$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/170b8283-1c49-3af2-a654-4d686ca3d3fa.roa File: 170b8283-1c49-3af2-a654-4d686ca3d3fa.roa (raw, json) Hash identifier: IRzZcLjEUMd6Fxf6yq1q+QHVphybHjc0A4RQtvmFPAk= Subject key identifier: 9F:CA:00:8E:9B:24:D7:45:4F:39:A3:19:54:08:BC:98:F1:72:E0:D5 Certificate issuer: /CN=d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1 Certificate serial: 010D0C9F43285849EA8520EFE816155F3F4B1A90 Authority key identifier: 5A:15:4B:45:E3:B1:02:C5:CE:B2:56:2D:B9:0F:CE:3B:E5:C5:75:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/170b8283-1c49-3af2-a654-4d686ca3d3fa.roa Signing time: Tue 20 May 2025 13:01:05 +0000 ROA not before: Tue 20 May 2025 13:01:05 +0000 ROA not after: Mon 18 Aug 2025 13:01:05 +0000 asID: 198949 IP address blocks: 128.135.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ea:85:20:ef:e8:16:15:5f:3f:4b:1a:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1 Validity Not Before: May 20 13:01:05 2025 GMT Not After : Aug 18 13:01:05 2025 GMT Subject: CN=92c8786f-c426-4df5-9cde-b411f8b61706 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:08:ea:4a:13:84:e1:32:da:35:4e:07:97:18: d5:43:48:f4:33:37:9e:cf:d5:71:5a:b2:de:16:bb: 9e:55:52:29:e9:bb:6d:5a:56:11:16:aa:39:72:b2: 5c:25:fe:df:e1:9a:f0:b2:59:b5:b5:55:3c:bb:6c: 48:33:76:84:90:f7:cf:a1:73:ed:04:1a:34:63:33: a8:0a:14:59:77:54:f5:88:ac:e8:6b:1b:e0:a2:ab: 4c:83:92:f5:0c:ee:a5:2c:45:21:42:c5:f0:10:7c: cc:37:1b:08:c4:b3:49:db:ae:d2:da:48:f5:a2:9c: 1f:e3:b5:5a:8c:d5:bb:71:cf:d3:80:f4:71:9c:38: 1a:d8:01:8d:87:45:3c:73:90:b6:d4:bb:7d:30:67: 9e:27:21:12:fc:21:98:0b:b4:a5:de:bd:23:2d:c7: ff:7e:73:8b:01:1b:0d:5b:63:a5:eb:ac:20:fc:bb: 6c:f6:2d:af:c2:32:18:d8:ad:c7:f7:ca:ab:6d:f7: ae:bf:ee:fe:66:ef:24:f7:fb:d8:9d:2f:25:02:4f: 99:d9:2d:f0:9a:cc:ff:3b:11:53:52:23:a0:7a:f0: ff:24:74:d8:04:fd:08:f2:41:57:0b:8f:71:c0:b7: e8:47:a8:c5:e4:ac:23:d4:14:0b:ac:f3:f6:24:b8: bb:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:CA:00:8E:9B:24:D7:45:4F:39:A3:19:54:08:BC:98:F1:72:E0:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/170b8283-1c49-3af2-a654-4d686ca3d3fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.crl X509v3 Authority Key Identifier: keyid:5A:15:4B:45:E3:B1:02:C5:CE:B2:56:2D:B9:0F:CE:3B:E5:C5:75:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.cer sbgp-ipAddrBlock: critical IPv4: 128.135.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:b2:88:2b:72:ec:ac:80:d8:00:38:db:aa:c0:25:a8:5c:70: 03:e2:51:0a:f3:6c:e0:1c:27:0f:e2:a7:cf:68:20:87:30:e8: 66:90:62:70:60:76:e3:a4:a7:0f:5e:15:1a:b5:9f:3b:a0:63: de:05:9e:b6:2f:da:d8:ae:87:13:5b:6d:39:78:d7:7e:98:0d: 7b:9c:df:7f:3a:ee:7e:70:51:1f:5b:95:d5:71:f2:0b:50:05: e8:5c:32:0f:f9:82:00:74:33:48:48:b6:57:7f:e2:97:8b:63: 36:f5:bf:d9:9f:dd:98:be:a8:8f:41:d5:37:2b:1e:c6:cc:1b: 4c:dc:89:4d:a8:91:b8:02:eb:e7:2d:85:3e:93:19:61:30:59: c2:aa:05:c7:96:ac:78:13:07:28:73:6d:2f:60:30:67:f9:07: 8a:7e:8f:a7:e9:ed:03:5d:86:dd:d1:6b:ee:3e:8c:7a:63:e1: 0f:fe:e4:8e:b2:b5:35:fb:f4:e9:55:a4:70:35:19:87:6f:0b: 0c:df:e1:9d:d4:bc:8c:d1:74:52:b1:99:0e:7e:0b:dd:de:f4: d8:b6:36:55:d4:b8:52:06:27:11:76:94:ec:62:0d:9f:d7:91: 7d:75:9e:98:d6:d6:68:75:0c:63:c8:47:05:e0:4b:ca:0b:fa: b5:67:e1:21 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEnqhSDv6BYVXz9LGpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDRiMzI2M2EtNGNjYy00YzBmLWEyMGMtMmY1OWJiYzdm YWMxMB4XDTI1MDUyMDEzMDEwNVoXDTI1MDgxODEzMDEwNVowLzEtMCsGA1UEAxMk OTJjODc4NmYtYzQyNi00ZGY1LTljZGUtYjQxMWY4YjYxNzA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngjqShOE4TLaNU4HlxjVQ0j0Mzeez9VxWrLe FrueVVIp6bttWlYRFqo5crJcJf7f4Zrwslm1tVU8u2xIM3aEkPfPoXPtBBo0YzOo ChRZd1T1iKzoaxvgoqtMg5L1DO6lLEUhQsXwEHzMNxsIxLNJ267S2kj1opwf47Va jNW7cc/TgPRxnDga2AGNh0U8c5C21Lt9MGeeJyES/CGYC7Sl3r0jLcf/fnOLARsN W2Ol66wg/Lts9i2vwjIY2K3H98qrbfeuv+7+Zu8k9/vYnS8lAk+Z2S3wmsz/OxFT UiOgevD/JHTYBP0I8kFXC49xwLfoR6jF5Kwj1BQLrPP2JLi70QIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFJ/KAI6bJNdFTzmjGVQIvJjxcuDVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kNGIz MjYzYS00Y2NjLTRjMGYtYTIwYy0yZjU5YmJjN2ZhYzEvMTcwYjgyODMtMWM0OS0z YWYyLWE2NTQtNGQ2ODZjYTNkM2ZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZDRiMzI2M2EtNGNjYy00YzBmLWEy MGMtMmY1OWJiYzdmYWMxL2Q0YjMyNjNhLTRjY2MtNGMwZi1hMjBjLTJmNTliYmM3 ZmFjMS5jcmwwHwYDVR0jBBgwFoAUWhVLReOxAsXOslYtuQ/OO+XFdRMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kNGIzMjYzYS00Y2NjLTRjMGYtYTIwYy0yZjU5 YmJjN2ZhYzEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgIcwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAFbKIK3LsrIDYADjbqsAlqFxwA+JRCvNs4BwnD+Knz2gghzDoZpBicGB2 46SnD14VGrWfO6Bj3gWeti/a2K6HE1ttOXjXfpgNe5zffzrufnBRH1uV1XHyC1AF 6FwyD/mCAHQzSEi2V3/il4tjNvW/2Z/dmL6oj0HVNysexswbTNyJTaiRuALr5y2F PpMZYTBZwqoFx5aseBMHKHNtL2AwZ/kHin6Pp+ntA12G3dFr7j6MemPhD/7kjrK1 Nfv06VWkcDUZh28LDN/hndS8jNF0UrGZDn4L3d702LY2VdS4UgYnEXaU7GINn9eR fXWemNbWaHUMY8hHBeBLygv6tWfhIQ== -----END CERTIFICATE-----Generated at Thu Jun 5 18:34:57 2025 by rpki-client