$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed700eac-da0c-4a50-a4dc-8a14e12e0088/8f87eeb5-025d-35a7-af1b-cc9423fc2f8e.roa File: 8f87eeb5-025d-35a7-af1b-cc9423fc2f8e.roa (raw, json) Hash identifier: KFCnuEuIXIlFXlQe9mICJKNmvUftIWNnr9zzOdwtjN8= Subject key identifier: 9F:C3:17:B1:D6:37:17:4D:C1:E3:A9:BA:CF:5B:A9:0B:C3:87:76:8D Certificate issuer: /CN=ed700eac-da0c-4a50-a4dc-8a14e12e0088 Certificate serial: 010D0C9F432858495D8967A20CAC8FDB3B23F600 Authority key identifier: 7C:3D:BC:19:3B:87:45:7D:54:9B:01:DA:B5:06:36:EA:50:66:E1:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed700eac-da0c-4a50-a4dc-8a14e12e0088.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed700eac-da0c-4a50-a4dc-8a14e12e0088/8f87eeb5-025d-35a7-af1b-cc9423fc2f8e.roa Signing time: Mon 31 Mar 2025 01:00:47 +0000 ROA not before: Mon 31 Mar 2025 01:00:47 +0000 ROA not after: Sun 29 Jun 2025 01:00:47 +0000 asID: 401562 IP address blocks: 23.132.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed700eac-da0c-4a50-a4dc-8a14e12e0088/ed700eac-da0c-4a50-a4dc-8a14e12e0088.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed700eac-da0c-4a50-a4dc-8a14e12e0088/ed700eac-da0c-4a50-a4dc-8a14e12e0088.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed700eac-da0c-4a50-a4dc-8a14e12e0088.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5d:89:67:a2:0c:ac:8f:db:3b:23:f6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed700eac-da0c-4a50-a4dc-8a14e12e0088 Validity Not Before: Mar 31 01:00:47 2025 GMT Not After : Jun 29 01:00:47 2025 GMT Subject: CN=5e32057a-c8d8-4a27-9eeb-b6ef8daadc5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:a9:d3:46:65:23:f0:90:a7:36:fe:2d:09:a0: e3:9c:bb:fb:4e:53:fc:d2:48:af:03:a5:dc:2b:c7: 22:08:81:15:f8:65:e7:22:e1:4e:ff:1e:71:92:b8: 5d:a4:85:5e:e1:b4:de:6c:47:b0:12:f1:9a:4e:a6: 6f:0b:7a:87:b3:f2:8e:c0:b5:d7:75:74:57:95:4a: be:43:8e:8e:94:25:9e:70:af:3c:ea:da:79:53:ca: c5:71:52:a6:3a:4e:1f:91:12:96:d5:78:36:38:0d: 59:9b:08:97:51:80:23:02:01:d1:2c:c6:91:f7:2f: 90:1e:27:c8:89:42:bb:c9:0c:07:b1:4c:ef:76:9c: 4e:66:bb:95:71:6b:84:00:94:de:8c:c7:06:0f:9e: bc:06:04:99:ee:1f:f8:d1:87:31:76:de:86:9d:fc: 1a:16:83:95:3b:ec:68:50:7e:00:e9:24:bb:fa:a2: 58:46:77:5a:d6:19:71:db:7d:15:7a:d7:d1:09:7f: 84:12:37:17:52:02:4b:e2:67:99:4a:9d:08:13:32: 25:59:95:11:c5:69:21:6e:b8:a1:ff:9d:7c:a2:e9: 36:d5:f0:9e:39:2c:8c:a7:0b:22:e1:c3:ad:bd:fc: e6:0d:a4:fa:13:a8:b4:5a:a2:c9:5c:bd:d2:bc:f4: 80:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:C3:17:B1:D6:37:17:4D:C1:E3:A9:BA:CF:5B:A9:0B:C3:87:76:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed700eac-da0c-4a50-a4dc-8a14e12e0088/8f87eeb5-025d-35a7-af1b-cc9423fc2f8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed700eac-da0c-4a50-a4dc-8a14e12e0088/ed700eac-da0c-4a50-a4dc-8a14e12e0088.crl X509v3 Authority Key Identifier: keyid:7C:3D:BC:19:3B:87:45:7D:54:9B:01:DA:B5:06:36:EA:50:66:E1:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed700eac-da0c-4a50-a4dc-8a14e12e0088.cer sbgp-ipAddrBlock: critical IPv4: 23.132.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:3f:07:7c:32:65:d2:99:8d:11:2d:a7:17:f0:48:79:d7:77: ef:e1:6a:a4:99:f5:c9:31:3b:8f:86:7d:5b:b8:94:a6:ab:3f: 91:bc:3b:ba:2f:cc:35:a9:85:e8:75:ba:e7:5a:0a:28:95:06: bc:75:70:16:22:07:30:8e:9a:80:ff:77:25:76:66:c3:8a:ca: 43:59:56:dc:53:ba:db:eb:e4:3f:4b:6c:08:78:ce:7b:4f:44: d8:59:2a:1b:8c:68:2f:84:cf:4d:19:af:bc:28:7b:20:bf:a5: b6:9a:aa:f0:90:dd:b6:ac:8e:6f:a3:55:9b:cb:21:e5:05:8b: e1:83:fb:fc:79:2a:e6:20:91:1e:19:d8:89:42:d3:86:0b:14: 28:7f:a6:16:d1:f7:ef:94:ec:b5:7a:9b:49:74:c4:e6:e2:93: 34:2d:6c:1b:e8:a0:2d:a4:04:6f:58:96:f4:5d:c8:28:67:8e: 20:2f:43:f3:6c:af:18:8c:24:8f:ff:0e:fe:5a:9d:d0:34:cd: 4a:8f:08:88:18:87:e7:92:d4:53:10:2d:e7:72:94:5f:4c:50: 2a:e7:76:77:c1:8b:19:ac:53:9b:c6:d6:92:d2:da:1a:b5:8c: 9c:2f:30:4d:02:fa:ba:9d:e7:50:3e:ab:2c:0f:08:bc:82:08: 3c:a9:8b:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEldiWeiDKyP2zsj9gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWQ3MDBlYWMtZGEwYy00YTUwLWE0ZGMtOGExNGUxMmUw MDg4MB4XDTI1MDMzMTAxMDA0N1oXDTI1MDYyOTAxMDA0N1owLzEtMCsGA1UEAxMk NWUzMjA1N2EtYzhkOC00YTI3LTllZWItYjZlZjhkYWFkYzVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKnTRmUj8JCnNv4tCaDjnLv7TlP80kivA6Xc K8ciCIEV+GXnIuFO/x5xkrhdpIVe4bTebEewEvGaTqZvC3qHs/KOwLXXdXRXlUq+ Q46OlCWecK886tp5U8rFcVKmOk4fkRKW1Xg2OA1ZmwiXUYAjAgHRLMaR9y+QHifI iUK7yQwHsUzvdpxOZruVcWuEAJTejMcGD568BgSZ7h/40Ycxdt6GnfwaFoOVO+xo UH4A6SS7+qJYRnda1hlx230VetfRCX+EEjcXUgJL4meZSp0IEzIlWZURxWkhbrih /518ouk21fCeOSyMpwsi4cOtvfzmDaT6E6i0WqLJXL3SvPSASQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ/DF7HWNxdNweOpus9bqQvDh3aNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9lZDcw MGVhYy1kYTBjLTRhNTAtYTRkYy04YTE0ZTEyZTAwODgvOGY4N2VlYjUtMDI1ZC0z NWE3LWFmMWItY2M5NDIzZmMyZjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZWQ3MDBlYWMtZGEwYy00YTUwLWE0 ZGMtOGExNGUxMmUwMDg4L2VkNzAwZWFjLWRhMGMtNGE1MC1hNGRjLThhMTRlMTJl MDA4OC5jcmwwHwYDVR0jBBgwFoAUfD28GTuHRX1UmwHatQY26lBm4ZEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9lZDcwMGVhYy1kYTBjLTRhNTAtYTRkYy04YTE0 ZTEyZTAwODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4QMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIA/B3wyZdKZjREtpxfwSHnXd+/haqSZ9ckxO4+GfVu4lKarP5G8O7ov zDWpheh1uudaCiiVBrx1cBYiBzCOmoD/dyV2ZsOKykNZVtxTutvr5D9LbAh4zntP RNhZKhuMaC+Ez00Zr7woeyC/pbaaqvCQ3basjm+jVZvLIeUFi+GD+/x5KuYgkR4Z 2IlC04YLFCh/phbR9++U7LV6m0l0xObikzQtbBvooC2kBG9YlvRdyChnjiAvQ/Ns rxiMJI//Dv5andA0zUqPCIgYh+eS1FMQLedylF9MUCrndnfBixmsU5vG1pLS2hq1 jJwvME0C+rqd51A+qywPCLyCCDypi2M= -----END CERTIFICATE-----Generated at Sat Apr 12 15:04:44 2025 by rpki-client