$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/2a9ebc3f-0d63-3bbd-9abf-1df4b0be82f8.roa File: 2a9ebc3f-0d63-3bbd-9abf-1df4b0be82f8.roa (raw, json) Hash identifier: YTZ/ca4wuLdBFGLEOi+Ljl2s8UP3K6lexwZQdMNgKiY= Subject key identifier: 57:EA:BF:BB:58:18:EB:2A:E4:BB:DA:61:35:1C:8B:52:77:D3:F0:77 Certificate issuer: /CN=3efd7529-38b1-472c-9d5b-d87382d088a0 Certificate serial: 010D0C9F432858494B641729CACD5B771D8E6A00 Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/2a9ebc3f-0d63-3bbd-9abf-1df4b0be82f8.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 394285 IP address blocks: 23.88.180.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:17:29:ca:cd:5b:77:1d:8e:6a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=ba06f38c-2413-4576-ba32-97c0348a50e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:76:02:49:c1:aa:97:55:6e:f8:d8:d7:38:25: 58:f7:c9:07:87:1a:73:20:30:73:be:91:37:3f:32: e3:4e:b7:93:92:fd:a6:59:bf:f9:a7:b9:51:91:3d: e9:06:ba:36:73:61:74:7c:98:a4:ff:d7:a6:12:4a: 61:50:e4:ee:46:06:22:29:67:f5:68:fa:0b:b0:9d: 2f:0a:02:59:66:f3:b5:98:a6:c7:06:35:9b:e4:2d: 1e:2a:23:6d:8e:f1:1f:3d:54:56:f2:c7:e3:ad:33: 2e:97:cf:3a:6b:62:a4:86:56:6f:4a:4e:33:d6:40: f1:b0:33:04:16:3d:0c:9c:9b:74:44:ae:34:20:ad: e2:ae:1d:66:4a:b4:44:2b:c3:7b:86:72:b4:0a:13: 4c:56:af:c9:90:ba:cc:b3:11:50:b4:7e:f1:4b:e3: 06:13:b5:c8:54:07:58:c8:53:53:03:cd:cc:23:26: 31:82:c4:59:cb:bd:f7:bf:b6:3d:08:76:80:fd:f1: f7:3e:e3:76:0f:d5:c6:9a:60:80:4c:70:c8:ac:4c: 0f:a6:fa:ff:96:bf:f4:86:79:01:56:fa:2e:ee:f7: 67:d4:a2:99:82:27:98:a6:73:ac:f3:02:7e:89:8d: 50:b2:7e:55:4c:e5:63:9d:f1:9f:3e:5e:9d:5f:91: 87:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:EA:BF:BB:58:18:EB:2A:E4:BB:DA:61:35:1C:8B:52:77:D3:F0:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/2a9ebc3f-0d63-3bbd-9abf-1df4b0be82f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl X509v3 Authority Key Identifier: keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer sbgp-ipAddrBlock: critical IPv4: 23.88.180.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:0e:47:9f:06:37:f6:25:35:17:55:5e:17:b8:f9:ae:22:93: e0:cd:38:2c:f0:5a:1f:a0:bc:ea:ce:00:9d:ec:96:9f:68:97: 31:ab:aa:98:d5:dc:92:98:29:52:0b:60:d9:17:23:51:ec:4d: e3:b3:f4:b2:b3:e1:11:b8:09:c6:b4:03:0b:16:23:35:8a:f4: 31:f4:b4:de:9a:b3:9b:7c:47:f9:3d:0c:61:82:27:42:a9:74: be:bf:c8:97:23:e1:e0:7d:3c:93:cb:41:19:7a:51:d6:57:0e: 7a:05:f8:4f:4a:e8:7a:1f:e4:21:75:af:cd:de:34:f7:17:18: 0d:66:2e:54:2e:cf:07:64:a0:c6:85:0f:55:e3:b5:e4:4f:dc: ee:ba:2a:fb:82:c3:60:db:7a:40:ec:ae:69:91:59:80:11:a9: 38:a4:c8:08:a6:6c:83:6c:77:08:58:8d:0c:97:03:10:22:a0: 65:32:91:61:98:03:c4:f0:f2:77:77:30:5a:9d:00:ab:93:40: 4f:f0:91:44:34:b3:99:56:60:78:76:30:bf:10:e1:f3:db:19: 7f:4e:2d:ef:82:ff:cf:5e:73:bf:0c:5f:2f:a1:ba:1c:22:c8: 1e:f1:1f:04:b4:74:a8:c0:ee:35:af:74:1a:c7:2b:4a:42:26: d5:2d:d9:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZBcpys1bdx2OagAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2VmZDc1MjktMzhiMS00NzJjLTlkNWItZDg3MzgyZDA4 OGEwMB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk YmEwNmYzOGMtMjQxMy00NTc2LWJhMzItOTdjMDM0OGE1MGU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHYCScGql1Vu+NjXOCVY98kHhxpzIDBzvpE3 PzLjTreTkv2mWb/5p7lRkT3pBro2c2F0fJik/9emEkphUOTuRgYiKWf1aPoLsJ0v CgJZZvO1mKbHBjWb5C0eKiNtjvEfPVRW8sfjrTMul886a2KkhlZvSk4z1kDxsDME Fj0MnJt0RK40IK3irh1mSrREK8N7hnK0ChNMVq/JkLrMsxFQtH7xS+MGE7XIVAdY yFNTA83MIyYxgsRZy733v7Y9CHaA/fH3PuN2D9XGmmCATHDIrEwPpvr/lr/0hnkB Vvou7vdn1KKZgieYpnOs8wJ+iY1Qsn5VTOVjnfGfPl6dX5GHOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFfqv7tYGOsq5LvaYTUci1J30/B3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZWZk NzUyOS0zOGIxLTQ3MmMtOWQ1Yi1kODczODJkMDg4YTAvMmE5ZWJjM2YtMGQ2My0z YmJkLTlhYmYtMWRmNGIwYmU4MmY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2VmZDc1MjktMzhiMS00NzJjLTlk NWItZDg3MzgyZDA4OGEwLzNlZmQ3NTI5LTM4YjEtNDcyYy05ZDViLWQ4NzM4MmQw ODhhMC5jcmwwHwYDVR0jBBgwFoAUW4MicpSIqXhZmzrb3eBIKYdqlAcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZWZkNzUyOS0zOGIxLTQ3MmMtOWQ1Yi1kODcz ODJkMDg4YTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF1i0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAIOR58GN/YlNRdVXhe4+a4ik+DNOCzwWh+gvOrOAJ3slp9olzGrqpjV 3JKYKVILYNkXI1HsTeOz9LKz4RG4Cca0AwsWIzWK9DH0tN6as5t8R/k9DGGCJ0Kp dL6/yJcj4eB9PJPLQRl6UdZXDnoF+E9K6Hof5CF1r83eNPcXGA1mLlQuzwdkoMaF D1XjteRP3O66KvuCw2DbekDsrmmRWYARqTikyAimbINsdwhYjQyXAxAioGUykWGY A8Tw8nd3MFqdAKuTQE/wkUQ0s5lWYHh2ML8Q4fPbGX9OLe+C/89ec78MXy+huhwi yB7xHwS0dKjA7jWvdBrHK0pCJtUt2VI= -----END CERTIFICATE-----Generated at Tue May 6 12:33:52 2025 by rpki-client