$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed700eac-da0c-4a50-a4dc-8a14e12e0088/8f87eeb5-025d-35a7-af1b-cc9423fc2f8e.roa File: 8f87eeb5-025d-35a7-af1b-cc9423fc2f8e.roa (raw, json) Hash identifier: Zw1ODC8OHdWlkFOQIMKVN19zMCYwu7idxxsMvkY2r2A= Subject key identifier: EC:AA:AD:33:5A:7A:31:A4:D5:8A:C9:F6:86:65:51:FB:4D:FC:06:81 Certificate issuer: /CN=ed700eac-da0c-4a50-a4dc-8a14e12e0088 Certificate serial: 010D0C9F4328584A3CE028C4E63A3AC950EBD080 Authority key identifier: 7C:3D:BC:19:3B:87:45:7D:54:9B:01:DA:B5:06:36:EA:50:66:E1:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed700eac-da0c-4a50-a4dc-8a14e12e0088.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed700eac-da0c-4a50-a4dc-8a14e12e0088/8f87eeb5-025d-35a7-af1b-cc9423fc2f8e.roa Signing time: Thu 19 Jun 2025 01:00:50 +0000 ROA not before: Thu 19 Jun 2025 01:00:50 +0000 ROA not after: Wed 17 Sep 2025 01:00:50 +0000 asID: 401562 IP address blocks: 23.132.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed700eac-da0c-4a50-a4dc-8a14e12e0088/ed700eac-da0c-4a50-a4dc-8a14e12e0088.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed700eac-da0c-4a50-a4dc-8a14e12e0088/ed700eac-da0c-4a50-a4dc-8a14e12e0088.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed700eac-da0c-4a50-a4dc-8a14e12e0088.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3c:e0:28:c4:e6:3a:3a:c9:50:eb:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed700eac-da0c-4a50-a4dc-8a14e12e0088 Validity Not Before: Jun 19 01:00:50 2025 GMT Not After : Sep 17 01:00:50 2025 GMT Subject: CN=cb2b10cd-81d3-40fa-9b71-81a9241b02ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:45:a0:69:f5:fb:82:18:64:fb:03:1f:f0:f8: f3:7d:f7:d2:00:7b:32:29:a1:16:13:16:1b:04:38: b9:36:19:c6:53:79:8c:98:fd:2f:f1:6f:8b:65:52: 06:10:39:9c:a9:24:7f:d1:a0:6a:c4:89:60:2c:45: 05:8a:3e:c2:65:87:ee:bc:e4:08:a0:0e:83:fc:82: 7f:1c:4a:31:a6:ef:3c:2b:ae:13:4f:19:1d:cb:24: 93:2f:9e:34:8e:ee:25:a0:1a:44:1b:1c:7d:cd:e2: 87:c9:07:32:8f:af:e4:b5:95:2e:f2:0b:a6:d5:6b: b4:d1:e3:64:dc:90:80:c3:c9:0b:2d:9f:13:b3:27: f2:bc:cb:95:63:af:70:60:1d:e3:32:38:69:ac:ab: b5:4a:d9:84:1d:38:3e:0e:fb:5c:74:ff:fe:b4:09: 7a:89:cb:a1:e3:d6:c4:5d:58:d6:2d:2a:eb:7f:fa: d1:4e:07:7d:d2:dd:6b:0d:ac:8a:01:e9:ff:81:32: d7:f7:38:81:bd:66:83:79:20:26:d9:89:1c:87:19: 8c:b7:a1:6a:95:81:65:37:93:50:bf:72:5e:cb:ef: 50:3a:a6:de:d1:78:c6:c9:80:21:17:b6:1b:39:5c: 94:0b:42:a1:e4:db:3d:5b:7b:81:d2:92:8e:7f:59: eb:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:AA:AD:33:5A:7A:31:A4:D5:8A:C9:F6:86:65:51:FB:4D:FC:06:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed700eac-da0c-4a50-a4dc-8a14e12e0088/8f87eeb5-025d-35a7-af1b-cc9423fc2f8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed700eac-da0c-4a50-a4dc-8a14e12e0088/ed700eac-da0c-4a50-a4dc-8a14e12e0088.crl X509v3 Authority Key Identifier: keyid:7C:3D:BC:19:3B:87:45:7D:54:9B:01:DA:B5:06:36:EA:50:66:E1:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed700eac-da0c-4a50-a4dc-8a14e12e0088.cer sbgp-ipAddrBlock: critical IPv4: 23.132.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:33:42:49:01:83:b0:40:38:ab:aa:32:98:71:94:a1:d0:91: 35:85:9e:18:0c:65:cb:89:9b:06:92:be:80:0d:45:9f:79:85: e0:bc:65:ce:44:1d:a8:de:4e:0d:76:07:93:fd:bc:4e:1d:7e: 0e:d9:b7:39:5d:30:38:89:93:cc:79:96:3b:85:d0:b3:46:24: ca:e9:82:8d:c8:72:9e:8d:5e:88:7f:67:28:3e:c7:66:71:6d: cc:b3:95:2c:86:1e:85:62:35:de:1a:e9:39:17:1a:11:bb:88: e3:12:27:16:da:58:40:d0:9b:ee:62:91:f5:aa:78:56:ce:66: 46:9b:8e:f7:89:28:3c:1c:7f:ba:96:ec:08:9f:15:05:ad:f2: ec:94:b9:47:96:5c:97:85:6d:eb:b3:7a:21:90:ad:e2:fc:bf: 4b:77:dd:f7:19:6d:8d:c1:25:4f:6a:61:8e:29:1a:a9:30:a2: f5:2c:07:23:b1:de:04:51:a2:b5:91:2d:1c:19:ca:9a:e6:56: 29:5a:cf:2c:99:c5:5a:a9:de:aa:1e:c5:fd:c7:26:1d:65:72: 44:84:71:4b:88:db:a3:5a:36:5d:62:54:23:32:e7:bf:ac:b3: 08:67:b4:4b:1f:47:35:87:c6:7a:e0:da:62:80:c6:20:c4:b5: b5:12:03:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo84CjE5jo6yVDr0IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWQ3MDBlYWMtZGEwYy00YTUwLWE0ZGMtOGExNGUxMmUw MDg4MB4XDTI1MDYxOTAxMDA1MFoXDTI1MDkxNzAxMDA1MFowLzEtMCsGA1UEAxMk Y2IyYjEwY2QtODFkMy00MGZhLTliNzEtODFhOTI0MWIwMmVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzEWgafX7ghhk+wMf8PjzfffSAHsyKaEWExYb BDi5NhnGU3mMmP0v8W+LZVIGEDmcqSR/0aBqxIlgLEUFij7CZYfuvOQIoA6D/IJ/ HEoxpu88K64TTxkdyySTL540ju4loBpEGxx9zeKHyQcyj6/ktZUu8gum1Wu00eNk 3JCAw8kLLZ8TsyfyvMuVY69wYB3jMjhprKu1StmEHTg+DvtcdP/+tAl6icuh49bE XVjWLSrrf/rRTgd90t1rDayKAen/gTLX9ziBvWaDeSAm2YkchxmMt6FqlYFlN5NQ v3Jey+9QOqbe0XjGyYAhF7YbOVyUC0Kh5Ns9W3uB0pKOf1nrXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOyqrTNaejGk1YrJ9oZlUftN/AaBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9lZDcw MGVhYy1kYTBjLTRhNTAtYTRkYy04YTE0ZTEyZTAwODgvOGY4N2VlYjUtMDI1ZC0z NWE3LWFmMWItY2M5NDIzZmMyZjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZWQ3MDBlYWMtZGEwYy00YTUwLWE0 ZGMtOGExNGUxMmUwMDg4L2VkNzAwZWFjLWRhMGMtNGE1MC1hNGRjLThhMTRlMTJl MDA4OC5jcmwwHwYDVR0jBBgwFoAUfD28GTuHRX1UmwHatQY26lBm4ZEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9lZDcwMGVhYy1kYTBjLTRhNTAtYTRkYy04YTE0 ZTEyZTAwODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4QMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIkzQkkBg7BAOKuqMphxlKHQkTWFnhgMZcuJmwaSvoANRZ95heC8Zc5E HajeTg12B5P9vE4dfg7ZtzldMDiJk8x5ljuF0LNGJMrpgo3Icp6NXoh/Zyg+x2Zx bcyzlSyGHoViNd4a6TkXGhG7iOMSJxbaWEDQm+5ikfWqeFbOZkabjveJKDwcf7qW 7AifFQWt8uyUuUeWXJeFbeuzeiGQreL8v0t33fcZbY3BJU9qYY4pGqkwovUsByOx 3gRRorWRLRwZyprmVilazyyZxVqp3qoexf3HJh1lckSEcUuI26NaNl1iVCMy57+s swhntEsfRzWHxnrg2mKAxiDEtbUSAzY= -----END CERTIFICATE-----Generated at Mon Jun 30 19:00:15 2025 by rpki-client