$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/d1a38dec-ad7c-3946-ba99-6105feef4b75.roa File: d1a38dec-ad7c-3946-ba99-6105feef4b75.roa (raw, json) Hash identifier: 56fOKts90cWuPHdCwwZBRN7BmnuE7lYFXzUnKOZvF+U= Subject key identifier: 85:46:A3:8F:CA:5E:CF:C9:7D:A9:7A:63:43:6F:73:04:93:D9:AD:71 Certificate issuer: /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Certificate serial: 010D0C9F43285849912F305AA6AF5594B1E57BA0 Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/d1a38dec-ad7c-3946-ba99-6105feef4b75.roa Signing time: Fri 18 Apr 2025 13:00:59 +0000 ROA not before: Fri 18 Apr 2025 13:00:59 +0000 ROA not after: Thu 17 Jul 2025 13:00:59 +0000 asID: 3738 IP address blocks: 192.250.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:91:2f:30:5a:a6:af:55:94:b1:e5:7b:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Validity Not Before: Apr 18 13:00:59 2025 GMT Not After : Jul 17 13:00:59 2025 GMT Subject: CN=1c801b47-4025-4836-80bb-aeae1ea78c0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:87:f2:79:5e:7b:01:f8:37:22:c7:6e:cc:bd: 02:0f:7d:cb:6f:95:55:d5:d1:3d:8a:00:23:0c:19: 77:58:91:63:20:dc:2f:9a:fe:a9:b9:fa:52:50:5e: 33:17:47:11:db:1e:9b:af:d6:59:71:32:a6:60:84: c8:7b:30:3d:f1:1d:ef:e9:33:21:b0:b6:d2:5d:db: d7:0b:16:9d:55:74:b8:5f:2a:34:c8:91:71:2a:2c: a3:02:70:ae:1f:c3:2b:dc:ef:31:72:56:43:2c:f8: 08:a1:84:a1:b5:c7:e0:bc:b8:b4:06:8a:3f:cc:d3: 06:7d:b5:a4:15:06:ac:4f:f4:0e:fa:86:2a:0d:b1: ae:bf:d4:7f:6f:5e:95:69:d5:b8:c5:b4:7b:93:6b: 27:69:54:a7:9f:49:2b:bc:4a:86:6a:97:03:dd:e4: 56:62:bb:3b:df:ba:f2:2e:19:25:e4:19:86:8f:a2: b3:c4:38:dd:a7:57:a8:e5:04:97:e2:94:bc:31:b2: 61:18:e1:7f:2d:f7:94:87:61:b6:bd:18:57:e0:c9: 25:ad:1b:2c:a2:e2:78:16:72:11:66:d6:e1:93:61: 91:8e:7c:7e:3e:82:38:d9:8e:0e:31:24:6c:08:35: af:05:36:26:5c:e2:ca:9a:9e:e5:6b:55:11:40:43: 12:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:46:A3:8F:CA:5E:CF:C9:7D:A9:7A:63:43:6F:73:04:93:D9:AD:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/d1a38dec-ad7c-3946-ba99-6105feef4b75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl X509v3 Authority Key Identifier: keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer sbgp-ipAddrBlock: critical IPv4: 192.250.55.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:69:38:87:98:66:0a:9b:26:fd:14:eb:db:7c:74:b4:70:fb: 57:44:7d:69:3b:cc:1f:8a:b0:ff:36:a9:2f:e0:aa:4a:74:8a: a8:2d:01:38:62:71:1c:93:86:4f:85:11:c8:25:e0:3f:5d:32: 49:ac:5f:1d:2c:54:b8:ef:7e:63:aa:ff:b4:77:a2:40:8b:fb: ae:3c:05:36:2e:0f:f7:98:ea:18:68:57:1d:1d:2b:99:d8:87: 60:f8:bb:7c:70:05:c0:3d:06:3e:d1:17:4e:09:e7:e9:a4:22: 7a:13:14:93:ba:64:a0:c6:01:d9:e1:00:bc:f7:36:83:59:d2: db:ca:79:3b:cf:2b:b8:1d:7d:74:d6:85:dd:85:10:dc:7f:c0: e1:22:ca:65:24:45:09:48:a6:e7:5d:4d:33:8f:73:71:62:a9: b3:99:f4:6b:84:1b:61:d6:0f:6d:a9:82:44:c5:71:79:3f:7e: fb:14:f8:30:e3:e4:09:56:bd:04:20:7a:87:ec:a1:7b:3b:b9: 85:3b:74:d5:ae:1d:7e:2e:5c:5b:d1:e0:74:53:3e:c3:66:71: 99:e5:21:68:8f:92:00:de:76:8b:b9:06:2f:10:e3:a5:b9:e1: dd:f8:52:1d:a3:16:55:b9:3c:8a:0f:aa:5f:96:62:84:d7:fa: cc:b2:d9:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmRLzBapq9VlLHle6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmJiYzAxMGUtYTNmNy00ZjZlLTlkNmMtZGFlNTVhNjhl YzAwMB4XDTI1MDQxODEzMDA1OVoXDTI1MDcxNzEzMDA1OVowLzEtMCsGA1UEAxMk MWM4MDFiNDctNDAyNS00ODM2LTgwYmItYWVhZTFlYTc4YzBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIfyeV57Afg3IsduzL0CD33Lb5VV1dE9igAj DBl3WJFjINwvmv6pufpSUF4zF0cR2x6br9ZZcTKmYITIezA98R3v6TMhsLbSXdvX CxadVXS4Xyo0yJFxKiyjAnCuH8Mr3O8xclZDLPgIoYShtcfgvLi0Boo/zNMGfbWk FQasT/QO+oYqDbGuv9R/b16VadW4xbR7k2snaVSnn0krvEqGapcD3eRWYrs737ry Lhkl5BmGj6KzxDjdp1eo5QSX4pS8MbJhGOF/LfeUh2G2vRhX4MklrRssouJ4FnIR Ztbhk2GRjnx+PoI42Y4OMSRsCDWvBTYmXOLKmp7la1URQEMSvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIVGo4/KXs/Jfal6Y0NvcwST2a1xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82YmJj MDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1NWE2OGVjMDAvZDFhMzhkZWMtYWQ3Yy0z OTQ2LWJhOTktNjEwNWZlZWY0Yjc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmJiYzAxMGUtYTNmNy00ZjZlLTlk NmMtZGFlNTVhNjhlYzAwLzZiYmMwMTBlLWEzZjctNGY2ZS05ZDZjLWRhZTU1YTY4 ZWMwMC5jcmwwHwYDVR0jBBgwFoAUhxTlRfZtXIg9hkvY4UwQsXZEEycwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82YmJjMDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1 NWE2OGVjMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPo3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALFpOIeYZgqbJv0U69t8dLRw+1dEfWk7zB+KsP82qS/gqkp0iqgtAThi cRyThk+FEcgl4D9dMkmsXx0sVLjvfmOq/7R3okCL+648BTYuD/eY6hhoVx0dK5nY h2D4u3xwBcA9Bj7RF04J5+mkInoTFJO6ZKDGAdnhALz3NoNZ0tvKeTvPK7gdfXTW hd2FENx/wOEiymUkRQlIpuddTTOPc3FiqbOZ9GuEG2HWD22pgkTFcXk/fvsU+DDj 5AlWvQQgeofsoXs7uYU7dNWuHX4uXFvR4HRTPsNmcZnlIWiPkgDedou5Bi8Q46W5 4d34Uh2jFlW5PIoPql+WYoTX+syy2aw= -----END CERTIFICATE-----Generated at Fri May 9 01:02:23 2025 by rpki-client