$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/18be9d53-2126-3b32-bb14-95983399a677.roa File: 18be9d53-2126-3b32-bb14-95983399a677.roa (raw, json) Hash identifier: VKbjYrdGJuOxiFGmbJKEb7bCN3wMhM69KHjqr0WOq90= Subject key identifier: B4:7C:F0:A3:91:A4:0C:9A:11:E9:AC:76:72:57:8A:A5:EB:7F:F7:2C Certificate issuer: /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Certificate serial: 010D0C9F43285848B1F62BBBED1FD231DDAF8380 Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/18be9d53-2126-3b32-bb14-95983399a677.roa Signing time: Tue 28 Jan 2025 14:00:52 +0000 ROA not before: Tue 28 Jan 2025 14:00:52 +0000 ROA not after: Mon 28 Apr 2025 13:00:52 +0000 asID: 3738 IP address blocks: 192.250.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b1:f6:2b:bb:ed:1f:d2:31:dd:af:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Validity Not Before: Jan 28 14:00:52 2025 GMT Not After : Apr 28 13:00:52 2025 GMT Subject: CN=3a64383a-0d65-458f-bf68-30320d89738a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:0e:69:f4:f6:68:cb:e2:b5:e5:51:e5:2b:49: 75:38:f0:4a:d4:98:74:36:6a:bd:90:ad:bf:22:11: 2f:a0:a2:86:11:ca:4b:d1:53:5c:ee:cf:7c:91:ca: ef:fb:f2:21:4c:4d:54:59:0e:ca:ab:99:11:b6:3e: bd:a5:b1:85:09:d3:72:3c:fd:37:4c:c2:66:be:9d: bc:54:fc:0a:39:18:9d:ec:4a:3b:9a:07:a1:97:7b: 73:66:6f:e7:99:0d:a6:3a:8f:7a:6c:0e:e9:be:1b: 2b:d7:11:8c:d0:dd:dd:c6:bd:ac:d8:d0:4e:7c:3f: 51:cd:83:00:77:e4:4e:fc:26:8f:b2:a2:c8:c8:1a: 96:f0:f8:0c:10:96:34:af:8b:b7:49:27:a4:24:2e: aa:05:5f:bd:3a:43:79:2e:f0:f4:24:a7:5e:a4:b6: 25:ee:12:b4:02:8c:0f:f4:2d:47:9a:18:2c:8f:c6: 86:da:51:1e:1d:49:6d:50:ee:94:d9:d6:19:32:e6: 34:da:2d:ab:a5:4f:4a:0f:05:37:d4:65:3b:84:ca: a5:83:b2:2e:93:1d:a0:ee:f2:92:c8:ed:a7:60:ca: 2b:b8:e1:85:5a:bc:5d:e3:5e:11:22:7b:60:37:c9: 0c:33:21:58:ec:1c:89:f4:82:3f:1d:ab:9d:53:24: a7:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:7C:F0:A3:91:A4:0C:9A:11:E9:AC:76:72:57:8A:A5:EB:7F:F7:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/18be9d53-2126-3b32-bb14-95983399a677.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl X509v3 Authority Key Identifier: keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer sbgp-ipAddrBlock: critical IPv4: 192.250.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:ad:36:bf:7b:5c:c6:7b:d9:7d:8c:12:48:ec:f4:a3:aa:2a: ce:49:de:c2:71:55:62:d6:0d:78:0c:c2:41:0d:41:03:3a:86: e8:39:37:67:3d:90:93:f3:5e:fa:8b:f8:c7:da:06:7d:24:fc: 7a:bb:a9:3f:5f:7d:70:82:89:7d:f2:9d:0b:7a:b2:3c:3a:7e: ce:bc:46:be:23:a5:e9:7d:d0:dc:98:f9:55:b8:8b:4c:65:32: 3f:0c:5c:0d:63:8b:27:3e:9b:66:27:50:5b:c9:1b:e4:da:99: 2f:ba:5d:6f:6c:35:73:27:8a:fb:ff:f4:24:53:9c:d5:5d:7d: 92:a5:ef:7a:de:c5:f6:41:8f:8a:3b:96:ba:4b:e1:51:c2:1d: 31:f0:4a:02:14:d7:78:bd:85:8a:cc:09:8f:aa:73:15:7a:21: 28:fb:e4:01:a9:ed:ff:62:f4:1e:39:ee:8c:ca:79:de:85:0b: 27:0f:64:25:11:da:4f:3e:78:2f:4e:96:37:c7:1c:62:fe:30: 0a:72:8d:4e:b0:ff:fa:61:53:47:60:71:21:3c:ad:03:c0:9f: 75:cc:2c:cf:20:74:35:90:cc:9b:0f:81:80:03:f5:3b:56:74: f0:a8:d1:34:b6:9e:38:9e:5b:62:3d:22:37:26:2a:4b:97:19: 20:4d:98:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEix9iu77R/SMd2vg4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmJiYzAxMGUtYTNmNy00ZjZlLTlkNmMtZGFlNTVhNjhl YzAwMB4XDTI1MDEyODE0MDA1MloXDTI1MDQyODEzMDA1MlowLzEtMCsGA1UEAxMk M2E2NDM4M2EtMGQ2NS00NThmLWJmNjgtMzAzMjBkODk3MzhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQ5p9PZoy+K15VHlK0l1OPBK1Jh0Nmq9kK2/ IhEvoKKGEcpL0VNc7s98kcrv+/IhTE1UWQ7Kq5kRtj69pbGFCdNyPP03TMJmvp28 VPwKORid7Eo7mgehl3tzZm/nmQ2mOo96bA7pvhsr1xGM0N3dxr2s2NBOfD9RzYMA d+RO/CaPsqLIyBqW8PgMEJY0r4u3SSekJC6qBV+9OkN5LvD0JKdepLYl7hK0AowP 9C1Hmhgsj8aG2lEeHUltUO6U2dYZMuY02i2rpU9KDwU31GU7hMqlg7Iukx2g7vKS yO2nYMoruOGFWrxd414RIntgN8kMMyFY7ByJ9II/HaudUySn3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLR88KORpAyaEemsdnJXiqXrf/csMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82YmJj MDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1NWE2OGVjMDAvMThiZTlkNTMtMjEyNi0z YjMyLWJiMTQtOTU5ODMzOTlhNjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmJiYzAxMGUtYTNmNy00ZjZlLTlk NmMtZGFlNTVhNjhlYzAwLzZiYmMwMTBlLWEzZjctNGY2ZS05ZDZjLWRhZTU1YTY4 ZWMwMC5jcmwwHwYDVR0jBBgwFoAUhxTlRfZtXIg9hkvY4UwQsXZEEycwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82YmJjMDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1 NWE2OGVjMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPqZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ6tNr97XMZ72X2MEkjs9KOqKs5J3sJxVWLWDXgMwkENQQM6hug5N2c9 kJPzXvqL+MfaBn0k/Hq7qT9ffXCCiX3ynQt6sjw6fs68Rr4jpel90NyY+VW4i0xl Mj8MXA1jiyc+m2YnUFvJG+TamS+6XW9sNXMnivv/9CRTnNVdfZKl73rexfZBj4o7 lrpL4VHCHTHwSgIU13i9hYrMCY+qcxV6ISj75AGp7f9i9B457ozKed6FCycPZCUR 2k8+eC9OljfHHGL+MApyjU6w//phU0dgcSE8rQPAn3XMLM8gdDWQzJsPgYAD9TtW dPCo0TS2njieW2I9IjcmKkuXGSBNmLY= -----END CERTIFICATE-----Generated at Thu Apr 17 08:01:27 2025 by rpki-client