$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f0c28c0-bbce-4871-aef3-c112abc2be5d/bb1446ec-203d-312c-8541-36f60d5e2778.roa File: bb1446ec-203d-312c-8541-36f60d5e2778.roa (raw, json) Hash identifier: yD+zQf8zzua8XD2jeOqbs315qHEd9+HGDfm5c7ZsPKk= Subject key identifier: 4F:35:F7:FE:57:B4:C2:8E:D2:F0:6C:B1:50:21:2F:9C:48:05:D2:E1 Certificate issuer: /CN=8f0c28c0-bbce-4871-aef3-c112abc2be5d Certificate serial: 010D0C9F4328584D300A3539032DD7E6CEC01240 Authority key identifier: FA:5F:A6:60:9D:B9:61:A1:23:A2:6F:BA:92:D1:68:1D:39:8F:6E:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f0c28c0-bbce-4871-aef3-c112abc2be5d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f0c28c0-bbce-4871-aef3-c112abc2be5d/bb1446ec-203d-312c-8541-36f60d5e2778.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 21665 IP address blocks: 23.133.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f0c28c0-bbce-4871-aef3-c112abc2be5d/8f0c28c0-bbce-4871-aef3-c112abc2be5d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f0c28c0-bbce-4871-aef3-c112abc2be5d/8f0c28c0-bbce-4871-aef3-c112abc2be5d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f0c28c0-bbce-4871-aef3-c112abc2be5d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:35:39:03:2d:d7:e6:ce:c0:12:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f0c28c0-bbce-4871-aef3-c112abc2be5d Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=a5a16f4a-60b7-47ba-bd3e-28ceaf937373 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:80:9a:af:fa:72:d4:a9:e4:8b:46:14:4e:c6: 0e:ce:93:19:e7:98:45:54:e3:c4:fe:6a:29:ec:45: 27:45:3f:bd:da:97:c6:89:88:6a:54:3d:4b:e6:ba: 14:22:4c:7b:1d:bc:5d:d6:61:7e:48:38:a2:32:f3: d2:3c:79:8b:03:29:56:a1:90:5e:7f:bd:48:a3:9f: d4:b6:70:64:cb:c4:06:35:9e:c8:71:6b:dc:e7:eb: b2:24:e7:35:89:e6:3a:4a:1b:aa:29:34:1b:bc:02: 22:16:17:10:1c:69:58:77:0c:04:dd:21:45:91:a4: cf:b9:25:79:30:aa:53:6c:c6:eb:88:2d:54:b2:26: 0d:a2:13:d5:68:26:a2:22:75:bd:b5:06:bc:c0:8c: 33:7e:01:ae:b4:82:60:83:7e:2d:70:a4:c5:aa:de: 15:c5:ba:ea:54:e5:46:5d:48:c9:bc:23:4d:5c:24: db:f8:03:02:f4:fd:41:3b:fb:7a:6c:c0:75:83:41: ad:5f:82:04:98:c8:34:68:11:14:45:f9:e0:3a:b5: de:65:d1:46:a8:c9:41:10:ed:b1:f5:3e:6f:f9:c3: 0b:a2:0a:9a:9a:0f:da:df:4f:4b:9d:46:e1:fd:f4: 71:14:56:1f:67:38:cc:74:36:cd:70:3d:a0:12:68: 25:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:35:F7:FE:57:B4:C2:8E:D2:F0:6C:B1:50:21:2F:9C:48:05:D2:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f0c28c0-bbce-4871-aef3-c112abc2be5d/bb1446ec-203d-312c-8541-36f60d5e2778.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f0c28c0-bbce-4871-aef3-c112abc2be5d/8f0c28c0-bbce-4871-aef3-c112abc2be5d.crl X509v3 Authority Key Identifier: keyid:FA:5F:A6:60:9D:B9:61:A1:23:A2:6F:BA:92:D1:68:1D:39:8F:6E:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f0c28c0-bbce-4871-aef3-c112abc2be5d.cer sbgp-ipAddrBlock: critical IPv4: 23.133.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:af:c6:5f:08:0a:f0:e3:7d:25:31:d1:86:72:67:2d:9e:47: 12:0a:03:41:9e:49:bb:d4:b1:f4:0d:7b:50:d4:69:47:92:f6: fd:fe:b6:a9:03:30:4d:41:a7:10:84:16:28:6f:46:a7:14:d6: aa:39:d6:a1:1e:6f:a4:79:d6:73:21:aa:67:09:67:4b:86:9e: eb:9a:15:36:74:9b:3d:53:f2:3b:f5:bf:f7:e2:ba:56:54:63: 79:f8:da:f4:64:0f:c9:8c:46:b4:d4:aa:9c:72:02:d6:3b:3d: 9a:d7:ee:79:a9:13:21:e4:75:1a:a5:70:df:4a:91:61:ab:80: 2d:b9:93:2c:12:70:de:f4:01:49:7e:3a:41:46:b8:2c:e7:95: b2:fd:2d:1f:52:d2:cb:3f:3f:85:ad:e7:ec:30:ce:65:bd:a8: f9:86:02:7e:d5:33:f8:e4:03:f1:53:7f:a6:17:cc:7b:82:f4: f8:d1:0d:54:d1:07:05:8a:32:ac:d7:d7:b4:ac:23:50:2a:d2: 38:9e:05:5b:ac:b0:9d:79:fb:83:b5:5f:7a:22:f8:24:c4:c8: ae:d2:c7:76:f7:59:88:79:4e:f1:98:30:03:d1:14:87:aa:af: fd:28:c0:38:86:42:d8:23:0c:52:ae:c3:6b:be:1d:9c:4f:a1: a0:0e:27:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCjU5Ay3X5s7AEkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGYwYzI4YzAtYmJjZS00ODcxLWFlZjMtYzExMmFiYzJi ZTVkMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk YTVhMTZmNGEtNjBiNy00N2JhLWJkM2UtMjhjZWFmOTM3MzczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4YCar/py1Knki0YUTsYOzpMZ55hFVOPE/mop 7EUnRT+92pfGiYhqVD1L5roUIkx7Hbxd1mF+SDiiMvPSPHmLAylWoZBef71Io5/U tnBky8QGNZ7IcWvc5+uyJOc1ieY6ShuqKTQbvAIiFhcQHGlYdwwE3SFFkaTPuSV5 MKpTbMbriC1UsiYNohPVaCaiInW9tQa8wIwzfgGutIJgg34tcKTFqt4VxbrqVOVG XUjJvCNNXCTb+AMC9P1BO/t6bMB1g0GtX4IEmMg0aBEURfngOrXeZdFGqMlBEO2x 9T5v+cMLogqamg/a309LnUbh/fRxFFYfZzjMdDbNcD2gEmgl6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE819/5XtMKO0vBssVAhL5xIBdLhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84ZjBj MjhjMC1iYmNlLTQ4NzEtYWVmMy1jMTEyYWJjMmJlNWQvYmIxNDQ2ZWMtMjAzZC0z MTJjLTg1NDEtMzZmNjBkNWUyNzc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOGYwYzI4YzAtYmJjZS00ODcxLWFl ZjMtYzExMmFiYzJiZTVkLzhmMGMyOGMwLWJiY2UtNDg3MS1hZWYzLWMxMTJhYmMy YmU1ZC5jcmwwHwYDVR0jBBgwFoAU+l+mYJ25YaEjom+6ktFoHTmPbhQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84ZjBjMjhjMC1iYmNlLTQ4NzEtYWVmMy1jMTEy YWJjMmJlNWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4WMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD2vxl8ICvDjfSUx0YZyZy2eRxIKA0GeSbvUsfQNe1DUaUeS9v3+tqkD ME1BpxCEFihvRqcU1qo51qEeb6R51nMhqmcJZ0uGnuuaFTZ0mz1T8jv1v/fiulZU Y3n42vRkD8mMRrTUqpxyAtY7PZrX7nmpEyHkdRqlcN9KkWGrgC25kywScN70AUl+ OkFGuCznlbL9LR9S0ss/P4Wt5+wwzmW9qPmGAn7VM/jkA/FTf6YXzHuC9PjRDVTR BwWKMqzX17SsI1Aq0jieBVussJ15+4O1X3oi+CTEyK7Sx3b3WYh5TvGYMAPRFIeq r/0owDiGQtgjDFKuw2u+HZxPoaAOJz0= -----END CERTIFICATE-----Generated at Thu Mar 26 18:55:42 2026 by rpki-client