$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/c8093db6-db1b-33e7-8501-039e28445968.roa File: c8093db6-db1b-33e7-8501-039e28445968.roa (raw, json) Hash identifier: N+243skEJJ6+MMPQ2DXHWEToccRPirB3MIBKeMzbQqU= Subject key identifier: E3:0E:81:A3:78:60:DA:EA:1E:3A:6B:87:74:13:34:E8:0F:28:4C:8B Certificate issuer: /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Certificate serial: 010D0C9F4328584A5600519BBEBD7EA65262CBE0 Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/c8093db6-db1b-33e7-8501-039e28445968.roa Signing time: Sat 28 Jun 2025 01:00:48 +0000 ROA not before: Sat 28 Jun 2025 01:00:48 +0000 ROA not after: Fri 26 Sep 2025 01:00:48 +0000 asID: 3738 IP address blocks: 192.250.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:56:00:51:9b:be:bd:7e:a6:52:62:cb:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Validity Not Before: Jun 28 01:00:48 2025 GMT Not After : Sep 26 01:00:48 2025 GMT Subject: CN=31d9cd06-6c16-49a9-9945-93b0c1acb2e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:af:0c:64:66:7f:3d:39:10:c9:95:d7:24:3d: 5f:d9:19:d5:fa:8e:f6:7a:a4:ef:c4:df:54:b0:9f: 50:11:2a:2c:d7:83:32:e3:6a:fc:71:e9:18:93:cf: 18:22:6d:93:88:d5:db:6a:29:e8:fa:8f:31:e0:21: f1:fd:c4:66:c3:b2:6f:7b:2b:40:da:cb:d0:21:6e: a8:47:d9:b7:94:1d:3e:ee:a2:ff:54:59:4c:35:26: 1a:3b:4f:01:4a:e5:f6:4f:11:bb:a6:2a:3c:09:46: ea:53:a5:53:64:88:b1:20:77:c9:11:d4:00:8f:ef: 41:d6:cc:9e:c1:87:22:83:37:60:ba:79:b1:a3:f7: 58:30:55:86:2c:49:8e:22:6f:42:95:1c:c3:b2:f7: 77:e3:99:fa:3f:90:86:b8:56:81:f9:11:20:c3:b3: c3:47:81:d2:23:ce:27:93:b6:59:73:b9:70:4d:98: 43:00:60:6f:63:d8:b2:a7:ab:26:80:be:de:a6:a3: 3f:a4:a2:41:72:d0:90:67:60:10:06:89:cc:39:f8: ae:4d:a8:2a:8e:ef:87:dd:e9:0c:08:0c:dc:87:66: 18:92:e2:a9:93:30:26:d9:b3:f9:10:13:ba:32:d7: 8a:9f:63:d3:5d:ca:dd:65:4c:15:e0:4a:74:78:13: 83:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:0E:81:A3:78:60:DA:EA:1E:3A:6B:87:74:13:34:E8:0F:28:4C:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/c8093db6-db1b-33e7-8501-039e28445968.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl X509v3 Authority Key Identifier: keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer sbgp-ipAddrBlock: critical IPv4: 192.250.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cd:ce:97:14:1b:28:e5:66:3d:66:48:90:a6:70:69:ae:b9:8b: f7:ec:4f:8c:02:3e:4a:20:6d:21:27:84:a1:86:ac:d7:93:42: 94:fd:ea:5f:09:72:7a:90:d9:f2:71:ea:bf:e2:27:5e:82:55: ca:14:6b:ec:7e:84:33:ce:be:67:18:17:d2:13:95:07:6c:10: 53:59:b4:73:13:d7:82:41:30:10:eb:fb:99:00:f9:36:0f:2d: f9:51:17:29:d8:0a:af:56:a8:cc:3b:b0:1c:b4:b1:65:fa:36: 5a:f6:bb:7a:05:23:54:60:5e:6c:ac:4d:98:cd:69:66:01:fa: ea:1f:c7:b6:3d:06:ef:07:7b:44:64:61:55:5a:41:b3:20:b8: 19:9b:34:b7:97:09:cc:92:f9:5d:f6:ee:b6:dc:5c:c0:a8:74: f6:41:df:e5:be:92:f4:ad:0f:48:60:63:27:ec:34:de:ba:cf: 54:f5:20:eb:8d:18:9b:64:06:21:5d:be:9f:e9:8c:5c:e9:3d: 6e:ef:9a:8f:99:26:c9:b1:5c:25:99:d9:3c:3c:d1:6c:fe:e5: e4:32:69:e3:b2:15:5e:95:eb:01:e7:1a:c2:c1:98:6a:29:47: 83:89:7e:20:1a:40:8a:af:44:35:8e:12:82:e4:1b:84:de:cb: b7:c9:e8:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpWAFGbvr1+plJiy+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmJiYzAxMGUtYTNmNy00ZjZlLTlkNmMtZGFlNTVhNjhl YzAwMB4XDTI1MDYyODAxMDA0OFoXDTI1MDkyNjAxMDA0OFowLzEtMCsGA1UEAxMk MzFkOWNkMDYtNmMxNi00OWE5LTk5NDUtOTNiMGMxYWNiMmU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv68MZGZ/PTkQyZXXJD1f2RnV+o72eqTvxN9U sJ9QESos14My42r8cekYk88YIm2TiNXbaino+o8x4CHx/cRmw7JveytA2svQIW6o R9m3lB0+7qL/VFlMNSYaO08BSuX2TxG7pio8CUbqU6VTZIixIHfJEdQAj+9B1sye wYcigzdgunmxo/dYMFWGLEmOIm9ClRzDsvd345n6P5CGuFaB+REgw7PDR4HSI84n k7ZZc7lwTZhDAGBvY9iyp6smgL7epqM/pKJBctCQZ2AQBonMOfiuTagqju+H3ekM CAzch2YYkuKpkzAm2bP5EBO6MteKn2PTXcrdZUwV4Ep0eBODWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOMOgaN4YNrqHjprh3QTNOgPKEyLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82YmJj MDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1NWE2OGVjMDAvYzgwOTNkYjYtZGIxYi0z M2U3LTg1MDEtMDM5ZTI4NDQ1OTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmJiYzAxMGUtYTNmNy00ZjZlLTlk NmMtZGFlNTVhNjhlYzAwLzZiYmMwMTBlLWEzZjctNGY2ZS05ZDZjLWRhZTU1YTY4 ZWMwMC5jcmwwHwYDVR0jBBgwFoAUhxTlRfZtXIg9hkvY4UwQsXZEEycwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82YmJjMDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1 NWE2OGVjMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPprMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM3OlxQbKOVmPWZIkKZwaa65i/fsT4wCPkogbSEnhKGGrNeTQpT96l8J cnqQ2fJx6r/iJ16CVcoUa+x+hDPOvmcYF9ITlQdsEFNZtHMT14JBMBDr+5kA+TYP LflRFynYCq9WqMw7sBy0sWX6Nlr2u3oFI1RgXmysTZjNaWYB+uofx7Y9Bu8He0Rk YVVaQbMguBmbNLeXCcyS+V327rbcXMCodPZB3+W+kvStD0hgYyfsNN66z1T1IOuN GJtkBiFdvp/pjFzpPW7vmo+ZJsmxXCWZ2Tw80Wz+5eQyaeOyFV6V6wHnGsLBmGop R4OJfiAaQIqvRDWOEoLkG4Tey7fJ6Ng= -----END CERTIFICATE-----Generated at Mon Jun 30 00:41:02 2025 by rpki-client