$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca/50f4d33e-0d95-35af-be72-489f9c9d15e7.roa File: 50f4d33e-0d95-35af-be72-489f9c9d15e7.roa (raw, json) Hash identifier: Pa/KCZAY8zrRYJjzIhvtyYtz9IEQCd/XLgNl4lLHhEk= Subject key identifier: EC:3A:BC:30:5E:B7:6D:5A:B8:F4:76:9C:A6:7A:9A:69:F6:64:52:55 Certificate issuer: /CN=c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca Certificate serial: 010D0C9F4328584B276172A053333A6E4A568AA6 Authority key identifier: DB:20:03:27:1E:84:D1:36:A3:75:42:0C:B0:53:6F:52:1E:80:D4:1B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca/50f4d33e-0d95-35af-be72-489f9c9d15e7.roa Signing time: Thu 11 Sep 2025 01:00:33 +0000 ROA not before: Thu 11 Sep 2025 01:00:33 +0000 ROA not after: Wed 10 Dec 2025 02:00:33 +0000 asID: 4766 IP address blocks: 23.133.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:27:61:72:a0:53:33:3a:6e:4a:56:8a:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca Validity Not Before: Sep 11 01:00:33 2025 GMT Not After : Dec 10 02:00:33 2025 GMT Subject: CN=54d4c5d6-96d6-4c89-9d1e-b0bcb265d54a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:9f:b3:c5:af:2e:4e:84:77:0e:95:eb:d7:d9: a6:c3:7c:b2:20:52:77:49:76:42:1d:30:6b:56:9b: 98:c8:db:38:ff:2c:b0:c9:8f:33:cb:e7:30:66:c0: 35:8f:c0:21:be:9b:52:11:53:0b:4c:9b:cd:00:6f: 9b:25:c0:10:c4:59:48:66:72:05:84:fb:f1:d9:a5: 57:72:af:f1:3a:cf:3f:7c:1e:d8:7c:cb:f3:91:6a: 12:43:fb:f0:55:8a:44:7c:e2:1b:7c:94:16:7b:e4: af:ba:97:e6:e7:b1:ed:0c:57:6d:3c:c6:3a:fa:f9: 7a:ee:40:fc:26:9f:97:de:67:67:62:37:d1:22:68: d6:62:3b:78:17:4c:69:d6:c0:24:c0:67:a4:84:75: bf:b1:3f:c1:5a:2c:ab:0f:ca:15:6d:05:e1:39:ac: 49:89:1f:f6:46:d2:f6:17:ae:91:8f:99:8a:23:5e: bf:f8:c9:09:93:9c:62:1c:62:28:36:a0:49:ee:dd: 2a:68:f8:39:d7:f4:1b:e5:a5:cc:cf:79:07:f9:1b: 9f:88:c9:33:c2:91:49:99:b3:36:c8:12:a4:d2:0f: 10:18:c2:4e:7e:e7:df:a3:10:57:57:46:dc:0a:0a: 39:4e:a3:8c:26:a5:0e:24:95:3d:4b:ed:a1:c2:89: 8d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:3A:BC:30:5E:B7:6D:5A:B8:F4:76:9C:A6:7A:9A:69:F6:64:52:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca/50f4d33e-0d95-35af-be72-489f9c9d15e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca.crl X509v3 Authority Key Identifier: keyid:DB:20:03:27:1E:84:D1:36:A3:75:42:0C:B0:53:6F:52:1E:80:D4:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca.cer sbgp-ipAddrBlock: critical IPv4: 23.133.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:b6:57:fb:5f:26:51:ba:13:14:0d:31:56:d1:6f:4f:de:ff: 4d:b0:4d:67:12:4e:b9:a1:22:3d:73:2e:24:94:92:51:fc:5a: 02:cc:da:04:f7:86:cd:71:1f:55:b5:5f:70:33:6b:43:44:cd: 48:4c:42:2c:ab:ec:b3:5e:dd:2b:cb:95:36:e8:14:d5:2e:24: ba:94:76:82:11:a6:e9:33:08:be:15:38:19:21:15:0c:75:f6: 60:eb:fa:89:f2:fc:6a:f0:af:eb:fd:f6:43:62:75:02:78:bf: 67:cf:b8:2a:1f:9c:9e:bf:6d:df:ea:b7:02:f8:1e:25:44:70: a6:81:4e:6c:ca:3b:9b:be:50:2f:04:fd:a8:aa:bb:a6:c7:6c: 42:c3:2f:96:68:2d:83:0c:44:35:c7:0b:ae:ea:4f:3d:4e:ad: 01:fe:80:5d:22:89:09:81:4c:0d:31:6b:ed:d3:aa:bf:09:39: 46:18:3b:ba:b4:07:a9:72:0f:84:01:ed:83:dd:6e:8f:77:4d: e6:47:f5:ec:2b:a7:0a:f2:b0:3e:6a:70:88:55:c8:66:eb:b9: 95:29:9b:cb:d9:81:3a:61:87:49:9e:f3:3a:0a:7e:43:c2:07: c6:c3:61:5c:f0:a9:48:ff:99:fa:ee:01:d9:fe:10:82:c9:1e: 70:9c:98:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsnYXKgUzM6bkpWiqYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzNmMzIxM2YtZDhkMC00Y2ZjLWFlNGMtNGE0NTQ0NWI2 ZWNhMB4XDTI1MDkxMTAxMDAzM1oXDTI1MTIxMDAyMDAzM1owLzEtMCsGA1UEAxMk NTRkNGM1ZDYtOTZkNi00Yzg5LTlkMWUtYjBiY2IyNjVkNTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5+zxa8uToR3DpXr19mmw3yyIFJ3SXZCHTBr VpuYyNs4/yywyY8zy+cwZsA1j8AhvptSEVMLTJvNAG+bJcAQxFlIZnIFhPvx2aVX cq/xOs8/fB7YfMvzkWoSQ/vwVYpEfOIbfJQWe+Svupfm57HtDFdtPMY6+vl67kD8 Jp+X3mdnYjfRImjWYjt4F0xp1sAkwGekhHW/sT/BWiyrD8oVbQXhOaxJiR/2RtL2 F66Rj5mKI16/+MkJk5xiHGIoNqBJ7t0qaPg51/Qb5aXMz3kH+RufiMkzwpFJmbM2 yBKk0g8QGMJOfuffoxBXV0bcCgo5TqOMJqUOJJU9S+2hwomN2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOw6vDBet21auPR2nKZ6mmn2ZFJVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jM2Yz MjEzZi1kOGQwLTRjZmMtYWU0Yy00YTQ1NDQ1YjZlY2EvNTBmNGQzM2UtMGQ5NS0z NWFmLWJlNzItNDg5ZjljOWQxNWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzNmMzIxM2YtZDhkMC00Y2ZjLWFl NGMtNGE0NTQ0NWI2ZWNhL2MzZjMyMTNmLWQ4ZDAtNGNmYy1hZTRjLTRhNDU0NDVi NmVjYS5jcmwwHwYDVR0jBBgwFoAU2yADJx6E0TajdUIMsFNvUh6A1BswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jM2YzMjEzZi1kOGQwLTRjZmMtYWU0Yy00YTQ1 NDQ1YjZlY2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4WEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFi2V/tfJlG6ExQNMVbRb0/e/02wTWcSTrmhIj1zLiSUklH8WgLM2gT3 hs1xH1W1X3Aza0NEzUhMQiyr7LNe3SvLlTboFNUuJLqUdoIRpukzCL4VOBkhFQx1 9mDr+ony/Grwr+v99kNidQJ4v2fPuCofnJ6/bd/qtwL4HiVEcKaBTmzKO5u+UC8E /aiqu6bHbELDL5ZoLYMMRDXHC67qTz1OrQH+gF0iiQmBTA0xa+3Tqr8JOUYYO7q0 B6lyD4QB7YPdbo93TeZH9ewrpwrysD5qcIhVyGbruZUpm8vZgTphh0me8zoKfkPC B8bDYVzwqUj/mfruAdn+EILJHnCcmBw= -----END CERTIFICATE-----Generated at Wed Oct 8 15:30:59 2025 by rpki-client