$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/3ead1481-4beb-3b72-86ed-e68ad4803de2.roa File: 3ead1481-4beb-3b72-86ed-e68ad4803de2.roa (raw, json) Hash identifier: +WO/8rsR26LBVNVwL6UoUuZzfZMNWKMFxGmVQMHgo0s= Subject key identifier: CA:7A:C0:0B:1C:F0:BE:12:6F:A8:E2:69:CD:B4:0C:9C:A6:44:8F:96 Certificate issuer: /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Certificate serial: 010D0C9F4328584A506AEA7546D80268364CB000 Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/3ead1481-4beb-3b72-86ed-e68ad4803de2.roa Signing time: Thu 26 Jun 2025 01:00:49 +0000 ROA not before: Thu 26 Jun 2025 01:00:49 +0000 ROA not after: Wed 24 Sep 2025 01:00:49 +0000 asID: 3738 IP address blocks: 192.250.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:50:6a:ea:75:46:d8:02:68:36:4c:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Validity Not Before: Jun 26 01:00:49 2025 GMT Not After : Sep 24 01:00:49 2025 GMT Subject: CN=3cd18111-e1f0-4705-a180-ff2ebeec8730 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:9f:a3:4c:4a:25:ca:da:be:f1:94:10:46:e6: 94:ee:87:97:90:7d:09:9b:57:cd:f3:3d:87:f7:5d: df:70:e9:a9:ea:b4:01:5d:a3:50:b1:26:ff:05:6e: 68:c6:1a:1e:42:b4:c6:43:09:06:b4:e9:87:52:e2: 9c:60:19:c1:c3:fc:de:b8:2a:5a:36:db:8a:5e:03: 6d:38:bd:bf:93:e8:5f:ff:b3:f6:79:e2:c6:1e:dc: 2e:91:a6:f3:8e:05:4a:db:f8:dd:6d:dc:fe:1e:b4: aa:cd:4f:5d:2a:75:b2:c1:0c:ff:c4:15:37:2b:1a: 5e:9d:96:6d:d9:d4:fe:b1:51:41:74:c8:0c:e5:f3: 5d:37:b4:03:8b:97:91:ef:e7:1e:35:d6:03:53:7d: 1d:1e:96:03:20:12:96:28:9a:eb:b8:17:cf:26:c2: 60:f7:7f:12:bc:b3:aa:72:a5:19:14:f6:3c:79:8e: 8e:ac:1f:1f:5a:9c:ac:09:68:ca:60:01:5d:e1:51: df:e3:4f:33:03:30:59:b1:e9:a0:f3:64:b8:a1:10: ec:0f:66:6e:fb:4f:48:10:fe:59:f8:87:d7:0c:30: f6:ef:da:1e:d5:44:14:e9:56:2f:de:12:88:c0:d2: 1d:95:1a:91:bb:44:14:52:cf:1b:00:f0:04:3d:06: a9:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:7A:C0:0B:1C:F0:BE:12:6F:A8:E2:69:CD:B4:0C:9C:A6:44:8F:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/3ead1481-4beb-3b72-86ed-e68ad4803de2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl X509v3 Authority Key Identifier: keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer sbgp-ipAddrBlock: critical IPv4: 192.250.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:26:0c:eb:fb:b5:da:0a:62:a2:35:0b:48:fe:96:50:c8:7b: 16:da:d5:8e:49:fd:5f:ab:ab:1d:2e:86:f4:3c:12:1e:9e:d4: 60:e9:f5:14:eb:bb:21:79:5c:81:9d:e5:08:4f:86:29:c9:b9: 43:86:19:5c:d5:0c:05:51:3f:57:9b:b3:60:ec:63:de:2c:cc: fb:e7:82:de:69:db:f2:53:a7:12:38:43:6d:d7:f6:f1:b9:f0: af:b4:b9:57:d5:28:f9:4e:55:03:50:83:67:a8:9a:44:bb:e8: 2e:bd:33:01:f6:56:e8:8d:4c:85:ab:ca:26:da:39:43:c7:ab: 0f:28:06:b9:ed:ac:23:13:94:ea:42:9b:eb:ca:a1:f3:52:99: 29:2b:77:c1:5e:22:2b:b6:58:eb:98:d6:58:db:e7:3e:66:15: 90:9a:fb:05:2b:40:61:28:9c:63:7e:b4:6a:67:d7:d9:7f:0d: d3:9f:23:f8:7b:25:2f:e9:97:34:9e:e9:64:fe:b8:fa:d3:66: ec:54:b3:9f:04:39:86:dc:bf:b3:db:b9:9b:a6:a3:0f:be:83: 36:89:4e:73:95:14:36:7e:14:77:aa:b8:b0:e1:50:92:4f:b1: 22:06:87:26:58:51:4c:d7:c1:05:68:12:b0:24:9e:09:33:ed: 71:ed:7d:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpQaup1RtgCaDZMsAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmJiYzAxMGUtYTNmNy00ZjZlLTlkNmMtZGFlNTVhNjhl YzAwMB4XDTI1MDYyNjAxMDA0OVoXDTI1MDkyNDAxMDA0OVowLzEtMCsGA1UEAxMk M2NkMTgxMTEtZTFmMC00NzA1LWExODAtZmYyZWJlZWM4NzMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA35+jTEolytq+8ZQQRuaU7oeXkH0Jm1fN8z2H 913fcOmp6rQBXaNQsSb/BW5oxhoeQrTGQwkGtOmHUuKcYBnBw/zeuCpaNtuKXgNt OL2/k+hf/7P2eeLGHtwukabzjgVK2/jdbdz+HrSqzU9dKnWywQz/xBU3KxpenZZt 2dT+sVFBdMgM5fNdN7QDi5eR7+ceNdYDU30dHpYDIBKWKJrruBfPJsJg938SvLOq cqUZFPY8eY6OrB8fWpysCWjKYAFd4VHf408zAzBZsemg82S4oRDsD2Zu+09IEP5Z +IfXDDD279oe1UQU6VYv3hKIwNIdlRqRu0QUUs8bAPAEPQapHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMp6wAsc8L4Sb6jiac20DJymRI+WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82YmJj MDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1NWE2OGVjMDAvM2VhZDE0ODEtNGJlYi0z YjcyLTg2ZWQtZTY4YWQ0ODAzZGUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmJiYzAxMGUtYTNmNy00ZjZlLTlk NmMtZGFlNTVhNjhlYzAwLzZiYmMwMTBlLWEzZjctNGY2ZS05ZDZjLWRhZTU1YTY4 ZWMwMC5jcmwwHwYDVR0jBBgwFoAUhxTlRfZtXIg9hkvY4UwQsXZEEycwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82YmJjMDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1 NWE2OGVjMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPojMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEomDOv7tdoKYqI1C0j+llDIexba1Y5J/V+rqx0uhvQ8Eh6e1GDp9RTr uyF5XIGd5QhPhinJuUOGGVzVDAVRP1ebs2DsY94szPvngt5p2/JTpxI4Q23X9vG5 8K+0uVfVKPlOVQNQg2eomkS76C69MwH2VuiNTIWryibaOUPHqw8oBrntrCMTlOpC m+vKofNSmSkrd8FeIiu2WOuY1ljb5z5mFZCa+wUrQGEonGN+tGpn19l/DdOfI/h7 JS/plzSe6WT+uPrTZuxUs58EOYbcv7PbuZumow++gzaJTnOVFDZ+FHequLDhUJJP sSIGhyZYUUzXwQVoErAkngkz7XHtfeI= -----END CERTIFICATE-----Generated at Mon Jun 30 01:03:16 2025 by rpki-client