$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/2680c2a2-cabf-3554-9a13-b69dcab407b9.roa File: 2680c2a2-cabf-3554-9a13-b69dcab407b9.roa (raw, json) Hash identifier: swXGEGvJu0lVndYOyuiRmD7JwmpnnfVUwlSGWZeIoMo= Subject key identifier: FD:C8:2A:FB:CD:C1:C1:93:4B:E3:99:26:5A:3A:1C:C9:B2:D6:E1:82 Certificate issuer: /CN=caf392a1-07e9-49f4-9a03-df5005333708 Certificate serial: 010D0C9F4328584B153C21AF313D8DD77BEB9BC0 Authority key identifier: 44:2F:11:CB:79:DB:4D:95:5C:46:F5:8D:92:CB:7D:12:C3:2A:19:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/2680c2a2-cabf-3554-9a13-b69dcab407b9.roa Signing time: Thu 04 Sep 2025 13:00:41 +0000 ROA not before: Thu 04 Sep 2025 13:00:41 +0000 ROA not after: Wed 03 Dec 2025 14:00:41 +0000 asID: 46962 IP address blocks: 23.133.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/caf392a1-07e9-49f4-9a03-df5005333708.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/caf392a1-07e9-49f4-9a03-df5005333708.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:15:3c:21:af:31:3d:8d:d7:7b:eb:9b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=caf392a1-07e9-49f4-9a03-df5005333708 Validity Not Before: Sep 4 13:00:41 2025 GMT Not After : Dec 3 14:00:41 2025 GMT Subject: CN=69c3c40f-de21-4348-aea5-fa1e0f023f48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ff:93:69:30:b4:2c:1c:23:5b:4e:cb:99:6c: ba:43:93:75:0f:b5:5b:79:30:a8:0c:7a:9f:07:86: 10:03:41:81:cd:b0:71:c9:69:f4:55:e0:02:5f:9f: f6:a1:14:2f:6c:ab:d3:d1:a8:ac:35:05:37:4f:5c: a1:34:25:c2:c3:41:51:b9:fb:c5:55:e4:f6:6e:26: b4:00:05:bf:89:03:c1:6c:78:ae:19:b2:cf:b3:47: 27:21:56:e1:b5:3e:9d:3d:13:d3:97:81:9d:34:4c: ce:f3:fb:08:ea:57:96:e8:aa:d4:80:0f:8a:20:20: b0:7f:6f:ef:e4:aa:54:76:f0:68:fd:8b:46:84:52: 60:56:71:7a:6f:5f:fe:9f:40:35:0c:68:c1:e9:31: a7:39:c8:8e:6f:9a:f3:ad:4c:79:2c:06:9a:d1:68: fb:9d:66:eb:00:8a:4f:f0:c0:b3:18:71:fb:94:c6: 20:d5:a7:03:8c:9a:40:aa:39:9c:23:11:62:64:2f: 00:22:f8:e2:92:6b:19:84:2a:f3:7c:5a:47:ff:91: b1:3b:64:d5:80:e6:85:f9:ce:40:1e:20:0b:bc:3a: 31:1f:b5:43:55:b5:92:ed:c9:fe:8b:44:2f:21:da: ce:e2:a7:08:1e:20:cb:17:fe:32:aa:f2:61:2c:94: 1a:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:C8:2A:FB:CD:C1:C1:93:4B:E3:99:26:5A:3A:1C:C9:B2:D6:E1:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/2680c2a2-cabf-3554-9a13-b69dcab407b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/caf392a1-07e9-49f4-9a03-df5005333708.crl X509v3 Authority Key Identifier: keyid:44:2F:11:CB:79:DB:4D:95:5C:46:F5:8D:92:CB:7D:12:C3:2A:19:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708.cer sbgp-ipAddrBlock: critical IPv4: 23.133.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:c6:15:0c:af:63:0f:c3:97:63:4f:4f:bb:6c:c3:ed:ff:91: b4:ec:88:80:2a:03:31:80:fd:25:2d:3d:ba:08:e8:f3:b6:5b: 6e:ea:be:58:2d:2d:18:4b:ca:f7:68:2a:67:bb:b5:38:f3:01: 80:8c:e9:57:03:37:99:3a:bd:89:2e:3b:c7:74:ce:6f:b4:65: 93:75:ea:63:fd:2a:42:44:96:d2:8e:3e:65:56:6a:d0:f8:87: 41:4f:c5:10:e4:2a:e0:a8:b3:27:55:2e:c2:c2:2f:0d:03:9c: fa:0c:d9:3b:f5:72:8a:4b:e2:29:cd:19:73:d9:b2:ba:14:f6: 2a:65:a4:05:09:7d:ec:73:08:f0:e7:ab:0e:c7:a0:bb:94:bb: 07:26:42:c5:61:ac:be:2a:89:ab:aa:a7:52:c3:17:b7:32:c3: 65:b1:81:12:d7:12:b8:ef:32:05:63:3d:b8:ff:7c:15:a5:c7: 17:77:fd:7e:ce:6e:a0:e0:fa:61:e4:fd:25:f1:8b:54:14:69: 82:9a:25:3c:24:55:53:0d:a2:96:f3:b0:90:da:47:f7:dd:da: 93:6b:67:eb:fe:86:f3:92:df:9f:bc:d7:68:d4:62:87:cf:ab: 19:e3:5c:c8:0d:21:87:32:5d:28:53:c5:c0:d7:8f:42:5e:91: 17:b4:cc:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsVPCGvMT2N13vrm8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2FmMzkyYTEtMDdlOS00OWY0LTlhMDMtZGY1MDA1MzMz NzA4MB4XDTI1MDkwNDEzMDA0MVoXDTI1MTIwMzE0MDA0MVowLzEtMCsGA1UEAxMk NjljM2M0MGYtZGUyMS00MzQ4LWFlYTUtZmExZTBmMDIzZjQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1P+TaTC0LBwjW07LmWy6Q5N1D7VbeTCoDHqf B4YQA0GBzbBxyWn0VeACX5/2oRQvbKvT0aisNQU3T1yhNCXCw0FRufvFVeT2bia0 AAW/iQPBbHiuGbLPs0cnIVbhtT6dPRPTl4GdNEzO8/sI6leW6KrUgA+KICCwf2/v 5KpUdvBo/YtGhFJgVnF6b1/+n0A1DGjB6TGnOciOb5rzrUx5LAaa0Wj7nWbrAIpP 8MCzGHH7lMYg1acDjJpAqjmcIxFiZC8AIvjikmsZhCrzfFpH/5GxO2TVgOaF+c5A HiALvDoxH7VDVbWS7cn+i0QvIdrO4qcIHiDLF/4yqvJhLJQa4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP3IKvvNwcGTS+OZJlo6HMmy1uGCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jYWYz OTJhMS0wN2U5LTQ5ZjQtOWEwMy1kZjUwMDUzMzM3MDgvMjY4MGMyYTItY2FiZi0z NTU0LTlhMTMtYjY5ZGNhYjQwN2I5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2FmMzkyYTEtMDdlOS00OWY0LTlh MDMtZGY1MDA1MzMzNzA4L2NhZjM5MmExLTA3ZTktNDlmNC05YTAzLWRmNTAwNTMz MzcwOC5jcmwwHwYDVR0jBBgwFoAURC8Ry3nbTZVcRvWNkst9EsMqGU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jYWYzOTJhMS0wN2U5LTQ5ZjQtOWEwMy1kZjUw MDUzMzM3MDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4V4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAADGFQyvYw/Dl2NPT7tsw+3/kbTsiIAqAzGA/SUtPboI6PO2W27qvlgt LRhLyvdoKme7tTjzAYCM6VcDN5k6vYkuO8d0zm+0ZZN16mP9KkJEltKOPmVWatD4 h0FPxRDkKuCosydVLsLCLw0DnPoM2Tv1copL4inNGXPZsroU9iplpAUJfexzCPDn qw7HoLuUuwcmQsVhrL4qiauqp1LDF7cyw2WxgRLXErjvMgVjPbj/fBWlxxd3/X7O bqDg+mHk/SXxi1QUaYKaJTwkVVMNopbzsJDaR/fd2pNrZ+v+hvOS35+812jUYofP qxnjXMgNIYcyXShTxcDXj0JekRe0zKw= -----END CERTIFICATE-----Generated at Sat Oct 11 02:55:59 2025 by rpki-client