$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca/d0ab03df-b570-315f-b4ba-d53187b6ff7a.roa File: d0ab03df-b570-315f-b4ba-d53187b6ff7a.roa (raw, json) Hash identifier: JkTA2w/E3mtF4SUJiVrjtKrVGBwU8JlXWtnHt9BX40A= Subject key identifier: B3:49:55:6D:EE:C9:FB:FE:F1:25:18:9F:39:E4:65:8D:1C:12:1B:6B Certificate issuer: /CN=c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca Certificate serial: 010D0C9F4328584D667A522D0E4E2266F1B7D380 Authority key identifier: DB:20:03:27:1E:84:D1:36:A3:75:42:0C:B0:53:6F:52:1E:80:D4:1B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca/d0ab03df-b570-315f-b4ba-d53187b6ff7a.roa Signing time: Sun 05 Apr 2026 01:00:24 +0000 ROA not before: Sun 05 Apr 2026 01:00:24 +0000 ROA not after: Sat 04 Jul 2026 01:00:24 +0000 asID: 2914 IP address blocks: 23.133.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:66:7a:52:2d:0e:4e:22:66:f1:b7:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca Validity Not Before: Apr 5 01:00:24 2026 GMT Not After : Jul 4 01:00:24 2026 GMT Subject: CN=b8a8bf8f-9724-4efa-a04a-ac919dc37522 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:24:06:23:8b:6e:0e:b8:29:84:b9:c0:2c:c7: ac:4f:cd:cf:ae:f9:5f:d4:68:bd:60:c5:91:34:31: 7e:a2:37:91:aa:2c:89:17:f0:6a:eb:6b:a1:6d:ff: 76:5a:e2:02:44:40:58:63:da:a4:63:55:cc:cf:a6: 49:27:a4:f6:e0:c2:b1:5a:42:ce:ea:b3:16:d4:ca: 35:24:b7:b6:dc:67:94:01:2b:4b:26:33:2d:99:5a: 91:bb:95:b0:2a:a4:c9:87:cd:d1:1e:4b:d1:a3:34: 04:d0:10:44:bf:c0:20:1f:90:5f:e8:60:6b:b2:21: c5:5a:93:42:06:03:6c:11:7c:43:c6:fe:fe:04:fc: 62:aa:f6:3d:2f:cc:4f:47:d9:4e:eb:de:2a:90:f0: 92:b6:e3:e0:24:b7:dd:5f:84:1e:d7:a0:42:d9:b5: 42:84:cc:f1:04:53:67:42:b2:52:30:05:3c:38:36: 68:d3:f8:f7:54:68:12:f4:03:89:f8:27:94:9f:a6: 60:e7:5f:08:e4:8d:7a:44:28:80:f4:96:14:ae:81: 1a:2d:dc:c3:b2:60:93:b2:b4:39:d0:39:bc:a3:3e: a8:21:20:22:1c:c6:05:b0:b4:c4:29:59:7d:27:a0: 80:18:5a:7f:63:11:12:09:fc:f2:0e:76:8d:60:95: 46:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:49:55:6D:EE:C9:FB:FE:F1:25:18:9F:39:E4:65:8D:1C:12:1B:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca/d0ab03df-b570-315f-b4ba-d53187b6ff7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca.crl X509v3 Authority Key Identifier: keyid:DB:20:03:27:1E:84:D1:36:A3:75:42:0C:B0:53:6F:52:1E:80:D4:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca.cer sbgp-ipAddrBlock: critical IPv4: 23.133.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:89:ee:37:14:2d:ed:d6:70:8b:5f:aa:61:f3:a6:15:b4:dc: 87:6f:3b:d2:5a:51:c4:26:16:64:38:13:94:4e:13:40:a1:79: c7:22:08:7e:34:c9:e7:3b:dc:25:83:3d:03:d4:4f:ca:36:f1: 77:c3:96:43:f3:d8:1f:a0:8b:3d:cd:c9:37:43:64:d4:e6:3e: 5d:54:7d:0d:ff:83:a3:83:8b:5a:c8:d7:08:5b:43:f3:b9:61: eb:a1:98:af:72:86:d8:99:9b:e3:e8:34:41:6b:a4:8d:df:7c: 2a:fc:8d:bb:3a:38:51:31:d7:a1:aa:f9:ab:44:42:d5:38:a2: 1a:0a:61:71:a2:e5:97:61:be:4b:a4:b3:43:54:cf:bf:f1:53: d8:03:27:be:32:3c:74:d0:d9:34:3b:8b:14:e1:5e:e6:9a:db: 2e:54:0b:63:a1:16:ff:bc:b2:ed:8f:a5:48:52:06:56:64:23: b5:58:28:9a:00:f3:2c:01:14:3b:65:9f:ae:ec:49:d2:ed:64: 8c:3c:16:dc:87:11:25:e7:eb:77:7a:bf:ba:ca:b4:a1:bd:2b: 88:5d:d2:65:92:e0:aa:f0:d0:af:c8:f6:68:bf:86:55:15:d6: 80:ee:3a:71:8d:3d:c8:5f:a2:dc:d0:48:62:a5:f5:d1:64:dd: db:2a:14:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1melItDk4iZvG304AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzNmMzIxM2YtZDhkMC00Y2ZjLWFlNGMtNGE0NTQ0NWI2 ZWNhMB4XDTI2MDQwNTAxMDAyNFoXDTI2MDcwNDAxMDAyNFowLzEtMCsGA1UEAxMk YjhhOGJmOGYtOTcyNC00ZWZhLWEwNGEtYWM5MTlkYzM3NTIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSQGI4tuDrgphLnALMesT83Prvlf1Gi9YMWR NDF+ojeRqiyJF/Bq62uhbf92WuICREBYY9qkY1XMz6ZJJ6T24MKxWkLO6rMW1Mo1 JLe23GeUAStLJjMtmVqRu5WwKqTJh83RHkvRozQE0BBEv8AgH5Bf6GBrsiHFWpNC BgNsEXxDxv7+BPxiqvY9L8xPR9lO694qkPCStuPgJLfdX4Qe16BC2bVChMzxBFNn QrJSMAU8ODZo0/j3VGgS9AOJ+CeUn6Zg518I5I16RCiA9JYUroEaLdzDsmCTsrQ5 0Dm8oz6oISAiHMYFsLTEKVl9J6CAGFp/YxESCfzyDnaNYJVGtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLNJVW3uyfv+8SUYnznkZY0cEhtrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jM2Yz MjEzZi1kOGQwLTRjZmMtYWU0Yy00YTQ1NDQ1YjZlY2EvZDBhYjAzZGYtYjU3MC0z MTVmLWI0YmEtZDUzMTg3YjZmZjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzNmMzIxM2YtZDhkMC00Y2ZjLWFl NGMtNGE0NTQ0NWI2ZWNhL2MzZjMyMTNmLWQ4ZDAtNGNmYy1hZTRjLTRhNDU0NDVi NmVjYS5jcmwwHwYDVR0jBBgwFoAU2yADJx6E0TajdUIMsFNvUh6A1BswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jM2YzMjEzZi1kOGQwLTRjZmMtYWU0Yy00YTQ1 NDQ1YjZlY2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4WEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAISJ7jcULe3WcItfqmHzphW03IdvO9JaUcQmFmQ4E5ROE0ChecciCH40 yec73CWDPQPUT8o28XfDlkPz2B+giz3NyTdDZNTmPl1UfQ3/g6ODi1rI1whbQ/O5 YeuhmK9yhtiZm+PoNEFrpI3ffCr8jbs6OFEx16Gq+atEQtU4ohoKYXGi5Zdhvkuk s0NUz7/xU9gDJ74yPHTQ2TQ7ixThXuaa2y5UC2OhFv+8su2PpUhSBlZkI7VYKJoA 8ywBFDtln67sSdLtZIw8FtyHESXn63d6v7rKtKG9K4hd0mWS4Krw0K/I9mi/hlUV 1oDuOnGNPchfotzQSGKl9dFk3dsqFLQ= -----END CERTIFICATE-----Generated at Fri Apr 10 04:08:34 2026 by rpki-client