$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/dd3e0844-33f9-3add-b4fe-106232fa4bd4.roa File: dd3e0844-33f9-3add-b4fe-106232fa4bd4.roa (raw, json) Hash identifier: Y/6Ql6MvYWOmq0OL/yqbzMqqiVd1fXfrkCZvYU9FPu0= Subject key identifier: 0D:99:2D:51:47:2D:FD:73:F5:95:6E:37:55:89:1F:6A:61:41:A6:EF Certificate issuer: /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Certificate serial: 010D0C9F4328584A56005160A86AC50F7BE16FC0 Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/dd3e0844-33f9-3add-b4fe-106232fa4bd4.roa Signing time: Sat 28 Jun 2025 01:00:48 +0000 ROA not before: Sat 28 Jun 2025 01:00:48 +0000 ROA not after: Fri 26 Sep 2025 01:00:48 +0000 asID: 3738 IP address blocks: 192.250.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:56:00:51:60:a8:6a:c5:0f:7b:e1:6f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Validity Not Before: Jun 28 01:00:48 2025 GMT Not After : Sep 26 01:00:48 2025 GMT Subject: CN=867a8b2f-9fd2-49ee-9e95-60cd5a64d4c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:34:4e:e4:6b:42:7c:b2:42:52:80:1d:75:88: 5c:0e:bc:6c:b2:48:9a:2b:a1:93:94:58:a1:8a:01: 63:f7:ed:00:1a:b9:32:aa:57:4c:a3:ca:f0:3f:3b: 16:dc:79:6c:eb:fe:e6:b8:ca:b6:d9:d3:f2:32:47: b6:15:ba:e2:26:74:2f:91:f1:3f:5f:d2:77:7e:7a: 68:43:72:f4:1e:d1:8b:86:94:41:09:ba:c9:da:be: f8:2c:b6:52:4a:be:bc:d5:3e:c0:dd:2f:12:3c:07: 98:9b:2f:23:f4:d8:4e:af:e3:a6:22:3a:21:40:30: fc:b2:c9:48:03:8d:87:62:3b:18:71:03:40:d3:fa: 5f:57:2b:0d:ca:0d:51:84:76:4f:e4:66:fb:f7:69: d0:45:1d:77:14:c5:de:8d:55:c7:69:23:66:84:c6: e4:8e:5e:16:ec:bb:ed:bc:a1:78:dd:e9:29:f9:1f: 44:34:f2:35:66:86:f7:46:15:50:71:fc:56:b7:5a: 95:bb:88:76:f1:37:1e:5d:64:40:a3:7b:48:26:52: 3e:9c:7d:bd:f6:b2:3a:f5:33:c7:81:d7:de:45:7f: c2:59:33:ba:cf:34:d1:b5:82:d8:e1:3c:be:92:e9: 9f:3b:c4:51:5a:dc:d1:07:d4:75:05:ac:29:38:6a: d1:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:99:2D:51:47:2D:FD:73:F5:95:6E:37:55:89:1F:6A:61:41:A6:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/dd3e0844-33f9-3add-b4fe-106232fa4bd4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl X509v3 Authority Key Identifier: keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer sbgp-ipAddrBlock: critical IPv4: 192.250.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cd:17:b4:b2:c9:14:8a:52:71:4a:b2:c7:ef:3e:b5:89:8b:97: 39:9b:2a:2e:ed:74:a2:7c:78:5a:af:2b:e5:ad:e4:8f:fa:4f: bb:44:28:48:ba:17:41:d8:08:a3:b0:cd:ae:f3:52:0c:11:f7: 77:07:68:c9:3b:ec:11:34:ab:78:03:69:a3:72:31:b8:68:14: de:ad:0c:08:13:85:8a:e0:12:5a:53:ab:50:0e:f3:97:c5:47: 81:04:0a:89:d2:05:55:8c:28:bd:61:4b:42:7d:da:e3:58:bc: 3d:27:28:e1:51:eb:4b:58:2d:18:81:34:4e:11:2f:7e:dc:4a: 5f:84:46:0d:0a:87:4f:2f:e4:95:63:a4:17:e4:d7:fa:c0:d0: 76:d0:37:75:30:d5:ee:e8:c0:07:0f:3c:e7:a1:5b:d0:cf:ba: 08:f0:c8:0b:3a:e8:cc:5a:ab:c4:28:09:36:32:dc:78:0f:7e: 66:11:91:56:8f:75:30:2a:be:3f:c9:cf:a1:18:71:89:fb:46: d6:83:3b:ba:36:55:73:76:e4:63:0f:85:22:ff:ed:46:09:e8: 1b:04:18:f2:93:0f:5a:c8:98:75:9d:1e:0e:5b:28:5e:2c:0f: eb:69:11:f1:f3:4d:e8:ab:e3:ed:b3:6e:ea:fa:d0:ab:13:52: e5:45:d2:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpWAFFgqGrFD3vhb8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmJiYzAxMGUtYTNmNy00ZjZlLTlkNmMtZGFlNTVhNjhl YzAwMB4XDTI1MDYyODAxMDA0OFoXDTI1MDkyNjAxMDA0OFowLzEtMCsGA1UEAxMk ODY3YThiMmYtOWZkMi00OWVlLTllOTUtNjBjZDVhNjRkNGM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDRO5GtCfLJCUoAddYhcDrxsskiaK6GTlFih igFj9+0AGrkyqldMo8rwPzsW3Hls6/7muMq22dPyMke2FbriJnQvkfE/X9J3fnpo Q3L0HtGLhpRBCbrJ2r74LLZSSr681T7A3S8SPAeYmy8j9NhOr+OmIjohQDD8sslI A42HYjsYcQNA0/pfVysNyg1RhHZP5Gb792nQRR13FMXejVXHaSNmhMbkjl4W7Lvt vKF43ekp+R9ENPI1Zob3RhVQcfxWt1qVu4h28TceXWRAo3tIJlI+nH299rI69TPH gdfeRX/CWTO6zzTRtYLY4Ty+kumfO8RRWtzRB9R1BawpOGrRjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA2ZLVFHLf1z9ZVuN1WJH2phQabvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82YmJj MDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1NWE2OGVjMDAvZGQzZTA4NDQtMzNmOS0z YWRkLWI0ZmUtMTA2MjMyZmE0YmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmJiYzAxMGUtYTNmNy00ZjZlLTlk NmMtZGFlNTVhNjhlYzAwLzZiYmMwMTBlLWEzZjctNGY2ZS05ZDZjLWRhZTU1YTY4 ZWMwMC5jcmwwHwYDVR0jBBgwFoAUhxTlRfZtXIg9hkvY4UwQsXZEEycwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82YmJjMDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1 NWE2OGVjMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPqWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM0XtLLJFIpScUqyx+8+tYmLlzmbKi7tdKJ8eFqvK+Wt5I/6T7tEKEi6 F0HYCKOwza7zUgwR93cHaMk77BE0q3gDaaNyMbhoFN6tDAgThYrgElpTq1AO85fF R4EEConSBVWMKL1hS0J92uNYvD0nKOFR60tYLRiBNE4RL37cSl+ERg0Kh08v5JVj pBfk1/rA0HbQN3Uw1e7owAcPPOehW9DPugjwyAs66Mxaq8QoCTYy3HgPfmYRkVaP dTAqvj/Jz6EYcYn7RtaDO7o2VXN25GMPhSL/7UYJ6BsEGPKTD1rImHWdHg5bKF4s D+tpEfHzTeir4+2zbur60KsTUuVF0hI= -----END CERTIFICATE-----Generated at Mon Jun 30 00:48:43 2025 by rpki-client