$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca/d0ab03df-b570-315f-b4ba-d53187b6ff7a.roa File: d0ab03df-b570-315f-b4ba-d53187b6ff7a.roa (raw, json) Hash identifier: Wh9KR8nlFbu4lS2bpfng1DK8E3872vbPfjDRpCrQ7bU= Subject key identifier: B4:30:E5:03:51:50:09:92:E6:62:C4:96:22:63:A4:B6:90:0D:02:85 Certificate issuer: /CN=c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca Certificate serial: 010D0C9F43285849E38A36EF3CEBD3D0B6284200 Authority key identifier: DB:20:03:27:1E:84:D1:36:A3:75:42:0C:B0:53:6F:52:1E:80:D4:1B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca/d0ab03df-b570-315f-b4ba-d53187b6ff7a.roa Signing time: Sun 18 May 2025 01:00:47 +0000 ROA not before: Sun 18 May 2025 01:00:47 +0000 ROA not after: Sat 16 Aug 2025 01:00:47 +0000 asID: 2914 IP address blocks: 23.133.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e3:8a:36:ef:3c:eb:d3:d0:b6:28:42:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca Validity Not Before: May 18 01:00:47 2025 GMT Not After : Aug 16 01:00:47 2025 GMT Subject: CN=fd22990b-7cef-44bf-9e9b-b5c274bdfb60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:1e:ec:51:6c:53:f2:ed:b1:4a:98:05:24:3c: 2a:27:04:58:11:1c:18:99:27:a6:72:08:09:d7:af: ca:5a:a2:a5:1d:47:f5:9f:ec:64:d7:f0:2f:17:36: ae:a7:83:49:22:d9:69:fa:39:7b:46:f7:2b:08:56: f4:aa:64:ab:47:17:dc:0b:1d:cd:97:68:d3:51:0f: fe:a8:2f:7e:5e:6c:62:33:63:9c:eb:3d:5c:6b:bf: 19:cd:5b:39:50:f0:0c:09:29:bf:66:c4:24:48:60: c2:6a:38:4f:34:99:78:89:8e:54:c3:74:5f:12:8e: d6:c2:b7:33:ff:a1:7f:c5:9f:7d:46:92:f3:b3:d6: 7a:43:8a:37:59:fc:ec:da:48:3a:ec:51:ef:e7:10: 9d:35:27:af:e7:31:2e:d2:73:5a:cd:54:ee:d7:3f: a9:bc:95:37:5a:92:f9:ff:84:b6:ce:9a:08:bf:96: 16:ae:52:e5:79:4e:48:52:b4:8a:72:f8:54:a9:53: 47:02:a5:75:da:f2:72:d5:c7:62:15:07:9b:ee:8d: a7:e9:a1:46:c7:0b:9d:d7:b3:db:75:5e:1f:41:e0: c4:26:ab:16:b6:88:b4:66:e1:f6:bb:14:cd:1b:35: 20:e6:c1:65:58:27:c3:87:d4:38:85:9f:b2:07:b8: e1:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:30:E5:03:51:50:09:92:E6:62:C4:96:22:63:A4:B6:90:0D:02:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca/d0ab03df-b570-315f-b4ba-d53187b6ff7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca.crl X509v3 Authority Key Identifier: keyid:DB:20:03:27:1E:84:D1:36:A3:75:42:0C:B0:53:6F:52:1E:80:D4:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca.cer sbgp-ipAddrBlock: critical IPv4: 23.133.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:75:68:cf:b7:d9:39:34:fa:88:4b:94:9f:9b:e6:52:06:b8: 4c:09:b4:1d:39:47:da:b3:6f:b8:76:d1:fe:85:4f:a2:ed:a2: 6a:80:87:be:0c:26:bd:6b:b1:4e:85:79:0d:12:91:08:fe:03: 2f:79:83:9d:47:6a:3e:bf:a5:1e:d4:9f:18:d6:49:c9:54:86: 66:b5:2f:67:02:d4:ba:5f:e9:b6:8f:18:9b:a3:b5:b4:d5:32: 62:05:74:1e:11:a5:30:95:99:b6:fd:bd:b0:a8:25:9d:2f:b1: 45:4b:f1:cc:18:4e:bf:c8:c5:ed:9c:7d:a2:e0:39:0e:9b:cd: f4:6b:68:51:c0:26:f6:f2:a6:a4:b5:d4:e6:3a:a0:48:11:c7: b7:f8:3d:76:d3:81:3e:67:86:52:a6:e7:6f:f8:fe:36:c9:bb: b7:8e:f0:dd:fa:16:70:52:30:6b:dd:70:56:29:f5:85:56:8d: 2e:77:bb:96:21:fa:5f:5e:fb:84:a1:5d:f5:69:70:e7:3f:9a: 95:56:2a:a1:9f:a1:19:5e:64:51:21:91:88:e4:49:d2:ef:d4: cf:83:08:31:c1:2f:b7:d8:63:7f:59:87:b4:af:0f:4b:33:58: 0b:84:ff:df:9c:24:10:ad:a8:96:38:6f:b3:e6:e7:5c:f2:b1: dc:ce:65:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnjijbvPOvT0LYoQgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzNmMzIxM2YtZDhkMC00Y2ZjLWFlNGMtNGE0NTQ0NWI2 ZWNhMB4XDTI1MDUxODAxMDA0N1oXDTI1MDgxNjAxMDA0N1owLzEtMCsGA1UEAxMk ZmQyMjk5MGItN2NlZi00NGJmLTllOWItYjVjMjc0YmRmYjYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuR7sUWxT8u2xSpgFJDwqJwRYERwYmSemcggJ 16/KWqKlHUf1n+xk1/AvFzaup4NJItlp+jl7RvcrCFb0qmSrRxfcCx3Nl2jTUQ/+ qC9+XmxiM2Oc6z1ca78ZzVs5UPAMCSm/ZsQkSGDCajhPNJl4iY5Uw3RfEo7Wwrcz /6F/xZ99RpLzs9Z6Q4o3Wfzs2kg67FHv5xCdNSev5zEu0nNazVTu1z+pvJU3WpL5 /4S2zpoIv5YWrlLleU5IUrSKcvhUqVNHAqV12vJy1cdiFQeb7o2n6aFGxwud17Pb dV4fQeDEJqsWtoi0ZuH2uxTNGzUg5sFlWCfDh9Q4hZ+yB7jhKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLQw5QNRUAmS5mLEliJjpLaQDQKFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jM2Yz MjEzZi1kOGQwLTRjZmMtYWU0Yy00YTQ1NDQ1YjZlY2EvZDBhYjAzZGYtYjU3MC0z MTVmLWI0YmEtZDUzMTg3YjZmZjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzNmMzIxM2YtZDhkMC00Y2ZjLWFl NGMtNGE0NTQ0NWI2ZWNhL2MzZjMyMTNmLWQ4ZDAtNGNmYy1hZTRjLTRhNDU0NDVi NmVjYS5jcmwwHwYDVR0jBBgwFoAU2yADJx6E0TajdUIMsFNvUh6A1BswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jM2YzMjEzZi1kOGQwLTRjZmMtYWU0Yy00YTQ1 NDQ1YjZlY2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4WEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIB1aM+32Tk0+ohLlJ+b5lIGuEwJtB05R9qzb7h20f6FT6LtomqAh74M Jr1rsU6FeQ0SkQj+Ay95g51Haj6/pR7UnxjWSclUhma1L2cC1Lpf6baPGJujtbTV MmIFdB4RpTCVmbb9vbCoJZ0vsUVL8cwYTr/Ixe2cfaLgOQ6bzfRraFHAJvbypqS1 1OY6oEgRx7f4PXbTgT5nhlKm52/4/jbJu7eO8N36FnBSMGvdcFYp9YVWjS53u5Yh +l9e+4ShXfVpcOc/mpVWKqGfoRleZFEhkYjkSdLv1M+DCDHBL7fYY39Zh7SvD0sz WAuE/9+cJBCtqJY4b7Pm51zysdzOZY0= -----END CERTIFICATE-----Generated at Thu Jun 5 18:17:14 2025 by rpki-client