$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/c895c230-8fe1-3d93-ad4b-385e77e2b1b4.roa File: c895c230-8fe1-3d93-ad4b-385e77e2b1b4.roa (raw, json) Hash identifier: 2bOEvdOK8ichZXuXPN8W8tTvP4gHIEHfYAIPE8apwKM= Subject key identifier: 9A:71:AD:28:EC:3B:A0:CA:F1:7F:F5:0D:82:D9:DE:63:C3:2A:A5:BA Certificate issuer: /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Certificate serial: 010D0C9F43285849912F2D6B4E710E4B246DD560 Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/c895c230-8fe1-3d93-ad4b-385e77e2b1b4.roa Signing time: Fri 18 Apr 2025 13:00:59 +0000 ROA not before: Fri 18 Apr 2025 13:00:59 +0000 ROA not after: Thu 17 Jul 2025 13:00:59 +0000 asID: 3738 IP address blocks: 192.250.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:91:2f:2d:6b:4e:71:0e:4b:24:6d:d5:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Validity Not Before: Apr 18 13:00:59 2025 GMT Not After : Jul 17 13:00:59 2025 GMT Subject: CN=86482174-47e0-4dd2-b3f5-9f307eb61a4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f4:88:95:b8:e6:ee:b5:7a:bc:35:af:7c:54: 6e:8d:25:23:09:7e:a7:1a:95:56:9e:25:98:d4:85: eb:9f:46:86:75:65:40:1b:e1:64:8a:69:f8:a9:97: 06:ff:b9:69:30:e0:0a:d8:cb:01:7a:17:fd:75:49: 25:67:e9:21:2f:66:85:b9:fe:d7:60:21:c2:69:14: 8f:46:d3:7f:65:f2:38:06:7a:a0:42:d6:e0:0a:7f: 73:9a:2a:fe:2d:56:46:ac:6f:eb:c5:cb:db:9c:b4: 94:70:02:cc:20:2f:0c:cf:11:3b:2b:20:90:0e:39: e2:b5:c3:77:13:d3:e5:f9:92:77:e1:df:a8:a2:bf: 47:17:5f:93:4b:d9:bb:00:82:5c:f9:67:23:6c:f4: 0f:45:3b:37:7c:60:a1:e6:35:53:0f:0c:0d:e2:0a: 5e:63:89:cd:8e:a3:1b:8a:70:67:dd:3f:aa:7c:bb: 8c:18:2e:6a:03:b7:6c:46:c4:84:af:78:1b:c3:1c: 42:f6:4b:a9:79:82:27:40:22:0a:ae:b3:d7:87:90: ab:97:bf:89:b1:6e:ac:c9:11:e3:9b:1d:63:99:27: 4e:0b:75:04:75:eb:8d:71:80:2d:db:1f:8e:0d:42: 8b:23:ff:15:ef:70:34:74:39:a6:59:98:7d:ae:13: 24:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:71:AD:28:EC:3B:A0:CA:F1:7F:F5:0D:82:D9:DE:63:C3:2A:A5:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/c895c230-8fe1-3d93-ad4b-385e77e2b1b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl X509v3 Authority Key Identifier: keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer sbgp-ipAddrBlock: critical IPv4: 192.250.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:6a:a1:0d:b3:ab:82:9a:15:d6:c5:f0:d0:50:ec:6d:da:02: b4:84:ac:e6:b4:a9:db:8d:4b:5a:50:f2:52:b9:fa:08:35:0c: c1:56:0d:85:a8:48:c9:e7:02:0d:e1:a4:dc:ff:9e:81:c0:e0: c5:cb:f5:96:3a:a9:ed:d6:84:e6:bb:49:e5:97:24:65:fd:84: d6:aa:77:43:6c:84:a9:78:e2:e9:b5:54:af:a9:f8:80:ce:67: 52:61:68:8b:36:1d:4c:38:24:94:61:2e:e8:87:ac:7c:e6:2d: 6b:48:09:05:71:9a:2b:a4:8e:84:db:6b:23:04:b3:b9:59:6e: 0f:53:a4:64:1f:ee:58:35:4c:21:5c:f9:87:3c:a4:fc:4c:d8: cf:c6:23:7d:83:ed:04:c5:8f:aa:9b:a9:43:88:8a:76:e5:c9: bc:cf:1b:6d:ac:b4:12:e2:00:8e:8c:ac:c1:1a:49:07:28:99: 50:a6:d9:b0:b8:ab:2c:db:7e:df:f7:35:3c:4a:e1:81:bc:67: be:e7:59:dd:5f:5f:35:61:22:f5:06:6c:63:d5:50:3d:4d:14: 3f:3a:a3:13:a1:75:6f:1e:2e:82:e1:79:6b:e1:33:c7:05:9d: e7:bb:a7:a6:8a:50:c7:58:2a:69:e6:25:e1:f7:53:be:0d:7c: 53:87:9a:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmRLy1rTnEOSyRt1WAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmJiYzAxMGUtYTNmNy00ZjZlLTlkNmMtZGFlNTVhNjhl YzAwMB4XDTI1MDQxODEzMDA1OVoXDTI1MDcxNzEzMDA1OVowLzEtMCsGA1UEAxMk ODY0ODIxNzQtNDdlMC00ZGQyLWIzZjUtOWYzMDdlYjYxYTRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/SIlbjm7rV6vDWvfFRujSUjCX6nGpVWniWY 1IXrn0aGdWVAG+Fkimn4qZcG/7lpMOAK2MsBehf9dUklZ+khL2aFuf7XYCHCaRSP RtN/ZfI4BnqgQtbgCn9zmir+LVZGrG/rxcvbnLSUcALMIC8MzxE7KyCQDjnitcN3 E9Pl+ZJ34d+oor9HF1+TS9m7AIJc+WcjbPQPRTs3fGCh5jVTDwwN4gpeY4nNjqMb inBn3T+qfLuMGC5qA7dsRsSEr3gbwxxC9kupeYInQCIKrrPXh5Crl7+JsW6syRHj mx1jmSdOC3UEdeuNcYAt2x+ODUKLI/8V73A0dDmmWZh9rhMk8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJpxrSjsO6DK8X/1DYLZ3mPDKqW6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82YmJj MDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1NWE2OGVjMDAvYzg5NWMyMzAtOGZlMS0z ZDkzLWFkNGItMzg1ZTc3ZTJiMWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmJiYzAxMGUtYTNmNy00ZjZlLTlk NmMtZGFlNTVhNjhlYzAwLzZiYmMwMTBlLWEzZjctNGY2ZS05ZDZjLWRhZTU1YTY4 ZWMwMC5jcmwwHwYDVR0jBBgwFoAUhxTlRfZtXIg9hkvY4UwQsXZEEycwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82YmJjMDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1 NWE2OGVjMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPpAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJdqoQ2zq4KaFdbF8NBQ7G3aArSErOa0qduNS1pQ8lK5+gg1DMFWDYWo SMnnAg3hpNz/noHA4MXL9ZY6qe3WhOa7SeWXJGX9hNaqd0NshKl44um1VK+p+IDO Z1JhaIs2HUw4JJRhLuiHrHzmLWtICQVxmiukjoTbayMEs7lZbg9TpGQf7lg1TCFc +Yc8pPxM2M/GI32D7QTFj6qbqUOIinblybzPG22stBLiAI6MrMEaSQcomVCm2bC4 qyzbft/3NTxK4YG8Z77nWd1fXzVhIvUGbGPVUD1NFD86oxOhdW8eLoLheWvhM8cF nee7p6aKUMdYKmnmJeH3U74NfFOHmhs= -----END CERTIFICATE-----Generated at Thu May 8 01:29:08 2025 by rpki-client