$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/eb3afcb6-08fb-4ba2-9d96-a4e0c3c1e299/cf670401-9d4b-3637-856f-5c947821a74c.roa File: cf670401-9d4b-3637-856f-5c947821a74c.roa (raw, json) Hash identifier: C4myWJB7M5C9nHxp9iINkcILTIoCmNZXe/ml/E3cGwI= Subject key identifier: 7E:17:D8:EC:B9:ED:EC:52:50:4E:D8:2E:E7:AA:2D:85:42:78:27:64 Certificate issuer: /CN=eb3afcb6-08fb-4ba2-9d96-a4e0c3c1e299 Certificate serial: 010D0C9F4328584AB220DCD5D50C98CD10437E00 Authority key identifier: F1:AE:7B:0F:B9:3F:2F:09:E4:D5:85:E9:7E:46:88:44:3A:85:65:AD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/eb3afcb6-08fb-4ba2-9d96-a4e0c3c1e299.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/eb3afcb6-08fb-4ba2-9d96-a4e0c3c1e299/cf670401-9d4b-3637-856f-5c947821a74c.roa Signing time: Thu 31 Jul 2025 01:00:32 +0000 ROA not before: Thu 31 Jul 2025 01:00:32 +0000 ROA not after: Wed 29 Oct 2025 01:00:32 +0000 asID: 15333 IP address blocks: 23.189.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/eb3afcb6-08fb-4ba2-9d96-a4e0c3c1e299/eb3afcb6-08fb-4ba2-9d96-a4e0c3c1e299.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/eb3afcb6-08fb-4ba2-9d96-a4e0c3c1e299/eb3afcb6-08fb-4ba2-9d96-a4e0c3c1e299.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/eb3afcb6-08fb-4ba2-9d96-a4e0c3c1e299.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b2:20:dc:d5:d5:0c:98:cd:10:43:7e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb3afcb6-08fb-4ba2-9d96-a4e0c3c1e299 Validity Not Before: Jul 31 01:00:32 2025 GMT Not After : Oct 29 01:00:32 2025 GMT Subject: CN=27e9c8ac-34fd-475e-85e9-7098bd5cb08e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:49:43:43:11:3b:5e:c2:4b:41:5a:f9:5e:0d: 20:1c:42:e1:2c:02:1f:97:80:81:e7:bf:62:64:7e: 83:02:fc:e9:52:65:54:03:c4:88:31:13:3d:d4:4a: df:ac:e7:12:37:04:05:0a:e1:69:e1:10:f2:f1:80: 9f:1f:dd:97:44:71:94:55:81:9c:9b:5b:21:ce:18: ef:88:b9:0d:74:ca:21:4f:b1:9b:b9:fb:c2:eb:22: 2d:a3:10:42:de:99:ea:56:94:c8:a5:93:9b:2f:df: 7d:47:79:b8:38:2c:72:db:17:f2:c5:b8:6e:12:55: 84:ae:bc:ea:6d:39:44:c7:a0:70:1c:1f:38:1f:90: e3:9d:8a:e2:c8:27:67:e9:9a:b2:7b:9f:20:3f:d7: 94:ec:be:8e:59:6f:12:c3:98:91:a3:00:06:3e:da: dc:94:22:91:33:1d:1a:67:9c:92:90:b4:f2:d6:c7: 86:46:0c:53:d4:84:48:45:4c:32:cc:c5:10:06:22: 38:4a:08:0e:78:72:62:d8:39:43:bf:5f:79:d7:04: 68:75:c9:c8:78:47:fd:f9:18:55:cd:47:fe:91:a3: 9f:cb:b5:a4:bd:ab:46:2c:06:54:50:eb:99:b1:9d: f4:d9:0a:0d:7c:e6:47:97:e2:be:fc:fe:6b:3e:96: b8:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:17:D8:EC:B9:ED:EC:52:50:4E:D8:2E:E7:AA:2D:85:42:78:27:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/eb3afcb6-08fb-4ba2-9d96-a4e0c3c1e299/cf670401-9d4b-3637-856f-5c947821a74c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/eb3afcb6-08fb-4ba2-9d96-a4e0c3c1e299/eb3afcb6-08fb-4ba2-9d96-a4e0c3c1e299.crl X509v3 Authority Key Identifier: keyid:F1:AE:7B:0F:B9:3F:2F:09:E4:D5:85:E9:7E:46:88:44:3A:85:65:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/eb3afcb6-08fb-4ba2-9d96-a4e0c3c1e299.cer sbgp-ipAddrBlock: critical IPv4: 23.189.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:c5:d7:e3:af:fd:27:70:0c:d1:d0:7e:86:1c:7f:65:de:89: 1e:20:da:48:ad:5f:f3:4c:6a:08:2b:ce:ec:77:83:eb:a6:8f: 9a:22:23:5c:9a:0f:9e:f6:07:c8:42:ac:be:d1:0f:c5:d3:f0: 19:2d:69:c8:83:aa:1e:61:3b:9f:6c:16:09:5f:02:56:d9:25: 31:73:62:c3:b0:1b:37:75:5a:95:a5:a0:5d:f8:20:e6:af:34: e7:36:cd:b6:80:ca:1c:65:2b:71:80:fc:da:ee:1e:bd:a4:24: 49:36:a8:5d:c5:88:7e:6e:56:8e:8f:88:ab:ce:d2:1d:cb:a6: b6:3d:66:22:48:f3:89:57:01:87:9b:3c:49:0b:e7:8a:e9:9a: b6:f8:5f:ae:92:55:0e:a1:dc:27:43:ad:ee:58:7a:17:e3:a3: 70:ee:81:a4:d6:fc:60:18:a3:64:cb:fb:93:9f:c9:43:78:14: ae:e5:1a:b2:19:9c:09:5d:b8:dc:ce:0f:ca:d2:84:a8:b5:39: 66:f4:d7:0a:73:d5:35:b5:ff:ab:84:64:10:ac:c1:ba:73:4c: 63:48:05:0c:6f:ce:db:fa:2a:44:c2:af:bc:7e:c4:8f:c0:08: 58:15:be:42:1b:81:ae:5c:82:6b:dc:7b:db:ee:66:34:f5:85: f7:a1:e7:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqyINzV1QyYzRBDfgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWIzYWZjYjYtMDhmYi00YmEyLTlkOTYtYTRlMGMzYzFl Mjk5MB4XDTI1MDczMTAxMDAzMloXDTI1MTAyOTAxMDAzMlowLzEtMCsGA1UEAxMk MjdlOWM4YWMtMzRmZC00NzVlLTg1ZTktNzA5OGJkNWNiMDhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0lDQxE7XsJLQVr5Xg0gHELhLAIfl4CB579i ZH6DAvzpUmVUA8SIMRM91ErfrOcSNwQFCuFp4RDy8YCfH92XRHGUVYGcm1shzhjv iLkNdMohT7GbufvC6yItoxBC3pnqVpTIpZObL999R3m4OCxy2xfyxbhuElWErrzq bTlEx6BwHB84H5DjnYriyCdn6Zqye58gP9eU7L6OWW8Sw5iRowAGPtrclCKRMx0a Z5ySkLTy1seGRgxT1IRIRUwyzMUQBiI4SggOeHJi2DlDv1951wRodcnIeEf9+RhV zUf+kaOfy7WkvatGLAZUUOuZsZ302QoNfOZHl+K+/P5rPpa47wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH4X2Oy57exSUE7YLueqLYVCeCdkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9lYjNh ZmNiNi0wOGZiLTRiYTItOWQ5Ni1hNGUwYzNjMWUyOTkvY2Y2NzA0MDEtOWQ0Yi0z NjM3LTg1NmYtNWM5NDc4MjFhNzRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZWIzYWZjYjYtMDhmYi00YmEyLTlk OTYtYTRlMGMzYzFlMjk5L2ViM2FmY2I2LTA4ZmItNGJhMi05ZDk2LWE0ZTBjM2Mx ZTI5OS5jcmwwHwYDVR0jBBgwFoAU8a57D7k/Lwnk1YXpfkaIRDqFZa0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9lYjNhZmNiNi0wOGZiLTRiYTItOWQ5Ni1hNGUw YzNjMWUyOTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF71YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAzF1+Ov/SdwDNHQfoYcf2XeiR4g2kitX/NMaggrzux3g+umj5oiI1ya D572B8hCrL7RD8XT8BktaciDqh5hO59sFglfAlbZJTFzYsOwGzd1WpWloF34IOav NOc2zbaAyhxlK3GA/NruHr2kJEk2qF3FiH5uVo6PiKvO0h3LprY9ZiJI84lXAYeb PEkL54rpmrb4X66SVQ6h3CdDre5Yehfjo3DugaTW/GAYo2TL+5OfyUN4FK7lGrIZ nAlduNzOD8rShKi1OWb01wpz1TW1/6uEZBCswbpzTGNIBQxvztv6KkTCr7x+xI/A CFgVvkIbga5cgmvce9vuZjT1hfeh598= -----END CERTIFICATE-----Generated at Wed Aug 6 12:39:02 2025 by rpki-client