$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca/50f4d33e-0d95-35af-be72-489f9c9d15e7.roa File: 50f4d33e-0d95-35af-be72-489f9c9d15e7.roa (raw, json) Hash identifier: jtpTU1P527jYWd6PPjGtXKtjD5dkmXHzvst6ofho2C8= Subject key identifier: D8:E6:90:F1:05:83:D9:02:C8:CB:46:18:1E:08:C1:17:D9:FA:F8:42 Certificate issuer: /CN=c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca Certificate serial: 010D0C9F4328584966984E576C6246FD85B21400 Authority key identifier: DB:20:03:27:1E:84:D1:36:A3:75:42:0C:B0:53:6F:52:1E:80:D4:1B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca/50f4d33e-0d95-35af-be72-489f9c9d15e7.roa Signing time: Thu 03 Apr 2025 06:53:09 +0000 ROA not before: Thu 03 Apr 2025 06:53:09 +0000 ROA not after: Wed 02 Jul 2025 06:53:09 +0000 asID: 4766 IP address blocks: 23.133.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:66:98:4e:57:6c:62:46:fd:85:b2:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca Validity Not Before: Apr 3 06:53:09 2025 GMT Not After : Jul 2 06:53:09 2025 GMT Subject: CN=f84d86e7-d325-4f15-93eb-d86205d1ecdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:ce:1b:82:57:2c:d4:b9:3e:c3:8f:8f:ac:c3: 0e:94:29:bc:00:5d:67:80:f2:ea:13:ae:6d:3c:01: b3:08:69:7d:07:4c:f7:86:2f:cc:3f:69:f2:75:bb: 84:0c:49:dc:6c:9c:e7:c6:ce:1b:2b:9b:bf:15:d1: d0:7e:17:d2:c1:89:6a:94:1e:81:11:9b:ff:66:97: 7c:72:24:ee:6c:b3:1c:62:82:1d:2d:ef:60:e6:8d: 55:a0:cc:6d:58:ea:e4:1a:34:69:9e:f7:7e:7e:ab: d6:49:4f:93:46:1d:fe:78:c1:be:8d:2e:81:75:a5: d8:b7:dc:61:8b:04:de:26:04:9b:b8:20:ed:8f:e7: 9d:91:6f:54:60:ed:54:e6:76:b2:f4:41:6b:59:a6: 0a:51:6b:22:20:4c:5e:f4:3b:3e:f8:15:7b:cb:45: 5f:56:a6:32:d4:6a:a0:43:9c:97:ce:fd:c5:87:02: ff:ad:8d:e6:70:66:16:4e:d5:07:6a:00:74:49:a7: 51:93:45:71:63:03:b8:ee:0e:46:d9:67:49:8c:b3: 6d:8e:65:a1:95:a7:c6:48:0a:12:86:78:16:b9:21: a1:e9:76:c0:db:8b:8f:de:65:6d:7e:4a:76:08:c6: 37:a6:37:4c:a2:ac:8f:9a:ba:1a:a7:3b:8a:cf:41: 18:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:E6:90:F1:05:83:D9:02:C8:CB:46:18:1E:08:C1:17:D9:FA:F8:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca/50f4d33e-0d95-35af-be72-489f9c9d15e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca.crl X509v3 Authority Key Identifier: keyid:DB:20:03:27:1E:84:D1:36:A3:75:42:0C:B0:53:6F:52:1E:80:D4:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca.cer sbgp-ipAddrBlock: critical IPv4: 23.133.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:33:fe:f4:ac:5e:25:9d:17:ab:01:1c:3f:67:66:b7:af:8b: 46:eb:bb:b5:c2:ab:e6:1c:c6:87:e0:2c:7f:c8:e3:8d:06:5b: 7e:05:d3:4f:46:47:b1:ab:17:4a:f4:af:97:d5:8f:dc:a1:28: cf:7e:9c:9b:1c:f0:f3:fe:f5:aa:4b:70:26:b3:34:a0:32:35: b0:59:07:14:78:60:10:51:cf:f4:9a:7a:c4:a5:dd:b5:88:cd: 77:23:9d:4b:7b:4b:3f:57:22:66:0e:8a:1c:45:76:d7:c1:60: f7:8d:db:f0:54:6c:e0:cc:16:90:93:30:23:c2:ba:b0:d4:98: 0d:47:6d:49:4e:83:af:6a:92:cf:1a:4d:42:23:ed:1a:53:7c: 3f:28:e6:f1:62:bb:ac:03:12:4a:c6:c8:8d:1d:8c:a9:52:7f: 13:a2:09:a0:85:d4:9b:70:a2:06:b6:96:7f:2f:e9:a7:19:53: e9:8b:8e:5c:6f:ad:50:85:1a:08:5d:1f:42:e0:d6:de:0d:7c: ea:52:46:cb:59:e0:af:74:27:d7:87:dd:32:2d:b2:b5:8f:41: cc:59:5d:ac:22:7d:09:3c:ec:91:66:72:35:f0:6f:30:e3:bc: 0e:90:54:05:b2:c4:af:41:5e:46:97:33:75:7b:b7:45:98:6d: 52:fe:07:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElmmE5XbGJG/YWyFAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzNmMzIxM2YtZDhkMC00Y2ZjLWFlNGMtNGE0NTQ0NWI2 ZWNhMB4XDTI1MDQwMzA2NTMwOVoXDTI1MDcwMjA2NTMwOVowLzEtMCsGA1UEAxMk Zjg0ZDg2ZTctZDMyNS00ZjE1LTkzZWItZDg2MjA1ZDFlY2RiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgc4bglcs1Lk+w4+PrMMOlCm8AF1ngPLqE65t PAGzCGl9B0z3hi/MP2nydbuEDEncbJznxs4bK5u/FdHQfhfSwYlqlB6BEZv/Zpd8 ciTubLMcYoIdLe9g5o1VoMxtWOrkGjRpnvd+fqvWSU+TRh3+eMG+jS6BdaXYt9xh iwTeJgSbuCDtj+edkW9UYO1U5nay9EFrWaYKUWsiIExe9Ds++BV7y0VfVqYy1Gqg Q5yXzv3FhwL/rY3mcGYWTtUHagB0SadRk0VxYwO47g5G2WdJjLNtjmWhlafGSAoS hngWuSGh6XbA24uP3mVtfkp2CMY3pjdMoqyPmroapzuKz0EYywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNjmkPEFg9kCyMtGGB4IwRfZ+vhCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jM2Yz MjEzZi1kOGQwLTRjZmMtYWU0Yy00YTQ1NDQ1YjZlY2EvNTBmNGQzM2UtMGQ5NS0z NWFmLWJlNzItNDg5ZjljOWQxNWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzNmMzIxM2YtZDhkMC00Y2ZjLWFl NGMtNGE0NTQ0NWI2ZWNhL2MzZjMyMTNmLWQ4ZDAtNGNmYy1hZTRjLTRhNDU0NDVi NmVjYS5jcmwwHwYDVR0jBBgwFoAU2yADJx6E0TajdUIMsFNvUh6A1BswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jM2YzMjEzZi1kOGQwLTRjZmMtYWU0Yy00YTQ1 NDQ1YjZlY2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4WEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAgz/vSsXiWdF6sBHD9nZrevi0bru7XCq+YcxofgLH/I440GW34F009G R7GrF0r0r5fVj9yhKM9+nJsc8PP+9apLcCazNKAyNbBZBxR4YBBRz/SaesSl3bWI zXcjnUt7Sz9XImYOihxFdtfBYPeN2/BUbODMFpCTMCPCurDUmA1HbUlOg69qks8a TUIj7RpTfD8o5vFiu6wDEkrGyI0djKlSfxOiCaCF1Jtwoga2ln8v6acZU+mLjlxv rVCFGghdH0Lg1t4NfOpSRstZ4K90J9eH3TItsrWPQcxZXawifQk87JFmcjXwbzDj vA6QVAWyxK9BXkaXM3V7t0WYbVL+B/M= -----END CERTIFICATE-----Generated at Sat Apr 26 18:33:08 2025 by rpki-client