$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/853db1af-0c14-3537-afa6-b2429c1a8793.roa File: 853db1af-0c14-3537-afa6-b2429c1a8793.roa (raw, json) Hash identifier: 1DUaaFHZV/7cqjU48tsHoVZnELw5DfMvcG7P7Veg83Q= Subject key identifier: 55:6B:60:3C:AF:38:49:BE:09:51:EA:4D:F1:6D:F5:F2:F7:EF:75:90 Certificate issuer: /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Certificate serial: 010D0C9F4328584A5600516EC28574EC6F60CE40 Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/853db1af-0c14-3537-afa6-b2429c1a8793.roa Signing time: Sat 28 Jun 2025 01:00:48 +0000 ROA not before: Sat 28 Jun 2025 01:00:48 +0000 ROA not after: Fri 26 Sep 2025 01:00:48 +0000 asID: 3738 IP address blocks: 192.250.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:56:00:51:6e:c2:85:74:ec:6f:60:ce:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Validity Not Before: Jun 28 01:00:48 2025 GMT Not After : Sep 26 01:00:48 2025 GMT Subject: CN=74784756-1f95-4516-b1bc-f84a835f2b40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:74:c5:00:af:0a:0f:e5:e5:22:0f:5e:d8:a7: ba:60:b0:d0:af:1f:f7:c2:36:e6:2a:f1:fc:b5:04: 90:a8:4c:db:b8:6f:1c:f3:31:f9:06:47:c1:39:b4: 3d:84:a2:a4:29:23:8c:af:22:a9:73:5c:b5:46:32: 99:6d:f4:86:d6:b9:dd:52:ae:d0:d0:4b:ae:66:bd: 62:09:1b:1b:bb:a9:42:4a:41:5d:2b:6c:db:f9:c2: fe:5e:34:61:ef:02:10:4a:3c:46:f1:df:58:5b:cf: e6:38:4a:a8:98:bc:55:e0:89:87:d3:65:2e:f1:6e: 09:15:e2:3f:91:9d:b1:3a:4b:e3:2f:b2:ba:d9:1c: 10:28:65:d3:b2:2e:ea:c4:be:5a:4b:ab:1b:67:b1: 89:f3:4e:ce:ac:46:ff:98:c7:b4:90:e9:1e:82:fa: 67:4f:66:c9:f1:99:0c:bd:a9:ef:2c:d9:16:4f:fb: 51:18:7c:bb:8a:69:e7:f3:2d:9a:da:a8:10:64:68: db:0b:43:61:04:58:80:5b:05:63:05:99:5b:14:30: aa:a0:fb:40:45:86:d7:42:d1:08:c1:c9:9c:e8:e7: db:8d:a3:a5:0e:0e:39:c5:06:89:af:5b:70:61:70: c2:3c:9c:c1:80:02:fd:27:24:58:78:49:f9:e1:63: 79:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:6B:60:3C:AF:38:49:BE:09:51:EA:4D:F1:6D:F5:F2:F7:EF:75:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/853db1af-0c14-3537-afa6-b2429c1a8793.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl X509v3 Authority Key Identifier: keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer sbgp-ipAddrBlock: critical IPv4: 192.250.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:f8:51:35:86:c2:36:b4:a8:ba:82:a9:5a:60:ee:14:8b:a0: e2:5a:45:10:f0:75:ea:72:b5:98:d8:18:93:27:f2:5e:38:b0: 84:90:f3:11:e2:14:0c:86:5e:65:0c:4a:c3:28:3d:21:a3:e9: 55:33:2c:f6:54:10:ca:e1:bc:64:f7:93:00:e6:1e:d2:1e:68: c6:c4:79:8d:31:dc:c1:a5:bb:e7:3a:f5:ab:c0:86:12:b2:39: 69:94:1f:ab:21:d2:83:d6:e1:54:28:27:c2:39:71:e8:d2:45: 63:5b:f8:44:40:f0:bb:b2:d2:41:b3:49:4b:ce:06:ce:a0:df: 79:df:ba:b8:e4:9c:2b:a4:61:11:32:87:6a:27:7b:90:ae:fc: c0:dc:95:f6:81:96:3d:77:8b:37:7f:aa:86:b7:7a:3d:89:cc: 1b:40:74:67:f4:57:45:90:15:69:5e:21:d8:af:e7:f4:17:4a: 15:c1:41:c9:5e:ce:1e:85:ac:79:66:1f:fb:79:07:cb:e8:05: a0:cd:ea:30:0d:d3:df:dd:ac:7c:a3:a2:be:a1:2a:b0:d1:9a: f2:25:f0:78:22:46:31:63:f1:de:4d:56:e2:56:66:18:fb:c1: a7:62:36:1a:61:11:e4:57:12:c6:5e:5f:3b:46:07:7f:7b:5b: c9:65:70:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpWAFFuwoV07G9gzkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmJiYzAxMGUtYTNmNy00ZjZlLTlkNmMtZGFlNTVhNjhl YzAwMB4XDTI1MDYyODAxMDA0OFoXDTI1MDkyNjAxMDA0OFowLzEtMCsGA1UEAxMk NzQ3ODQ3NTYtMWY5NS00NTE2LWIxYmMtZjg0YTgzNWYyYjQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnTFAK8KD+XlIg9e2Ke6YLDQrx/3wjbmKvH8 tQSQqEzbuG8c8zH5BkfBObQ9hKKkKSOMryKpc1y1RjKZbfSG1rndUq7Q0EuuZr1i CRsbu6lCSkFdK2zb+cL+XjRh7wIQSjxG8d9YW8/mOEqomLxV4ImH02Uu8W4JFeI/ kZ2xOkvjL7K62RwQKGXTsi7qxL5aS6sbZ7GJ807OrEb/mMe0kOkegvpnT2bJ8ZkM vanvLNkWT/tRGHy7imnn8y2a2qgQZGjbC0NhBFiAWwVjBZlbFDCqoPtARYbXQtEI wcmc6OfbjaOlDg45xQaJr1twYXDCPJzBgAL9JyRYeEn54WN5JwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFVrYDyvOEm+CVHqTfFt9fL373WQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82YmJj MDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1NWE2OGVjMDAvODUzZGIxYWYtMGMxNC0z NTM3LWFmYTYtYjI0MjljMWE4NzkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmJiYzAxMGUtYTNmNy00ZjZlLTlk NmMtZGFlNTVhNjhlYzAwLzZiYmMwMTBlLWEzZjctNGY2ZS05ZDZjLWRhZTU1YTY4 ZWMwMC5jcmwwHwYDVR0jBBgwFoAUhxTlRfZtXIg9hkvY4UwQsXZEEycwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82YmJjMDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1 NWE2OGVjMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPqXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD/4UTWGwja0qLqCqVpg7hSLoOJaRRDwdepytZjYGJMn8l44sISQ8xHi FAyGXmUMSsMoPSGj6VUzLPZUEMrhvGT3kwDmHtIeaMbEeY0x3MGlu+c69avAhhKy OWmUH6sh0oPW4VQoJ8I5cejSRWNb+ERA8Luy0kGzSUvOBs6g33nfurjknCukYREy h2one5Cu/MDclfaBlj13izd/qoa3ej2JzBtAdGf0V0WQFWleIdiv5/QXShXBQcle zh6FrHlmH/t5B8voBaDN6jAN09/drHyjor6hKrDRmvIl8HgiRjFj8d5NVuJWZhj7 wadiNhphEeRXEsZeXztGB397W8llcKg= -----END CERTIFICATE-----Generated at Mon Jun 30 01:30:45 2025 by rpki-client