$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/18be9d53-2126-3b32-bb14-95983399a677.roa File: 18be9d53-2126-3b32-bb14-95983399a677.roa (raw, json) Hash identifier: SWnFdfnr7ABSFnsJizEYTDgqS5rifCe5mxF2gDU1MiA= Subject key identifier: D7:04:C4:E9:32:6F:5D:28:CC:5C:98:0A:0A:8F:2B:AD:C2:46:C4:3E Certificate issuer: /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Certificate serial: 010D0C9F43285849912F2D45E38BB219659DB264 Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/18be9d53-2126-3b32-bb14-95983399a677.roa Signing time: Fri 18 Apr 2025 13:00:59 +0000 ROA not before: Fri 18 Apr 2025 13:00:59 +0000 ROA not after: Thu 17 Jul 2025 13:00:59 +0000 asID: 3738 IP address blocks: 192.250.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:91:2f:2d:45:e3:8b:b2:19:65:9d:b2:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Validity Not Before: Apr 18 13:00:59 2025 GMT Not After : Jul 17 13:00:59 2025 GMT Subject: CN=de07ed3a-1078-4ce6-bbda-70fbc7be7483 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:4f:54:85:88:4a:75:1d:1c:a8:e5:99:5a:c0: 2f:18:c1:20:1d:45:bb:cd:99:d2:af:a1:b0:da:42: b1:85:09:e6:d5:85:6a:57:98:7e:5a:fe:c8:8b:1e: 92:19:66:59:b3:40:08:24:ab:ac:48:fc:5b:b5:f5: d6:a5:a2:a3:5e:f8:38:d4:86:14:b1:9c:38:17:05: 4f:5f:f1:50:a8:8c:62:f7:92:01:29:62:41:b0:6e: 40:38:49:3a:29:84:dc:52:d3:fa:a1:91:bc:8d:80: 8c:8e:39:0e:b7:b9:a6:d8:63:9b:6d:d1:3b:8e:b3: 7b:c6:ac:7e:fd:eb:71:7a:ce:a4:20:40:c9:30:20: 14:e0:a5:a5:d8:d7:6a:2c:0b:07:ce:a2:62:3c:83: ad:44:79:e5:8e:8d:79:ac:1f:44:be:fd:be:29:4a: fd:4f:4a:a5:ab:c2:9f:7f:71:e6:6f:1e:7d:59:a5: d9:b8:f2:97:b4:67:b2:5f:0d:26:16:7c:72:7f:91: a1:2f:c2:0b:6a:9b:2b:12:5a:3c:dc:a4:5f:12:c1: 4c:03:2b:34:2e:93:c4:10:b5:db:22:7b:94:a6:48: 99:3c:b1:a4:63:69:7a:05:f4:24:6d:f2:c3:8c:8b: aa:07:59:e5:b9:4e:34:b7:d3:03:37:fa:0c:95:ca: fd:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:04:C4:E9:32:6F:5D:28:CC:5C:98:0A:0A:8F:2B:AD:C2:46:C4:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/18be9d53-2126-3b32-bb14-95983399a677.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl X509v3 Authority Key Identifier: keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer sbgp-ipAddrBlock: critical IPv4: 192.250.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:a6:c4:a6:a3:bb:57:00:84:79:ba:59:8a:c0:8a:31:1a:ca: 66:f9:67:e3:5d:8b:b0:00:08:b5:0d:b2:70:23:6b:d0:14:20: 6d:c4:8b:cc:4a:84:65:9e:39:b2:2a:f0:77:b6:5c:41:68:91: 31:a7:87:c4:18:97:70:c8:3d:6b:97:17:80:da:35:02:9a:9c: a4:0f:3d:32:ee:e9:65:e9:8c:1a:e2:3e:f6:ad:c6:fe:cd:4b: 25:c0:32:e7:c6:84:22:38:ea:61:7b:31:18:b5:32:5d:fe:4f: e1:90:5c:6e:22:ec:4c:d2:84:7b:56:24:1b:b6:5c:97:e0:fe: a0:02:00:96:9d:ce:d8:1e:07:c5:56:02:1c:08:45:a8:18:79: c0:94:f0:bc:c5:8d:04:82:a8:36:67:0d:5e:93:28:3c:d1:df: f0:33:13:de:65:82:2a:ca:46:84:92:61:ab:cf:e9:0b:5b:4e: d9:9b:5a:4d:54:85:7a:5b:53:3a:6d:ac:7d:a1:d0:11:c5:44: 78:2a:df:6e:5c:84:d1:51:3b:1c:52:94:d1:56:68:e8:d5:72: a8:05:3a:4c:a4:dd:d2:8a:bc:fb:b5:0b:27:7a:20:34:0f:6a: 7e:9e:0b:cb:48:ab:ec:ca:f8:d3:c6:25:8b:ca:dc:13:cf:62: d4:e9:26:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmRLy1F44uyGWWdsmQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmJiYzAxMGUtYTNmNy00ZjZlLTlkNmMtZGFlNTVhNjhl YzAwMB4XDTI1MDQxODEzMDA1OVoXDTI1MDcxNzEzMDA1OVowLzEtMCsGA1UEAxMk ZGUwN2VkM2EtMTA3OC00Y2U2LWJiZGEtNzBmYmM3YmU3NDgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuk9UhYhKdR0cqOWZWsAvGMEgHUW7zZnSr6Gw 2kKxhQnm1YVqV5h+Wv7Iix6SGWZZs0AIJKusSPxbtfXWpaKjXvg41IYUsZw4FwVP X/FQqIxi95IBKWJBsG5AOEk6KYTcUtP6oZG8jYCMjjkOt7mm2GObbdE7jrN7xqx+ /etxes6kIEDJMCAU4KWl2NdqLAsHzqJiPIOtRHnljo15rB9Evv2+KUr9T0qlq8Kf f3Hmbx59WaXZuPKXtGeyXw0mFnxyf5GhL8ILapsrElo83KRfEsFMAys0LpPEELXb InuUpkiZPLGkY2l6BfQkbfLDjIuqB1nluU40t9MDN/oMlcr9kwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNcExOkyb10ozFyYCgqPK63CRsQ+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82YmJj MDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1NWE2OGVjMDAvMThiZTlkNTMtMjEyNi0z YjMyLWJiMTQtOTU5ODMzOTlhNjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmJiYzAxMGUtYTNmNy00ZjZlLTlk NmMtZGFlNTVhNjhlYzAwLzZiYmMwMTBlLWEzZjctNGY2ZS05ZDZjLWRhZTU1YTY4 ZWMwMC5jcmwwHwYDVR0jBBgwFoAUhxTlRfZtXIg9hkvY4UwQsXZEEycwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82YmJjMDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1 NWE2OGVjMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPqZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE2mxKaju1cAhHm6WYrAijEaymb5Z+Ndi7AACLUNsnAja9AUIG3Ei8xK hGWeObIq8He2XEFokTGnh8QYl3DIPWuXF4DaNQKanKQPPTLu6WXpjBriPvatxv7N SyXAMufGhCI46mF7MRi1Ml3+T+GQXG4i7EzShHtWJBu2XJfg/qACAJadztgeB8VW AhwIRagYecCU8LzFjQSCqDZnDV6TKDzR3/AzE95lgirKRoSSYavP6QtbTtmbWk1U hXpbUzptrH2h0BHFRHgq325chNFROxxSlNFWaOjVcqgFOkyk3dKKvPu1Cyd6IDQP an6eC8tIq+zK+NPGJYvK3BPPYtTpJmk= -----END CERTIFICATE-----Generated at Fri May 9 04:06:58 2025 by rpki-client