$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/65bb07a4-eb92-3036-a791-f3ce9a332f9b.roa File: 65bb07a4-eb92-3036-a791-f3ce9a332f9b.roa (raw, json) Hash identifier: EbGDv5XZJq9f+HBjitkEAKvWZxsrnrPVNqRwsarN9K8= Subject key identifier: 63:37:E6:B9:E1:1C:03:A9:33:4F:C7:6B:79:28:36:EC:6A:3B:CE:CC Certificate issuer: /CN=cd1efaa6-01e7-4528-8278-46b312a6e020 Certificate serial: 010D0C9F4328584B0E41529CFCDE84BB15A89C00 Authority key identifier: 89:FE:C6:A0:F0:66:A2:A3:4D:FD:81:78:AF:92:82:EC:0D:39:36:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/65bb07a4-eb92-3036-a791-f3ce9a332f9b.roa Signing time: Tue 02 Sep 2025 01:00:32 +0000 ROA not before: Tue 02 Sep 2025 01:00:32 +0000 ROA not after: Mon 01 Dec 2025 02:00:32 +0000 asID: 13849 IP address blocks: 23.133.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0e:41:52:9c:fc:de:84:bb:15:a8:9c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd1efaa6-01e7-4528-8278-46b312a6e020 Validity Not Before: Sep 2 01:00:32 2025 GMT Not After : Dec 1 02:00:32 2025 GMT Subject: CN=9d2387cd-3022-4c41-864a-2e5f68c509eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:7a:13:7d:0e:21:25:74:47:43:94:b7:40:3e: 5d:03:a2:d4:62:af:fd:b3:69:72:e9:a6:4f:32:9c: ca:b3:07:f8:3c:99:4a:73:f0:1c:3b:43:f7:d8:3f: 4d:b3:f2:15:2f:e1:09:f5:54:93:98:b6:c2:6a:97: c8:b9:cb:08:6e:e1:d5:23:cd:d1:7c:bf:3d:d1:2d: b0:87:e1:7f:c9:38:25:bd:46:47:d3:07:a0:5a:09: 95:5b:b2:15:d3:12:10:a1:e8:28:15:1e:6d:c7:2c: 1d:9a:85:39:7b:c2:47:4a:02:fd:73:f3:02:20:97: f0:ac:b7:b8:ac:26:34:67:79:c1:f1:bf:b9:04:68: b7:a2:e3:7a:26:ed:2b:7b:66:fb:c9:42:68:53:d3: 25:ed:0d:c1:30:11:ac:56:41:33:4f:78:61:a2:6f: fa:fb:8e:29:49:0f:f9:cb:be:da:cc:c7:c7:1f:30: c0:f2:21:ce:53:bb:e8:0d:69:a5:e6:91:03:8a:ef: 44:f7:92:2e:65:02:52:20:d2:03:13:a3:02:bb:90: ea:ed:fd:dd:4c:d7:e0:cb:8f:f0:cc:58:9c:de:30: b6:53:b5:4c:d3:50:23:09:96:93:41:39:24:19:76: d1:78:39:0d:51:a7:b3:83:35:6a:63:9e:0d:6e:8d: c2:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:37:E6:B9:E1:1C:03:A9:33:4F:C7:6B:79:28:36:EC:6A:3B:CE:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/65bb07a4-eb92-3036-a791-f3ce9a332f9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.crl X509v3 Authority Key Identifier: keyid:89:FE:C6:A0:F0:66:A2:A3:4D:FD:81:78:AF:92:82:EC:0D:39:36:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer sbgp-ipAddrBlock: critical IPv4: 23.133.82.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:60:01:5b:50:93:93:47:8b:fd:16:07:4a:2e:9d:e7:de:11: e4:a7:e7:94:4a:dc:1c:16:6c:af:eb:f7:8a:db:d0:ef:69:db: 9e:19:37:f1:50:fa:8f:52:48:31:e6:a3:a3:01:6a:6a:cf:bd: e4:c0:39:0d:18:01:61:63:49:d7:f5:e0:0f:12:cd:ca:56:67: e5:69:f8:2a:c7:49:cb:41:dc:dd:64:ae:30:04:a7:21:d0:5c: 20:84:61:43:e1:90:16:63:73:86:4a:a1:22:ce:b3:4d:5f:df: 7a:02:84:c6:3b:ac:8f:70:f0:7e:e5:9f:23:a9:0b:46:90:64: e5:f9:ff:df:f8:fe:22:a6:be:5b:10:68:90:10:93:f4:f7:09: 75:6f:4d:9b:43:c8:2d:f1:b6:0b:68:4f:74:1b:73:70:5d:c0: ff:ca:8a:70:65:37:34:e9:9a:ef:b0:49:d9:56:f2:55:d3:83: b5:ca:50:52:12:a2:43:5e:eb:64:2a:03:66:e6:80:f7:74:11: d8:90:aa:77:3f:04:64:ea:92:bd:ce:62:c3:92:f4:3e:30:63: 5f:6b:18:b7:7a:99:14:0e:54:96:20:c7:a6:49:05:b4:37:c0: 3a:21:df:da:e2:66:cb:5f:76:5e:f8:17:2d:2c:78:da:44:79: 8c:57:95:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsOQVKc/N6EuxWonAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2QxZWZhYTYtMDFlNy00NTI4LTgyNzgtNDZiMzEyYTZl MDIwMB4XDTI1MDkwMjAxMDAzMloXDTI1MTIwMTAyMDAzMlowLzEtMCsGA1UEAxMk OWQyMzg3Y2QtMzAyMi00YzQxLTg2NGEtMmU1ZjY4YzUwOWViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXoTfQ4hJXRHQ5S3QD5dA6LUYq/9s2ly6aZP MpzKswf4PJlKc/AcO0P32D9Ns/IVL+EJ9VSTmLbCapfIucsIbuHVI83RfL890S2w h+F/yTglvUZH0wegWgmVW7IV0xIQoegoFR5txywdmoU5e8JHSgL9c/MCIJfwrLe4 rCY0Z3nB8b+5BGi3ouN6Ju0re2b7yUJoU9Ml7Q3BMBGsVkEzT3hhom/6+44pSQ/5 y77azMfHHzDA8iHOU7voDWml5pEDiu9E95IuZQJSINIDE6MCu5Dq7f3dTNfgy4/w zFic3jC2U7VM01AjCZaTQTkkGXbReDkNUaezgzVqY54Nbo3CmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGM35rnhHAOpM0/Ha3koNuxqO87MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZDFl ZmFhNi0wMWU3LTQ1MjgtODI3OC00NmIzMTJhNmUwMjAvNjViYjA3YTQtZWI5Mi0z MDM2LWE3OTEtZjNjZTlhMzMyZjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2QxZWZhYTYtMDFlNy00NTI4LTgy NzgtNDZiMzEyYTZlMDIwL2NkMWVmYWE2LTAxZTctNDUyOC04Mjc4LTQ2YjMxMmE2 ZTAyMC5jcmwwHwYDVR0jBBgwFoAUif7GoPBmoqNN/YF4r5KC7A05NpswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZDFlZmFhNi0wMWU3LTQ1MjgtODI3OC00NmIz MTJhNmUwMjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4VSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKpgAVtQk5NHi/0WB0ounefeEeSn55RK3BwWbK/r94rb0O9p254ZN/FQ +o9SSDHmo6MBamrPveTAOQ0YAWFjSdf14A8SzcpWZ+Vp+CrHSctB3N1krjAEpyHQ XCCEYUPhkBZjc4ZKoSLOs01f33oChMY7rI9w8H7lnyOpC0aQZOX5/9/4/iKmvlsQ aJAQk/T3CXVvTZtDyC3xtgtoT3Qbc3BdwP/KinBlNzTpmu+wSdlW8lXTg7XKUFIS okNe62QqA2bmgPd0EdiQqnc/BGTqkr3OYsOS9D4wY19rGLd6mRQOVJYgx6ZJBbQ3 wDoh39riZstfdl74Fy0seNpEeYxXlSg= -----END CERTIFICATE-----Generated at Wed Nov 5 14:44:35 2025 by rpki-client