$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/86d53092-d0b6-3f98-b2da-a397ab8eb01f.roa File: 86d53092-d0b6-3f98-b2da-a397ab8eb01f.roa (raw, json) Hash identifier: DJPWNFhzAkzps9tA8+f7QjHkNNtJTHCObd1z5GO9w7o= Subject key identifier: E7:9B:6E:09:1B:E5:E8:BA:38:8C:16:33:A6:57:98:60:CC:0C:8C:11 Certificate issuer: /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Certificate serial: 010D0C9F4328584A5600514C9F5740EB3A1D0B00 Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/86d53092-d0b6-3f98-b2da-a397ab8eb01f.roa Signing time: Sat 28 Jun 2025 01:00:48 +0000 ROA not before: Sat 28 Jun 2025 01:00:48 +0000 ROA not after: Fri 26 Sep 2025 01:00:48 +0000 asID: 3738 IP address blocks: 192.250.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:56:00:51:4c:9f:57:40:eb:3a:1d:0b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Validity Not Before: Jun 28 01:00:48 2025 GMT Not After : Sep 26 01:00:48 2025 GMT Subject: CN=56289f02-f5d0-484f-b1a1-af97c3b545d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c5:39:36:a6:e0:ed:c7:9c:ce:97:8d:c4:9e: bb:99:f6:08:25:10:16:df:0b:3e:e2:e5:b1:a3:15: 12:0e:7b:7f:59:6b:a9:a2:99:a1:2d:fb:ac:48:d5: 2a:ad:a5:55:d5:3b:11:ad:73:e0:7e:c7:65:91:d2: ee:98:99:a3:31:d5:ed:7d:b5:1d:58:a2:f1:1e:d1: b9:b0:82:7c:db:02:e9:07:d1:94:ec:f0:63:18:63: 9b:11:b3:28:89:50:53:73:cc:b3:b3:57:64:09:88: 77:b3:9f:92:ad:21:73:1f:37:45:83:88:bd:5b:c2: 4a:c6:d6:93:76:f3:f4:47:cd:2c:ab:27:85:13:e2: 0d:7c:56:87:67:19:94:e1:a9:1e:3d:1d:f8:c3:00: 86:ef:75:8f:ae:2a:1e:68:6c:53:8d:29:05:a8:d3: 0f:1c:e0:5c:53:cf:4d:18:24:06:b1:49:80:5d:08: fc:67:98:16:39:a2:a5:02:75:58:e0:66:81:65:82: 3d:b5:0d:f8:e7:eb:23:77:a0:5e:5a:f7:50:cc:b1: 14:1a:19:40:a1:24:18:e2:94:69:eb:7a:07:64:4d: 48:e4:ae:97:2e:0c:3a:65:ae:25:76:4a:a6:4c:15: 2f:cd:97:a0:b6:fe:6b:07:31:f2:fb:23:02:31:86: ca:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:9B:6E:09:1B:E5:E8:BA:38:8C:16:33:A6:57:98:60:CC:0C:8C:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/86d53092-d0b6-3f98-b2da-a397ab8eb01f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl X509v3 Authority Key Identifier: keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer sbgp-ipAddrBlock: critical IPv4: 192.250.37.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:ba:80:d6:39:8f:35:ef:e2:4d:8a:41:ba:5e:ed:c3:25:36: 84:62:a0:56:7a:dd:6d:f1:fc:65:a6:e1:37:7f:40:dc:08:7b: 6e:6d:9b:0a:2d:99:13:bc:8e:73:81:55:57:16:98:81:d3:7f: 72:0e:0d:6d:59:fd:2c:60:e5:48:9d:5d:41:d9:5c:96:5b:90: de:fc:49:e0:ee:08:a9:e1:b3:52:8b:f6:76:a4:0b:9b:e2:1c: 0b:c0:e4:22:73:25:4b:6d:74:54:8c:e3:55:8a:7c:95:a1:1f: 5e:86:35:8f:24:e6:d1:ca:bb:e6:1b:02:54:d5:4b:42:d7:e8: c6:6d:a9:63:7e:30:cf:7c:ca:84:7a:11:e0:d1:00:60:9f:cf: 66:8d:24:98:d7:83:e2:95:11:57:47:99:61:41:58:0d:ba:96: c0:04:9f:5c:4a:64:c3:69:27:77:2c:3e:d0:db:4d:65:f0:57: ae:aa:5b:3f:9e:a4:b4:d5:cd:6e:3d:4b:37:c6:de:44:93:01: d7:6b:d7:cd:27:44:41:28:d5:62:4b:4f:fb:95:3c:8e:a7:53: 4a:e4:d1:87:56:94:32:f6:ff:46:04:97:c1:21:25:9e:4e:df: b0:6c:74:fb:c2:79:96:80:9e:89:c9:7e:23:8c:60:a8:ce:b1: a2:d2:d4:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpWAFFMn1dA6zodCwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmJiYzAxMGUtYTNmNy00ZjZlLTlkNmMtZGFlNTVhNjhl YzAwMB4XDTI1MDYyODAxMDA0OFoXDTI1MDkyNjAxMDA0OFowLzEtMCsGA1UEAxMk NTYyODlmMDItZjVkMC00ODRmLWIxYTEtYWY5N2MzYjU0NWQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcU5Nqbg7ceczpeNxJ67mfYIJRAW3ws+4uWx oxUSDnt/WWupopmhLfusSNUqraVV1TsRrXPgfsdlkdLumJmjMdXtfbUdWKLxHtG5 sIJ82wLpB9GU7PBjGGObEbMoiVBTc8yzs1dkCYh3s5+SrSFzHzdFg4i9W8JKxtaT dvP0R80sqyeFE+INfFaHZxmU4akePR34wwCG73WPrioeaGxTjSkFqNMPHOBcU89N GCQGsUmAXQj8Z5gWOaKlAnVY4GaBZYI9tQ345+sjd6BeWvdQzLEUGhlAoSQY4pRp 63oHZE1I5K6XLgw6Za4ldkqmTBUvzZegtv5rBzHy+yMCMYbKWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOebbgkb5ei6OIwWM6ZXmGDMDIwRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82YmJj MDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1NWE2OGVjMDAvODZkNTMwOTItZDBiNi0z Zjk4LWIyZGEtYTM5N2FiOGViMDFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmJiYzAxMGUtYTNmNy00ZjZlLTlk NmMtZGFlNTVhNjhlYzAwLzZiYmMwMTBlLWEzZjctNGY2ZS05ZDZjLWRhZTU1YTY4 ZWMwMC5jcmwwHwYDVR0jBBgwFoAUhxTlRfZtXIg9hkvY4UwQsXZEEycwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82YmJjMDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1 NWE2OGVjMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPolMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHi6gNY5jzXv4k2KQbpe7cMlNoRioFZ63W3x/GWm4Td/QNwIe25tmwot mRO8jnOBVVcWmIHTf3IODW1Z/Sxg5UidXUHZXJZbkN78SeDuCKnhs1KL9nakC5vi HAvA5CJzJUttdFSM41WKfJWhH16GNY8k5tHKu+YbAlTVS0LX6MZtqWN+MM98yoR6 EeDRAGCfz2aNJJjXg+KVEVdHmWFBWA26lsAEn1xKZMNpJ3csPtDbTWXwV66qWz+e pLTVzW49SzfG3kSTAddr180nREEo1WJLT/uVPI6nU0rk0YdWlDL2/0YEl8EhJZ5O 37BsdPvCeZaAnonJfiOMYKjOsaLS1LA= -----END CERTIFICATE-----Generated at Mon Jun 30 00:58:54 2025 by rpki-client