$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8b2c8fdb-4736-46fb-9328-319b0c9b78d0/f33c8159-4685-363c-867f-21860986d795.roa File: f33c8159-4685-363c-867f-21860986d795.roa (raw, json) Hash identifier: De8nEcBc7QjgtvCA67gdSRfwUNQttaQYb5tJRSQouyg= Subject key identifier: 5C:1A:D3:1A:46:F3:02:B5:C7:54:07:A8:97:96:F2:AB:FB:82:27:A0 Certificate issuer: /CN=8b2c8fdb-4736-46fb-9328-319b0c9b78d0 Certificate serial: 010D0C9F4328584BA502394D670EFA0679D079B0 Authority key identifier: CA:06:B6:DF:BC:04:1C:66:02:1E:AC:E2:8A:F8:42:2E:40:ED:95:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8b2c8fdb-4736-46fb-9328-319b0c9b78d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8b2c8fdb-4736-46fb-9328-319b0c9b78d0/f33c8159-4685-363c-867f-21860986d795.roa Signing time: Sun 26 Oct 2025 01:00:31 +0000 ROA not before: Sun 26 Oct 2025 01:00:31 +0000 ROA not after: Sat 24 Jan 2026 02:00:31 +0000 asID: 2914 IP address blocks: 23.133.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8b2c8fdb-4736-46fb-9328-319b0c9b78d0/8b2c8fdb-4736-46fb-9328-319b0c9b78d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8b2c8fdb-4736-46fb-9328-319b0c9b78d0/8b2c8fdb-4736-46fb-9328-319b0c9b78d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8b2c8fdb-4736-46fb-9328-319b0c9b78d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a5:02:39:4d:67:0e:fa:06:79:d0:79:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b2c8fdb-4736-46fb-9328-319b0c9b78d0 Validity Not Before: Oct 26 01:00:31 2025 GMT Not After : Jan 24 02:00:31 2026 GMT Subject: CN=d3df60d2-d4d1-4e4a-b206-09a0d7b9d088 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:2a:46:c8:b4:83:a7:ea:9f:5d:86:af:f3:05: 96:90:9d:87:a8:39:12:d4:af:5f:11:09:e1:3c:61: 4a:94:3e:a8:c3:83:c5:3a:69:b7:6b:27:2f:28:1f: 42:54:b5:3f:5c:1a:bd:4b:de:58:b9:55:60:a2:e1: 7d:fc:35:3e:0b:54:4c:a1:e6:57:3d:67:3d:05:30: 66:52:83:3d:65:02:5c:e3:f0:5f:70:6c:da:47:59: 3c:c0:8e:bd:89:b4:5b:8a:8a:4b:7a:7b:bd:69:4f: e2:76:47:92:2a:0a:c8:bd:b2:7f:57:b8:3d:c0:31: 7f:89:dd:25:9b:d7:bc:79:55:38:84:10:c4:47:7d: 10:b5:1b:b1:e6:ed:8b:45:28:54:71:8e:48:f1:66: ec:64:78:8e:05:3c:22:78:51:bd:5b:74:42:2b:e5: a9:6c:fb:de:6f:e5:93:7a:35:0f:76:ea:78:47:17: 9c:01:38:00:55:85:2a:80:67:ba:4e:b9:c2:9a:fc: 0a:37:07:88:55:4e:ed:d4:b8:71:c7:78:d4:83:0d: 56:71:bc:c0:48:c0:9f:bc:5d:93:bf:ba:67:67:82: 5a:ac:e7:08:8c:eb:18:64:5e:a8:ff:0b:9b:2c:49: 4d:ca:9f:d5:6d:a3:e1:c8:c0:9f:74:7a:c8:a4:0c: 29:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:1A:D3:1A:46:F3:02:B5:C7:54:07:A8:97:96:F2:AB:FB:82:27:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8b2c8fdb-4736-46fb-9328-319b0c9b78d0/f33c8159-4685-363c-867f-21860986d795.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8b2c8fdb-4736-46fb-9328-319b0c9b78d0/8b2c8fdb-4736-46fb-9328-319b0c9b78d0.crl X509v3 Authority Key Identifier: keyid:CA:06:B6:DF:BC:04:1C:66:02:1E:AC:E2:8A:F8:42:2E:40:ED:95:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8b2c8fdb-4736-46fb-9328-319b0c9b78d0.cer sbgp-ipAddrBlock: critical IPv4: 23.133.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:2c:59:e2:2f:8e:48:2b:f7:c4:27:01:af:a5:86:04:a6:fe: 3a:c3:8b:15:5f:b7:fc:29:2a:95:ca:03:3e:96:0c:22:4f:d4: 97:b1:f9:7c:13:70:df:07:e7:87:c5:01:cd:9d:0a:61:46:13: f4:8b:25:94:52:2a:5d:80:29:0b:97:bc:b8:52:db:a9:06:18: 98:f7:c2:ab:5a:6d:ec:86:cc:01:db:f8:29:ba:cc:4e:0f:98: 3a:bd:b1:d0:d0:17:1d:ac:00:eb:70:04:08:38:20:c7:81:d0: d7:66:fc:de:fa:66:9d:23:45:dc:e7:1a:42:d7:8c:9c:28:02: cb:30:63:06:cf:01:8d:4a:65:ea:0e:ea:4d:76:7e:d1:52:1e: a0:ea:cc:0e:7d:c5:fc:86:bf:57:23:8e:86:dd:79:ae:7e:5e: 7f:65:8a:4b:ca:db:1c:1b:1c:22:9b:d5:9a:58:d2:03:a4:85: 89:a2:f7:bd:33:05:a7:a9:fb:72:4f:24:09:e2:ad:7c:68:82: 9f:48:84:72:87:dd:9b:59:f7:6c:6c:e7:c8:ed:08:63:cb:69: 44:5a:e9:dc:ae:3d:22:6a:07:52:78:61:72:3a:09:74:dd:6d: 9a:9a:14:3d:eb:56:73:3f:58:91:24:2b:a2:26:87:ab:a7:e8: 50:1c:26:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEulAjlNZw76BnnQebAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGIyYzhmZGItNDczNi00NmZiLTkzMjgtMzE5YjBjOWI3 OGQwMB4XDTI1MTAyNjAxMDAzMVoXDTI2MDEyNDAyMDAzMVowLzEtMCsGA1UEAxMk ZDNkZjYwZDItZDRkMS00ZTRhLWIyMDYtMDlhMGQ3YjlkMDg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoipGyLSDp+qfXYav8wWWkJ2HqDkS1K9fEQnh PGFKlD6ow4PFOmm3aycvKB9CVLU/XBq9S95YuVVgouF9/DU+C1RMoeZXPWc9BTBm UoM9ZQJc4/BfcGzaR1k8wI69ibRbiopLenu9aU/idkeSKgrIvbJ/V7g9wDF/id0l m9e8eVU4hBDER30QtRux5u2LRShUcY5I8WbsZHiOBTwieFG9W3RCK+WpbPveb+WT ejUPdup4RxecATgAVYUqgGe6TrnCmvwKNweIVU7t1Lhxx3jUgw1WcbzASMCfvF2T v7pnZ4JarOcIjOsYZF6o/wubLElNyp/VbaPhyMCfdHrIpAwppwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFwa0xpG8wK1x1QHqJeW8qv7giegMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84YjJj OGZkYi00NzM2LTQ2ZmItOTMyOC0zMTliMGM5Yjc4ZDAvZjMzYzgxNTktNDY4NS0z NjNjLTg2N2YtMjE4NjA5ODZkNzk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOGIyYzhmZGItNDczNi00NmZiLTkz MjgtMzE5YjBjOWI3OGQwLzhiMmM4ZmRiLTQ3MzYtNDZmYi05MzI4LTMxOWIwYzli NzhkMC5jcmwwHwYDVR0jBBgwFoAUyga237wEHGYCHqziivhCLkDtlckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84YjJjOGZkYi00NzM2LTQ2ZmItOTMyOC0zMTli MGM5Yjc4ZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4XsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIYsWeIvjkgr98QnAa+lhgSm/jrDixVft/wpKpXKAz6WDCJP1Jex+XwT cN8H54fFAc2dCmFGE/SLJZRSKl2AKQuXvLhS26kGGJj3wqtabeyGzAHb+Cm6zE4P mDq9sdDQFx2sAOtwBAg4IMeB0Ndm/N76Zp0jRdznGkLXjJwoAsswYwbPAY1KZeoO 6k12ftFSHqDqzA59xfyGv1cjjobdea5+Xn9likvK2xwbHCKb1ZpY0gOkhYmi970z Baep+3JPJAnirXxogp9IhHKH3ZtZ92xs58jtCGPLaURa6dyuPSJqB1J4YXI6CXTd bZqaFD3rVnM/WJEkK6Imh6un6FAcJvA= -----END CERTIFICATE-----Generated at Tue Nov 4 23:04:14 2025 by rpki-client