$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca/d0ab03df-b570-315f-b4ba-d53187b6ff7a.roa File: d0ab03df-b570-315f-b4ba-d53187b6ff7a.roa (raw, json) Hash identifier: VEzGstQQ5EVdocn3E2xOjv8NMj1SWjJKeC80tgoM/7A= Subject key identifier: ED:02:C9:3B:B0:B9:15:07:42:52:50:50:72:2C:6D:19:4D:AC:37:C4 Certificate issuer: /CN=c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca Certificate serial: 010D0C9F4328584BA5023C7C33747506F0F8D740 Authority key identifier: DB:20:03:27:1E:84:D1:36:A3:75:42:0C:B0:53:6F:52:1E:80:D4:1B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca/d0ab03df-b570-315f-b4ba-d53187b6ff7a.roa Signing time: Sun 26 Oct 2025 01:00:31 +0000 ROA not before: Sun 26 Oct 2025 01:00:31 +0000 ROA not after: Sat 24 Jan 2026 02:00:31 +0000 asID: 2914 IP address blocks: 23.133.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a5:02:3c:7c:33:74:75:06:f0:f8:d7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca Validity Not Before: Oct 26 01:00:31 2025 GMT Not After : Jan 24 02:00:31 2026 GMT Subject: CN=fd71966a-390f-4d11-b6ad-bf2ca8fe0a4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:68:32:b7:b3:69:8f:b3:94:03:94:96:47:a0: 4c:06:d5:a5:2a:37:e8:35:2d:d3:e7:b9:2b:c3:e7: 51:cb:d6:d2:9d:07:1e:02:a7:7e:ab:bc:c9:e0:64: 2c:f1:02:44:15:4e:25:7c:e6:8a:ae:72:fb:1d:9d: 22:ad:3b:cb:d2:1d:8e:54:54:5f:8f:cf:c5:11:81: 76:a4:47:fa:9c:d6:e1:30:38:1f:47:f6:62:39:aa: 65:42:be:21:6d:1a:62:18:7f:fe:27:a3:95:50:93: c9:4f:8e:c6:bf:27:12:17:9c:6b:64:dd:e1:4b:65: df:af:36:b9:16:16:36:09:c5:6c:b6:d5:12:4b:58: 9a:ec:19:9d:6e:42:f3:de:45:f7:70:25:e3:4a:20: 28:2b:b6:c0:da:d8:d3:40:20:67:b2:0f:1e:04:d4: 16:7f:25:a8:b2:00:fd:13:a9:42:4c:65:8c:12:3c: d1:51:c1:ff:fe:02:5e:01:5e:a0:54:db:75:c6:20: 5f:2f:0d:85:92:c2:2c:3e:0f:2f:06:3d:8c:6f:3b: f2:5c:a4:06:57:01:02:2a:19:cd:e4:a6:99:50:bf: 48:3a:1a:a3:ea:0e:b6:4f:ae:ef:97:61:38:c6:01: e0:e9:f4:90:34:99:7c:65:71:b0:4b:17:e9:b6:55: 6f:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:02:C9:3B:B0:B9:15:07:42:52:50:50:72:2C:6D:19:4D:AC:37:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca/d0ab03df-b570-315f-b4ba-d53187b6ff7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca.crl X509v3 Authority Key Identifier: keyid:DB:20:03:27:1E:84:D1:36:A3:75:42:0C:B0:53:6F:52:1E:80:D4:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca.cer sbgp-ipAddrBlock: critical IPv4: 23.133.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:f9:6c:e4:ae:9d:d5:2a:20:d3:72:c4:6f:5e:e5:4f:67:47: 66:5b:2f:91:b0:8c:18:6a:88:16:9f:5c:26:51:92:ab:52:69: e6:eb:e5:d5:8e:31:ea:a2:bf:56:a1:ee:45:29:27:53:00:32: d0:c9:6d:ff:9b:4f:e0:56:b6:17:96:73:e1:b6:0c:0d:63:21: 8d:73:e7:78:9e:e7:28:71:8b:b8:68:21:58:cb:b9:55:c2:50: 72:2f:12:2e:21:bd:78:78:45:79:03:39:d9:47:5e:3e:63:1f: 04:df:04:68:27:77:b3:0d:5f:61:55:69:6f:b1:74:63:d0:1d: 5b:da:d5:df:80:dd:25:e7:fd:37:e6:31:20:34:95:fd:0b:4b: b2:40:0d:99:d9:1b:83:80:7a:d2:96:c9:18:f1:72:4a:f1:9e: 20:30:07:c1:d0:ae:ff:1a:10:74:c4:5c:8e:b9:37:d9:c9:94: 02:a2:79:ef:a5:38:02:30:bb:38:84:13:98:c0:5e:88:46:6f: 70:04:05:18:34:8c:23:dd:6c:0c:c3:c1:1c:92:24:9b:a6:75: d9:2b:62:15:33:fd:d8:b5:77:36:e3:16:d4:bc:c0:00:25:20: 6d:75:44:75:20:22:48:1c:02:9d:08:2e:5a:66:3e:d2:37:22: 52:5b:e5:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEulAjx8M3R1BvD410AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzNmMzIxM2YtZDhkMC00Y2ZjLWFlNGMtNGE0NTQ0NWI2 ZWNhMB4XDTI1MTAyNjAxMDAzMVoXDTI2MDEyNDAyMDAzMVowLzEtMCsGA1UEAxMk ZmQ3MTk2NmEtMzkwZi00ZDExLWI2YWQtYmYyY2E4ZmUwYTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2gyt7Npj7OUA5SWR6BMBtWlKjfoNS3T57kr w+dRy9bSnQceAqd+q7zJ4GQs8QJEFU4lfOaKrnL7HZ0irTvL0h2OVFRfj8/FEYF2 pEf6nNbhMDgfR/ZiOaplQr4hbRpiGH/+J6OVUJPJT47GvycSF5xrZN3hS2Xfrza5 FhY2CcVsttUSS1ia7BmdbkLz3kX3cCXjSiAoK7bA2tjTQCBnsg8eBNQWfyWosgD9 E6lCTGWMEjzRUcH//gJeAV6gVNt1xiBfLw2FksIsPg8vBj2MbzvyXKQGVwECKhnN 5KaZUL9IOhqj6g62T67vl2E4xgHg6fSQNJl8ZXGwSxfptlVv8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO0CyTuwuRUHQlJQUHIsbRlNrDfEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jM2Yz MjEzZi1kOGQwLTRjZmMtYWU0Yy00YTQ1NDQ1YjZlY2EvZDBhYjAzZGYtYjU3MC0z MTVmLWI0YmEtZDUzMTg3YjZmZjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzNmMzIxM2YtZDhkMC00Y2ZjLWFl NGMtNGE0NTQ0NWI2ZWNhL2MzZjMyMTNmLWQ4ZDAtNGNmYy1hZTRjLTRhNDU0NDVi NmVjYS5jcmwwHwYDVR0jBBgwFoAU2yADJx6E0TajdUIMsFNvUh6A1BswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jM2YzMjEzZi1kOGQwLTRjZmMtYWU0Yy00YTQ1 NDQ1YjZlY2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4WEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKn5bOSundUqINNyxG9e5U9nR2ZbL5GwjBhqiBafXCZRkqtSaebr5dWO Meqiv1ah7kUpJ1MAMtDJbf+bT+BWtheWc+G2DA1jIY1z53ie5yhxi7hoIVjLuVXC UHIvEi4hvXh4RXkDOdlHXj5jHwTfBGgnd7MNX2FVaW+xdGPQHVva1d+A3SXn/Tfm MSA0lf0LS7JADZnZG4OAetKWyRjxckrxniAwB8HQrv8aEHTEXI65N9nJlAKiee+l OAIwuziEE5jAXohGb3AEBRg0jCPdbAzDwRySJJumddkrYhUz/di1dzbjFtS8wAAl IG11RHUgIkgcAp0ILlpmPtI3IlJb5eg= -----END CERTIFICATE-----Generated at Tue Nov 4 23:04:25 2025 by rpki-client