$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/c86fcb92-e2ac-30f3-b3f9-6ebfe86ddd86.roa File: c86fcb92-e2ac-30f3-b3f9-6ebfe86ddd86.roa (raw, json) Hash identifier: pxnnNq6UZDddvxCwW8aZecbzL+cRvEjturZUqD4QGe8= Subject key identifier: 8C:AB:4A:89:CC:73:83:B8:4C:78:DD:7F:8C:43:18:A9:5A:8A:78:96 Certificate issuer: /CN=b8a29c46-e0f1-4edc-988a-9420affbc339 Certificate serial: 010D0C9F43285849CBCFA38D778BDE6CDB9E6680 Authority key identifier: AE:5B:91:0A:1A:F7:6A:0A:F9:C8:61:BA:B9:2C:80:AE:41:E0:79:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/c86fcb92-e2ac-30f3-b3f9-6ebfe86ddd86.roa Signing time: Fri 09 May 2025 13:01:00 +0000 ROA not before: Fri 09 May 2025 13:01:00 +0000 ROA not after: Thu 07 Aug 2025 13:01:00 +0000 asID: 205627 IP address blocks: 170.2.248.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/b8a29c46-e0f1-4edc-988a-9420affbc339.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/b8a29c46-e0f1-4edc-988a-9420affbc339.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cb:cf:a3:8d:77:8b:de:6c:db:9e:66:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8a29c46-e0f1-4edc-988a-9420affbc339 Validity Not Before: May 9 13:01:00 2025 GMT Not After : Aug 7 13:01:00 2025 GMT Subject: CN=df8be931-c8c1-4582-afc9-daaa7129697e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ea:96:5b:09:04:24:2f:f9:77:4f:d9:8c:69: a2:33:69:b2:7a:97:2a:bf:36:36:37:81:51:1c:f7: 17:64:47:07:26:2d:a2:74:d5:7b:4b:2b:ec:9d:5a: 07:49:2a:5d:9d:cc:5a:37:74:c8:be:93:2a:03:5a: 7f:3f:39:08:e8:24:be:cf:76:e5:b1:97:d6:b8:05: a1:99:52:6a:a1:51:d0:69:fc:7d:04:b3:38:9d:86: e4:15:cc:8a:75:d0:86:b9:91:6b:d6:be:9a:ac:44: f5:d2:1a:e7:b1:cb:32:97:92:a4:65:7b:16:b6:79: b4:2f:b9:0c:0f:59:a6:1c:57:2e:05:82:19:ff:3d: 7b:66:60:18:be:72:9f:5c:84:b2:ef:0d:89:ea:ba: 7b:78:21:b4:9c:be:64:23:cb:0d:db:27:46:38:6c: 76:93:a5:52:21:66:d9:b8:71:b2:7f:d2:0a:de:68: f1:a5:96:4d:af:34:2f:ba:54:19:86:e8:07:ef:cc: 57:99:47:ac:78:50:aa:fb:79:8c:e3:84:55:48:21: 0f:e5:aa:69:2d:53:9b:fb:44:49:af:39:51:44:c0: 42:10:53:b5:fd:db:b6:b7:c9:64:3d:57:a6:70:42: 50:70:bc:f4:a3:00:d3:8b:78:5d:79:16:ce:61:b4: 8f:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:AB:4A:89:CC:73:83:B8:4C:78:DD:7F:8C:43:18:A9:5A:8A:78:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/c86fcb92-e2ac-30f3-b3f9-6ebfe86ddd86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/b8a29c46-e0f1-4edc-988a-9420affbc339.crl X509v3 Authority Key Identifier: keyid:AE:5B:91:0A:1A:F7:6A:0A:F9:C8:61:BA:B9:2C:80:AE:41:E0:79:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339.cer sbgp-ipAddrBlock: critical IPv4: 170.2.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:4b:17:74:83:34:f8:bc:bc:0f:5c:67:f0:59:1c:90:78:da: 1f:9a:1e:7f:00:ff:64:8e:03:be:ef:72:2a:a9:32:ea:c4:80: c9:d1:ac:c4:57:f3:a1:81:c3:c3:be:6b:2d:af:ab:4d:78:be: c3:bf:8b:c8:94:46:06:c2:b9:fa:09:0b:fc:fc:a2:27:b0:19: 9c:b2:a0:1b:f1:79:47:24:7a:fe:f6:a5:d3:a6:b3:b5:02:b1: 15:c6:d3:2f:92:c0:85:1c:3f:68:94:97:ea:5a:1f:5d:ad:12: ef:c5:01:4b:d3:f4:da:0b:0d:9e:12:13:39:f2:f7:cf:dd:c5: b3:f8:59:e9:6a:a8:b5:83:7d:74:40:4e:8f:42:f4:ba:8e:99: bb:06:ee:93:57:d3:a0:44:59:83:c2:c6:e3:4d:63:29:67:40: dd:72:36:a7:f6:3f:56:0b:47:69:c4:a9:1d:e1:1b:c8:73:aa: fc:ce:6a:71:97:1c:8f:3f:54:64:5c:c3:b8:17:7f:16:04:6a: f0:8a:3c:4e:0a:2a:5a:e3:01:a2:d5:ba:29:1f:1f:12:0c:26: 78:52:1e:98:04:fe:3c:e5:38:5f:28:6a:ef:d8:85:ec:2c:2f: a4:de:a2:bb:12:6c:75:17:74:dd:cf:d3:20:98:c6:fb:32:c1: ca:68:df:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnLz6ONd4vebNueZoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhhMjljNDYtZTBmMS00ZWRjLTk4OGEtOTQyMGFmZmJj MzM5MB4XDTI1MDUwOTEzMDEwMFoXDTI1MDgwNzEzMDEwMFowLzEtMCsGA1UEAxMk ZGY4YmU5MzEtYzhjMS00NTgyLWFmYzktZGFhYTcxMjk2OTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOqWWwkEJC/5d0/ZjGmiM2myepcqvzY2N4FR HPcXZEcHJi2idNV7SyvsnVoHSSpdncxaN3TIvpMqA1p/PzkI6CS+z3blsZfWuAWh mVJqoVHQafx9BLM4nYbkFcyKddCGuZFr1r6arET10hrnscsyl5KkZXsWtnm0L7kM D1mmHFcuBYIZ/z17ZmAYvnKfXISy7w2J6rp7eCG0nL5kI8sN2ydGOGx2k6VSIWbZ uHGyf9IK3mjxpZZNrzQvulQZhugH78xXmUeseFCq+3mM44RVSCEP5appLVOb+0RJ rzlRRMBCEFO1/du2t8lkPVemcEJQcLz0owDTi3hdeRbOYbSPcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIyrSonMc4O4THjdf4xDGKlainiWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iOGEy OWM0Ni1lMGYxLTRlZGMtOTg4YS05NDIwYWZmYmMzMzkvYzg2ZmNiOTItZTJhYy0z MGYzLWIzZjktNmViZmU4NmRkZDg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYjhhMjljNDYtZTBmMS00ZWRjLTk4 OGEtOTQyMGFmZmJjMzM5L2I4YTI5YzQ2LWUwZjEtNGVkYy05ODhhLTk0MjBhZmZi YzMzOS5jcmwwHwYDVR0jBBgwFoAUrluRChr3agr5yGG6uSyArkHgeRQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iOGEyOWM0Ni1lMGYxLTRlZGMtOTg4YS05NDIw YWZmYmMzMzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqgL4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABNLF3SDNPi8vA9cZ/BZHJB42h+aHn8A/2SOA77vciqpMurEgMnRrMRX 86GBw8O+ay2vq014vsO/i8iURgbCufoJC/z8oiewGZyyoBvxeUckev72pdOms7UC sRXG0y+SwIUcP2iUl+paH12tEu/FAUvT9NoLDZ4SEzny98/dxbP4WelqqLWDfXRA To9C9LqOmbsG7pNX06BEWYPCxuNNYylnQN1yNqf2P1YLR2nEqR3hG8hzqvzOanGX HI8/VGRcw7gXfxYEavCKPE4KKlrjAaLVuikfHxIMJnhSHpgE/jzlOF8oau/Yhews L6TeorsSbHUXdN3P0yCYxvsywcpo3x4= -----END CERTIFICATE-----Generated at Sat May 10 03:40:07 2025 by rpki-client