$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed700eac-da0c-4a50-a4dc-8a14e12e0088/8f87eeb5-025d-35a7-af1b-cc9423fc2f8e.roa File: 8f87eeb5-025d-35a7-af1b-cc9423fc2f8e.roa (raw, json) Hash identifier: yCxgylCPxYzIRWUm3KdVxJ7UoGcV44YP8sCVtqfmP7o= Subject key identifier: AE:76:84:54:A3:9D:FA:FC:7E:50:7C:EB:8F:F8:7B:00:0D:CC:7B:20 Certificate issuer: /CN=ed700eac-da0c-4a50-a4dc-8a14e12e0088 Certificate serial: 010D0C9F4328584B1D9C2749314412A4A1615EC0 Authority key identifier: 7C:3D:BC:19:3B:87:45:7D:54:9B:01:DA:B5:06:36:EA:50:66:E1:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed700eac-da0c-4a50-a4dc-8a14e12e0088.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed700eac-da0c-4a50-a4dc-8a14e12e0088/8f87eeb5-025d-35a7-af1b-cc9423fc2f8e.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 401562 IP address blocks: 23.132.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed700eac-da0c-4a50-a4dc-8a14e12e0088/ed700eac-da0c-4a50-a4dc-8a14e12e0088.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed700eac-da0c-4a50-a4dc-8a14e12e0088/ed700eac-da0c-4a50-a4dc-8a14e12e0088.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed700eac-da0c-4a50-a4dc-8a14e12e0088.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:27:49:31:44:12:a4:a1:61:5e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed700eac-da0c-4a50-a4dc-8a14e12e0088 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=1be29819-e63b-4a15-8e16-e3b2bfa0bf86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:8e:3d:41:8e:06:3f:65:de:00:83:73:40:c6: 1e:93:d4:b4:fc:ec:4d:55:34:6f:43:cf:8c:96:bd: 48:e8:0d:23:56:7b:e4:94:86:3a:2f:a6:ff:c1:75: 9f:20:b3:ea:ef:7b:d1:fe:e5:af:4f:c8:b1:f2:de: 69:f8:83:2e:e6:a9:e4:fe:f2:c1:55:4f:cc:8a:79: 0d:0a:3e:24:b7:53:c9:69:d2:27:3c:7a:5a:be:91: ac:38:07:e9:4a:c7:1b:b3:4a:36:db:d6:40:c4:f6: 56:d2:af:47:19:82:20:a9:3e:54:34:28:38:ba:18: 19:93:7d:6f:92:ca:47:2a:07:3b:64:ba:1e:d7:a0: 14:fb:19:d5:1b:cd:52:96:0d:b5:c5:98:d1:ac:2c: 06:c9:c6:db:86:fd:66:81:f6:96:99:9c:c1:fa:e6: d6:14:fc:8c:62:b7:a9:56:f2:63:a5:b4:1d:8e:bc: 15:c4:e6:97:f1:b4:ac:81:90:ea:b4:f7:e9:17:16: 22:e9:b1:fd:0b:e9:89:fb:ca:00:99:44:3c:24:cf: b5:ed:b1:1a:85:b2:48:3e:6c:6d:0b:a7:22:66:45: 2a:36:49:2b:37:fc:e8:02:a0:e3:67:23:b2:20:58: 4a:c0:90:dc:f0:aa:0a:54:74:cc:d9:1f:1b:f3:31: 71:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:76:84:54:A3:9D:FA:FC:7E:50:7C:EB:8F:F8:7B:00:0D:CC:7B:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed700eac-da0c-4a50-a4dc-8a14e12e0088/8f87eeb5-025d-35a7-af1b-cc9423fc2f8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed700eac-da0c-4a50-a4dc-8a14e12e0088/ed700eac-da0c-4a50-a4dc-8a14e12e0088.crl X509v3 Authority Key Identifier: keyid:7C:3D:BC:19:3B:87:45:7D:54:9B:01:DA:B5:06:36:EA:50:66:E1:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed700eac-da0c-4a50-a4dc-8a14e12e0088.cer sbgp-ipAddrBlock: critical IPv4: 23.132.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:e4:f5:9d:f3:a0:63:e1:2c:7b:36:4a:79:2c:38:b7:c6:c0: fc:64:c5:93:f8:74:ee:eb:ab:c8:32:c9:39:02:73:43:2e:d3: d5:01:43:83:81:8f:2c:7d:e9:0e:8b:5b:89:d7:89:5a:7a:b7: 58:5b:0b:3f:a7:1e:33:aa:5a:33:3f:aa:b4:e9:48:69:38:b3: c6:b8:b3:f2:5c:87:cc:bb:c0:5c:71:b9:63:89:e0:28:87:3f: c8:89:37:f9:e7:53:dc:15:88:60:02:f2:d1:4a:a7:47:b3:75: a0:0a:ad:4e:ac:e1:f7:76:cb:0b:42:87:f1:86:21:da:bc:c0: 46:74:97:cf:24:43:fd:3b:a8:bb:7a:fb:c6:ea:ea:04:5f:28: 46:ed:f1:22:e8:83:f0:b3:53:ff:9d:d5:d5:61:c2:65:5b:9d: a0:02:b8:e9:55:e8:83:2a:dc:30:19:92:82:3e:c7:98:a1:55: 87:90:61:43:48:3e:69:58:92:cf:95:e4:d9:ea:cc:73:42:0f: 10:d6:56:56:16:9d:7f:65:5e:91:f4:63:91:19:68:d3:50:dd: ea:ad:66:99:d6:ea:2f:ff:f7:31:7c:13:c2:84:9c:5b:f6:d1: 99:cc:21:74:42:9e:a5:96:35:33:3e:a9:03:d5:f9:8f:e1:b0: 57:05:ad:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnCdJMUQSpKFhXsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWQ3MDBlYWMtZGEwYy00YTUwLWE0ZGMtOGExNGUxMmUw MDg4MB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk MWJlMjk4MTktZTYzYi00YTE1LThlMTYtZTNiMmJmYTBiZjg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApY49QY4GP2XeAINzQMYek9S0/OxNVTRvQ8+M lr1I6A0jVnvklIY6L6b/wXWfILPq73vR/uWvT8ix8t5p+IMu5qnk/vLBVU/MinkN Cj4kt1PJadInPHpavpGsOAfpSscbs0o229ZAxPZW0q9HGYIgqT5UNCg4uhgZk31v kspHKgc7ZLoe16AU+xnVG81Slg21xZjRrCwGycbbhv1mgfaWmZzB+ubWFPyMYrep VvJjpbQdjrwVxOaX8bSsgZDqtPfpFxYi6bH9C+mJ+8oAmUQ8JM+17bEahbJIPmxt C6ciZkUqNkkrN/zoAqDjZyOyIFhKwJDc8KoKVHTM2R8b8zFxSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK52hFSjnfr8flB864/4ewANzHsgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9lZDcw MGVhYy1kYTBjLTRhNTAtYTRkYy04YTE0ZTEyZTAwODgvOGY4N2VlYjUtMDI1ZC0z NWE3LWFmMWItY2M5NDIzZmMyZjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZWQ3MDBlYWMtZGEwYy00YTUwLWE0 ZGMtOGExNGUxMmUwMDg4L2VkNzAwZWFjLWRhMGMtNGE1MC1hNGRjLThhMTRlMTJl MDA4OC5jcmwwHwYDVR0jBBgwFoAUfD28GTuHRX1UmwHatQY26lBm4ZEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9lZDcwMGVhYy1kYTBjLTRhNTAtYTRkYy04YTE0 ZTEyZTAwODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4QMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFnk9Z3zoGPhLHs2SnksOLfGwPxkxZP4dO7rq8gyyTkCc0Mu09UBQ4OB jyx96Q6LW4nXiVp6t1hbCz+nHjOqWjM/qrTpSGk4s8a4s/Jch8y7wFxxuWOJ4CiH P8iJN/nnU9wViGAC8tFKp0ezdaAKrU6s4fd2ywtCh/GGIdq8wEZ0l88kQ/07qLt6 +8bq6gRfKEbt8SLog/CzU/+d1dVhwmVbnaACuOlV6IMq3DAZkoI+x5ihVYeQYUNI PmlYks+V5NnqzHNCDxDWVlYWnX9lXpH0Y5EZaNNQ3eqtZpnW6i//9zF8E8KEnFv2 0ZnMIXRCnqWWNTM+qQPV+Y/hsFcFrdU= -----END CERTIFICATE-----Generated at Fri Oct 10 17:47:40 2025 by rpki-client