$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/11201fd6-3297-3fa0-9993-7151b5002998.roa File: 11201fd6-3297-3fa0-9993-7151b5002998.roa (raw, json) Hash identifier: /iwrODLTN4TFMCPwZkUBQmKvm3K/5cg0YHQE1ndxp84= Subject key identifier: C1:4F:6E:9D:3D:F5:FC:15:89:A7:6B:F7:2A:06:11:F0:E8:A5:35:BB Certificate issuer: /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Certificate serial: 010D0C9F432858497C3EEFC185737E6F7692EE80 Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/11201fd6-3297-3fa0-9993-7151b5002998.roa Signing time: Fri 11 Apr 2025 01:00:48 +0000 ROA not before: Fri 11 Apr 2025 01:00:48 +0000 ROA not after: Thu 10 Jul 2025 01:00:48 +0000 asID: 3738 IP address blocks: 192.250.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7c:3e:ef:c1:85:73:7e:6f:76:92:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Validity Not Before: Apr 11 01:00:48 2025 GMT Not After : Jul 10 01:00:48 2025 GMT Subject: CN=d9c17cbf-869b-4bd3-a13b-dad51491c491 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:43:24:30:20:a6:ac:e1:e2:b9:81:fc:68:15: 1a:a9:de:67:9c:d4:32:31:de:df:2c:be:1b:cc:e6: fb:5f:c4:75:bd:67:23:be:50:57:7e:bc:50:1e:a1: 73:a2:b5:f0:31:f8:d3:1e:e4:cc:5b:10:01:e9:32: 72:d0:ff:70:0f:53:af:09:77:8a:5e:a4:8a:e0:8f: bc:72:ff:1c:d7:5e:d5:06:46:17:75:a9:56:14:26: bc:2e:1b:4b:90:90:88:b6:7b:87:2a:8f:bd:67:62: 93:f1:a3:d1:56:9d:4b:45:8c:1e:8e:f7:28:aa:c3: 28:23:3c:b8:f6:75:50:7b:fb:36:e3:e5:69:8f:45: d3:8a:5e:65:0e:9a:5f:e7:1f:3c:55:69:c5:28:37: f6:dc:c6:cf:21:92:5e:2d:5b:38:71:72:ec:bb:b6: 76:72:07:2f:d7:91:1d:25:2a:e1:bc:ed:df:50:c5: a1:78:42:91:c0:21:25:db:a2:9a:6b:ce:83:7b:0e: 97:be:13:19:31:23:bf:fb:1f:e5:98:ee:fc:8b:f2: 83:9d:a6:a8:29:5a:3e:25:b9:f9:f2:99:0d:23:4b: 5c:88:59:05:38:5f:0b:ab:e7:04:12:b4:e2:1a:7b: 35:be:01:11:ac:dc:86:08:60:d3:7f:b4:d6:37:fa: 74:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:4F:6E:9D:3D:F5:FC:15:89:A7:6B:F7:2A:06:11:F0:E8:A5:35:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/11201fd6-3297-3fa0-9993-7151b5002998.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl X509v3 Authority Key Identifier: keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer sbgp-ipAddrBlock: critical IPv4: 192.250.119.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:9b:61:89:30:64:6d:08:27:8e:31:de:51:75:c2:83:d8:e3: 16:4c:0f:b0:ac:45:ac:9f:84:4f:69:a5:f5:1e:af:ef:f8:ec: 6a:d8:ed:e1:8e:e1:fa:2b:be:a1:a6:ce:29:25:a5:8e:ed:12: 09:10:cd:64:87:3d:09:ee:e3:8e:3c:11:2c:99:c7:9b:a1:23: 92:42:30:0c:8a:cf:89:2a:8a:ff:62:cb:8e:5d:89:29:39:98: 1b:b8:48:e5:95:02:42:78:43:9d:c6:c5:97:48:e2:04:54:86: e5:51:a1:1a:10:e7:c4:3d:75:21:7e:6c:d1:ad:df:0b:ea:bf: 30:36:e4:28:da:5d:df:41:76:79:10:58:67:1a:66:72:d4:36: 6a:c7:bb:df:74:9c:67:83:81:57:f7:31:e8:c5:91:da:d7:f2: b9:9b:4e:8e:f2:dc:56:da:ae:b5:5e:64:6d:b3:86:5e:54:62: 68:ee:b6:ea:fd:ee:5c:7e:f6:11:16:b6:8b:b2:5e:1e:d6:a9: e2:bb:c3:6e:ab:fb:87:30:9d:fa:20:ad:21:fe:49:d9:9a:6c: 20:eb:be:ca:fa:a5:de:34:4e:77:33:c6:db:60:60:31:b1:3d: 96:23:7d:f5:5e:5b:3e:62:db:ac:3c:e9:76:6f:d6:51:45:f7: e0:0d:ec:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl8Pu/BhXN+b3aS7oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmJiYzAxMGUtYTNmNy00ZjZlLTlkNmMtZGFlNTVhNjhl YzAwMB4XDTI1MDQxMTAxMDA0OFoXDTI1MDcxMDAxMDA0OFowLzEtMCsGA1UEAxMk ZDljMTdjYmYtODY5Yi00YmQzLWExM2ItZGFkNTE0OTFjNDkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUMkMCCmrOHiuYH8aBUaqd5nnNQyMd7fLL4b zOb7X8R1vWcjvlBXfrxQHqFzorXwMfjTHuTMWxAB6TJy0P9wD1OvCXeKXqSK4I+8 cv8c117VBkYXdalWFCa8LhtLkJCItnuHKo+9Z2KT8aPRVp1LRYwejvcoqsMoIzy4 9nVQe/s24+Vpj0XTil5lDppf5x88VWnFKDf23MbPIZJeLVs4cXLsu7Z2cgcv15Ed JSrhvO3fUMWheEKRwCEl26Kaa86Dew6XvhMZMSO/+x/lmO78i/KDnaaoKVo+Jbn5 8pkNI0tciFkFOF8Lq+cEErTiGns1vgERrNyGCGDTf7TWN/p0QQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMFPbp099fwViadr9yoGEfDopTW7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82YmJj MDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1NWE2OGVjMDAvMTEyMDFmZDYtMzI5Ny0z ZmEwLTk5OTMtNzE1MWI1MDAyOTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmJiYzAxMGUtYTNmNy00ZjZlLTlk NmMtZGFlNTVhNjhlYzAwLzZiYmMwMTBlLWEzZjctNGY2ZS05ZDZjLWRhZTU1YTY4 ZWMwMC5jcmwwHwYDVR0jBBgwFoAUhxTlRfZtXIg9hkvY4UwQsXZEEycwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82YmJjMDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1 NWE2OGVjMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPp3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEqbYYkwZG0IJ44x3lF1woPY4xZMD7CsRayfhE9ppfUer+/47GrY7eGO 4forvqGmziklpY7tEgkQzWSHPQnu4448ESyZx5uhI5JCMAyKz4kqiv9iy45diSk5 mBu4SOWVAkJ4Q53GxZdI4gRUhuVRoRoQ58Q9dSF+bNGt3wvqvzA25CjaXd9BdnkQ WGcaZnLUNmrHu990nGeDgVf3MejFkdrX8rmbTo7y3FbarrVeZG2zhl5UYmjutur9 7lx+9hEWtouyXh7WqeK7w26r+4cwnfogrSH+SdmabCDrvsr6pd40TnczxttgYDGx PZYjffVeWz5i26w86XZv1lFF9+AN7JQ= -----END CERTIFICATE-----Generated at Thu Apr 17 08:04:40 2025 by rpki-client