$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3c68c219-8e71-4151-8d5c-d504fd12b5fb/cb94f41c-c887-363c-bf41-8dd04e28d9c3.roa File: cb94f41c-c887-363c-bf41-8dd04e28d9c3.roa (raw, json) Hash identifier: 5KoBdoksgGf2ERVD8KsY55KqPLjmBcoLUpoCzldZlQA= Subject key identifier: 51:7B:74:4D:48:70:F0:3D:C6:FA:4E:42:E1:0C:9C:2B:13:C0:86:A1 Certificate issuer: /CN=3c68c219-8e71-4151-8d5c-d504fd12b5fb Certificate serial: 010D0C9F4328584D667A52FA7F5DDB79B0E20E80 Authority key identifier: 74:66:34:1C:14:36:2D:94:95:DC:F7:6D:89:3E:8D:22:9E:D7:49:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3c68c219-8e71-4151-8d5c-d504fd12b5fb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3c68c219-8e71-4151-8d5c-d504fd12b5fb/cb94f41c-c887-363c-bf41-8dd04e28d9c3.roa Signing time: Sun 05 Apr 2026 01:00:24 +0000 ROA not before: Sun 05 Apr 2026 01:00:24 +0000 ROA not after: Sat 04 Jul 2026 01:00:24 +0000 asID: 2914 IP address blocks: 23.133.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3c68c219-8e71-4151-8d5c-d504fd12b5fb/3c68c219-8e71-4151-8d5c-d504fd12b5fb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3c68c219-8e71-4151-8d5c-d504fd12b5fb/3c68c219-8e71-4151-8d5c-d504fd12b5fb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3c68c219-8e71-4151-8d5c-d504fd12b5fb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:66:7a:52:fa:7f:5d:db:79:b0:e2:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c68c219-8e71-4151-8d5c-d504fd12b5fb Validity Not Before: Apr 5 01:00:24 2026 GMT Not After : Jul 4 01:00:24 2026 GMT Subject: CN=25eb437e-03a9-431b-8a5b-6ae862b66bda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ab:10:2d:43:80:38:63:d1:d3:84:d0:ba:79: ac:a1:09:ac:83:8e:7c:36:aa:b9:98:b3:2f:62:9a: 2e:9a:67:82:27:ca:b7:b8:c7:70:5d:fd:2c:ea:8c: d4:5e:0b:8d:b2:a6:80:50:1e:02:d5:7f:6a:9f:cb: 1b:23:c7:7d:41:06:b9:a7:62:ff:46:39:34:19:f1: ac:fc:54:e2:66:96:e4:79:07:42:f1:72:64:c3:95: 9a:f2:ac:8e:bf:8a:49:cd:b2:c2:b7:01:4e:a8:cb: c0:f8:c9:77:8d:b3:45:96:47:a1:33:a0:e3:3e:42: 0b:51:1a:4b:7c:87:9c:1b:9e:44:3d:ae:a9:6a:10: f2:c4:14:8e:93:6e:66:e9:e4:21:39:4b:2b:06:cd: 18:61:36:14:6a:24:42:fa:b3:a3:e1:aa:ff:7c:84: bf:77:57:a1:49:7d:9b:92:3f:69:0a:43:a8:e1:a8: c8:7e:09:79:65:b4:99:4c:80:40:d9:c5:47:11:3e: cc:c0:88:95:48:61:a2:11:35:4c:0b:05:0e:1d:07: 2d:15:6d:50:b4:8c:0b:8a:93:f2:62:fd:1e:60:d5: 2a:10:2b:b9:16:09:88:d6:71:a4:16:a9:52:90:25: d3:5c:f6:3a:6d:87:89:2d:20:b7:bc:32:e2:2f:cf: 2f:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:7B:74:4D:48:70:F0:3D:C6:FA:4E:42:E1:0C:9C:2B:13:C0:86:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3c68c219-8e71-4151-8d5c-d504fd12b5fb/cb94f41c-c887-363c-bf41-8dd04e28d9c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3c68c219-8e71-4151-8d5c-d504fd12b5fb/3c68c219-8e71-4151-8d5c-d504fd12b5fb.crl X509v3 Authority Key Identifier: keyid:74:66:34:1C:14:36:2D:94:95:DC:F7:6D:89:3E:8D:22:9E:D7:49:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3c68c219-8e71-4151-8d5c-d504fd12b5fb.cer sbgp-ipAddrBlock: critical IPv4: 23.133.116.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:df:fa:a1:29:44:d1:61:3f:76:65:40:00:fe:61:30:97:b3: 75:fd:37:e5:f6:f3:de:29:d9:8b:d1:0c:1b:40:e5:c0:14:6e: 03:cd:13:28:55:44:e7:5c:fb:17:77:cb:d5:bb:52:ce:ad:88: 86:29:a5:21:8e:7f:f0:4a:6b:7a:b6:38:9f:2a:4b:93:d2:a9: 16:01:ad:7a:6f:93:1a:ec:c3:42:27:f9:3f:f1:43:75:3a:f4: 4b:04:c1:5e:f9:60:f4:a4:73:19:16:0e:f0:9b:ec:5b:f1:e3: 77:6a:fc:49:c1:db:d1:30:87:de:86:bc:2c:b7:8d:05:3c:de: 72:f6:2f:52:9d:f6:76:67:85:3e:8a:55:a3:1c:29:8a:5e:3c: ba:93:15:d5:83:11:69:97:14:b9:ef:ee:33:84:83:5a:a7:2b: 69:e9:f4:52:75:be:b5:e1:8b:a4:01:3b:b7:9a:19:d7:a8:f1: 06:9c:cf:14:b1:86:da:cf:4c:8c:1a:bd:0d:86:b4:87:c0:65: ef:0f:eb:54:b9:04:11:30:57:82:22:45:a6:94:50:bb:0f:8e: 8a:97:fa:8c:cd:ec:b9:84:a0:20:0c:4b:9a:fc:b9:cf:5f:ff: 14:08:60:ee:12:78:44:1d:8a:10:ed:35:6d:31:4d:61:84:8e: bc:6d:38:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1melL6f13bebDiDoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M2OGMyMTktOGU3MS00MTUxLThkNWMtZDUwNGZkMTJi NWZiMB4XDTI2MDQwNTAxMDAyNFoXDTI2MDcwNDAxMDAyNFowLzEtMCsGA1UEAxMk MjVlYjQzN2UtMDNhOS00MzFiLThhNWItNmFlODYyYjY2YmRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qsQLUOAOGPR04TQunmsoQmsg458Nqq5mLMv YpoummeCJ8q3uMdwXf0s6ozUXguNsqaAUB4C1X9qn8sbI8d9QQa5p2L/Rjk0GfGs /FTiZpbkeQdC8XJkw5Wa8qyOv4pJzbLCtwFOqMvA+Ml3jbNFlkehM6DjPkILURpL fIecG55EPa6pahDyxBSOk25m6eQhOUsrBs0YYTYUaiRC+rOj4ar/fIS/d1ehSX2b kj9pCkOo4ajIfgl5ZbSZTIBA2cVHET7MwIiVSGGiETVMCwUOHQctFW1QtIwLipPy Yv0eYNUqECu5FgmI1nGkFqlSkCXTXPY6bYeJLSC3vDLiL88vzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFF7dE1IcPA9xvpOQuEMnCsTwIahMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zYzY4 YzIxOS04ZTcxLTQxNTEtOGQ1Yy1kNTA0ZmQxMmI1ZmIvY2I5NGY0MWMtYzg4Ny0z NjNjLWJmNDEtOGRkMDRlMjhkOWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2M2OGMyMTktOGU3MS00MTUxLThk NWMtZDUwNGZkMTJiNWZiLzNjNjhjMjE5LThlNzEtNDE1MS04ZDVjLWQ1MDRmZDEy YjVmYi5jcmwwHwYDVR0jBBgwFoAUdGY0HBQ2LZSV3PdtiT6NIp7XSSAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zYzY4YzIxOS04ZTcxLTQxNTEtOGQ1Yy1kNTA0 ZmQxMmI1ZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4V0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADPf+qEpRNFhP3ZlQAD+YTCXs3X9N+X2894p2YvRDBtA5cAUbgPNEyhV ROdc+xd3y9W7Us6tiIYppSGOf/BKa3q2OJ8qS5PSqRYBrXpvkxrsw0In+T/xQ3U6 9EsEwV75YPSkcxkWDvCb7Fvx43dq/EnB29Ewh96GvCy3jQU83nL2L1Kd9nZnhT6K VaMcKYpePLqTFdWDEWmXFLnv7jOEg1qnK2np9FJ1vrXhi6QBO7eaGdeo8QaczxSx htrPTIwavQ2GtIfAZe8P61S5BBEwV4IiRaaUULsPjoqX+ozN7LmEoCAMS5r8uc9f /xQIYO4SeEQdihDtNW0xTWGEjrxtOI8= -----END CERTIFICATE-----Generated at Sun Apr 19 08:57:28 2026 by rpki-client