$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/ae2d7c57-9385-33b3-8fce-32b111842f86.roa File: ae2d7c57-9385-33b3-8fce-32b111842f86.roa (raw, json) Hash identifier: uSOzJPWJv92Xv2GCCz8hfcVXLgzUh/ORFuD+zRS8C7Y= Subject key identifier: DE:80:D9:DC:33:E4:67:19:89:CD:8E:2E:8D:4D:7D:F0:65:9F:09:61 Certificate issuer: /CN=b8a29c46-e0f1-4edc-988a-9420affbc339 Certificate serial: 010D0C9F4328584A4E3C77A8BD76842AC213D400 Authority key identifier: AE:5B:91:0A:1A:F7:6A:0A:F9:C8:61:BA:B9:2C:80:AE:41:E0:79:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/ae2d7c57-9385-33b3-8fce-32b111842f86.roa Signing time: Wed 25 Jun 2025 06:15:39 +0000 ROA not before: Wed 25 Jun 2025 06:15:39 +0000 ROA not after: Tue 23 Sep 2025 06:15:39 +0000 asID: 2386 IP address blocks: 170.2.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/b8a29c46-e0f1-4edc-988a-9420affbc339.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/b8a29c46-e0f1-4edc-988a-9420affbc339.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4e:3c:77:a8:bd:76:84:2a:c2:13:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8a29c46-e0f1-4edc-988a-9420affbc339 Validity Not Before: Jun 25 06:15:39 2025 GMT Not After : Sep 23 06:15:39 2025 GMT Subject: CN=f6dba11f-da6b-4c29-b0e7-056bbd28f341 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:34:1a:75:1c:5a:e6:c2:dc:c1:e6:9c:01:5c: c2:33:72:16:c4:9e:06:12:06:ca:0c:a9:26:f7:2d: bf:26:8d:32:70:45:98:35:6f:05:38:0f:4e:99:65: a5:eb:98:e0:4b:a8:5b:56:7b:24:43:42:97:bf:35: 28:56:a4:80:71:a3:92:b4:a5:b5:85:4e:e8:46:ae: 91:b8:de:ac:f9:b2:e7:df:74:39:14:cb:ee:b4:29: 44:8d:2d:df:39:e2:9f:30:4e:c1:eb:d3:bf:d4:a8: fa:4a:b5:3c:23:c1:96:1d:66:44:0b:23:c6:f6:e5: ab:27:6f:3f:18:77:16:8a:62:50:37:7e:b4:fd:78: f5:a5:a1:ec:b1:c4:81:1f:39:45:62:5f:f4:ed:e6: 12:b8:9d:e3:31:43:89:45:69:6b:11:38:6d:af:01: 5d:2a:8b:39:e9:73:cd:bf:22:db:b9:35:18:56:cb: 39:ea:6d:b4:9c:56:35:da:42:53:34:c9:d3:26:a2: c1:d1:32:99:43:e4:87:41:7e:ce:3d:d0:99:3a:e3: 10:c6:c6:35:07:7f:1f:8f:3c:bc:e1:bb:bb:c8:4e: f6:f1:34:8f:e4:7c:bc:9d:32:bc:ff:29:de:63:e7: d9:56:80:19:b4:4a:2b:80:30:fd:77:d7:30:8d:e8: 4c:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:80:D9:DC:33:E4:67:19:89:CD:8E:2E:8D:4D:7D:F0:65:9F:09:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/ae2d7c57-9385-33b3-8fce-32b111842f86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/b8a29c46-e0f1-4edc-988a-9420affbc339.crl X509v3 Authority Key Identifier: keyid:AE:5B:91:0A:1A:F7:6A:0A:F9:C8:61:BA:B9:2C:80:AE:41:E0:79:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339.cer sbgp-ipAddrBlock: critical IPv4: 170.2.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:f5:10:89:29:75:f4:e9:c9:15:e8:9e:46:46:b4:4f:58:84: 4a:8b:c0:4f:9a:4e:86:91:04:86:b4:be:74:6e:bf:6a:1c:6a: 58:f4:15:5a:27:e3:4c:2c:fb:de:a7:a0:b3:9d:ea:60:b8:96: 03:df:d0:1b:71:1a:91:b0:fe:3a:72:9f:7d:8b:7d:17:4e:bb: df:c8:d6:32:82:0a:d6:f3:d2:8b:9a:0a:2f:db:74:48:7d:2c: 97:d0:f2:32:c4:cd:69:72:48:5d:cb:b1:1e:5c:50:7c:78:82: 7a:b7:95:9c:18:29:ac:a2:d4:02:c7:1b:df:5b:3e:d6:4d:78: 0e:b5:04:f5:44:e4:6b:56:09:36:04:82:8e:cc:ed:c1:af:75: 0e:f8:d5:da:98:e3:1f:4a:65:5a:46:77:ae:ff:16:9e:dd:1e: c5:9e:b5:ae:30:06:d1:14:7e:d0:e2:64:ab:aa:2c:86:0a:5a: 5f:65:c2:2e:05:4f:e7:27:66:ae:c2:a7:00:84:25:db:7c:ac: de:d3:f3:ae:60:21:be:ba:ce:67:0f:b8:39:65:26:46:52:26: 98:31:c1:db:23:05:b7:18:56:17:23:a2:b8:51:d2:e2:8f:3d: 93:42:2f:75:b1:1e:00:c7:99:e7:52:01:c6:d5:5c:c7:c3:eb: 8f:b1:2a:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpOPHeovXaEKsIT1AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhhMjljNDYtZTBmMS00ZWRjLTk4OGEtOTQyMGFmZmJj MzM5MB4XDTI1MDYyNTA2MTUzOVoXDTI1MDkyMzA2MTUzOVowLzEtMCsGA1UEAxMk ZjZkYmExMWYtZGE2Yi00YzI5LWIwZTctMDU2YmJkMjhmMzQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDQadRxa5sLcweacAVzCM3IWxJ4GEgbKDKkm 9y2/Jo0ycEWYNW8FOA9OmWWl65jgS6hbVnskQ0KXvzUoVqSAcaOStKW1hU7oRq6R uN6s+bLn33Q5FMvutClEjS3fOeKfME7B69O/1Kj6SrU8I8GWHWZECyPG9uWrJ28/ GHcWimJQN360/Xj1paHsscSBHzlFYl/07eYSuJ3jMUOJRWlrEThtrwFdKos56XPN vyLbuTUYVss56m20nFY12kJTNMnTJqLB0TKZQ+SHQX7OPdCZOuMQxsY1B38fjzy8 4bu7yE728TSP5Hy8nTK8/yneY+fZVoAZtEorgDD9d9cwjehMXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN6A2dwz5GcZic2OLo1NffBlnwlhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iOGEy OWM0Ni1lMGYxLTRlZGMtOTg4YS05NDIwYWZmYmMzMzkvYWUyZDdjNTctOTM4NS0z M2IzLThmY2UtMzJiMTExODQyZjg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYjhhMjljNDYtZTBmMS00ZWRjLTk4 OGEtOTQyMGFmZmJjMzM5L2I4YTI5YzQ2LWUwZjEtNGVkYy05ODhhLTk0MjBhZmZi YzMzOS5jcmwwHwYDVR0jBBgwFoAUrluRChr3agr5yGG6uSyArkHgeRQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iOGEyOWM0Ni1lMGYxLTRlZGMtOTg4YS05NDIw YWZmYmMzMzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqgJ+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH/1EIkpdfTpyRXonkZGtE9YhEqLwE+aToaRBIa0vnRuv2ocalj0FVon 40ws+96noLOd6mC4lgPf0BtxGpGw/jpyn32LfRdOu9/I1jKCCtbz0ouaCi/bdEh9 LJfQ8jLEzWlySF3LsR5cUHx4gnq3lZwYKayi1ALHG99bPtZNeA61BPVE5GtWCTYE go7M7cGvdQ741dqY4x9KZVpGd67/Fp7dHsWeta4wBtEUftDiZKuqLIYKWl9lwi4F T+cnZq7CpwCEJdt8rN7T865gIb66zmcPuDllJkZSJpgxwdsjBbcYVhcjorhR0uKP PZNCL3WxHgDHmedSAcbVXMfD64+xKjI= -----END CERTIFICATE-----Generated at Sun Jun 29 23:42:24 2025 by rpki-client