$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e6e72b41-233c-402b-b910-1acb71542338/4eb2587f-0f39-37f8-9e34-fc5695ce1299.roa File: 4eb2587f-0f39-37f8-9e34-fc5695ce1299.roa (raw, json) Hash identifier: 6pVMquh1dWEBotWQrf+j9uS58/HCOE4mNf+/cEZ8Otc= Subject key identifier: F8:79:51:AF:31:E1:56:AC:44:46:90:A0:AB:31:95:40:D9:89:F5:B2 Certificate issuer: /CN=e6e72b41-233c-402b-b910-1acb71542338 Certificate serial: 010D0C9F4328584A268AAEA7066135A50067CFD0 Authority key identifier: EF:83:88:C9:37:AC:D2:74:26:58:ED:FD:A2:A0:43:E9:E9:49:B3:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e6e72b41-233c-402b-b910-1acb71542338.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e6e72b41-233c-402b-b910-1acb71542338/4eb2587f-0f39-37f8-9e34-fc5695ce1299.roa Signing time: Wed 11 Jun 2025 01:00:50 +0000 ROA not before: Wed 11 Jun 2025 01:00:50 +0000 ROA not after: Tue 09 Sep 2025 01:00:50 +0000 asID: 394049 IP address blocks: 192.250.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e6e72b41-233c-402b-b910-1acb71542338/e6e72b41-233c-402b-b910-1acb71542338.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e6e72b41-233c-402b-b910-1acb71542338/e6e72b41-233c-402b-b910-1acb71542338.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e6e72b41-233c-402b-b910-1acb71542338.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:26:8a:ae:a7:06:61:35:a5:00:67:cf:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6e72b41-233c-402b-b910-1acb71542338 Validity Not Before: Jun 11 01:00:50 2025 GMT Not After : Sep 9 01:00:50 2025 GMT Subject: CN=6b9eaaf3-b397-4a54-8a6c-005589bef769 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:99:24:aa:28:61:6b:c2:12:28:f9:bf:49:73: 3f:c1:31:b1:42:38:da:95:d7:0c:03:50:16:0d:64: 02:ee:bf:b2:11:93:77:9f:ae:8a:39:ad:78:21:50: 17:9d:f8:02:eb:51:b6:e2:0e:ab:a2:5e:35:12:07: c2:b8:f5:4e:b8:81:a5:d7:c1:0a:3f:66:f7:f6:db: 83:3e:5f:5a:02:b6:6b:cb:d0:1e:1d:5b:28:86:ff: 88:30:bd:3c:94:63:33:31:a1:a0:a4:91:66:73:8d: 51:2a:aa:8a:ab:f3:2a:98:0c:68:c0:f2:88:c7:5c: d3:de:db:03:64:53:14:ee:08:ef:a2:6e:11:43:1b: e1:31:8f:71:99:8a:d3:e6:9e:0e:18:32:eb:ae:b4: be:08:97:d1:73:42:ee:d6:66:9f:b6:6a:30:93:08: 92:a5:e8:b4:ce:21:c2:4a:2f:53:e2:51:f7:31:ca: 4a:fd:3b:79:74:8e:35:e8:79:d7:17:c1:7e:24:1b: 97:5b:7a:30:1e:0a:82:00:38:87:77:7a:e4:6c:e7: ec:fe:7c:4c:91:46:4e:dc:71:4b:21:ba:b9:59:ef: 16:89:38:0d:74:4e:be:43:d1:b1:a9:86:de:b0:a9: 6d:2b:21:45:87:bb:ed:c4:20:7d:e8:06:87:da:79: c9:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:79:51:AF:31:E1:56:AC:44:46:90:A0:AB:31:95:40:D9:89:F5:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e6e72b41-233c-402b-b910-1acb71542338/4eb2587f-0f39-37f8-9e34-fc5695ce1299.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e6e72b41-233c-402b-b910-1acb71542338/e6e72b41-233c-402b-b910-1acb71542338.crl X509v3 Authority Key Identifier: keyid:EF:83:88:C9:37:AC:D2:74:26:58:ED:FD:A2:A0:43:E9:E9:49:B3:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e6e72b41-233c-402b-b910-1acb71542338.cer sbgp-ipAddrBlock: critical IPv4: 192.250.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:e9:6c:97:44:24:14:b8:4c:f5:77:b4:f1:1a:99:b6:9d:ef: dc:ff:ff:ea:f8:ac:4d:56:40:95:e6:d8:51:d4:3d:42:67:f2: 2d:b8:d6:43:bc:4b:fd:1c:e8:0c:0f:9a:9f:36:f2:22:64:8c: c8:86:4d:4a:24:5a:1d:ef:f0:21:e8:7e:91:2a:82:35:29:b6: ec:da:76:90:81:f8:d5:11:95:81:d6:ed:de:fb:8e:09:06:6f: 3d:cc:14:10:1a:b7:a0:a9:17:8d:0d:95:08:65:be:2e:e6:39: 23:4d:66:f1:c9:db:41:6e:af:d1:bd:cf:71:ce:ce:cc:ef:0a: bd:a7:16:46:6e:3f:fc:b6:21:8b:49:0e:15:aa:e1:4f:37:58: 12:bb:7b:b3:88:d7:62:c1:25:f2:e6:bc:0e:36:f0:e2:3e:16: 62:b9:37:19:f0:41:ed:8f:63:e2:ab:11:ef:90:73:78:df:77: 89:79:4f:ac:30:e6:21:ae:66:5b:53:0d:d0:2d:a1:9e:36:4c: 47:9c:f7:df:33:76:80:1d:56:97:57:ab:e0:d6:0f:b2:6b:c0: ab:0f:dc:ce:5c:5c:23:1a:c3:2c:c8:dd:72:53:4c:15:29:14: ab:88:e2:68:51:cb:3a:14:70:ed:98:c8:f0:a5:88:a3:51:e5: d9:49:fa:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEomiq6nBmE1pQBnz9AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTZlNzJiNDEtMjMzYy00MDJiLWI5MTAtMWFjYjcxNTQy MzM4MB4XDTI1MDYxMTAxMDA1MFoXDTI1MDkwOTAxMDA1MFowLzEtMCsGA1UEAxMk NmI5ZWFhZjMtYjM5Ny00YTU0LThhNmMtMDA1NTg5YmVmNzY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5kkqihha8ISKPm/SXM/wTGxQjjaldcMA1AW DWQC7r+yEZN3n66KOa14IVAXnfgC61G24g6rol41EgfCuPVOuIGl18EKP2b39tuD Pl9aArZry9AeHVsohv+IML08lGMzMaGgpJFmc41RKqqKq/MqmAxowPKIx1zT3tsD ZFMU7gjvom4RQxvhMY9xmYrT5p4OGDLrrrS+CJfRc0Lu1maftmowkwiSpei0ziHC Si9T4lH3McpK/Tt5dI416HnXF8F+JBuXW3owHgqCADiHd3rkbOfs/nxMkUZO3HFL Ibq5We8WiTgNdE6+Q9GxqYbesKltKyFFh7vtxCB96AaH2nnJCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPh5Ua8x4VasREaQoKsxlUDZifWyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lNmU3 MmI0MS0yMzNjLTQwMmItYjkxMC0xYWNiNzE1NDIzMzgvNGViMjU4N2YtMGYzOS0z N2Y4LTllMzQtZmM1Njk1Y2UxMjk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZTZlNzJiNDEtMjMzYy00MDJiLWI5 MTAtMWFjYjcxNTQyMzM4L2U2ZTcyYjQxLTIzM2MtNDAyYi1iOTEwLTFhY2I3MTU0 MjMzOC5jcmwwHwYDVR0jBBgwFoAU74OIyTes0nQmWO39oqBD6elJs4IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9lNmU3MmI0MS0yMzNjLTQwMmItYjkxMC0xYWNi NzE1NDIzMzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPoVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIXpbJdEJBS4TPV3tPEambad79z//+r4rE1WQJXm2FHUPUJn8i241kO8 S/0c6AwPmp828iJkjMiGTUokWh3v8CHofpEqgjUptuzadpCB+NURlYHW7d77jgkG bz3MFBAat6CpF40NlQhlvi7mOSNNZvHJ20Fur9G9z3HOzszvCr2nFkZuP/y2IYtJ DhWq4U83WBK7e7OI12LBJfLmvA428OI+FmK5NxnwQe2PY+KrEe+Qc3jfd4l5T6ww 5iGuZltTDdAtoZ42TEec998zdoAdVpdXq+DWD7JrwKsP3M5cXCMawyzI3XJTTBUp FKuI4mhRyzoUcO2YyPCliKNR5dlJ+u0= -----END CERTIFICATE-----Generated at Tue Jul 1 21:02:11 2025 by rpki-client