MTJjLTg1NDEtMzZmNjBkNWUyNzc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOGYwYzI4YzAtYmJjZS00ODcxLWFl ZjMtYzExMmFiYzJiZTVkLzhmMGMyOGMwLWJiY2UtNDg3MS1hZWYzLWMxMTJhYmMy YmU1ZC5jcmwwHwYDVR0jBBgwFoAU+l+mYJ25YaEjom+6ktFoHTmPbhQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84ZjBjMjhjMC1iYmNlLTQ4NzEtYWVmMy1jMTEy YWJjMmJlNWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4WMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFrc10tvuizjHmqkENvkqBEfUrWwsHiUayz0ooOdokMIWjwBysWZXKJG rhCh1cfywcVD1thKYswI3OAs43NV4ZiLQ2LygBV8WEsUbaiA7tUUWpY2urdrEnFr EYNG7VclrUC2EQg8yBO8kHSSkwMjoD44vk8ecmgxUpKZYpmgyL54lS+CGh6mmlJ4 SNfkzgC3/RkHP5SMWtFqppbfQ/gcfrG0FAS7sLMjHJqYdYIadvRoZrzRO5+7apPv LO25CT06DILhsuMBW5Ip2O6NpJxAkqh7o9+f2bxT9xfPCkirPTpaWU8AGo01MNnR T4fjwFWA3WNueiqgeAayE60YQKmvSk4= -----END CERTIFICATE-----Generated at Wed Aug 6 05:17:25 2025 by rpki-client