$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/2a9ebc3f-0d63-3bbd-9abf-1df4b0be82f8.roa File: 2a9ebc3f-0d63-3bbd-9abf-1df4b0be82f8.roa (raw, json) Hash identifier: WWzdsmowd9xEVxbuowyq7+w2DxgHUA6pxrGDSIp6pbk= Subject key identifier: AA:86:0A:DE:82:44:9F:BA:27:93:BE:CF:12:DC:B7:09:34:C6:47:59 Certificate issuer: /CN=3efd7529-38b1-472c-9d5b-d87382d088a0 Certificate serial: 010D0C9F4328584B0B76AF3A5C4F23FE1A191580 Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/2a9ebc3f-0d63-3bbd-9abf-1df4b0be82f8.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 394285 IP address blocks: 23.88.180.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Sep 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:af:3a:5c:4f:23:fe:1a:19:15:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=f409b274-e5e9-494a-ab53-b5373e525b31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:81:b1:96:7c:1c:02:50:f3:bf:c7:68:e0:70: df:e1:3c:4c:cd:d2:08:14:57:f1:f9:0f:f6:74:85: d2:0c:42:19:97:2a:3d:73:4f:85:7e:89:78:44:4d: a9:87:8d:1e:e3:cf:47:d6:19:c6:54:31:5b:ac:14: 41:2e:5d:7c:f5:16:3b:08:86:8f:85:10:98:c6:a0: 13:4c:14:66:b9:90:f0:c0:6e:3b:20:29:41:d3:20: 33:44:fd:33:0f:6a:2b:68:68:78:5b:12:ba:dd:0c: 00:11:87:7e:f0:74:8f:2b:d0:03:dd:af:50:60:4b: 0c:18:be:c6:c0:91:23:00:ce:a9:d9:fe:3e:86:f4: 9a:70:61:55:da:be:49:bc:6b:95:db:59:85:a9:dd: ee:cb:79:31:10:21:5a:76:03:4e:19:b5:35:e0:ba: 62:3c:87:8e:e7:6f:07:d2:f6:2f:28:f2:89:f9:07: 96:cc:38:48:a7:55:01:4c:45:84:62:9d:01:1a:88: 3c:3e:55:82:d8:7f:c0:97:2c:7c:ba:ba:a2:b5:ff: 9b:47:67:e0:61:6e:c8:43:68:97:ed:9b:df:0a:0f: ad:db:3c:ef:dc:7f:48:e0:f1:a0:c4:4c:91:9e:e2: 96:51:75:6b:7e:93:50:46:22:2f:2d:19:dc:49:7b: a0:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:86:0A:DE:82:44:9F:BA:27:93:BE:CF:12:DC:B7:09:34:C6:47:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/2a9ebc3f-0d63-3bbd-9abf-1df4b0be82f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl X509v3 Authority Key Identifier: keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer sbgp-ipAddrBlock: critical IPv4: 23.88.180.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:0f:78:73:ab:72:f4:9b:88:d0:8d:d0:17:af:6e:78:d1:93: 69:09:4e:90:3a:ef:b0:24:38:2d:99:9d:42:f9:7f:69:96:dc: 69:a0:3a:8b:82:90:06:1b:d8:0a:25:b9:06:2f:34:06:e7:74: 8d:c4:2a:a2:e1:70:2f:4d:76:bb:65:d5:03:60:a7:70:40:f5: 28:0a:87:e3:db:0f:89:41:a4:d3:12:01:64:b0:51:b4:16:12: ca:b6:79:54:22:25:96:c8:57:34:c9:36:2c:1d:7e:84:1d:50: 67:21:50:a6:99:ca:82:38:1b:9a:16:88:1f:d6:47:e1:d8:f7: 50:a5:0f:79:46:84:c2:81:57:7b:08:70:80:da:f3:6f:dd:39: 49:77:36:45:4f:da:62:2d:df:0b:47:8f:d8:bb:b5:c9:20:c0: e3:d8:3e:b8:65:0a:01:e6:aa:69:53:43:eb:61:dc:1e:eb:ef: 96:80:31:7b:87:fa:8b:11:59:13:c8:02:2e:21:00:7c:4f:82: 84:1f:bd:23:21:e6:47:de:0d:90:df:0d:88:52:24:f3:9e:ba: 69:0e:0a:59:a6:dd:10:d6:52:39:dd:87:ad:eb:16:f9:c6:2c: 7b:e6:5d:b2:57:aa:0d:c0:07:09:14:a0:24:ec:f9:85:42:d8: 44:92:81:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdq86XE8j/hoZFYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2VmZDc1MjktMzhiMS00NzJjLTlkNWItZDg3MzgyZDA4 OGEwMB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk ZjQwOWIyNzQtZTVlOS00OTRhLWFiNTMtYjUzNzNlNTI1YjMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIGxlnwcAlDzv8do4HDf4TxMzdIIFFfx+Q/2 dIXSDEIZlyo9c0+Ffol4RE2ph40e489H1hnGVDFbrBRBLl189RY7CIaPhRCYxqAT TBRmuZDwwG47IClB0yAzRP0zD2oraGh4WxK63QwAEYd+8HSPK9AD3a9QYEsMGL7G wJEjAM6p2f4+hvSacGFV2r5JvGuV21mFqd3uy3kxECFadgNOGbU14LpiPIeO528H 0vYvKPKJ+QeWzDhIp1UBTEWEYp0BGog8PlWC2H/Alyx8urqitf+bR2fgYW7IQ2iX 7ZvfCg+t2zzv3H9I4PGgxEyRnuKWUXVrfpNQRiIvLRncSXugAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKqGCt6CRJ+6J5O+zxLctwk0xkdZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZWZk NzUyOS0zOGIxLTQ3MmMtOWQ1Yi1kODczODJkMDg4YTAvMmE5ZWJjM2YtMGQ2My0z YmJkLTlhYmYtMWRmNGIwYmU4MmY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2VmZDc1MjktMzhiMS00NzJjLTlk NWItZDg3MzgyZDA4OGEwLzNlZmQ3NTI5LTM4YjEtNDcyYy05ZDViLWQ4NzM4MmQw ODhhMC5jcmwwHwYDVR0jBBgwFoAUW4MicpSIqXhZmzrb3eBIKYdqlAcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZWZkNzUyOS0zOGIxLTQ3MmMtOWQ1Yi1kODcz ODJkMDg4YTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF1i0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKgPeHOrcvSbiNCN0BevbnjRk2kJTpA677AkOC2ZnUL5f2mW3GmgOouC kAYb2AoluQYvNAbndI3EKqLhcC9Ndrtl1QNgp3BA9SgKh+PbD4lBpNMSAWSwUbQW Esq2eVQiJZbIVzTJNiwdfoQdUGchUKaZyoI4G5oWiB/WR+HY91ClD3lGhMKBV3sI cIDa82/dOUl3NkVP2mIt3wtHj9i7tckgwOPYPrhlCgHmqmlTQ+th3B7r75aAMXuH +osRWRPIAi4hAHxPgoQfvSMh5kfeDZDfDYhSJPOeumkOClmm3RDWUjndh63rFvnG LHvmXbJXqg3ABwkUoCTs+YVC2ESSgaE= -----END CERTIFICATE-----Generated at Fri Sep 19 12:44:38 2025 by rpki-client