$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/3e0869f2-979b-3a34-9bb1-dbf0b47ac488.roa File: 3e0869f2-979b-3a34-9bb1-dbf0b47ac488.roa (raw, json) Hash identifier: Q6WyJ1yQoe4ZvEINbDhvx+dHYuksfQcK76+YNbg4Kvs= Subject key identifier: D3:07:4E:C1:FB:C4:2C:5A:3C:AA:62:3F:45:39:D7:3D:83:3D:5E:5C Certificate issuer: /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Certificate serial: 010D0C9F43285848B1F62F34F2F41443EBA4B8C0 Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/3e0869f2-979b-3a34-9bb1-dbf0b47ac488.roa Signing time: Tue 28 Jan 2025 14:00:52 +0000 ROA not before: Tue 28 Jan 2025 14:00:52 +0000 ROA not after: Mon 28 Apr 2025 13:00:52 +0000 asID: 3738 IP address blocks: 192.250.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b1:f6:2f:34:f2:f4:14:43:eb:a4:b8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Validity Not Before: Jan 28 14:00:52 2025 GMT Not After : Apr 28 13:00:52 2025 GMT Subject: CN=d100b205-6cc2-46d3-a7cb-7a4311a04635 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ff:70:e7:be:03:bb:6b:30:1c:a9:57:4e:f3: 5c:40:89:4a:98:65:51:87:92:bd:25:a4:fb:db:4e: 75:95:81:c6:ee:96:23:8d:81:8d:02:2e:24:0a:45: a1:e2:14:e2:33:b1:d0:55:9d:c3:00:fa:e0:54:be: db:90:e7:ac:6c:b1:cf:d0:83:5c:aa:72:54:33:ee: 3f:ed:38:4e:2f:91:b0:f2:30:a6:58:65:d9:a7:e3: 40:6a:e3:fd:a8:67:ef:e4:e8:e0:58:e5:62:bf:73: 6c:75:ee:b1:94:88:f2:5f:87:e4:2b:14:d8:76:7f: e3:33:41:40:bc:83:4a:97:34:e8:4b:22:c5:b1:3f: 1b:d8:83:dd:61:ff:6c:40:01:e1:c7:cb:d2:9f:94: 24:53:e5:51:0e:a0:7e:71:40:89:70:c7:07:af:f3: a7:65:6e:ed:27:48:e6:a9:24:9a:74:48:d7:b8:21: f4:bc:88:ca:76:d4:be:28:bc:01:cb:b0:cd:5b:a2: 7a:25:6a:a1:3f:7e:bc:e9:cb:7f:77:81:62:2e:f4: af:44:15:48:70:33:22:bb:c2:d7:10:0e:a1:0c:3d: 3e:bb:48:bd:8f:40:cd:fb:98:76:35:bd:f7:40:ff: b4:5f:0f:fb:88:92:a9:e3:f1:de:0b:36:3c:3a:c8: 6b:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:07:4E:C1:FB:C4:2C:5A:3C:AA:62:3F:45:39:D7:3D:83:3D:5E:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/3e0869f2-979b-3a34-9bb1-dbf0b47ac488.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl X509v3 Authority Key Identifier: keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer sbgp-ipAddrBlock: critical IPv4: 192.250.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:56:73:80:86:85:61:c5:33:dc:79:0a:a8:67:9b:2f:27:39: 66:55:83:71:60:ab:75:8a:b1:7b:7c:57:1a:09:cf:19:4d:9a: c2:77:5f:c1:38:13:b1:af:21:e6:90:c3:6d:7b:ab:04:c8:81: f8:44:31:28:57:0e:e8:4e:4f:aa:0f:ce:d0:55:9c:0b:a5:59: d9:c6:9e:fa:eb:f7:3f:52:6a:29:60:24:f3:ec:c8:b4:01:72: c8:6a:de:60:25:8e:ec:ca:45:96:20:c8:81:03:70:16:01:f8: e2:96:64:99:d4:0c:99:7b:db:5a:20:9b:fd:45:2a:9c:f4:41: 2f:f9:06:70:48:80:73:34:1f:bc:ee:45:b0:ef:2b:9c:3e:0e: 28:eb:c5:07:cf:bd:2d:69:f5:60:fc:03:cb:81:8d:42:ce:96: 4d:a1:e5:4e:b8:18:74:33:a8:3b:bd:0d:9f:ba:aa:29:50:20: 00:85:f2:1b:5f:73:f6:22:78:b0:71:84:d7:37:1f:56:a2:78: f7:df:4c:cd:36:de:8d:66:ef:b5:51:6e:2c:4f:82:bc:fc:99: b6:a2:1b:c5:fc:23:bb:cd:86:2c:95:5c:22:30:8a:bb:d7:bc: f3:5f:b4:df:e1:8f:6f:33:f7:f6:fd:c9:44:ed:3b:8f:1a:fa: a1:2c:42:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEix9i808vQUQ+ukuMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmJiYzAxMGUtYTNmNy00ZjZlLTlkNmMtZGFlNTVhNjhl YzAwMB4XDTI1MDEyODE0MDA1MloXDTI1MDQyODEzMDA1MlowLzEtMCsGA1UEAxMk ZDEwMGIyMDUtNmNjMi00NmQzLWE3Y2ItN2E0MzExYTA0NjM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkP9w574Du2swHKlXTvNcQIlKmGVRh5K9JaT7 2051lYHG7pYjjYGNAi4kCkWh4hTiM7HQVZ3DAPrgVL7bkOesbLHP0INcqnJUM+4/ 7ThOL5Gw8jCmWGXZp+NAauP9qGfv5OjgWOViv3Nsde6xlIjyX4fkKxTYdn/jM0FA vINKlzToSyLFsT8b2IPdYf9sQAHhx8vSn5QkU+VRDqB+cUCJcMcHr/OnZW7tJ0jm qSSadEjXuCH0vIjKdtS+KLwBy7DNW6J6JWqhP3686ct/d4FiLvSvRBVIcDMiu8LX EA6hDD0+u0i9j0DN+5h2Nb33QP+0Xw/7iJKp4/HeCzY8OshrOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNMHTsH7xCxaPKpiP0U51z2DPV5cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82YmJj MDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1NWE2OGVjMDAvM2UwODY5ZjItOTc5Yi0z YTM0LTliYjEtZGJmMGI0N2FjNDg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmJiYzAxMGUtYTNmNy00ZjZlLTlk NmMtZGFlNTVhNjhlYzAwLzZiYmMwMTBlLWEzZjctNGY2ZS05ZDZjLWRhZTU1YTY4 ZWMwMC5jcmwwHwYDVR0jBBgwFoAUhxTlRfZtXIg9hkvY4UwQsXZEEycwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82YmJjMDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1 NWE2OGVjMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPqMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGBWc4CGhWHFM9x5Cqhnmy8nOWZVg3Fgq3WKsXt8VxoJzxlNmsJ3X8E4 E7GvIeaQw217qwTIgfhEMShXDuhOT6oPztBVnAulWdnGnvrr9z9SailgJPPsyLQB cshq3mAljuzKRZYgyIEDcBYB+OKWZJnUDJl721ogm/1FKpz0QS/5BnBIgHM0H7zu RbDvK5w+DijrxQfPvS1p9WD8A8uBjULOlk2h5U64GHQzqDu9DZ+6qilQIACF8htf c/YieLBxhNc3H1aiePffTM023o1m77VRbixPgrz8mbaiG8X8I7vNhiyVXCIwirvX vPNftN/hj28z9/b9yUTtO48a+qEsQro= -----END CERTIFICATE-----Generated at Thu Apr 17 07:57:26 2025 by rpki-client