$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/2feb0cec-2470-3c1b-b3be-57e967538fd8.roa File: 2feb0cec-2470-3c1b-b3be-57e967538fd8.roa (raw, json) Hash identifier: 17OCJdXiN4/hopTILuJ7IQCB44u5DtQNIFCzf6za42w= Subject key identifier: E5:C8:33:66:F1:00:08:34:80:A1:B4:E7:D5:4F:BE:32:02:BB:C4:90 Certificate issuer: /CN=3efd7529-38b1-472c-9d5b-d87382d088a0 Certificate serial: 010D0C9F4328584B0B76AF615E562DC40483C200 Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/2feb0cec-2470-3c1b-b3be-57e967538fd8.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 394285 IP address blocks: 23.88.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Sep 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:af:61:5e:56:2d:c4:04:83:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=e671f725-eb90-4f6d-b087-33266f087159 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:0b:82:cc:9a:15:8f:b8:a1:3e:2a:ad:b0:bd: 6b:66:2c:5b:8c:b6:8b:d9:34:39:90:06:0e:8f:58: 7e:d4:8d:31:b7:00:7e:21:3f:17:aa:33:4d:4b:a6: 63:2a:50:24:d5:33:66:e4:c8:8b:42:e7:69:63:8a: c1:cc:c7:05:5c:9d:98:c6:e1:03:c8:32:77:db:1c: 3f:66:08:63:0d:0b:06:0a:d3:7c:76:87:a9:cf:4f: a6:2c:80:16:f2:b4:76:df:cf:55:f2:9d:14:52:5d: a0:b3:3d:cf:7e:a0:e0:05:cf:68:99:2c:fc:dd:67: 00:a5:6a:32:03:23:92:17:c0:15:48:f6:36:b8:04: 6f:25:5e:80:3d:12:bf:23:ce:c9:0b:ea:82:6d:ab: f2:9f:3d:66:b8:a4:4e:af:32:4a:de:7e:30:b4:1d: f0:70:ac:e7:fb:0f:24:b1:e9:64:9d:32:d7:ef:4f: 4c:13:c6:80:94:9b:ff:e7:d3:19:0b:6b:87:0f:5f: ab:a4:18:4e:85:f2:73:34:7b:b6:27:cb:2e:8d:b8: b3:09:60:fb:20:d2:4e:8e:83:9a:07:86:62:12:19: 5c:28:d1:7a:91:84:61:3a:0a:c5:07:e9:ba:1b:a7: de:ea:bb:d0:f2:cc:f6:37:7f:81:b1:15:c7:fe:c8: f5:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:C8:33:66:F1:00:08:34:80:A1:B4:E7:D5:4F:BE:32:02:BB:C4:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/2feb0cec-2470-3c1b-b3be-57e967538fd8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl X509v3 Authority Key Identifier: keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer sbgp-ipAddrBlock: critical IPv4: 23.88.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:fb:16:34:3b:00:3b:77:55:45:9d:d1:64:d5:37:e9:3d:1a: dc:82:66:71:8f:51:29:1a:8f:81:2a:36:03:2f:1e:d6:f5:df: e8:c7:f2:9b:49:3b:17:07:13:8b:e9:6a:e9:fd:1d:13:e8:2d: 2e:b0:38:32:cd:d4:22:b5:5d:f6:4c:78:32:0f:2b:0b:59:0f: 7c:5f:f2:8d:32:c9:cc:50:49:5f:73:1f:41:f2:07:31:1d:90: b0:7b:5f:e8:a0:44:ab:ed:25:5c:34:ac:ee:fb:62:d6:52:ac: 2a:f0:a1:5a:4b:7e:e0:a2:3f:b4:e4:f8:6a:a6:55:b9:51:6a: b0:1b:54:b4:e5:0d:84:6e:80:65:46:67:d9:51:66:ff:c3:22: fb:e3:d2:37:21:fc:f0:89:ab:95:f8:6c:7e:78:70:de:d7:66: ef:5e:28:fb:2f:c1:ff:47:60:53:a5:8f:b2:fe:47:a5:0a:f8: 24:22:75:52:cc:09:79:4c:9f:5f:17:71:67:6f:02:dc:cb:fd: 5a:ee:1a:a5:79:93:14:f6:bc:6c:d3:47:9b:4f:9b:b9:c2:1d: 83:be:c9:c3:20:27:0b:03:40:e2:a4:70:d2:b6:1f:16:6d:92: 26:31:52:6e:fc:b6:fd:08:8e:c1:9e:46:c6:f9:f9:37:bc:50: 04:54:f8:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdq9hXlYtxASDwgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2VmZDc1MjktMzhiMS00NzJjLTlkNWItZDg3MzgyZDA4 OGEwMB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk ZTY3MWY3MjUtZWI5MC00ZjZkLWIwODctMzMyNjZmMDg3MTU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnguCzJoVj7ihPiqtsL1rZixbjLaL2TQ5kAYO j1h+1I0xtwB+IT8XqjNNS6ZjKlAk1TNm5MiLQudpY4rBzMcFXJ2YxuEDyDJ32xw/ ZghjDQsGCtN8doepz0+mLIAW8rR2389V8p0UUl2gsz3PfqDgBc9omSz83WcApWoy AyOSF8AVSPY2uARvJV6APRK/I87JC+qCbavynz1muKROrzJK3n4wtB3wcKzn+w8k selknTLX709ME8aAlJv/59MZC2uHD1+rpBhOhfJzNHu2J8sujbizCWD7INJOjoOa B4ZiEhlcKNF6kYRhOgrFB+m6G6fe6rvQ8sz2N3+BsRXH/sj1cwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOXIM2bxAAg0gKG059VPvjICu8SQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZWZk NzUyOS0zOGIxLTQ3MmMtOWQ1Yi1kODczODJkMDg4YTAvMmZlYjBjZWMtMjQ3MC0z YzFiLWIzYmUtNTdlOTY3NTM4ZmQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2VmZDc1MjktMzhiMS00NzJjLTlk NWItZDg3MzgyZDA4OGEwLzNlZmQ3NTI5LTM4YjEtNDcyYy05ZDViLWQ4NzM4MmQw ODhhMC5jcmwwHwYDVR0jBBgwFoAUW4MicpSIqXhZmzrb3eBIKYdqlAcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZWZkNzUyOS0zOGIxLTQ3MmMtOWQ1Yi1kODcz ODJkMDg4YTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF1i8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADb7FjQ7ADt3VUWd0WTVN+k9GtyCZnGPUSkaj4EqNgMvHtb13+jH8ptJ OxcHE4vpaun9HRPoLS6wODLN1CK1XfZMeDIPKwtZD3xf8o0yycxQSV9zH0HyBzEd kLB7X+igRKvtJVw0rO77YtZSrCrwoVpLfuCiP7Tk+GqmVblRarAbVLTlDYRugGVG Z9lRZv/DIvvj0jch/PCJq5X4bH54cN7XZu9eKPsvwf9HYFOlj7L+R6UK+CQidVLM CXlMn18XcWdvAtzL/VruGqV5kxT2vGzTR5tPm7nCHYO+ycMgJwsDQOKkcNK2HxZt kiYxUm78tv0IjsGeRsb5+Te8UARU+O4= -----END CERTIFICATE-----Generated at Fri Sep 19 11:01:16 2025 by rpki-client