$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/2feb0cec-2470-3c1b-b3be-57e967538fd8.roa File: 2feb0cec-2470-3c1b-b3be-57e967538fd8.roa (raw, json) Hash identifier: 4XrDpabBlHe0xbHgC7rxjBwxNHwR6gqZo7cQ/FtuT3Y= Subject key identifier: 8E:A0:43:85:93:85:16:A3:8A:B2:85:6C:CF:1C:F4:F1:17:9F:A9:74 Certificate issuer: /CN=3efd7529-38b1-472c-9d5b-d87382d088a0 Certificate serial: 010D0C9F432858494B641744E75FAA4A81EE3A00 Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/2feb0cec-2470-3c1b-b3be-57e967538fd8.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 394285 IP address blocks: 23.88.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:17:44:e7:5f:aa:4a:81:ee:3a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=2b478426-2205-4603-9b34-a059b804bb7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:d6:9d:53:58:4a:1b:25:76:e8:cb:61:be:8d: 39:4c:07:b1:e2:9d:80:c8:36:89:df:2c:ad:dc:52: 36:29:43:e9:2a:09:6b:e5:94:19:15:fa:ca:e6:d5: 15:2b:51:bd:95:b8:94:93:dc:27:3c:46:b5:aa:d6: c7:4b:7f:ce:78:84:26:3a:9f:75:12:45:05:69:5b: 0a:dd:9a:5e:76:01:06:84:10:4e:e2:d4:db:69:43: 34:91:18:4e:90:33:1c:0c:63:fc:c9:ee:f1:20:98: 3d:ca:61:55:60:5f:ee:f1:2a:eb:3b:6b:0c:9f:b5: e9:fa:12:af:c2:6a:1a:c5:b4:01:b3:de:2d:f0:f4: b2:59:e0:07:da:b7:2a:77:f8:99:c1:6d:a2:24:d3: 6c:6d:14:ee:72:82:84:a6:ae:6b:58:0e:40:fe:66: dc:e9:8f:1a:b1:80:56:a2:6b:f4:45:de:83:91:bd: 80:5f:70:3b:b5:d2:53:4e:47:e2:b8:92:53:8c:39: fe:2e:e5:65:f7:25:f8:74:7a:7f:18:51:25:60:68: c4:54:64:55:9d:9c:76:9e:52:2d:bc:b1:2e:91:ba: 09:ea:73:2a:83:36:dd:5c:ac:c7:4b:30:5f:7a:fe: 58:3e:8c:c1:35:f7:0c:1e:43:d2:5e:06:3f:8d:74: 6b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:A0:43:85:93:85:16:A3:8A:B2:85:6C:CF:1C:F4:F1:17:9F:A9:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/2feb0cec-2470-3c1b-b3be-57e967538fd8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl X509v3 Authority Key Identifier: keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer sbgp-ipAddrBlock: critical IPv4: 23.88.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:54:d1:96:2a:0c:a8:5b:20:3d:d7:14:4d:1d:df:13:fa:67: db:4d:6b:dc:8f:88:2f:b8:01:38:52:b9:b1:4c:24:b4:b1:ba: b2:e6:88:32:e4:85:30:c3:fa:ab:55:d2:16:c0:0a:b1:a8:db: 09:97:b6:9e:f4:7c:2d:c0:90:d7:65:5c:a4:a7:43:f2:cf:e0: 28:34:01:e8:27:cb:76:a9:b9:3b:ff:0b:51:07:85:01:72:00: 41:d6:d1:e9:10:b8:46:f7:a0:8b:cf:11:64:23:d7:5c:0b:76: e4:2b:cf:ba:a4:32:84:5d:2a:6f:19:41:96:ff:0a:90:22:1a: 09:a1:54:ff:3a:e7:50:8b:32:b4:a3:13:ef:37:f8:cb:4c:3a: f4:73:72:35:a6:00:ea:3f:03:70:cf:fa:36:9d:e4:0b:83:71: 34:2c:5f:5a:46:39:7e:80:e1:dd:50:90:2d:b0:ac:39:56:37: a5:71:c0:1b:bf:83:61:7a:89:32:b5:07:ff:e1:90:5e:ee:7d: 88:a4:b9:11:21:10:55:b7:ce:81:35:64:05:5a:d3:4f:77:88: b0:f0:9b:00:18:ba:26:5d:bc:42:55:cc:9e:1f:ce:94:23:f4: e1:9e:b8:ab:ee:91:7c:01:4c:01:e7:d4:3e:3d:58:9b:24:69: a3:68:aa:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZBdE51+qSoHuOgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2VmZDc1MjktMzhiMS00NzJjLTlkNWItZDg3MzgyZDA4 OGEwMB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk MmI0Nzg0MjYtMjIwNS00NjAzLTliMzQtYTA1OWI4MDRiYjdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdadU1hKGyV26Mthvo05TAex4p2AyDaJ3yyt 3FI2KUPpKglr5ZQZFfrK5tUVK1G9lbiUk9wnPEa1qtbHS3/OeIQmOp91EkUFaVsK 3ZpedgEGhBBO4tTbaUM0kRhOkDMcDGP8ye7xIJg9ymFVYF/u8SrrO2sMn7Xp+hKv wmoaxbQBs94t8PSyWeAH2rcqd/iZwW2iJNNsbRTucoKEpq5rWA5A/mbc6Y8asYBW omv0Rd6Dkb2AX3A7tdJTTkfiuJJTjDn+LuVl9yX4dHp/GFElYGjEVGRVnZx2nlIt vLEukboJ6nMqgzbdXKzHSzBfev5YPozBNfcMHkPSXgY/jXRrZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI6gQ4WThRajirKFbM8c9PEXn6l0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZWZk NzUyOS0zOGIxLTQ3MmMtOWQ1Yi1kODczODJkMDg4YTAvMmZlYjBjZWMtMjQ3MC0z YzFiLWIzYmUtNTdlOTY3NTM4ZmQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2VmZDc1MjktMzhiMS00NzJjLTlk NWItZDg3MzgyZDA4OGEwLzNlZmQ3NTI5LTM4YjEtNDcyYy05ZDViLWQ4NzM4MmQw ODhhMC5jcmwwHwYDVR0jBBgwFoAUW4MicpSIqXhZmzrb3eBIKYdqlAcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZWZkNzUyOS0zOGIxLTQ3MmMtOWQ1Yi1kODcz ODJkMDg4YTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF1i8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK9U0ZYqDKhbID3XFE0d3xP6Z9tNa9yPiC+4AThSubFMJLSxurLmiDLk hTDD+qtV0hbACrGo2wmXtp70fC3AkNdlXKSnQ/LP4Cg0Aegny3apuTv/C1EHhQFy AEHW0ekQuEb3oIvPEWQj11wLduQrz7qkMoRdKm8ZQZb/CpAiGgmhVP8651CLMrSj E+83+MtMOvRzcjWmAOo/A3DP+jad5AuDcTQsX1pGOX6A4d1QkC2wrDlWN6VxwBu/ g2F6iTK1B//hkF7ufYikuREhEFW3zoE1ZAVa0093iLDwmwAYuiZdvEJVzJ4fzpQj 9OGeuKvukXwBTAHn1D49WJskaaNoqqU= -----END CERTIFICATE-----Generated at Tue Apr 8 17:07:03 2025 by rpki-client