$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/3c42f4d1-9c05-38d4-8804-432f88c01675.roa File: 3c42f4d1-9c05-38d4-8804-432f88c01675.roa (raw, json) Hash identifier: 0AAwq7bPw/62SHeglWz1yUJnza44SzUJq7zw/S/Y3QE= Subject key identifier: C8:00:50:D6:CB:E7:8C:60:37:4B:8A:7B:61:7D:B3:4A:B1:98:E2:CC Certificate issuer: /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Certificate serial: 010D0C9F4328584A5B95B2428D28DDA2C2929B00 Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/3c42f4d1-9c05-38d4-8804-432f88c01675.roa Signing time: Mon 30 Jun 2025 01:00:50 +0000 ROA not before: Mon 30 Jun 2025 01:00:50 +0000 ROA not after: Sun 28 Sep 2025 01:00:50 +0000 asID: 3738 IP address blocks: 192.250.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Jul 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5b:95:b2:42:8d:28:dd:a2:c2:92:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Validity Not Before: Jun 30 01:00:50 2025 GMT Not After : Sep 28 01:00:50 2025 GMT Subject: CN=dcab3bf9-6e8d-4688-8cee-110a6ecf0d14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:fe:15:b0:79:73:1f:30:bc:17:5a:77:82:7b: 0d:1e:46:9d:2a:68:95:6d:9a:3b:17:c3:4e:c3:b2: a6:3d:59:fb:4f:01:1d:0c:67:23:f9:76:88:a5:53: 97:4e:62:2d:76:76:3b:87:fa:af:71:c3:d2:f4:bb: fd:18:91:bf:91:4d:6a:b3:a5:56:a7:51:46:48:f6: a4:32:c3:66:21:df:6b:ae:6c:55:aa:b5:9b:ef:36: 37:ec:c3:7e:b5:c1:a3:83:a7:07:27:c6:e3:7a:f7: 1d:bd:c4:8e:92:0c:12:81:1b:fe:49:82:96:37:d3: a0:90:e1:61:f9:b7:84:de:40:41:6f:c6:9f:5c:0c: e9:41:0d:93:52:12:91:56:31:f8:50:35:bd:ce:e8: f7:ef:61:02:e2:2e:d3:7d:dd:88:71:cf:0d:bc:b9: 9a:0c:9f:9c:91:25:c2:23:3b:4f:c3:d6:65:22:70: 11:7f:b6:93:17:ab:35:3a:d1:5d:99:1f:a1:f6:0b: b9:86:9c:e6:d4:25:d7:d9:b1:cc:e3:93:80:88:d6: 92:eb:7f:f6:f0:b4:b6:33:8f:3f:bc:24:b9:8e:11: c4:3c:c4:ed:24:a0:e2:88:ba:7d:f2:0d:e9:2f:fb: 1d:d1:53:a3:4f:01:bd:9e:cf:d9:e3:26:7f:8f:96: 56:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:00:50:D6:CB:E7:8C:60:37:4B:8A:7B:61:7D:B3:4A:B1:98:E2:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/3c42f4d1-9c05-38d4-8804-432f88c01675.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl X509v3 Authority Key Identifier: keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer sbgp-ipAddrBlock: critical IPv4: 192.250.103.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:bc:e0:ca:59:a0:a7:61:1d:9c:7c:a6:a8:11:c1:ac:3e:01: cc:a8:56:47:5e:f2:53:b1:90:77:b4:60:b6:6d:93:e6:b6:80: d5:93:3f:58:18:27:1e:01:11:6d:a9:23:a1:5b:64:34:b5:f4: 51:78:90:fb:69:82:b3:ae:00:c3:be:d3:1f:f4:f0:32:71:b6: 46:6b:23:75:58:9f:43:a4:d9:b7:64:5a:cf:1e:a4:42:f6:88: a4:40:1b:ef:f1:e8:4c:e0:4f:4c:6a:c2:f3:08:d9:cb:c2:af: 07:f8:55:e0:40:24:2d:6d:86:80:80:0f:4b:66:9f:db:d5:66: db:65:85:d7:1e:ff:e1:6c:89:37:3e:de:1f:65:7b:4e:9c:dd: fa:86:3d:95:95:e4:c8:02:9b:77:66:d5:63:cb:d4:a4:88:12: c3:65:26:f5:87:41:0a:7b:54:9c:37:bc:6e:f2:70:00:ec:b4: 81:ae:ee:eb:49:af:7c:f3:72:bc:59:30:1e:72:88:13:77:4e: 3d:f1:20:37:00:a8:84:3b:f4:17:3b:81:a4:d6:c7:0d:f4:a7: 31:60:1c:c1:17:f8:3e:13:17:1e:62:76:d8:13:9e:e3:42:08: 4a:e5:91:43:bc:99:da:22:83:f9:85:4e:aa:03:90:d1:27:ac: 77:01:09:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpblbJCjSjdosKSmwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmJiYzAxMGUtYTNmNy00ZjZlLTlkNmMtZGFlNTVhNjhl YzAwMB4XDTI1MDYzMDAxMDA1MFoXDTI1MDkyODAxMDA1MFowLzEtMCsGA1UEAxMk ZGNhYjNiZjktNmU4ZC00Njg4LThjZWUtMTEwYTZlY2YwZDE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkv4VsHlzHzC8F1p3gnsNHkadKmiVbZo7F8NO w7KmPVn7TwEdDGcj+XaIpVOXTmItdnY7h/qvccPS9Lv9GJG/kU1qs6VWp1FGSPak MsNmId9rrmxVqrWb7zY37MN+tcGjg6cHJ8bjevcdvcSOkgwSgRv+SYKWN9OgkOFh +beE3kBBb8afXAzpQQ2TUhKRVjH4UDW9zuj372EC4i7Tfd2Icc8NvLmaDJ+ckSXC IztPw9ZlInARf7aTF6s1OtFdmR+h9gu5hpzm1CXX2bHM45OAiNaS63/28LS2M48/ vCS5jhHEPMTtJKDiiLp98g3pL/sd0VOjTwG9ns/Z4yZ/j5ZW9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMgAUNbL54xgN0uKe2F9s0qxmOLMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82YmJj MDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1NWE2OGVjMDAvM2M0MmY0ZDEtOWMwNS0z OGQ0LTg4MDQtNDMyZjg4YzAxNjc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmJiYzAxMGUtYTNmNy00ZjZlLTlk NmMtZGFlNTVhNjhlYzAwLzZiYmMwMTBlLWEzZjctNGY2ZS05ZDZjLWRhZTU1YTY4 ZWMwMC5jcmwwHwYDVR0jBBgwFoAUhxTlRfZtXIg9hkvY4UwQsXZEEycwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82YmJjMDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1 NWE2OGVjMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPpnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKq84MpZoKdhHZx8pqgRwaw+AcyoVkde8lOxkHe0YLZtk+a2gNWTP1gY Jx4BEW2pI6FbZDS19FF4kPtpgrOuAMO+0x/08DJxtkZrI3VYn0Ok2bdkWs8epEL2 iKRAG+/x6EzgT0xqwvMI2cvCrwf4VeBAJC1thoCAD0tmn9vVZttlhdce/+FsiTc+ 3h9le06c3fqGPZWV5MgCm3dm1WPL1KSIEsNlJvWHQQp7VJw3vG7ycADstIGu7utJ r3zzcrxZMB5yiBN3Tj3xIDcAqIQ79Bc7gaTWxw30pzFgHMEX+D4TFx5idtgTnuNC CErlkUO8mdoig/mFTqoDkNEnrHcBCbY= -----END CERTIFICATE-----Generated at Thu Jul 10 23:53:03 2025 by rpki-client