$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/b4383a28-7225-3a9f-8489-f65812ca279c.roa File: b4383a28-7225-3a9f-8489-f65812ca279c.roa (raw, json) Hash identifier: t8IAHZddOS1rGr0lHaykl0rz6gy7rpuS3m54WQXz7aU= Subject key identifier: B8:92:A6:DF:FE:03:11:43:CE:D5:F2:5F:E5:41:89:AD:26:51:C0:4E Certificate issuer: /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Certificate serial: 010D0C9F432858499829C83ED534CA0DC10FAF40 Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/b4383a28-7225-3a9f-8489-f65812ca279c.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 3738 IP address blocks: 192.250.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:c8:3e:d5:34:ca:0d:c1:0f:af:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=9f07e766-c162-4c87-a24d-75e968371f67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:d9:37:e1:31:9c:a4:29:a2:b6:c7:79:78:74: 60:67:37:74:d6:67:e9:59:43:6d:50:57:35:af:64: db:91:52:e4:31:52:7e:8c:41:6b:24:f0:7b:5c:1b: 14:e7:80:8c:22:d6:cf:90:eb:4e:6a:a7:ba:02:9d: ee:15:71:97:16:be:5d:fb:40:15:39:8e:51:bc:ae: 30:bb:b5:6f:0b:ef:f3:e0:b3:f6:4f:f9:7c:a8:ee: 3f:32:d6:1e:c4:ec:c3:d6:3a:78:bc:f2:69:11:8f: 98:3f:4c:17:ea:a7:51:f1:0f:01:3b:74:66:d6:3c: f1:49:4d:a8:62:de:3c:35:84:50:22:b4:4a:a1:59: 54:c8:26:0d:0f:94:f9:d8:8e:05:14:94:f2:1a:89: f9:e5:93:28:45:be:14:39:80:97:e7:a4:62:e5:ce: 4f:5e:ac:f8:e2:2d:88:cc:62:0b:63:ab:2e:f5:11: e6:06:27:3d:21:d2:81:8e:15:c9:ad:bc:e7:dc:01: ff:fd:1d:58:2a:38:ca:b8:50:16:b6:ce:3b:e6:2e: a8:44:ef:63:cf:ca:83:84:09:87:40:ab:8d:64:d8: 32:d7:56:fe:fa:96:1d:47:d2:37:3b:af:0c:4e:93: f6:11:25:4c:59:76:09:89:12:12:0b:bf:e0:8f:93: 84:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:92:A6:DF:FE:03:11:43:CE:D5:F2:5F:E5:41:89:AD:26:51:C0:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/b4383a28-7225-3a9f-8489-f65812ca279c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl X509v3 Authority Key Identifier: keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer sbgp-ipAddrBlock: critical IPv4: 192.250.113.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:67:08:01:a9:4a:49:bd:99:5e:33:27:f2:9e:81:c9:31:d7: 9a:65:ca:c3:15:cc:6d:01:5b:e7:52:60:1a:c5:24:2c:df:dd: 12:6d:b5:af:28:76:eb:e4:fc:e9:dd:41:38:12:fd:86:cf:87: 4a:35:86:9e:bd:92:3e:67:11:a8:97:c5:df:54:b5:c1:dd:8f: 2c:b5:b3:90:58:c3:d7:02:5c:26:ee:d5:05:36:b7:83:bf:6a: be:8b:57:87:20:1a:b6:b5:7b:8d:8f:83:4e:65:24:29:01:54: 77:ad:d8:8a:88:c2:3b:9e:d3:5c:bd:7d:7c:af:ec:b8:45:a9: 76:0e:ff:11:62:41:87:a4:75:4a:a5:c6:90:b7:1c:c6:2c:89: cd:10:50:28:ed:c2:33:c3:7e:4b:0f:c6:fe:c7:1c:45:22:6a: 25:9d:e7:4e:62:0c:52:79:1b:b7:29:cd:7a:90:41:c8:9b:2c: 55:24:58:fe:92:a6:93:df:76:9e:25:b7:07:a0:13:c6:8c:b9: ef:74:31:bf:fe:d5:71:b7:45:1f:58:e3:7e:55:81:37:a0:73: 25:3d:fd:29:5a:ec:4d:fb:ed:9d:e7:0d:b9:09:53:d9:89:9a: ca:ee:44:f9:e3:01:63:2d:c7:e8:c4:76:31:20:f9:2e:52:48: 29:ec:87:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKcg+1TTKDcEPr0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmJiYzAxMGUtYTNmNy00ZjZlLTlkNmMtZGFlNTVhNjhl YzAwMB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk OWYwN2U3NjYtYzE2Mi00Yzg3LWEyNGQtNzVlOTY4MzcxZjY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNk34TGcpCmitsd5eHRgZzd01mfpWUNtUFc1 r2TbkVLkMVJ+jEFrJPB7XBsU54CMItbPkOtOaqe6Ap3uFXGXFr5d+0AVOY5RvK4w u7VvC+/z4LP2T/l8qO4/MtYexOzD1jp4vPJpEY+YP0wX6qdR8Q8BO3Rm1jzxSU2o Yt48NYRQIrRKoVlUyCYND5T52I4FFJTyGon55ZMoRb4UOYCX56Ri5c5PXqz44i2I zGILY6su9RHmBic9IdKBjhXJrbzn3AH//R1YKjjKuFAWts475i6oRO9jz8qDhAmH QKuNZNgy11b++pYdR9I3O68MTpP2ESVMWXYJiRISC7/gj5OEvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLiSpt/+AxFDztXyX+VBia0mUcBOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82YmJj MDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1NWE2OGVjMDAvYjQzODNhMjgtNzIyNS0z YTlmLTg0ODktZjY1ODEyY2EyNzljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmJiYzAxMGUtYTNmNy00ZjZlLTlk NmMtZGFlNTVhNjhlYzAwLzZiYmMwMTBlLWEzZjctNGY2ZS05ZDZjLWRhZTU1YTY4 ZWMwMC5jcmwwHwYDVR0jBBgwFoAUhxTlRfZtXIg9hkvY4UwQsXZEEycwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82YmJjMDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1 NWE2OGVjMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPpxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADBnCAGpSkm9mV4zJ/Kegckx15plysMVzG0BW+dSYBrFJCzf3RJtta8o duvk/OndQTgS/YbPh0o1hp69kj5nEaiXxd9UtcHdjyy1s5BYw9cCXCbu1QU2t4O/ ar6LV4cgGra1e42Pg05lJCkBVHet2IqIwjue01y9fXyv7LhFqXYO/xFiQYekdUql xpC3HMYsic0QUCjtwjPDfksPxv7HHEUiaiWd505iDFJ5G7cpzXqQQcibLFUkWP6S ppPfdp4ltwegE8aMue90Mb/+1XG3RR9Y435VgTegcyU9/Sla7E377Z3nDbkJU9mJ msruRPnjAWMtx+jEdjEg+S5SSCnsh48= -----END CERTIFICATE-----Generated at Sun Jun 15 15:08:58 2025 by rpki-client