$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca/50f4d33e-0d95-35af-be72-489f9c9d15e7.roa File: 50f4d33e-0d95-35af-be72-489f9c9d15e7.roa (raw, json) Hash identifier: YjdLIHWQpSnBrS+FIU2OIwyzS64xYU5YdZ+WbWO9lIQ= Subject key identifier: B1:70:61:6C:2E:AB:A9:7C:FD:C9:1C:20:47:C9:29:E5:8F:FF:8B:07 Certificate issuer: /CN=c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca Certificate serial: 010D0C9F4328584F4973399718CF98C8F8D1DA00 Authority key identifier: DB:20:03:27:1E:84:D1:36:A3:75:42:0C:B0:53:6F:52:1E:80:D4:1B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca/50f4d33e-0d95-35af-be72-489f9c9d15e7.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 4766 IP address blocks: 23.133.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:39:97:18:cf:98:c8:f8:d1:da:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=8d518598-f718-4656-ae3a-6216b7abcfdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e0:0d:54:e6:46:3e:79:87:0c:6d:45:2b:83: 8a:36:a2:07:13:af:72:1c:04:8a:0f:3a:3b:87:10: bb:ee:39:be:58:7f:53:c0:9e:88:6f:c2:6e:38:df: c7:8a:94:50:93:b6:ac:34:19:25:52:50:f5:71:29: e3:a4:91:28:4a:21:21:f7:a5:5b:a2:77:49:14:53: f5:3d:4a:a1:22:50:0c:86:69:3c:f2:90:1f:60:db: 82:1b:28:15:a3:b7:b5:4e:5b:23:bc:ed:62:80:5b: 49:9a:5f:3e:56:00:e6:ae:37:55:f4:48:58:20:d8: ed:26:6e:9d:7d:58:ef:b7:5a:a2:6c:30:da:65:3e: 98:a1:42:14:a8:e7:70:72:94:15:1a:a1:f0:cb:f0: 74:4a:d8:20:40:5d:a7:f3:ff:b4:8f:09:d5:9f:6f: e3:cd:46:e0:a0:af:22:a6:c7:2f:db:8d:9d:f5:ed: a1:2d:a0:30:64:a3:24:e2:87:84:dc:20:76:e9:17: 63:bd:04:07:0c:38:20:12:78:db:22:ee:42:2a:49: 0f:25:ad:0d:d8:c1:14:bf:41:53:30:b4:d7:11:62: 31:8b:26:95:95:e4:ba:c5:ed:0c:63:93:67:30:53: 16:8e:2c:96:0f:ca:3c:e0:fc:6f:eb:92:23:fa:fb: 46:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:70:61:6C:2E:AB:A9:7C:FD:C9:1C:20:47:C9:29:E5:8F:FF:8B:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca/50f4d33e-0d95-35af-be72-489f9c9d15e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca.crl X509v3 Authority Key Identifier: keyid:DB:20:03:27:1E:84:D1:36:A3:75:42:0C:B0:53:6F:52:1E:80:D4:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca.cer sbgp-ipAddrBlock: critical IPv4: 23.133.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:81:0f:0d:d2:c2:f4:ef:41:ee:0a:5f:a0:be:8d:62:7c:5b: ef:c0:b5:5e:53:4c:49:44:e3:fc:de:74:20:8b:40:c8:a6:9a: 76:be:42:b4:18:98:e7:b3:9e:70:3d:ac:43:c4:ac:36:a4:da: 2f:b0:2c:c7:20:60:36:bc:4c:55:7d:0f:34:54:c0:16:cd:3f: 7d:5b:76:d4:ac:1a:5f:f9:c5:2a:7f:01:a0:20:2b:81:e0:49: 22:80:a2:46:fc:a5:8f:15:89:7b:48:f4:ac:0d:42:fc:95:3f: 31:7e:15:60:ef:22:69:cf:53:94:49:6f:6a:71:be:86:94:10: 26:c6:da:96:92:e8:d9:ea:b5:50:99:1c:8d:00:b0:dd:ec:b4: a2:10:c3:1e:c4:72:13:9c:30:e8:f0:55:a3:3c:d7:c0:5f:21: 0d:a9:2f:62:99:c2:33:95:c7:81:71:93:4e:77:48:4f:b3:75: f9:96:d5:9c:9c:bc:be:1a:2c:bf:7e:ce:52:70:0e:c6:21:3f: 3f:ca:d7:c2:9d:a0:05:b6:02:e9:c6:12:60:e5:62:b1:5a:ab: d9:28:b2:f4:3c:8a:0b:bc:af:4b:54:8f:28:11:4a:0e:b7:90: 22:57:d7:d8:1e:06:9c:62:84:b6:8e:b7:4f:3e:37:56:7e:e5: 8b:fc:14:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JczmXGM+YyPjR2gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzNmMzIxM2YtZDhkMC00Y2ZjLWFlNGMtNGE0NTQ0NWI2 ZWNhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OGQ1MTg1OTgtZjcxOC00NjU2LWFlM2EtNjIxNmI3YWJjZmRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuANVOZGPnmHDG1FK4OKNqIHE69yHASKDzo7 hxC77jm+WH9TwJ6Ib8JuON/HipRQk7asNBklUlD1cSnjpJEoSiEh96VbondJFFP1 PUqhIlAMhmk88pAfYNuCGygVo7e1TlsjvO1igFtJml8+VgDmrjdV9EhYINjtJm6d fVjvt1qibDDaZT6YoUIUqOdwcpQVGqHwy/B0StggQF2n8/+0jwnVn2/jzUbgoK8i pscv242d9e2hLaAwZKMk4oeE3CB26RdjvQQHDDggEnjbIu5CKkkPJa0N2MEUv0FT MLTXEWIxiyaVleS6xe0MY5NnMFMWjiyWD8o84Pxv65Ij+vtGDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLFwYWwuq6l8/ckcIEfJKeWP/4sHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jM2Yz MjEzZi1kOGQwLTRjZmMtYWU0Yy00YTQ1NDQ1YjZlY2EvNTBmNGQzM2UtMGQ5NS0z NWFmLWJlNzItNDg5ZjljOWQxNWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzNmMzIxM2YtZDhkMC00Y2ZjLWFl NGMtNGE0NTQ0NWI2ZWNhL2MzZjMyMTNmLWQ4ZDAtNGNmYy1hZTRjLTRhNDU0NDVi NmVjYS5jcmwwHwYDVR0jBBgwFoAU2yADJx6E0TajdUIMsFNvUh6A1BswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jM2YzMjEzZi1kOGQwLTRjZmMtYWU0Yy00YTQ1 NDQ1YjZlY2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4WEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADOBDw3SwvTvQe4KX6C+jWJ8W+/AtV5TTElE4/zedCCLQMimmna+QrQY mOeznnA9rEPErDak2i+wLMcgYDa8TFV9DzRUwBbNP31bdtSsGl/5xSp/AaAgK4Hg SSKAokb8pY8ViXtI9KwNQvyVPzF+FWDvImnPU5RJb2pxvoaUECbG2paS6NnqtVCZ HI0AsN3stKIQwx7EchOcMOjwVaM818BfIQ2pL2KZwjOVx4Fxk053SE+zdfmW1Zyc vL4aLL9+zlJwDsYhPz/K18KdoAW2AunGEmDlYrFaq9kosvQ8igu8r0tUjygRSg63 kCJX19geBpxihLaOt08+N1Z+5Yv8FD0= -----END CERTIFICATE-----Generated at Sun Oct 11 09:25:25 2026 by rpki-client