$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/10192187-defa-3548-b6c6-237adcf28f84.roa File: 10192187-defa-3548-b6c6-237adcf28f84.roa (raw, json) Hash identifier: c41tr2O8TWxRSrldTGloSm00WkWhUIWHKCgeDkZrcbE= Subject key identifier: C5:8C:85:01:E5:20:D8:4F:A9:22:83:E0:B8:65:1A:90:A4:A0:60:DD Certificate issuer: /CN=b8a29c46-e0f1-4edc-988a-9420affbc339 Certificate serial: 010D0C9F4328584A90A0B01C1054C3B7C6EDBA00 Authority key identifier: AE:5B:91:0A:1A:F7:6A:0A:F9:C8:61:BA:B9:2C:80:AE:41:E0:79:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/10192187-defa-3548-b6c6-237adcf28f84.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 205627 IP address blocks: 170.2.128.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/b8a29c46-e0f1-4edc-988a-9420affbc339.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/b8a29c46-e0f1-4edc-988a-9420affbc339.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:b0:1c:10:54:c3:b7:c6:ed:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8a29c46-e0f1-4edc-988a-9420affbc339 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=6c564669-536e-4717-9af6-d3d576ef398c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:75:7b:18:d2:87:9a:56:46:67:80:02:f8:cd: 13:5c:76:d5:f0:a2:0a:63:a5:62:d2:90:37:44:10: 31:6f:61:15:4a:50:ec:a5:e3:50:1f:15:b8:e0:69: 23:83:41:15:25:61:28:38:57:14:fe:c0:35:98:2c: 84:4a:9b:1f:43:dc:97:c4:d3:01:2a:f1:f0:95:2d: 85:d8:68:be:bc:da:f5:f4:c0:f5:cb:74:3d:d1:27: 5c:6b:e2:e1:da:54:22:91:49:5d:d6:bc:58:78:4f: d9:7f:00:e1:f2:ae:db:bd:9f:4c:5d:c4:ad:1c:8b: 94:1f:0f:f0:54:97:e9:9f:44:3b:f4:c5:dd:a2:ae: 56:a6:49:f5:f4:03:5d:54:26:0c:53:9f:d3:e3:8b: 62:d3:fb:3d:18:8f:0e:04:a3:c2:fe:6a:7b:41:18: 31:e4:ae:3b:96:ce:80:4f:3e:52:34:4d:29:7b:5a: fe:cd:ae:f1:5d:dc:59:f4:7a:e8:ca:b8:cc:78:e3: 34:ed:03:26:68:6d:b2:52:91:8c:fa:c1:03:96:50: 26:6b:00:dc:49:cf:cb:a0:56:b6:1a:30:d8:78:b9: a4:5a:46:93:6a:76:f6:14:8a:0e:e6:02:1a:5d:10: 9b:c7:47:78:cb:98:de:b8:71:f2:9c:3e:84:fd:ad: f1:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:8C:85:01:E5:20:D8:4F:A9:22:83:E0:B8:65:1A:90:A4:A0:60:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/10192187-defa-3548-b6c6-237adcf28f84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/b8a29c46-e0f1-4edc-988a-9420affbc339.crl X509v3 Authority Key Identifier: keyid:AE:5B:91:0A:1A:F7:6A:0A:F9:C8:61:BA:B9:2C:80:AE:41:E0:79:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339.cer sbgp-ipAddrBlock: critical IPv4: 170.2.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:3b:35:aa:61:69:e8:94:df:c6:e0:59:64:3d:bb:6c:d2:42: c3:91:03:5e:2a:c1:31:3a:0c:d3:41:50:24:45:16:ec:2a:36: 20:21:c3:e0:10:c9:12:41:ba:fc:0f:b3:f9:57:ad:01:90:94: 7b:ff:1a:49:60:a3:ce:61:40:07:72:d4:51:9a:c0:89:cf:f2: f7:66:42:75:26:2d:94:cd:71:be:6a:a7:0c:9a:46:75:05:46: 32:a2:3c:59:83:08:ce:1d:67:22:ea:f7:10:f8:5c:cd:90:b5: 68:77:e9:85:47:cb:11:25:96:dd:8e:9d:d5:74:21:f1:f4:bf: fc:06:d6:a3:bb:e1:25:68:f8:e4:6c:ff:43:e4:10:84:9d:71: ba:8b:d7:c1:bb:cf:31:84:46:e2:85:05:df:9a:82:94:6c:ae: 92:2f:5f:e2:1a:39:92:f1:7a:56:14:7b:38:09:cc:a0:84:65: b8:26:0e:a3:ee:f8:13:30:0d:84:ee:54:f3:a1:25:e0:3b:ed: 78:89:8b:d0:40:98:f7:c6:3d:61:84:2f:68:a6:db:f5:22:46: f2:65:b7:58:39:b6:b5:f9:e2:55:14:f3:5b:e6:de:bf:9e:7e: 2c:cb:19:f2:9d:2c:15:b8:73:d0:da:1e:0a:b5:19:cc:e6:43: 4f:da:f5:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoLAcEFTDt8btugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhhMjljNDYtZTBmMS00ZWRjLTk4OGEtOTQyMGFmZmJj MzM5MB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk NmM1NjQ2NjktNTM2ZS00NzE3LTlhZjYtZDNkNTc2ZWYzOThjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXV7GNKHmlZGZ4AC+M0TXHbV8KIKY6Vi0pA3 RBAxb2EVSlDspeNQHxW44Gkjg0EVJWEoOFcU/sA1mCyESpsfQ9yXxNMBKvHwlS2F 2Gi+vNr19MD1y3Q90Sdca+Lh2lQikUld1rxYeE/ZfwDh8q7bvZ9MXcStHIuUHw/w VJfpn0Q79MXdoq5Wpkn19ANdVCYMU5/T44ti0/s9GI8OBKPC/mp7QRgx5K47ls6A Tz5SNE0pe1r+za7xXdxZ9HroyrjMeOM07QMmaG2yUpGM+sEDllAmawDcSc/LoFa2 GjDYeLmkWkaTanb2FIoO5gIaXRCbx0d4y5jeuHHynD6E/a3xpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMWMhQHlINhPqSKD4LhlGpCkoGDdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iOGEy OWM0Ni1lMGYxLTRlZGMtOTg4YS05NDIwYWZmYmMzMzkvMTAxOTIxODctZGVmYS0z NTQ4LWI2YzYtMjM3YWRjZjI4Zjg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYjhhMjljNDYtZTBmMS00ZWRjLTk4 OGEtOTQyMGFmZmJjMzM5L2I4YTI5YzQ2LWUwZjEtNGVkYy05ODhhLTk0MjBhZmZi YzMzOS5jcmwwHwYDVR0jBBgwFoAUrluRChr3agr5yGG6uSyArkHgeRQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iOGEyOWM0Ni1lMGYxLTRlZGMtOTg4YS05NDIw YWZmYmMzMzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqgKAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAA7NaphaeiU38bgWWQ9u2zSQsORA14qwTE6DNNBUCRFFuwqNiAhw+AQ yRJBuvwPs/lXrQGQlHv/Gklgo85hQAdy1FGawInP8vdmQnUmLZTNcb5qpwyaRnUF RjKiPFmDCM4dZyLq9xD4XM2QtWh36YVHyxEllt2OndV0IfH0v/wG1qO74SVo+ORs /0PkEISdcbqL18G7zzGERuKFBd+agpRsrpIvX+IaOZLxelYUezgJzKCEZbgmDqPu +BMwDYTuVPOhJeA77XiJi9BAmPfGPWGEL2im2/UiRvJlt1g5trX54lUU81vm3r+e fizLGfKdLBW4c9DaHgq1GczmQ0/a9Zc= -----END CERTIFICATE-----Generated at Sat Aug 9 01:04:31 2025 by rpki-client