$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/3ead1481-4beb-3b72-86ed-e68ad4803de2.roa File: 3ead1481-4beb-3b72-86ed-e68ad4803de2.roa (raw, json) Hash identifier: 84TIJE94DipKApI2ob/CO+CaRxshzRIVeNPfHvHhsV8= Subject key identifier: 80:70:15:D2:EF:EA:2D:13:DE:70:4F:2A:B5:33:5B:8A:05:BA:21:8F Certificate issuer: /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Certificate serial: 010D0C9F4328584B3126E9D9FFF5C41A38192700 Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/3ead1481-4beb-3b72-86ed-e68ad4803de2.roa Signing time: Sun 14 Sep 2025 13:00:42 +0000 ROA not before: Sun 14 Sep 2025 13:00:42 +0000 ROA not after: Sat 13 Dec 2025 14:00:42 +0000 asID: 3738 IP address blocks: 192.250.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Sep 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:31:26:e9:d9:ff:f5:c4:1a:38:19:27:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Validity Not Before: Sep 14 13:00:42 2025 GMT Not After : Dec 13 14:00:42 2025 GMT Subject: CN=c4c055cc-ae4d-4bc4-8686-2a1405db36ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:44:40:cd:31:de:e3:2a:f4:da:05:c2:9f:3e: 34:8a:47:77:56:81:31:08:5b:3b:8e:63:7c:4f:48: f1:86:67:ec:af:ab:75:2b:aa:1d:fd:59:3f:c8:48: 19:af:19:ae:aa:15:7f:2b:54:31:f8:49:d3:e0:eb: d2:e0:58:76:e5:55:4d:60:59:27:63:34:d6:f8:4e: 9c:c3:85:74:06:ed:2c:18:4b:96:21:35:f0:2c:70: 6b:bf:05:21:01:38:76:72:d8:18:bc:79:25:90:69: 46:0f:c6:d3:d9:4c:e0:87:1f:37:09:9c:da:e2:20: 87:19:71:b3:cd:b3:b7:e3:24:05:d0:d0:6c:43:4c: 37:38:79:ff:c0:09:e6:f3:2d:98:e5:69:ba:53:7b: 33:b8:d3:90:3c:3b:5d:a0:61:7e:ae:87:9f:6f:19: fb:7d:c4:1d:4d:cb:7d:0e:a4:1f:a2:61:27:5d:cf: dc:96:c1:21:56:5c:20:6a:de:68:fe:83:21:c4:93: 18:1d:9c:59:36:2e:0f:3e:28:fb:af:8d:a6:84:9b: ba:28:a9:89:3a:26:5a:b1:ad:08:e3:ca:47:84:18: b0:26:e5:6d:fa:04:99:65:f8:5b:fc:86:49:d5:df: e2:8e:49:2a:a7:72:9f:5a:11:cd:c6:a2:e7:e6:6c: 70:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:70:15:D2:EF:EA:2D:13:DE:70:4F:2A:B5:33:5B:8A:05:BA:21:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/3ead1481-4beb-3b72-86ed-e68ad4803de2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl X509v3 Authority Key Identifier: keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer sbgp-ipAddrBlock: critical IPv4: 192.250.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:e0:3a:f4:93:48:4a:ec:c1:f6:80:55:11:52:06:2f:a5:dd: c9:6c:86:be:34:a5:6e:78:74:45:aa:94:f9:a5:a8:c2:4b:02: a7:37:c9:59:06:fe:0e:a0:62:8a:bb:32:10:c7:b5:46:fe:51: 63:6d:fb:0b:3a:5a:50:74:c0:7a:08:b9:7f:ad:9b:55:88:e4: 04:6b:89:ee:4e:78:5b:16:61:99:24:34:85:77:da:e3:c3:54: 85:44:f0:42:4a:d3:75:32:3b:c5:c6:94:d9:4a:45:a4:5d:06: b4:10:51:aa:be:4e:51:c7:13:ce:25:31:fd:18:26:9b:fa:84: 11:38:2d:23:09:3d:c5:d7:c9:eb:b2:75:0c:55:ad:1b:fe:9c: c6:09:f0:36:4f:84:24:2d:74:73:e6:26:d6:ca:ec:61:68:e5: 8d:4b:4a:3c:2f:97:94:39:65:20:42:0e:23:4b:8a:44:3d:c3: ed:5a:68:36:ff:09:c0:d3:cf:db:6a:b6:5a:ac:b5:2c:4f:53: 05:d3:e5:57:f1:ed:d9:71:23:15:cb:e5:21:bf:24:5f:15:ae: a8:92:9a:2a:31:de:af:01:57:fb:76:88:f7:e2:dc:27:09:47: 08:01:f8:52:90:03:95:99:f6:27:b3:d6:86:ab:7a:42:79:65: 42:8c:3a:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsxJunZ//XEGjgZJwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmJiYzAxMGUtYTNmNy00ZjZlLTlkNmMtZGFlNTVhNjhl YzAwMB4XDTI1MDkxNDEzMDA0MloXDTI1MTIxMzE0MDA0MlowLzEtMCsGA1UEAxMk YzRjMDU1Y2MtYWU0ZC00YmM0LTg2ODYtMmExNDA1ZGIzNmJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtURAzTHe4yr02gXCnz40ikd3VoExCFs7jmN8 T0jxhmfsr6t1K6od/Vk/yEgZrxmuqhV/K1Qx+EnT4OvS4Fh25VVNYFknYzTW+E6c w4V0Bu0sGEuWITXwLHBrvwUhATh2ctgYvHklkGlGD8bT2Uzghx83CZza4iCHGXGz zbO34yQF0NBsQ0w3OHn/wAnm8y2Y5Wm6U3szuNOQPDtdoGF+roefbxn7fcQdTct9 DqQfomEnXc/clsEhVlwgat5o/oMhxJMYHZxZNi4PPij7r42mhJu6KKmJOiZasa0I 48pHhBiwJuVt+gSZZfhb/IZJ1d/ijkkqp3KfWhHNxqLn5mxwfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIBwFdLv6i0T3nBPKrUzW4oFuiGPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82YmJj MDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1NWE2OGVjMDAvM2VhZDE0ODEtNGJlYi0z YjcyLTg2ZWQtZTY4YWQ0ODAzZGUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmJiYzAxMGUtYTNmNy00ZjZlLTlk NmMtZGFlNTVhNjhlYzAwLzZiYmMwMTBlLWEzZjctNGY2ZS05ZDZjLWRhZTU1YTY4 ZWMwMC5jcmwwHwYDVR0jBBgwFoAUhxTlRfZtXIg9hkvY4UwQsXZEEycwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82YmJjMDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1 NWE2OGVjMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPojMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAHgOvSTSErswfaAVRFSBi+l3clshr40pW54dEWqlPmlqMJLAqc3yVkG /g6gYoq7MhDHtUb+UWNt+ws6WlB0wHoIuX+tm1WI5ARrie5OeFsWYZkkNIV32uPD VIVE8EJK03UyO8XGlNlKRaRdBrQQUaq+TlHHE84lMf0YJpv6hBE4LSMJPcXXyeuy dQxVrRv+nMYJ8DZPhCQtdHPmJtbK7GFo5Y1LSjwvl5Q5ZSBCDiNLikQ9w+1aaDb/ CcDTz9tqtlqstSxPUwXT5Vfx7dlxIxXL5SG/JF8VrqiSmiox3q8BV/t2iPfi3CcJ RwgB+FKQA5WZ9iez1oarekJ5ZUKMOjA= -----END CERTIFICATE-----Generated at Wed Sep 17 01:06:33 2025 by rpki-client