$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/20d440b2-c2ab-3b80-aaa4-3919c5abc5fa.roa File: 20d440b2-c2ab-3b80-aaa4-3919c5abc5fa.roa (raw, json) Hash identifier: 2rM+u11WDwh+vpSKkHqFAr2JxMIS+sMBULQ8iEzfOWE= Subject key identifier: 94:9F:20:B4:E4:DB:D1:AD:96:35:18:3E:20:FE:AD:36:D3:6E:DA:C8 Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Certificate serial: 010D0C9F4328584A23C00214C83B64CF098E09E0 Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/20d440b2-c2ab-3b80-aaa4-3919c5abc5fa.roa Signing time: Tue 10 Jun 2025 01:00:50 +0000 ROA not before: Tue 10 Jun 2025 01:00:50 +0000 ROA not after: Mon 08 Sep 2025 01:00:50 +0000 asID: 14061 IP address blocks: 170.64.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:23:c0:02:14:c8:3b:64:cf:09:8e:09:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Validity Not Before: Jun 10 01:00:50 2025 GMT Not After : Sep 8 01:00:50 2025 GMT Subject: CN=9c7ad620-68d6-443c-ab4c-3c12f051497d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d2:b9:15:27:c4:b2:4a:6f:ee:88:3e:57:3a: 4d:55:29:98:9f:64:99:46:63:97:90:33:7d:4a:2b: 51:7d:79:af:ad:c7:9e:d9:2c:90:2f:fc:e4:a3:eb: 94:87:f9:62:16:b7:e9:0d:aa:8d:52:86:4c:5e:a2: 47:f8:b8:d5:17:fd:56:2c:94:97:9a:9a:ce:ab:c4: c3:58:ae:b5:cc:54:d4:c7:ac:91:81:0e:47:e8:d5: ba:46:ab:e6:72:c5:d0:8a:1a:42:3b:3c:4c:57:0c: ba:64:2f:25:34:c1:51:ec:5c:dd:98:8c:15:dc:20: 5d:6f:f6:f7:50:9d:6d:40:ae:37:5d:8b:48:b2:fd: f0:d4:e5:06:6a:55:36:9e:69:05:c2:8c:64:ca:3d: ce:0d:f1:84:ca:1c:a5:91:d0:aa:76:b3:6d:09:07: 60:6c:2c:0d:65:0c:96:60:a0:20:de:d7:d7:e3:26: fb:8a:b6:1f:d3:9f:7b:03:47:d7:51:9a:27:1e:a4: 77:dc:b0:d0:10:c1:87:07:4c:87:9f:3b:68:c3:81: 51:69:6d:3f:20:fd:14:67:a7:65:d5:0e:20:c8:c8: 25:4c:e1:43:90:d9:b0:ab:1b:39:33:c3:9a:39:3d: 02:e7:3e:ad:ca:81:98:83:36:97:ea:a1:35:78:89: ce:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:9F:20:B4:E4:DB:D1:AD:96:35:18:3E:20:FE:AD:36:D3:6E:DA:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/20d440b2-c2ab-3b80-aaa4-3919c5abc5fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl X509v3 Authority Key Identifier: keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer sbgp-ipAddrBlock: critical IPv4: 170.64.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:d4:14:76:c2:08:5e:53:b9:24:88:db:6d:48:f3:2b:36:27: cb:28:f8:06:c0:64:b0:20:f9:0b:70:58:b0:9b:85:0d:82:c7: 40:d7:85:a0:d9:4c:ef:d6:01:fe:03:c3:ef:24:0c:df:a7:27: 2c:72:89:ac:09:ba:03:69:90:8b:6e:8f:b4:83:9a:cd:04:c2: 8b:27:38:27:96:77:60:ad:ed:3e:f4:43:f9:51:17:1f:ac:0c: d9:6c:c6:76:45:e9:ac:3a:a7:5d:8f:cc:fb:16:5c:58:43:5e: fe:bc:2f:76:88:83:f6:57:2c:f2:9b:d8:b9:b1:ef:ee:2f:dc: 00:80:8d:73:4e:90:9c:50:9f:03:2a:45:60:1d:7c:e8:71:05: 60:f5:d1:b4:d5:4b:90:c7:a0:40:60:1b:f5:71:8e:44:05:7d: ad:3d:7e:45:5d:29:46:15:da:1a:c0:a8:7b:98:dc:15:2d:5c: 17:9b:ef:77:0c:06:41:52:c7:ed:60:74:50:20:c6:4f:c3:36: cf:59:32:67:34:b1:98:bc:19:85:04:c6:c0:9d:d6:53:ab:95: 0c:92:38:fa:32:4c:d9:54:8e:38:a4:77:e2:f7:de:31:d9:d6: 3c:8b:4f:7e:2b:8a:f5:0b:11:7e:da:e1:85:9b:81:49:d8:d9: ca:13:23:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEojwAIUyDtkzwmOCeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy Njk4MB4XDTI1MDYxMDAxMDA1MFoXDTI1MDkwODAxMDA1MFowLzEtMCsGA1UEAxMk OWM3YWQ2MjAtNjhkNi00NDNjLWFiNGMtM2MxMmYwNTE0OTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNK5FSfEskpv7og+VzpNVSmYn2SZRmOXkDN9 SitRfXmvrcee2SyQL/zko+uUh/liFrfpDaqNUoZMXqJH+LjVF/1WLJSXmprOq8TD WK61zFTUx6yRgQ5H6NW6RqvmcsXQihpCOzxMVwy6ZC8lNMFR7FzdmIwV3CBdb/b3 UJ1tQK43XYtIsv3w1OUGalU2nmkFwoxkyj3ODfGEyhylkdCqdrNtCQdgbCwNZQyW YKAg3tfX4yb7irYf0597A0fXUZonHqR33LDQEMGHB0yHnztow4FRaW0/IP0UZ6dl 1Q4gyMglTOFDkNmwqxs5M8OaOT0C5z6tyoGYgzaX6qE1eInORQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJSfILTk29GtljUYPiD+rTbTbtrIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4 ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvMjBkNDQwYjItYzJhYi0z YjgwLWFhYTQtMzkxOWM1YWJjNWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3 ZjYyZTI2OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHqkCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACjUFHbCCF5TuSSI221I8ys2J8so+AbAZLAg+QtwWLCbhQ2Cx0DXhaDZ TO/WAf4Dw+8kDN+nJyxyiawJugNpkItuj7SDms0EwosnOCeWd2Ct7T70Q/lRFx+s DNlsxnZF6aw6p12PzPsWXFhDXv68L3aIg/ZXLPKb2Lmx7+4v3ACAjXNOkJxQnwMq RWAdfOhxBWD10bTVS5DHoEBgG/VxjkQFfa09fkVdKUYV2hrAqHuY3BUtXBeb73cM BkFSx+1gdFAgxk/DNs9ZMmc0sZi8GYUExsCd1lOrlQySOPoyTNlUjjikd+L33jHZ 1jyLT34rivULEX7a4YWbgUnY2coTIy4= -----END CERTIFICATE-----Generated at Tue Jul 1 09:37:23 2025 by rpki-client