$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca/50f4d33e-0d95-35af-be72-489f9c9d15e7.roa File: 50f4d33e-0d95-35af-be72-489f9c9d15e7.roa (raw, json) Hash identifier: MWjDs84sSyENeAAj/ZhuE87EmYhEViVpTIs+Fq1ua1M= Subject key identifier: 88:5F:5D:C9:97:59:8C:52:53:F4:6B:4B:C8:A1:A2:32:C6:7E:72:65 Certificate issuer: /CN=c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca Certificate serial: 010D0C9F4328584EA786FB9C908ABAE194134390 Authority key identifier: DB:20:03:27:1E:84:D1:36:A3:75:42:0C:B0:53:6F:52:1E:80:D4:1B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca/50f4d33e-0d95-35af-be72-489f9c9d15e7.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 4766 IP address blocks: 23.133.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:86:fb:9c:90:8a:ba:e1:94:13:43:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=98e24dec-a77e-4baa-9ef2-7804ee08f5f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:8d:de:05:b7:5c:45:0e:37:0c:10:f2:f8:7b: e3:d5:64:3a:13:44:55:ea:7e:cc:3b:b4:f7:72:65: e9:d7:17:67:6e:55:b1:1d:f1:bf:3d:d9:77:40:81: ec:59:a7:f1:5b:7f:8f:23:47:4c:7a:cb:06:74:95: a6:4d:76:dd:47:6b:d3:bc:df:9f:13:a2:13:64:7e: 5c:64:b2:a4:4b:0d:9c:4b:26:2c:19:39:a1:4e:c4: 11:c7:89:f2:e9:58:88:77:d7:68:58:dc:f0:c8:c6: c3:09:27:ae:46:da:bc:95:f9:9d:50:1f:fd:a2:ae: 63:b4:37:f7:62:b9:14:b5:91:e3:4d:50:27:0d:21: 94:f9:34:81:16:33:42:3b:da:c5:54:c7:8d:db:f7: b9:72:5c:51:53:6c:58:e5:6a:10:3d:b7:08:54:99: 3e:31:f3:ce:ed:6b:fb:41:28:14:32:03:fa:86:7f: 53:29:91:2d:62:79:74:ea:ba:a0:64:5d:8e:d6:c3: 24:c1:bb:c9:13:b7:53:63:0d:e0:32:0a:8f:10:80: c7:15:fb:51:7c:56:62:80:9b:f5:c2:02:6a:32:65: 28:2a:67:29:58:dc:29:46:31:7e:43:10:f2:65:03: d2:94:76:a2:57:a2:b8:17:e1:b8:f5:e5:64:b7:49: a0:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:5F:5D:C9:97:59:8C:52:53:F4:6B:4B:C8:A1:A2:32:C6:7E:72:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca/50f4d33e-0d95-35af-be72-489f9c9d15e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca.crl X509v3 Authority Key Identifier: keyid:DB:20:03:27:1E:84:D1:36:A3:75:42:0C:B0:53:6F:52:1E:80:D4:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca.cer sbgp-ipAddrBlock: critical IPv4: 23.133.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cb:fa:e5:b1:b6:18:82:cb:23:7e:ef:16:66:b3:9c:81:a9:47: 13:4f:e9:3a:f5:6d:e0:16:84:97:44:31:80:bc:44:c5:ea:98: 6b:d5:50:9d:0f:6b:03:1f:58:13:da:ef:65:fc:5c:ce:ef:35: 36:05:24:51:cc:54:6e:d8:38:6a:cf:9b:36:ba:96:c9:0d:d4: 38:fc:9b:42:e8:ff:30:d1:8a:74:74:2a:44:d9:a5:6f:33:99: 3b:19:99:40:82:0a:7f:a4:5c:88:37:c2:94:6e:3d:7a:15:de: b5:73:88:56:cc:57:1e:7e:8d:18:ea:34:2a:61:f3:c3:cf:48: c9:99:8a:5e:e6:26:7b:48:fc:43:13:bf:6a:56:56:a0:bd:a9: 2a:37:a9:71:3c:3a:4c:e2:76:15:9c:4a:49:03:04:05:66:ce: c1:34:28:10:dc:35:e0:39:2d:60:3c:6c:10:f0:eb:c3:4e:4f: 43:09:2f:d0:b3:a6:e6:c5:df:d4:a1:82:ea:a7:a7:b7:57:a6: 1e:d1:75:d2:ab:91:59:09:0d:f3:b5:96:ab:7d:58:8f:2d:89: e9:fa:3d:e0:16:6a:29:08:c3:39:e7:63:c8:27:9b:f5:d3:dd: 57:53:a9:21:e2:a1:13:0d:ad:1c:2d:b4:cf:ea:71:00:5c:68: 02:ec:be:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nhvuckIq64ZQTQ5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzNmMzIxM2YtZDhkMC00Y2ZjLWFlNGMtNGE0NTQ0NWI2 ZWNhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OThlMjRkZWMtYTc3ZS00YmFhLTllZjItNzgwNGVlMDhmNWYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiI3eBbdcRQ43DBDy+Hvj1WQ6E0RV6n7MO7T3 cmXp1xdnblWxHfG/Pdl3QIHsWafxW3+PI0dMessGdJWmTXbdR2vTvN+fE6ITZH5c ZLKkSw2cSyYsGTmhTsQRx4ny6ViId9doWNzwyMbDCSeuRtq8lfmdUB/9oq5jtDf3 YrkUtZHjTVAnDSGU+TSBFjNCO9rFVMeN2/e5clxRU2xY5WoQPbcIVJk+MfPO7Wv7 QSgUMgP6hn9TKZEtYnl06rqgZF2O1sMkwbvJE7dTYw3gMgqPEIDHFftRfFZigJv1 wgJqMmUoKmcpWNwpRjF+QxDyZQPSlHaiV6K4F+G49eVkt0mgmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIhfXcmXWYxSU/RrS8ihojLGfnJlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jM2Yz MjEzZi1kOGQwLTRjZmMtYWU0Yy00YTQ1NDQ1YjZlY2EvNTBmNGQzM2UtMGQ5NS0z NWFmLWJlNzItNDg5ZjljOWQxNWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzNmMzIxM2YtZDhkMC00Y2ZjLWFl NGMtNGE0NTQ0NWI2ZWNhL2MzZjMyMTNmLWQ4ZDAtNGNmYy1hZTRjLTRhNDU0NDVi NmVjYS5jcmwwHwYDVR0jBBgwFoAU2yADJx6E0TajdUIMsFNvUh6A1BswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jM2YzMjEzZi1kOGQwLTRjZmMtYWU0Yy00YTQ1 NDQ1YjZlY2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4WEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMv65bG2GILLI37vFmaznIGpRxNP6Tr1beAWhJdEMYC8RMXqmGvVUJ0P awMfWBPa72X8XM7vNTYFJFHMVG7YOGrPmza6lskN1Dj8m0Lo/zDRinR0KkTZpW8z mTsZmUCCCn+kXIg3wpRuPXoV3rVziFbMVx5+jRjqNCph88PPSMmZil7mJntI/EMT v2pWVqC9qSo3qXE8OkzidhWcSkkDBAVmzsE0KBDcNeA5LWA8bBDw68NOT0MJL9Cz pubF39Shguqnp7dXph7RddKrkVkJDfO1lqt9WI8tien6PeAWaikIwznnY8gnm/XT 3VdTqSHioRMNrRwttM/qcQBcaALsvmg= -----END CERTIFICATE-----Generated at Wed Aug 26 10:38:58 2026 by rpki-client