$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e8a2dcd-c473-4343-ab03-233f389ee575/d3304f17-035e-3d1c-9c51-29c9cd3a0ae4.roa File: d3304f17-035e-3d1c-9c51-29c9cd3a0ae4.roa (raw, json) Hash identifier: rQi9lEJJgPhIINNA0WZdbQ/dwWRfygJ5xDpNVblrD5I= Subject key identifier: 4A:C5:95:70:ED:65:6F:59:29:48:DF:11:1F:67:A3:73:51:8A:8C:F7 Certificate issuer: /CN=2e8a2dcd-c473-4343-ab03-233f389ee575 Certificate serial: 010D0C9F4328584B9E0792DFC2E2844A93B55100 Authority key identifier: E8:83:04:30:A6:ED:C0:6C:58:03:AE:9E:4C:4B:94:3A:2C:AD:CE:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e8a2dcd-c473-4343-ab03-233f389ee575.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e8a2dcd-c473-4343-ab03-233f389ee575/d3304f17-035e-3d1c-9c51-29c9cd3a0ae4.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 8079 IP address blocks: 23.133.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e8a2dcd-c473-4343-ab03-233f389ee575/2e8a2dcd-c473-4343-ab03-233f389ee575.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e8a2dcd-c473-4343-ab03-233f389ee575/2e8a2dcd-c473-4343-ab03-233f389ee575.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e8a2dcd-c473-4343-ab03-233f389ee575.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:92:df:c2:e2:84:4a:93:b5:51:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e8a2dcd-c473-4343-ab03-233f389ee575 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=43e5abde-546d-4da0-9488-e26582601fee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:3e:43:27:25:16:5f:33:7a:b3:d1:e9:34:c2: b1:f2:c4:0b:08:ae:9f:bb:3c:1e:8f:ee:46:ab:95: 19:e9:4d:2f:11:95:5b:55:41:dd:16:a3:c4:b2:8c: 76:48:08:ad:2a:9e:88:1b:6f:a6:c2:59:5b:87:68: 5f:69:4c:a5:26:dd:a2:35:22:41:90:83:65:94:16: 26:4c:d3:8e:02:93:70:14:39:3c:16:2d:26:cf:0e: ba:c3:e6:e2:bd:35:76:c8:f6:b6:bf:74:f7:99:03: c8:01:d5:f7:3a:fd:b3:ae:d9:2a:83:68:2d:e1:af: 92:0c:ac:d2:92:23:7b:4d:48:9f:9f:fb:b9:a5:e4: 38:49:f3:26:2c:61:8b:bf:3a:20:88:9d:6e:73:14: 91:05:7e:55:66:3b:1a:e5:d8:c9:fc:d5:bb:eb:f9: ed:a4:02:c5:f8:8d:59:6d:00:7a:7e:ec:29:12:35: df:3d:43:5b:15:2e:61:a9:df:63:2e:95:22:e3:6b: 22:dd:2e:0f:f3:dd:47:20:41:0e:b4:25:d4:65:bb: af:2b:d5:40:a1:f2:ff:b2:fc:b1:d7:5c:79:b1:c6: f5:f8:a0:ea:5b:73:6f:04:2e:23:d2:e2:0a:36:53: 78:74:1e:4e:5c:d7:aa:3c:7d:22:8b:ac:c7:13:6e: 60:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:C5:95:70:ED:65:6F:59:29:48:DF:11:1F:67:A3:73:51:8A:8C:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e8a2dcd-c473-4343-ab03-233f389ee575/d3304f17-035e-3d1c-9c51-29c9cd3a0ae4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e8a2dcd-c473-4343-ab03-233f389ee575/2e8a2dcd-c473-4343-ab03-233f389ee575.crl X509v3 Authority Key Identifier: keyid:E8:83:04:30:A6:ED:C0:6C:58:03:AE:9E:4C:4B:94:3A:2C:AD:CE:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e8a2dcd-c473-4343-ab03-233f389ee575.cer sbgp-ipAddrBlock: critical IPv4: 23.133.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:6d:83:24:18:32:6f:c1:bb:4b:b0:bc:15:14:93:29:ac:4b: 75:4b:8c:aa:9c:de:92:fe:4a:34:8a:5e:64:94:85:b9:dd:de: 7d:c7:54:4e:eb:86:ee:4f:df:a7:85:a1:69:c8:18:dd:53:d2: cf:b2:42:7f:31:b3:6f:58:4d:08:1f:51:6a:0f:69:4f:9a:0d: 96:11:31:20:bf:c0:95:84:b5:d8:31:7d:03:d1:bc:20:98:13: 3e:db:09:69:f3:92:7e:ca:f7:68:a6:76:f5:54:7b:bc:b3:1c: 1f:e6:8f:76:7a:cd:3e:b0:00:a5:35:ce:19:5c:19:af:cb:29: bb:7c:d0:cc:44:ca:86:28:cc:52:91:ef:6a:ad:93:ce:29:82: b5:37:dd:58:1f:d6:d9:ec:82:9e:52:15:ed:7c:d6:67:b9:07: 6a:28:a0:8f:c1:98:e8:49:b6:63:7b:2e:a3:6b:6b:bd:06:16: 0f:c1:43:0d:36:6c:76:f3:99:09:72:74:7d:70:ca:c6:e2:17: 1b:c3:1d:f3:ac:08:f6:54:c0:a4:d9:68:49:41:6d:a7:00:1d: 46:6d:f0:98:6f:cc:db:ea:7d:de:ba:67:19:06:02:f4:bf:8b: 72:52:5d:d4:06:06:53:e4:ca:b9:07:9b:a4:48:6d:d9:53:c1: cf:96:63:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB5LfwuKESpO1UQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmU4YTJkY2QtYzQ3My00MzQzLWFiMDMtMjMzZjM4OWVl NTc1MB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk NDNlNWFiZGUtNTQ2ZC00ZGEwLTk0ODgtZTI2NTgyNjAxZmVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1D5DJyUWXzN6s9HpNMKx8sQLCK6fuzwej+5G q5UZ6U0vEZVbVUHdFqPEsox2SAitKp6IG2+mwllbh2hfaUylJt2iNSJBkINllBYm TNOOApNwFDk8Fi0mzw66w+bivTV2yPa2v3T3mQPIAdX3Ov2zrtkqg2gt4a+SDKzS kiN7TUifn/u5peQ4SfMmLGGLvzogiJ1ucxSRBX5VZjsa5djJ/NW76/ntpALF+I1Z bQB6fuwpEjXfPUNbFS5hqd9jLpUi42si3S4P891HIEEOtCXUZbuvK9VAofL/svyx 11x5scb1+KDqW3NvBC4j0uIKNlN4dB5OXNeqPH0ii6zHE25gSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFErFlXDtZW9ZKUjfER9no3NRioz3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yZThh MmRjZC1jNDczLTQzNDMtYWIwMy0yMzNmMzg5ZWU1NzUvZDMzMDRmMTctMDM1ZS0z ZDFjLTljNTEtMjljOWNkM2EwYWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMmU4YTJkY2QtYzQ3My00MzQzLWFi MDMtMjMzZjM4OWVlNTc1LzJlOGEyZGNkLWM0NzMtNDM0My1hYjAzLTIzM2YzODll ZTU3NS5jcmwwHwYDVR0jBBgwFoAU6IMEMKbtwGxYA66eTEuUOiytzjswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yZThhMmRjZC1jNDczLTQzNDMtYWIwMy0yMzNm Mzg5ZWU1NzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4VsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIRtgyQYMm/Bu0uwvBUUkymsS3VLjKqc3pL+SjSKXmSUhbnd3n3HVE7r hu5P36eFoWnIGN1T0s+yQn8xs29YTQgfUWoPaU+aDZYRMSC/wJWEtdgxfQPRvCCY Ez7bCWnzkn7K92imdvVUe7yzHB/mj3Z6zT6wAKU1zhlcGa/LKbt80MxEyoYozFKR 72qtk84pgrU33Vgf1tnsgp5SFe181me5B2oooI/BmOhJtmN7LqNra70GFg/BQw02 bHbzmQlydH1wysbiFxvDHfOsCPZUwKTZaElBbacAHUZt8JhvzNvqfd66ZxkGAvS/ i3JSXdQGBlPkyrkHm6RIbdlTwc+WY9k= -----END CERTIFICATE-----Generated at Wed Nov 5 12:37:50 2025 by rpki-client