$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/706746b3-2f98-4839-b419-77fa8ac86365/1406a911-345a-38ca-8c5a-a17abfb8c37a.roa File: 1406a911-345a-38ca-8c5a-a17abfb8c37a.roa (raw, json) Hash identifier: GthI78LWBloH1jto8B5505NKRF2sGS51IRMkFQ1zxD4= Subject key identifier: 17:2F:BB:6F:56:77:CA:BD:3D:76:2D:0C:01:7E:E9:27:78:29:9C:92 Certificate issuer: /CN=706746b3-2f98-4839-b419-77fa8ac86365 Certificate serial: 010D0C9F4328584AECC1218F1FC0F43EAFFC7920 Authority key identifier: DB:E2:E0:27:CA:0D:90:5F:E4:8F:10:61:B4:72:78:BE:4C:52:41:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/706746b3-2f98-4839-b419-77fa8ac86365.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/706746b3-2f98-4839-b419-77fa8ac86365/1406a911-345a-38ca-8c5a-a17abfb8c37a.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 396893 IP address blocks: 23.132.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/706746b3-2f98-4839-b419-77fa8ac86365/706746b3-2f98-4839-b419-77fa8ac86365.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/706746b3-2f98-4839-b419-77fa8ac86365/706746b3-2f98-4839-b419-77fa8ac86365.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/706746b3-2f98-4839-b419-77fa8ac86365.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:21:8f:1f:c0:f4:3e:af:fc:79:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=706746b3-2f98-4839-b419-77fa8ac86365 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=c9cab8bf-9d0c-493e-9d02-f832a73f1d4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:29:6c:f0:fb:3c:d7:69:86:90:86:d5:6f:4e: 28:e5:20:2a:fb:0f:54:ba:b1:eb:d5:f3:05:e6:90: de:eb:77:32:f1:0f:ec:fd:29:41:2d:71:24:35:d6: 20:3c:85:14:45:29:3b:5e:be:20:8f:52:15:0d:4c: da:d2:a4:d6:f6:0e:a0:8d:de:6a:93:bd:92:28:62: d9:cc:0b:57:14:8e:dc:32:0a:bd:eb:de:ef:e8:9c: b9:77:14:04:9b:bd:df:d9:03:83:20:79:c2:04:b5: a2:45:b1:b3:54:5d:1a:22:fb:9c:9a:b2:4c:f9:b3: 51:70:fc:cc:da:50:d6:e0:1b:e2:98:58:4c:d3:4e: 86:23:64:7f:7f:63:36:61:48:c2:f9:87:c0:0a:55: d0:b5:95:64:14:43:16:e9:0e:5b:0d:ec:f2:6e:c7: 67:47:97:90:76:15:29:97:d1:51:15:cd:35:94:8e: 82:32:c6:74:44:61:4e:0e:09:51:05:dc:1a:38:c5: 53:28:37:b8:04:66:69:ae:31:dc:f1:89:f0:28:18: f2:4d:72:b5:38:09:dc:fe:e3:ac:a3:c3:40:05:46: 74:80:ec:b9:de:a4:1c:bf:58:3e:05:0e:41:b2:e1: 58:4f:12:b5:03:98:54:bf:86:e1:9a:a6:ba:41:55: e6:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:2F:BB:6F:56:77:CA:BD:3D:76:2D:0C:01:7E:E9:27:78:29:9C:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/706746b3-2f98-4839-b419-77fa8ac86365/1406a911-345a-38ca-8c5a-a17abfb8c37a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/706746b3-2f98-4839-b419-77fa8ac86365/706746b3-2f98-4839-b419-77fa8ac86365.crl X509v3 Authority Key Identifier: keyid:DB:E2:E0:27:CA:0D:90:5F:E4:8F:10:61:B4:72:78:BE:4C:52:41:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/706746b3-2f98-4839-b419-77fa8ac86365.cer sbgp-ipAddrBlock: critical IPv4: 23.132.82.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:0b:dd:de:e6:19:7d:86:16:7e:46:71:4b:14:3b:98:22:8e: 39:6a:51:06:13:37:c4:2f:60:d2:ac:61:0a:63:cf:2d:78:81: 28:da:95:9b:97:6b:77:21:d9:51:c5:eb:07:e0:33:26:11:93: 5c:40:fd:5a:f9:5b:ce:e7:39:f8:37:6a:dd:c7:9f:31:3e:99: 48:b7:2b:1f:7b:40:6e:f4:4d:6c:88:d9:e3:ef:14:f7:f6:72: fa:7f:1c:f5:48:ca:84:b7:97:9b:16:16:af:0a:4f:e2:c9:0b: 00:16:6f:0b:5c:84:01:8d:2f:8d:f7:d1:20:95:ad:4b:31:ee: ff:8c:87:0b:b2:54:90:8d:35:7f:f9:90:9b:51:60:36:a9:50: 0d:1d:df:82:b9:03:aa:79:ce:c3:31:32:a6:28:a8:27:dd:da: 2a:68:50:9c:3c:d4:14:40:41:1f:08:78:91:1a:20:3f:6f:d9: 31:1e:19:9f:7a:4f:1a:70:49:b8:e5:59:c8:0a:e4:26:64:e2: 7f:96:1c:22:d9:fc:3c:6e:12:73:04:7e:98:9a:6f:a8:5f:cf: 67:e2:07:4a:cf:6c:49:02:3c:48:c5:0e:4b:52:89:0b:ff:da: 7a:e2:03:37:e4:60:6c:e2:00:3f:36:7b:0b:ff:59:09:cf:8b: e1:b9:3b:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswSGPH8D0Pq/8eSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzA2NzQ2YjMtMmY5OC00ODM5LWI0MTktNzdmYThhYzg2 MzY1MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk YzljYWI4YmYtOWQwYy00OTNlLTlkMDItZjgzMmE3M2YxZDRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSls8Ps812mGkIbVb04o5SAq+w9UurHr1fMF 5pDe63cy8Q/s/SlBLXEkNdYgPIUURSk7Xr4gj1IVDUza0qTW9g6gjd5qk72SKGLZ zAtXFI7cMgq9697v6Jy5dxQEm73f2QODIHnCBLWiRbGzVF0aIvucmrJM+bNRcPzM 2lDW4BvimFhM006GI2R/f2M2YUjC+YfAClXQtZVkFEMW6Q5bDezybsdnR5eQdhUp l9FRFc01lI6CMsZ0RGFODglRBdwaOMVTKDe4BGZprjHc8YnwKBjyTXK1OAnc/uOs o8NABUZ0gOy53qQcv1g+BQ5BsuFYTxK1A5hUv4bhmqa6QVXmWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBcvu29Wd8q9PXYtDAF+6Sd4KZySMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83MDY3 NDZiMy0yZjk4LTQ4MzktYjQxOS03N2ZhOGFjODYzNjUvMTQwNmE5MTEtMzQ1YS0z OGNhLThjNWEtYTE3YWJmYjhjMzdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzA2NzQ2YjMtMmY5OC00ODM5LWI0 MTktNzdmYThhYzg2MzY1LzcwNjc0NmIzLTJmOTgtNDgzOS1iNDE5LTc3ZmE4YWM4 NjM2NS5jcmwwHwYDVR0jBBgwFoAU2+LgJ8oNkF/kjxBhtHJ4vkxSQc4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83MDY3NDZiMy0yZjk4LTQ4MzktYjQxOS03N2Zh OGFjODYzNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4RSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAkL3d7mGX2GFn5GcUsUO5gijjlqUQYTN8QvYNKsYQpjzy14gSjalZuX a3ch2VHF6wfgMyYRk1xA/Vr5W87nOfg3at3HnzE+mUi3Kx97QG70TWyI2ePvFPf2 cvp/HPVIyoS3l5sWFq8KT+LJCwAWbwtchAGNL4330SCVrUsx7v+MhwuyVJCNNX/5 kJtRYDapUA0d34K5A6p5zsMxMqYoqCfd2ipoUJw81BRAQR8IeJEaID9v2TEeGZ96 TxpwSbjlWcgK5CZk4n+WHCLZ/DxuEnMEfpiab6hfz2fiB0rPbEkCPEjFDktSiQv/ 2nriAzfkYGziAD82ewv/WQnPi+G5O+s= -----END CERTIFICATE-----Generated at Sun Aug 24 07:20:35 2025 by rpki-client