$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/c86fcb92-e2ac-30f3-b3f9-6ebfe86ddd86.roa File: c86fcb92-e2ac-30f3-b3f9-6ebfe86ddd86.roa (raw, json) Hash identifier: 4h6p+7G+1XGUKjxi6wtOHWhKnU+nD6X5JrMdwP2St7o= Subject key identifier: E9:A2:45:83:9E:34:3E:B7:20:28:DD:C2:DD:7E:05:F3:8A:B5:73:A8 Certificate issuer: /CN=b8a29c46-e0f1-4edc-988a-9420affbc339 Certificate serial: 010D0C9F43285848EC96A19C7664EE62D29287C0 Authority key identifier: AE:5B:91:0A:1A:F7:6A:0A:F9:C8:61:BA:B9:2C:80:AE:41:E0:79:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/c86fcb92-e2ac-30f3-b3f9-6ebfe86ddd86.roa Signing time: Tue 18 Feb 2025 14:00:52 +0000 ROA not before: Tue 18 Feb 2025 14:00:52 +0000 ROA not after: Mon 19 May 2025 13:00:52 +0000 asID: 205627 IP address blocks: 170.2.248.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/b8a29c46-e0f1-4edc-988a-9420affbc339.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/b8a29c46-e0f1-4edc-988a-9420affbc339.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ec:96:a1:9c:76:64:ee:62:d2:92:87:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8a29c46-e0f1-4edc-988a-9420affbc339 Validity Not Before: Feb 18 14:00:52 2025 GMT Not After : May 19 13:00:52 2025 GMT Subject: CN=3a9acadd-cf96-4e6e-8bcf-fdd8623ebd4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:6c:dc:76:60:83:31:b6:c6:ee:7d:aa:b6:84: ae:a7:22:c1:67:13:d3:3f:64:b3:72:1c:83:85:17: ba:24:3b:a1:d4:05:d0:2c:a7:41:db:28:48:e0:be: ea:b6:4e:f3:07:b4:99:f0:8d:61:d5:c7:b6:e3:26: 06:ae:e4:77:16:af:c5:56:7d:e4:9f:b1:09:f3:1e: 77:e4:26:e5:9d:fb:74:71:b7:c5:de:6f:97:8d:5a: da:b5:eb:c9:bb:ae:3a:21:3f:de:ee:85:cd:37:04: 05:de:4e:41:db:71:7d:9b:5f:bf:9c:d5:04:15:9e: e5:75:af:c6:17:38:53:d1:11:49:a5:0b:ae:60:a0: 15:cc:e6:97:d3:72:9e:68:a9:75:e2:8e:63:a0:30: e4:e2:8e:8a:a3:aa:94:98:6d:bb:5f:0e:bb:bc:f1: 2e:90:f8:5a:73:7d:f6:c1:d0:63:d3:08:5a:35:58: 98:c4:d8:bc:35:13:8e:69:97:b8:b4:4e:6b:60:f8: 3f:f3:98:46:35:16:c1:24:78:a9:33:d6:ec:96:f3: dc:61:c3:3c:c9:ba:d2:94:f5:4b:8c:01:c1:34:d5: ab:63:55:ed:0a:b0:61:dd:bf:11:a3:1a:46:4d:e6: f4:e6:e4:d5:f1:69:7f:42:08:5c:6d:a5:bc:cd:0d: b0:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:A2:45:83:9E:34:3E:B7:20:28:DD:C2:DD:7E:05:F3:8A:B5:73:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/c86fcb92-e2ac-30f3-b3f9-6ebfe86ddd86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/b8a29c46-e0f1-4edc-988a-9420affbc339.crl X509v3 Authority Key Identifier: keyid:AE:5B:91:0A:1A:F7:6A:0A:F9:C8:61:BA:B9:2C:80:AE:41:E0:79:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339.cer sbgp-ipAddrBlock: critical IPv4: 170.2.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:fc:bb:7f:0c:6e:c8:2b:f1:e9:56:93:d4:8a:bb:ef:f5:3e: a4:b6:7b:bc:36:dd:fd:a0:69:af:79:9f:e1:61:aa:53:3c:a3: 38:55:be:79:bd:57:12:ee:6c:5a:a2:86:38:06:28:ae:e8:e5: eb:b7:17:3b:ab:8d:19:6b:ff:68:5b:4a:fa:5c:6b:5b:db:40: d5:36:5f:f5:a5:90:04:31:f0:dc:b7:b7:0a:03:61:31:61:da: 07:89:14:79:31:29:99:e4:2e:ba:d5:4a:19:61:4f:55:0b:44: 30:e5:2b:26:d7:d2:38:c4:e1:f5:69:a5:7a:18:03:fb:8f:bb: 27:85:c0:30:a0:3a:2c:61:c6:40:d3:b3:9c:65:99:36:8f:63: a2:cc:a7:99:cc:2e:84:fe:e7:d6:7a:5d:1e:6b:f2:64:74:e8: 62:5d:26:c4:c5:67:7f:09:51:ba:85:9f:0a:9f:f7:78:f4:7c: b7:55:56:6c:e8:08:63:47:32:7a:bf:08:e0:5f:5b:f7:8f:95: 70:a2:8f:da:90:f7:d8:3c:67:6d:97:79:dc:80:df:8d:e6:d6: 7e:b4:ed:e3:e7:80:92:48:29:15:b8:e0:9c:03:d3:54:bc:3e: 30:09:1e:69:ee:a3:a6:32:ec:a9:ca:60:40:2d:1d:b6:fe:7b: e7:51:3a:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjslqGcdmTuYtKSh8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhhMjljNDYtZTBmMS00ZWRjLTk4OGEtOTQyMGFmZmJj MzM5MB4XDTI1MDIxODE0MDA1MloXDTI1MDUxOTEzMDA1MlowLzEtMCsGA1UEAxMk M2E5YWNhZGQtY2Y5Ni00ZTZlLThiY2YtZmRkODYyM2ViZDRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWzcdmCDMbbG7n2qtoSupyLBZxPTP2SzchyD hRe6JDuh1AXQLKdB2yhI4L7qtk7zB7SZ8I1h1ce24yYGruR3Fq/FVn3kn7EJ8x53 5Cblnft0cbfF3m+XjVratevJu646IT/e7oXNNwQF3k5B23F9m1+/nNUEFZ7lda/G FzhT0RFJpQuuYKAVzOaX03KeaKl14o5joDDk4o6Ko6qUmG27Xw67vPEukPhac332 wdBj0whaNViYxNi8NROOaZe4tE5rYPg/85hGNRbBJHipM9bslvPcYcM8ybrSlPVL jAHBNNWrY1XtCrBh3b8RoxpGTeb05uTV8Wl/QghcbaW8zQ2wpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOmiRYOeND63ICjdwt1+BfOKtXOoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iOGEy OWM0Ni1lMGYxLTRlZGMtOTg4YS05NDIwYWZmYmMzMzkvYzg2ZmNiOTItZTJhYy0z MGYzLWIzZjktNmViZmU4NmRkZDg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYjhhMjljNDYtZTBmMS00ZWRjLTk4 OGEtOTQyMGFmZmJjMzM5L2I4YTI5YzQ2LWUwZjEtNGVkYy05ODhhLTk0MjBhZmZi YzMzOS5jcmwwHwYDVR0jBBgwFoAUrluRChr3agr5yGG6uSyArkHgeRQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iOGEyOWM0Ni1lMGYxLTRlZGMtOTg4YS05NDIw YWZmYmMzMzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqgL4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADP8u38Mbsgr8elWk9SKu+/1PqS2e7w23f2gaa95n+FhqlM8ozhVvnm9 VxLubFqihjgGKK7o5eu3FzurjRlr/2hbSvpca1vbQNU2X/WlkAQx8Ny3twoDYTFh 2geJFHkxKZnkLrrVShlhT1ULRDDlKybX0jjE4fVppXoYA/uPuyeFwDCgOixhxkDT s5xlmTaPY6LMp5nMLoT+59Z6XR5r8mR06GJdJsTFZ38JUbqFnwqf93j0fLdVVmzo CGNHMnq/COBfW/ePlXCij9qQ99g8Z22XedyA343m1n607ePngJJIKRW44JwD01S8 PjAJHmnuo6Yy7KnKYEAtHbb+e+dROv0= -----END CERTIFICATE-----Generated at Fri Apr 11 23:47:46 2025 by rpki-client