$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/10192187-defa-3548-b6c6-237adcf28f84.roa File: 10192187-defa-3548-b6c6-237adcf28f84.roa (raw, json) Hash identifier: cP/YzbPTWQCdX/ElduiPadfAbe7O6HpQ3IE1FAoXYcM= Subject key identifier: 71:12:D6:3D:7D:86:45:CC:FA:9B:B3:8D:77:A9:AC:9F:5C:88:B0:A0 Certificate issuer: /CN=b8a29c46-e0f1-4edc-988a-9420affbc339 Certificate serial: 010D0C9F43285849B149EC5761FFBC5734487900 Authority key identifier: AE:5B:91:0A:1A:F7:6A:0A:F9:C8:61:BA:B9:2C:80:AE:41:E0:79:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/10192187-defa-3548-b6c6-237adcf28f84.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 205627 IP address blocks: 170.2.128.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/b8a29c46-e0f1-4edc-988a-9420affbc339.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/b8a29c46-e0f1-4edc-988a-9420affbc339.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:49:ec:57:61:ff:bc:57:34:48:79:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8a29c46-e0f1-4edc-988a-9420affbc339 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=bc832771-442e-4670-b072-c3f84acd64ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:7d:4d:55:8a:ea:40:5c:af:cf:84:6d:02:44: 71:e6:07:59:9b:ba:7b:0d:20:9b:7d:73:71:9c:97: bc:d0:45:14:35:7b:d9:5b:89:16:a1:ae:01:96:1e: e6:4a:8c:1f:2e:07:d6:ff:5f:7a:de:61:d3:15:85: 59:d9:19:fe:f6:f8:23:f6:c1:14:63:43:95:e8:e0: 6a:1b:07:cc:07:6e:c7:e9:72:4a:a3:26:47:68:58: de:ac:e1:d9:39:d7:93:7f:9a:08:a2:f2:f4:c8:92: 27:c9:36:1f:f4:30:4a:b6:af:d6:26:b5:b7:7f:98: c4:b1:22:f2:72:82:d6:b7:b9:02:be:53:9d:9f:fe: 0e:27:9b:a6:fb:49:bf:54:f2:29:f4:5f:82:a1:ea: 61:bc:94:29:60:8d:91:6d:bd:1a:5c:f7:d9:8b:a9: 40:05:38:66:d2:12:f7:f5:d7:9a:c5:34:eb:b4:f7: b6:79:f7:d9:60:61:c2:4a:79:8a:82:b1:1a:7d:22: ac:78:69:43:f1:88:90:83:b5:32:d7:3f:b6:f8:c2: 22:57:76:c8:96:34:ce:25:79:4c:f0:7a:dd:7c:77: 99:3a:6e:f0:19:03:2f:ce:7b:63:1c:c1:e0:4b:60: 98:93:5d:1b:b7:e4:a8:41:f8:d4:90:59:c6:ab:b5: ce:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:12:D6:3D:7D:86:45:CC:FA:9B:B3:8D:77:A9:AC:9F:5C:88:B0:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/10192187-defa-3548-b6c6-237adcf28f84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/b8a29c46-e0f1-4edc-988a-9420affbc339.crl X509v3 Authority Key Identifier: keyid:AE:5B:91:0A:1A:F7:6A:0A:F9:C8:61:BA:B9:2C:80:AE:41:E0:79:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339.cer sbgp-ipAddrBlock: critical IPv4: 170.2.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:82:57:f7:2c:a1:05:c6:17:30:6e:a4:82:74:10:bc:6d:d7: 8a:b0:ee:0c:74:8f:c8:0c:36:82:3d:f2:ba:51:57:e0:36:c0: d0:e9:66:df:a0:95:58:d6:d6:79:4e:e7:7a:1c:c4:38:8d:d7: 08:a2:6d:bd:58:4c:0a:e7:44:1a:26:da:4a:fa:97:6a:c3:79: 47:fd:a7:12:e6:89:11:ce:5d:67:94:57:80:66:2d:0e:52:c4: 68:75:9a:54:2d:fc:1e:91:88:72:33:90:69:b0:6e:39:85:de: 61:45:dc:1b:c8:e6:99:59:7f:f0:4b:2c:91:75:19:97:03:3f: 1e:57:e8:1c:6a:e6:04:69:a0:03:82:62:9b:f5:a7:57:a8:e5: 4c:b2:39:f1:ee:7f:d8:bc:12:fe:15:ff:5e:00:c2:43:ec:03: 84:63:4e:8d:4f:df:07:ea:96:13:6e:7d:45:ad:95:3f:48:ec: f1:97:01:00:ce:86:4b:c1:ba:a7:28:99:8b:8f:b6:e5:63:d9: 93:f5:48:7a:2f:61:8c:71:94:a4:35:e5:17:f2:da:7f:5d:8f: c7:f7:b3:74:a7:ba:77:dd:b0:51:66:71:6c:3a:55:a0:1b:4f: 16:bf:e3:b9:d0:29:b1:e2:b4:8d:72:07:7f:e7:94:4f:8a:e3: dc:5b:3d:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSexXYf+8VzRIeQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhhMjljNDYtZTBmMS00ZWRjLTk4OGEtOTQyMGFmZmJj MzM5MB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk YmM4MzI3NzEtNDQyZS00NjcwLWIwNzItYzNmODRhY2Q2NGZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtX1NVYrqQFyvz4RtAkRx5gdZm7p7DSCbfXNx nJe80EUUNXvZW4kWoa4Blh7mSowfLgfW/1963mHTFYVZ2Rn+9vgj9sEUY0OV6OBq GwfMB27H6XJKoyZHaFjerOHZOdeTf5oIovL0yJInyTYf9DBKtq/WJrW3f5jEsSLy coLWt7kCvlOdn/4OJ5um+0m/VPIp9F+CoephvJQpYI2Rbb0aXPfZi6lABThm0hL3 9deaxTTrtPe2effZYGHCSnmKgrEafSKseGlD8YiQg7Uy1z+2+MIiV3bIljTOJXlM 8HrdfHeZOm7wGQMvzntjHMHgS2CYk10bt+SoQfjUkFnGq7XOGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHES1j19hkXM+puzjXeprJ9ciLCgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iOGEy OWM0Ni1lMGYxLTRlZGMtOTg4YS05NDIwYWZmYmMzMzkvMTAxOTIxODctZGVmYS0z NTQ4LWI2YzYtMjM3YWRjZjI4Zjg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYjhhMjljNDYtZTBmMS00ZWRjLTk4 OGEtOTQyMGFmZmJjMzM5L2I4YTI5YzQ2LWUwZjEtNGVkYy05ODhhLTk0MjBhZmZi YzMzOS5jcmwwHwYDVR0jBBgwFoAUrluRChr3agr5yGG6uSyArkHgeRQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iOGEyOWM0Ni1lMGYxLTRlZGMtOTg4YS05NDIw YWZmYmMzMzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqgKAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF2CV/csoQXGFzBupIJ0ELxt14qw7gx0j8gMNoI98rpRV+A2wNDpZt+g lVjW1nlO53ocxDiN1wiibb1YTArnRBom2kr6l2rDeUf9pxLmiRHOXWeUV4BmLQ5S xGh1mlQt/B6RiHIzkGmwbjmF3mFF3BvI5plZf/BLLJF1GZcDPx5X6Bxq5gRpoAOC Ypv1p1eo5UyyOfHuf9i8Ev4V/14AwkPsA4RjTo1P3wfqlhNufUWtlT9I7PGXAQDO hkvBuqcomYuPtuVj2ZP1SHovYYxxlKQ15Rfy2n9dj8f3s3SnunfdsFFmcWw6VaAb Txa/47nQKbHitI1yB3/nlE+K49xbPf4= -----END CERTIFICATE-----Generated at Sun May 11 18:52:09 2025 by rpki-client