$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS30088.roa File: AS30088.roa (raw, json) Hash identifier: FMbCUr3XVJ+7wGAMqPGbESrm5nlHlZeam/sp+SyhkAo= Subject key identifier: B0:D3:39:C2:28:82:53:F2:F8:78:74:95:64:A7:5D:AB:F8:6A:32:6B Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Certificate serial: 31681BD33346585D41D8AA069319E5F0EC095714 Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS30088.roa Signing time: Mon 07 Sep 2026 09:17:26 +0000 ROA not before: Mon 07 Sep 2026 09:12:26 +0000 ROA not after: Mon 06 Sep 2027 09:17:26 +0000 asID: 30088 IP address blocks: 23.95.180.0/24 maxlen: 24 67.210.101.0/24 maxlen: 24 192.228.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Sep 2026 13:05:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:68:1b:d3:33:46:58:5d:41:d8:aa:06:93:19:e5:f0:ec:09:57:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Validity Not Before: Sep 7 09:12:26 2026 GMT Not After : Sep 6 09:17:26 2027 GMT Subject: CN=B0D339C2288253F2F878749564A75DABF86A326B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:1b:63:04:1a:a0:88:bc:69:76:d1:aa:02:fa: 65:7d:c2:bc:96:36:3d:86:2d:c8:41:63:e9:e8:df: cb:3b:80:80:61:62:70:8b:fb:0d:93:d4:f5:df:8d: 7b:9f:22:64:4e:c6:89:47:8a:36:19:36:98:10:47: 07:8b:08:57:47:1f:f4:2b:84:b2:2a:88:93:8d:37: 10:33:d3:1a:1e:16:b1:d6:6a:94:42:4f:b8:b3:8f: 3a:bd:36:1a:77:be:b7:05:c4:78:c9:67:ef:eb:45: a3:4b:9f:22:76:f6:3e:f2:ff:d4:e3:b8:20:62:3b: 03:fc:f7:91:a2:c1:35:e6:09:17:b5:c8:70:c6:4e: 2e:f4:e7:79:e7:89:6e:f0:a5:3e:3c:95:d3:df:70: 0d:ea:57:39:72:3a:fa:ff:9d:54:32:75:6d:20:1b: e2:d0:d3:b6:ef:a5:f8:e8:a7:97:b8:a9:d3:34:b3: 41:4e:86:7b:bc:06:00:08:26:38:94:bb:c8:11:20: 8e:8f:e1:5e:a0:dd:f8:bc:a3:10:80:63:d5:1e:d1: c5:3c:05:21:61:f4:76:39:6f:04:d0:76:e8:79:7e: 8c:13:0b:17:77:87:0d:ee:f3:8c:59:67:2a:e4:4c: d0:46:f0:14:c8:31:91:9f:25:6b:14:df:dc:52:f3: de:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:D3:39:C2:28:82:53:F2:F8:78:74:95:64:A7:5D:AB:F8:6A:32:6B X509v3 Authority Key Identifier: keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS30088.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.95.180.0/24 67.210.101.0/24 192.228.123.0/24 Signature Algorithm: sha256WithRSAEncryption a0:9e:b7:20:44:8d:2f:20:cc:2e:de:ab:7a:db:71:2d:82:a4: 5f:a3:5c:ff:1e:64:fb:80:1a:17:1d:4b:c8:b2:b2:04:d5:8c: 5b:73:e2:74:ee:42:15:90:05:70:0c:8a:5b:51:50:e8:1a:aa: 98:1d:11:be:ca:3e:f1:75:22:52:f6:49:55:38:65:d6:57:a0: ae:8e:2e:85:6f:e1:41:23:e8:c8:5a:2a:a5:34:94:c4:d1:25: a5:68:83:24:dc:64:d9:55:38:55:1d:6e:c7:f8:1d:4f:7a:f6: be:34:d4:59:9b:87:dc:67:a9:b5:a5:30:ab:6a:72:15:c7:f2: 79:3c:c3:95:5a:35:3a:bb:cc:ad:a9:13:26:b5:7d:3b:a4:51: 56:29:d7:76:17:51:47:2c:cd:80:7b:63:a1:1f:2c:01:8c:20: a2:a2:7b:c5:1d:93:a8:f9:c1:a9:9e:f6:e8:79:6b:06:b5:7c: fa:ea:5e:8d:aa:f9:61:7a:31:36:53:94:04:e9:98:69:1f:fc: a2:f4:a7:bd:41:31:ea:fe:97:f5:1e:0b:5c:d2:25:e7:8f:ec: 42:04:3c:73:b1:13:16:dc:fe:f4:d1:bb:a1:89:91:10:09:93: 27:1c:37:86:d8:01:11:38:f6:5e:01:34:d6:77:46:9b:9c:d2: c6:17:b8:39 -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIUMWgb0zNGWF1B2KoGkxnl8OwJVxQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjYwOTA3MDkxMjI2WhcNMjcwOTA2MDkxNzI2 WjAzMTEwLwYDVQQDEyhCMEQzMzlDMjI4ODI1M0YyRjg3ODc0OTU2NEE3NURBQkY4 NkEzMjZCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhtjBBqgiLxp dtGqAvplfcK8ljY9hi3IQWPp6N/LO4CAYWJwi/sNk9T13417nyJkTsaJR4o2GTaY EEcHiwhXRx/0K4SyKoiTjTcQM9MaHhax1mqUQk+4s486vTYad763BcR4yWfv60Wj S58idvY+8v/U47ggYjsD/PeRosE15gkXtchwxk4u9Od554lu8KU+PJXT33AN6lc5 cjr6/51UMnVtIBvi0NO276X46KeXuKnTNLNBToZ7vAYACCY4lLvIESCOj+FeoN34 vKMQgGPVHtHFPAUhYfR2OW8E0HboeX6MEwsXd4cN7vOMWWcq5EzQRvAUyDGRnyVr FN/cUvPeHQIDAQABo4ICijCCAoYwHQYDVR0OBBYEFLDTOcIoglPy+Hh0lWSnXav4 ajJrMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0 OTBkMzMvMS9BUzMwMDg4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsG CCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAF1+0AwQAQ9JlAwQAwOR7MA0GCSqG SIb3DQEBCwUAA4IBAQCgnrcgRI0vIMwu3qt623EtgqRfo1z/HmT7gBoXHUvIsrIE 1Yxbc+J07kIVkAVwDIpbUVDoGqqYHRG+yj7xdSJS9klVOGXWV6Cuji6Fb+FBI+jI WiqlNJTE0SWlaIMk3GTZVThVHW7H+B1Peva+NNRZm4fcZ6m1pTCranIVx/J5PMOV WjU6u8ytqRMmtX07pFFWKdd2F1FHLM2Ae2OhHywBjCCionvFHZOo+cGpnvboeWsG tXz66l6NqvlhejE2U5QE6ZhpH/yi9Ke9QTHq/pf1Hgtc0iXnj+xCBDxzsRMW3P70 0buhiZEQCZMnHDeG2AEROPZeATTWd0abnNLGF7g5 -----END CERTIFICATE-----Generated at Mon Sep 7 19:45:59 2026 by rpki-client