$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3c68c219-8e71-4151-8d5c-d504fd12b5fb/cb94f41c-c887-363c-bf41-8dd04e28d9c3.roa File: cb94f41c-c887-363c-bf41-8dd04e28d9c3.roa (raw, json) Hash identifier: qjh9z7nihxTGQunpie1DR2F+5Uucaak6qD73F2knumI= Subject key identifier: 26:C8:A5:FA:9F:27:34:09:72:03:D6:2B:6F:1B:69:01:6A:8F:49:51 Certificate issuer: /CN=3c68c219-8e71-4151-8d5c-d504fd12b5fb Certificate serial: 010D0C9F4328584BA5023D2665A1D9F6C1DE393C Authority key identifier: 74:66:34:1C:14:36:2D:94:95:DC:F7:6D:89:3E:8D:22:9E:D7:49:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3c68c219-8e71-4151-8d5c-d504fd12b5fb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3c68c219-8e71-4151-8d5c-d504fd12b5fb/cb94f41c-c887-363c-bf41-8dd04e28d9c3.roa Signing time: Sun 26 Oct 2025 01:00:31 +0000 ROA not before: Sun 26 Oct 2025 01:00:31 +0000 ROA not after: Sat 24 Jan 2026 02:00:31 +0000 asID: 2914 IP address blocks: 23.133.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3c68c219-8e71-4151-8d5c-d504fd12b5fb/3c68c219-8e71-4151-8d5c-d504fd12b5fb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3c68c219-8e71-4151-8d5c-d504fd12b5fb/3c68c219-8e71-4151-8d5c-d504fd12b5fb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3c68c219-8e71-4151-8d5c-d504fd12b5fb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a5:02:3d:26:65:a1:d9:f6:c1:de:39:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c68c219-8e71-4151-8d5c-d504fd12b5fb Validity Not Before: Oct 26 01:00:31 2025 GMT Not After : Jan 24 02:00:31 2026 GMT Subject: CN=cfbcbe4a-5cc8-4d66-9c37-cd9d0b017658 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:72:8e:01:ce:fa:88:7a:37:b6:06:e4:8f:0e: 74:9e:8f:32:44:64:dd:0e:d9:0f:05:13:cd:8b:13: 1c:40:4b:f5:ad:3f:6e:1e:d0:8b:ac:8c:0a:60:19: df:6a:b8:b3:67:97:a3:d3:2f:77:a8:4d:08:7b:24: da:56:e1:5f:6c:b9:56:da:c6:71:96:b7:11:9c:c1: 81:ea:12:c8:e1:d9:50:61:b2:f7:2d:6c:49:00:d4: dd:ad:53:69:cb:cc:e0:95:b4:5b:d9:18:7f:af:78: 2b:ab:27:a1:62:c8:46:cd:d7:02:62:0c:61:cf:97: ea:71:89:4a:66:8d:02:f5:ab:6b:26:58:60:44:99: 46:1a:85:75:f3:ae:83:d8:63:58:dd:97:74:cc:95: 13:bc:72:69:ad:e5:d7:41:81:f5:97:51:0f:72:a6: 6d:91:25:41:93:6c:0f:cf:53:71:d4:12:0c:c9:e4: 83:06:ee:7d:a0:3b:03:a2:86:5f:76:f9:38:8e:ca: 14:36:f1:d9:7b:e2:d9:f5:d4:1b:88:6e:9d:3a:e1: 73:59:2b:0c:35:28:0b:7f:e7:cf:b4:90:fe:4d:d4: f4:57:a1:9b:15:f4:99:a2:56:96:52:ae:d6:b5:1d: 21:a6:4c:b6:4f:9a:32:6f:f7:3c:99:2e:1b:37:88: 54:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:C8:A5:FA:9F:27:34:09:72:03:D6:2B:6F:1B:69:01:6A:8F:49:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3c68c219-8e71-4151-8d5c-d504fd12b5fb/cb94f41c-c887-363c-bf41-8dd04e28d9c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3c68c219-8e71-4151-8d5c-d504fd12b5fb/3c68c219-8e71-4151-8d5c-d504fd12b5fb.crl X509v3 Authority Key Identifier: keyid:74:66:34:1C:14:36:2D:94:95:DC:F7:6D:89:3E:8D:22:9E:D7:49:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3c68c219-8e71-4151-8d5c-d504fd12b5fb.cer sbgp-ipAddrBlock: critical IPv4: 23.133.116.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption e1:66:d0:7c:3f:9f:ad:d4:74:f4:27:d1:d5:bc:26:33:53:4b: 7b:46:82:4c:2d:1e:5b:8b:4c:25:96:37:d9:4d:ee:04:a0:16: ae:90:bf:12:56:a1:40:f8:dd:93:f7:e7:50:b4:94:b0:3c:3e: ec:df:ec:04:bc:98:32:4d:b6:ca:5c:dd:25:39:70:b3:37:18: 7d:11:82:f2:d5:fd:e5:11:d9:9b:c5:09:5a:47:bf:5a:84:54: 97:84:a0:a9:19:7b:f3:e0:cc:7f:8c:08:d3:81:31:b6:b6:94: b6:e2:cb:38:fc:aa:98:5c:73:4d:ee:51:a0:99:8a:18:ab:1c: 53:26:3a:15:5a:70:49:19:8b:c0:c1:6c:ae:34:b8:6d:6e:b8: 62:40:b7:e1:9b:6c:3f:08:81:ef:06:ec:d2:4c:c5:ac:2f:f3: 37:d9:a4:25:d4:d1:cd:ea:36:5c:1f:ab:4e:a3:7e:53:7f:24: 5d:1c:1a:a3:ed:ad:2e:8a:de:15:84:4b:56:81:6b:53:03:d5: aa:ec:be:67:74:5a:15:74:a2:6c:68:3b:9c:a4:a8:1a:b7:11: 93:ff:d6:49:7d:e9:5e:6a:5f:0a:a8:b7:77:32:40:3a:6e:07: 60:2f:96:2d:fb:5e:e5:51:32:22:f6:8b:48:82:10:b0:1a:97: 80:5d:0e:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEulAj0mZaHZ9sHeOTwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M2OGMyMTktOGU3MS00MTUxLThkNWMtZDUwNGZkMTJi NWZiMB4XDTI1MTAyNjAxMDAzMVoXDTI2MDEyNDAyMDAzMVowLzEtMCsGA1UEAxMk Y2ZiY2JlNGEtNWNjOC00ZDY2LTljMzctY2Q5ZDBiMDE3NjU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXKOAc76iHo3tgbkjw50no8yRGTdDtkPBRPN ixMcQEv1rT9uHtCLrIwKYBnfarizZ5ej0y93qE0IeyTaVuFfbLlW2sZxlrcRnMGB 6hLI4dlQYbL3LWxJANTdrVNpy8zglbRb2Rh/r3grqyehYshGzdcCYgxhz5fqcYlK Zo0C9atrJlhgRJlGGoV1866D2GNY3Zd0zJUTvHJpreXXQYH1l1EPcqZtkSVBk2wP z1Nx1BIMyeSDBu59oDsDooZfdvk4jsoUNvHZe+LZ9dQbiG6dOuFzWSsMNSgLf+fP tJD+TdT0V6GbFfSZolaWUq7WtR0hpky2T5oyb/c8mS4bN4hUDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCbIpfqfJzQJcgPWK28baQFqj0lRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zYzY4 YzIxOS04ZTcxLTQxNTEtOGQ1Yy1kNTA0ZmQxMmI1ZmIvY2I5NGY0MWMtYzg4Ny0z NjNjLWJmNDEtOGRkMDRlMjhkOWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2M2OGMyMTktOGU3MS00MTUxLThk NWMtZDUwNGZkMTJiNWZiLzNjNjhjMjE5LThlNzEtNDE1MS04ZDVjLWQ1MDRmZDEy YjVmYi5jcmwwHwYDVR0jBBgwFoAUdGY0HBQ2LZSV3PdtiT6NIp7XSSAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zYzY4YzIxOS04ZTcxLTQxNTEtOGQ1Yy1kNTA0 ZmQxMmI1ZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4V0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAOFm0Hw/n63UdPQn0dW8JjNTS3tGgkwtHluLTCWWN9lN7gSgFq6QvxJW oUD43ZP351C0lLA8Puzf7AS8mDJNtspc3SU5cLM3GH0RgvLV/eUR2ZvFCVpHv1qE VJeEoKkZe/PgzH+MCNOBMba2lLbiyzj8qphcc03uUaCZihirHFMmOhVacEkZi8DB bK40uG1uuGJAt+GbbD8Ige8G7NJMxawv8zfZpCXU0c3qNlwfq06jflN/JF0cGqPt rS6K3hWES1aBa1MD1arsvmd0WhV0omxoO5ykqBq3EZP/1kl96V5qXwqot3cyQDpu B2Avli37XuVRMiL2i0iCELAal4BdDvk= -----END CERTIFICATE-----Generated at Mon Nov 3 08:38:12 2025 by rpki-client