$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/fa9ceb26-aedb-39db-8efd-3a3982506b1a.roa File: fa9ceb26-aedb-39db-8efd-3a3982506b1a.roa (raw, json) Hash identifier: EMKL7QCxGimiDfMirRP28KQZFbeWA1B3gkeaqFjXTb4= Subject key identifier: FB:AA:EF:75:52:04:CF:2F:8B:AA:3B:F9:68:84:A5:58:F3:08:C0:01 Certificate issuer: /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Certificate serial: 010D0C9F43285849912F2D1FF1171524832FC180 Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/fa9ceb26-aedb-39db-8efd-3a3982506b1a.roa Signing time: Fri 18 Apr 2025 13:00:59 +0000 ROA not before: Fri 18 Apr 2025 13:00:59 +0000 ROA not after: Thu 17 Jul 2025 13:00:59 +0000 asID: 3738 IP address blocks: 192.250.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:91:2f:2d:1f:f1:17:15:24:83:2f:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Validity Not Before: Apr 18 13:00:59 2025 GMT Not After : Jul 17 13:00:59 2025 GMT Subject: CN=4c715178-8d69-414f-99ec-1112e4a695fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:47:32:ee:c6:3c:4f:19:ea:79:33:f6:a5:4f: 05:76:20:0c:66:50:94:78:d1:0d:80:67:ac:82:18: ea:f6:e1:ae:2c:b8:37:37:ea:d3:51:90:c2:a3:de: 2f:10:7a:6c:30:c4:08:21:57:2f:2a:8f:6a:c9:76: 8f:47:ce:60:32:6c:d6:45:eb:70:57:c2:71:8c:40: bf:31:19:f7:71:6c:20:bc:8c:16:93:ad:77:51:eb: f4:53:a8:55:9e:9e:e4:a3:d7:9a:09:a1:50:ea:a9: c6:79:e3:c0:1d:30:32:1d:3d:6e:dc:0c:58:25:48: fd:61:6d:e8:a4:a6:db:73:2a:0a:f4:0a:94:45:ea: a2:76:f5:4e:1b:25:bd:91:49:3e:45:96:f3:9d:ea: 69:e0:15:2d:5d:ae:0e:1c:0a:e5:75:1c:c9:13:1a: a4:41:83:8a:23:52:2d:d9:47:77:4f:57:43:8b:81: 48:b7:7a:d4:fe:e8:5b:df:0a:ce:b2:4f:45:11:b1: a7:65:30:3f:e7:e8:d3:d0:18:32:1c:46:c4:00:f7: cb:59:6f:b4:c8:4d:93:36:0c:fb:17:4f:5c:97:05: 56:a1:77:18:7d:78:d6:2d:e1:bd:4d:4f:59:4e:ac: f8:62:73:24:b8:12:a9:16:9d:63:b9:d4:e0:f5:6d: 77:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:AA:EF:75:52:04:CF:2F:8B:AA:3B:F9:68:84:A5:58:F3:08:C0:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/fa9ceb26-aedb-39db-8efd-3a3982506b1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl X509v3 Authority Key Identifier: keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer sbgp-ipAddrBlock: critical IPv4: 192.250.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:de:4c:7d:0f:00:04:7b:af:cc:b8:1d:c3:57:c7:c4:06:87: 84:0a:9f:ca:92:f3:bb:bf:6d:8f:01:59:15:da:7f:b8:ef:61: d8:89:89:a3:88:e8:49:89:88:54:31:39:8f:66:03:e9:ab:63: 6b:29:4a:60:72:7f:5f:f0:5f:ce:95:3a:1c:87:99:b9:e3:d9: c6:75:ff:46:fd:71:33:08:c5:f9:41:22:e6:80:75:7b:80:7f: 97:28:e3:c1:52:05:e0:11:17:33:e1:e6:38:1d:ec:95:1a:31: 83:8c:da:22:83:70:d3:32:42:12:9a:3e:b3:ba:17:e2:88:50: eb:a3:b8:9f:f6:ba:14:13:d4:e8:65:55:ee:a5:54:7b:83:bb: 73:ab:0d:81:0c:2a:6f:c6:62:e7:64:c8:71:17:ef:2d:2a:49: 05:bc:8e:9e:c8:18:4b:6d:d9:8f:14:fe:33:4c:f4:8c:9e:42: 19:27:28:d1:8d:46:18:34:9a:ff:4a:27:2e:c4:82:2f:ff:36: 1a:2f:62:09:2c:ce:38:b5:db:1a:6d:ec:29:a6:e5:cb:de:cb: 75:29:75:2e:b6:4a:63:27:c0:77:f6:5c:17:62:35:45:f8:e9: 01:b0:9e:b5:4b:b6:4f:b0:b7:89:98:c2:af:4b:c4:1f:f0:cb: ee:31:e8:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmRLy0f8RcVJIMvwYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmJiYzAxMGUtYTNmNy00ZjZlLTlkNmMtZGFlNTVhNjhl YzAwMB4XDTI1MDQxODEzMDA1OVoXDTI1MDcxNzEzMDA1OVowLzEtMCsGA1UEAxMk NGM3MTUxNzgtOGQ2OS00MTRmLTk5ZWMtMTExMmU0YTY5NWZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUcy7sY8TxnqeTP2pU8FdiAMZlCUeNENgGes ghjq9uGuLLg3N+rTUZDCo94vEHpsMMQIIVcvKo9qyXaPR85gMmzWRetwV8JxjEC/ MRn3cWwgvIwWk613Uev0U6hVnp7ko9eaCaFQ6qnGeePAHTAyHT1u3AxYJUj9YW3o pKbbcyoK9AqUReqidvVOGyW9kUk+RZbznepp4BUtXa4OHArldRzJExqkQYOKI1It 2Ud3T1dDi4FIt3rU/uhb3wrOsk9FEbGnZTA/5+jT0BgyHEbEAPfLWW+0yE2TNgz7 F09clwVWoXcYfXjWLeG9TU9ZTqz4YnMkuBKpFp1judTg9W13VwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPuq73VSBM8vi6o7+WiEpVjzCMABMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82YmJj MDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1NWE2OGVjMDAvZmE5Y2ViMjYtYWVkYi0z OWRiLThlZmQtM2EzOTgyNTA2YjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmJiYzAxMGUtYTNmNy00ZjZlLTlk NmMtZGFlNTVhNjhlYzAwLzZiYmMwMTBlLWEzZjctNGY2ZS05ZDZjLWRhZTU1YTY4 ZWMwMC5jcmwwHwYDVR0jBBgwFoAUhxTlRfZtXIg9hkvY4UwQsXZEEycwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82YmJjMDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1 NWE2OGVjMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPqYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABfeTH0PAAR7r8y4HcNXx8QGh4QKn8qS87u/bY8BWRXaf7jvYdiJiaOI 6EmJiFQxOY9mA+mrY2spSmByf1/wX86VOhyHmbnj2cZ1/0b9cTMIxflBIuaAdXuA f5co48FSBeARFzPh5jgd7JUaMYOM2iKDcNMyQhKaPrO6F+KIUOujuJ/2uhQT1Ohl Ve6lVHuDu3OrDYEMKm/GYudkyHEX7y0qSQW8jp7IGEtt2Y8U/jNM9IyeQhknKNGN Rhg0mv9KJy7Egi//NhovYgkszji12xpt7Cmm5cvey3UpdS62SmMnwHf2XBdiNUX4 6QGwnrVLtk+wt4mYwq9LxB/wy+4x6Bs= -----END CERTIFICATE-----Generated at Fri May 9 00:57:53 2025 by rpki-client