$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/3e0869f2-979b-3a34-9bb1-dbf0b47ac488.roa File: 3e0869f2-979b-3a34-9bb1-dbf0b47ac488.roa (raw, json) Hash identifier: o+hWWB80jtON24wLiIWPoh+xvgC30/HygH0xQilYzPk= Subject key identifier: 8A:E9:FA:21:3D:CC:93:E0:EB:2A:47:47:66:9C:06:C7:94:B5:5C:A4 Certificate issuer: /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Certificate serial: 010D0C9F43285849912F300AFB91AA247CC39B00 Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/3e0869f2-979b-3a34-9bb1-dbf0b47ac488.roa Signing time: Fri 18 Apr 2025 13:00:59 +0000 ROA not before: Fri 18 Apr 2025 13:00:59 +0000 ROA not after: Thu 17 Jul 2025 13:00:59 +0000 asID: 3738 IP address blocks: 192.250.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:91:2f:30:0a:fb:91:aa:24:7c:c3:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Validity Not Before: Apr 18 13:00:59 2025 GMT Not After : Jul 17 13:00:59 2025 GMT Subject: CN=a54dd7ce-2dc6-48ca-8e4e-3608ade08d72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:6f:39:af:c1:22:ad:a5:e4:c2:b9:dc:b3:95: fd:2a:f5:06:a2:69:9a:02:29:0c:ff:d4:39:de:92: 51:9f:dc:01:fe:dd:6e:b6:d2:c9:cf:a3:0d:b6:34: 9e:37:d9:f5:e7:ec:fc:74:ea:a7:2b:c3:55:ce:87: 83:c1:45:b2:1a:14:15:d9:0d:a7:ed:8a:bc:02:99: bc:0f:f3:98:c9:be:07:a6:bc:89:ba:2d:14:9c:bf: 9c:c0:24:ff:f1:5d:22:9a:ec:88:83:6d:86:c9:2e: cf:9f:c9:b7:0a:f9:de:c1:28:84:6b:62:a3:79:8a: 8a:87:0a:e5:8d:b2:45:f7:dc:2e:06:71:50:4a:7d: ef:1a:88:fc:29:f2:26:79:8f:29:d5:30:6a:0a:8d: 08:a0:fd:37:07:fd:b1:cb:ed:db:9a:ac:85:7d:85: 00:7d:a2:aa:e9:01:ee:9c:ff:15:78:09:0e:43:7d: 77:89:ab:99:97:28:77:b3:d2:ab:ac:51:b4:57:39: 48:f5:0f:aa:4b:2c:10:a8:c3:cd:f5:18:bf:a7:c0: 04:86:91:ce:99:d7:e5:12:c8:1a:d2:6f:7f:41:a4: 9c:af:88:a7:23:1f:55:ad:b8:b1:13:66:60:a8:94: a5:dd:95:a6:5e:c8:97:d8:3e:82:d7:67:6a:ce:f8: df:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:E9:FA:21:3D:CC:93:E0:EB:2A:47:47:66:9C:06:C7:94:B5:5C:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/3e0869f2-979b-3a34-9bb1-dbf0b47ac488.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl X509v3 Authority Key Identifier: keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer sbgp-ipAddrBlock: critical IPv4: 192.250.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:71:b0:87:a5:97:0a:e0:a6:b8:c6:50:3a:39:d1:81:09:94: 9a:9e:81:ea:78:8d:56:8e:cc:2c:14:00:67:1f:bb:54:4b:8d: 77:ee:b7:4b:e8:8d:2a:dd:27:43:22:88:bb:36:24:0c:2a:4f: c8:9c:28:27:dd:73:5e:c6:c2:fa:cf:61:84:cf:a7:a0:4a:06: b6:66:b3:27:13:1f:25:91:5c:5a:1e:30:e0:c7:88:04:d7:46: f9:67:1e:23:58:79:cd:d2:d8:d4:c0:12:62:5c:b5:1e:ee:a0: c0:4f:77:0e:9e:4f:e3:f2:68:12:e9:d9:b6:2c:aa:d7:27:a4: 1d:2d:7b:4d:c3:74:4a:c4:14:b3:ff:9b:b5:fc:3f:ec:1d:3c: 0e:00:f4:b2:ad:33:af:71:84:30:8e:de:95:36:a0:53:fc:da: 63:07:5e:fb:c7:23:db:34:17:05:00:3b:0f:22:ac:6d:d2:ff: 1f:9b:f6:a4:11:eb:43:2b:49:68:64:fc:1d:9d:1d:09:4d:ca: 50:d3:63:a0:4c:5d:3f:37:5e:d9:2e:8b:9a:c7:fa:38:71:b0: 5e:53:5d:15:86:46:85:e9:43:53:67:5d:45:b1:39:2a:6e:03: 51:ce:f6:cd:4b:ca:11:7c:a4:a0:af:6c:57:01:20:6f:58:73: 5f:b6:47:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmRLzAK+5GqJHzDmwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmJiYzAxMGUtYTNmNy00ZjZlLTlkNmMtZGFlNTVhNjhl YzAwMB4XDTI1MDQxODEzMDA1OVoXDTI1MDcxNzEzMDA1OVowLzEtMCsGA1UEAxMk YTU0ZGQ3Y2UtMmRjNi00OGNhLThlNGUtMzYwOGFkZTA4ZDcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApG85r8EiraXkwrncs5X9KvUGommaAikM/9Q5 3pJRn9wB/t1uttLJz6MNtjSeN9n15+z8dOqnK8NVzoeDwUWyGhQV2Q2n7Yq8Apm8 D/OYyb4HpryJui0UnL+cwCT/8V0imuyIg22GyS7Pn8m3CvnewSiEa2KjeYqKhwrl jbJF99wuBnFQSn3vGoj8KfImeY8p1TBqCo0IoP03B/2xy+3bmqyFfYUAfaKq6QHu nP8VeAkOQ313iauZlyh3s9KrrFG0VzlI9Q+qSywQqMPN9Ri/p8AEhpHOmdflEsga 0m9/QaScr4inIx9VrbixE2ZgqJSl3ZWmXsiX2D6C12dqzvjfHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIrp+iE9zJPg6ypHR2acBseUtVykMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82YmJj MDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1NWE2OGVjMDAvM2UwODY5ZjItOTc5Yi0z YTM0LTliYjEtZGJmMGI0N2FjNDg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmJiYzAxMGUtYTNmNy00ZjZlLTlk NmMtZGFlNTVhNjhlYzAwLzZiYmMwMTBlLWEzZjctNGY2ZS05ZDZjLWRhZTU1YTY4 ZWMwMC5jcmwwHwYDVR0jBBgwFoAUhxTlRfZtXIg9hkvY4UwQsXZEEycwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82YmJjMDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1 NWE2OGVjMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPqMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADFxsIellwrgprjGUDo50YEJlJqegep4jVaOzCwUAGcfu1RLjXfut0vo jSrdJ0MiiLs2JAwqT8icKCfdc17GwvrPYYTPp6BKBrZmsycTHyWRXFoeMODHiATX RvlnHiNYec3S2NTAEmJctR7uoMBPdw6eT+PyaBLp2bYsqtcnpB0te03DdErEFLP/ m7X8P+wdPA4A9LKtM69xhDCO3pU2oFP82mMHXvvHI9s0FwUAOw8irG3S/x+b9qQR 60MrSWhk/B2dHQlNylDTY6BMXT83Xtkui5rH+jhxsF5TXRWGRoXpQ1NnXUWxOSpu A1HO9s1LyhF8pKCvbFcBIG9Yc1+2R+E= -----END CERTIFICATE-----Generated at Mon Jun 30 00:44:31 2025 by rpki-client