$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/2a9ebc3f-0d63-3bbd-9abf-1df4b0be82f8.roa File: 2a9ebc3f-0d63-3bbd-9abf-1df4b0be82f8.roa (raw, json) Hash identifier: +zUCX814neDOgV5hvfrI4r0+BnWcqFmXUysb7D3U8xw= Subject key identifier: 45:C6:2C:B5:DE:B9:4E:59:86:8E:AE:41:F7:0E:DC:43:39:94:F5:0E Certificate issuer: /CN=3efd7529-38b1-472c-9d5b-d87382d088a0 Certificate serial: 010D0C9F4328584A2ABAE26221FDAD83F952EA00 Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/2a9ebc3f-0d63-3bbd-9abf-1df4b0be82f8.roa Signing time: Thu 12 Jun 2025 13:01:03 +0000 ROA not before: Thu 12 Jun 2025 13:01:03 +0000 ROA not after: Wed 10 Sep 2025 13:01:03 +0000 asID: 394285 IP address blocks: 23.88.180.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2a:ba:e2:62:21:fd:ad:83:f9:52:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0 Validity Not Before: Jun 12 13:01:03 2025 GMT Not After : Sep 10 13:01:03 2025 GMT Subject: CN=012ccd4c-4c42-4e5c-86f0-08c092b5f82c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:73:9b:62:4f:52:74:aa:e3:88:3a:d8:13:a5: e3:00:c0:a3:d9:89:6f:bd:33:00:1f:13:69:be:bf: 17:37:99:9e:d1:d0:4e:b4:0c:dd:9a:28:40:59:c1: 68:9a:04:f4:5f:f6:57:b4:3d:47:96:23:0d:52:48: 46:70:65:46:07:72:77:8c:06:53:79:6d:d5:72:42: 2f:15:91:3a:7f:b0:09:2d:5f:c5:36:6a:04:1c:49: e4:a1:5b:6f:2c:e6:7f:69:c0:33:0f:a0:99:d2:34: 12:c2:ca:1e:76:14:6a:c7:c8:14:43:35:3d:ac:d7: bd:b8:e9:47:2e:3c:6c:17:b0:50:d1:9d:8c:fb:36: 62:62:3a:86:84:11:8a:46:a7:54:87:f6:9e:b2:8e: de:3b:ac:dd:1f:3f:59:53:39:39:dc:ad:08:f9:03: 0e:9e:65:e9:30:3f:83:e6:52:f3:61:53:83:3c:27: e3:96:ea:98:68:26:a0:d8:59:a6:6d:1a:f6:1e:c6: 54:e8:58:12:31:f2:46:2b:a7:aa:2c:7a:b0:c5:e7: b3:92:bd:e6:c1:38:70:99:d4:f3:d2:ed:09:7f:89: 36:96:8d:35:5e:89:9b:f7:67:76:8e:e7:53:86:17: 26:b2:62:0d:b1:c6:65:10:42:b8:4f:41:0f:92:d0: 90:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:C6:2C:B5:DE:B9:4E:59:86:8E:AE:41:F7:0E:DC:43:39:94:F5:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/2a9ebc3f-0d63-3bbd-9abf-1df4b0be82f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl X509v3 Authority Key Identifier: keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer sbgp-ipAddrBlock: critical IPv4: 23.88.180.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:70:2c:c2:20:28:44:ee:a4:e3:f0:ca:b5:e5:d9:62:72:71: ea:b1:7b:8d:a8:d4:22:d5:79:ee:51:78:a3:d4:c6:8f:3b:94: 30:4b:20:ff:f6:93:3f:d7:15:4a:ec:15:60:dd:26:43:16:d3: 18:53:c0:85:36:f3:16:c0:2b:cc:74:b8:89:d1:7b:90:03:81: 28:1f:86:cf:bd:a4:7c:2e:34:06:53:6c:4c:4d:95:84:7a:cf: cc:90:5e:df:17:f9:00:3f:6f:b0:81:8d:4e:c9:26:08:6a:b5: 00:f7:6a:ef:b2:ff:1e:a9:7e:17:66:ab:44:82:bb:69:26:f9: 39:ca:65:bf:17:76:57:f1:cd:34:9d:a3:28:22:e7:a3:cb:ee: 28:9c:4d:a9:68:1c:12:8c:5a:cc:fc:5d:e0:e6:bf:61:00:c1: 39:f5:a9:d8:c6:f9:04:13:20:79:a5:80:93:ab:08:1f:77:6d: 6c:f8:0a:07:00:23:6b:41:95:bb:e8:43:cf:3e:45:48:11:97: 86:47:c6:d5:ea:bb:0d:6d:9a:8a:4b:32:31:9b:c1:78:3d:40: 1e:03:67:79:03:8e:ca:7f:67:b9:ff:38:1f:b0:b7:a3:4d:7f: ff:74:55:a2:44:e5:52:2b:f8:ba:56:2d:40:8a:f9:16:f6:ec: dd:96:b7:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoquuJiIf2tg/lS6gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2VmZDc1MjktMzhiMS00NzJjLTlkNWItZDg3MzgyZDA4 OGEwMB4XDTI1MDYxMjEzMDEwM1oXDTI1MDkxMDEzMDEwM1owLzEtMCsGA1UEAxMk MDEyY2NkNGMtNGM0Mi00ZTVjLTg2ZjAtMDhjMDkyYjVmODJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3ObYk9SdKrjiDrYE6XjAMCj2YlvvTMAHxNp vr8XN5me0dBOtAzdmihAWcFomgT0X/ZXtD1HliMNUkhGcGVGB3J3jAZTeW3VckIv FZE6f7AJLV/FNmoEHEnkoVtvLOZ/acAzD6CZ0jQSwsoedhRqx8gUQzU9rNe9uOlH LjxsF7BQ0Z2M+zZiYjqGhBGKRqdUh/aeso7eO6zdHz9ZUzk53K0I+QMOnmXpMD+D 5lLzYVODPCfjluqYaCag2FmmbRr2HsZU6FgSMfJGK6eqLHqwxeezkr3mwThwmdTz 0u0Jf4k2lo01Xomb92d2judThhcmsmINscZlEEK4T0EPktCQ+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEXGLLXeuU5Zho6uQfcO3EM5lPUOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZWZk NzUyOS0zOGIxLTQ3MmMtOWQ1Yi1kODczODJkMDg4YTAvMmE5ZWJjM2YtMGQ2My0z YmJkLTlhYmYtMWRmNGIwYmU4MmY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2VmZDc1MjktMzhiMS00NzJjLTlk NWItZDg3MzgyZDA4OGEwLzNlZmQ3NTI5LTM4YjEtNDcyYy05ZDViLWQ4NzM4MmQw ODhhMC5jcmwwHwYDVR0jBBgwFoAUW4MicpSIqXhZmzrb3eBIKYdqlAcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZWZkNzUyOS0zOGIxLTQ3MmMtOWQ1Yi1kODcz ODJkMDg4YTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF1i0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKpwLMIgKETupOPwyrXl2WJyceqxe42o1CLVee5ReKPUxo87lDBLIP/2 kz/XFUrsFWDdJkMW0xhTwIU28xbAK8x0uInRe5ADgSgfhs+9pHwuNAZTbExNlYR6 z8yQXt8X+QA/b7CBjU7JJghqtQD3au+y/x6pfhdmq0SCu2km+TnKZb8XdlfxzTSd oygi56PL7iicTaloHBKMWsz8XeDmv2EAwTn1qdjG+QQTIHmlgJOrCB93bWz4CgcA I2tBlbvoQ88+RUgRl4ZHxtXquw1tmopLMjGbwXg9QB4DZ3kDjsp/Z7n/OB+wt6NN f/90VaJE5VIr+LpWLUCK+Rb27N2WtzE= -----END CERTIFICATE-----Generated at Sun Jun 15 13:59:51 2025 by rpki-client