$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/3f0a4dd9-65df-3b61-b18e-67c029327ca7.roa File: 3f0a4dd9-65df-3b61-b18e-67c029327ca7.roa (raw, json) Hash identifier: VlHwdSzjduZkwtcMbaKaJ7QFNKvRWmvROe8Dz8DYU0w= Subject key identifier: CC:CF:C7:73:31:6B:F9:6D:8D:C0:3F:D3:71:73:30:4A:52:BB:6B:30 Certificate issuer: /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Certificate serial: 010D0C9F4328584A5E6060F0BAFF7DB853B51380 Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/3f0a4dd9-65df-3b61-b18e-67c029327ca7.roa Signing time: Tue 01 Jul 2025 01:00:50 +0000 ROA not before: Tue 01 Jul 2025 01:00:50 +0000 ROA not after: Mon 29 Sep 2025 01:00:50 +0000 asID: 3738 IP address blocks: 192.250.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Jul 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5e:60:60:f0:ba:ff:7d:b8:53:b5:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Validity Not Before: Jul 1 01:00:50 2025 GMT Not After : Sep 29 01:00:50 2025 GMT Subject: CN=c240cc29-4bc1-4ec2-9b55-04301a426dd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:f2:18:fa:97:59:ea:36:89:44:df:68:98:75: b0:7c:18:2b:2c:b2:d8:5c:55:63:b7:87:b9:e4:99: e1:54:1e:b7:ef:b6:59:f0:53:42:2e:f5:c9:91:60: 5a:0d:1e:5c:c4:c5:0d:62:aa:1e:03:66:d1:f9:a6: f8:c9:2b:aa:f3:64:57:ff:21:f5:f2:d0:6a:dd:ad: 0a:7b:3c:24:cd:ff:88:fa:c3:e4:a2:38:0d:a3:6d: ab:04:ed:93:f3:e0:4f:34:d9:7b:11:aa:ae:eb:28: 6c:04:11:62:40:a8:f2:1c:a6:b2:f0:95:02:ca:fa: fa:94:6b:9b:8c:30:90:c6:e4:b4:9f:07:67:95:73: 91:75:a1:89:76:a6:27:16:3c:c6:2a:0f:ee:cf:b9: 84:43:b3:f2:af:a9:4e:59:9c:07:e9:03:0d:cd:11: 96:48:5c:ce:d9:6d:84:dd:51:41:66:9d:bb:48:3e: b4:5e:7b:3f:87:09:b1:79:0e:68:cc:9e:14:cf:cf: 42:7a:dd:87:6b:e5:fa:1d:96:81:34:81:c9:e6:b3: 90:27:d9:5b:53:7a:70:fe:6b:2e:20:3d:93:7f:3c: b3:7e:0f:3d:7f:cf:68:8b:64:68:9f:28:b8:bf:3c: de:9d:9d:08:e9:62:5a:41:e0:27:00:6d:fd:59:0a: dd:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:CF:C7:73:31:6B:F9:6D:8D:C0:3F:D3:71:73:30:4A:52:BB:6B:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/3f0a4dd9-65df-3b61-b18e-67c029327ca7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl X509v3 Authority Key Identifier: keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer sbgp-ipAddrBlock: critical IPv4: 192.250.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:95:49:b8:2c:91:24:d9:52:07:61:6d:71:1f:53:b4:6e:1d: 90:ae:a4:95:00:2a:91:54:d5:8c:dc:55:33:19:d6:a6:1a:85: 18:f3:e9:d6:d1:14:c8:73:ac:ea:8c:28:73:ea:3c:48:e9:7c: 88:ef:5b:87:3d:0b:10:76:9d:4a:a5:ec:8f:02:66:3f:a7:e9: 51:6d:83:57:35:7c:ab:b8:dd:55:3d:ad:80:fc:51:8c:fa:ea: 73:e3:96:b1:11:cd:97:45:76:50:37:06:94:bb:c8:05:26:d4: 29:09:88:5d:cd:1f:22:04:78:32:2d:2b:02:95:aa:03:e7:43: fd:a6:2d:40:95:3b:9b:48:be:4f:39:50:74:36:76:12:53:cc: 95:f2:cf:18:58:35:23:2c:10:34:d3:32:30:bf:43:74:19:46: 50:42:3b:b5:a5:b8:79:a4:d5:27:6b:3a:42:76:63:4a:1b:66: 4e:a3:15:d2:e2:3d:5e:e5:7e:5c:63:1c:b5:8d:e8:39:01:93: c5:f8:81:89:0b:d3:31:2c:68:22:5e:d3:b0:05:9f:3b:bd:33: 22:8a:e8:de:27:f7:a2:10:45:63:c2:e0:24:2d:a4:f8:99:69: 06:16:4a:1b:79:e6:d6:34:ad:db:56:ac:03:eb:0e:d8:42:e1: 89:94:02:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpeYGDwuv99uFO1E4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmJiYzAxMGUtYTNmNy00ZjZlLTlkNmMtZGFlNTVhNjhl YzAwMB4XDTI1MDcwMTAxMDA1MFoXDTI1MDkyOTAxMDA1MFowLzEtMCsGA1UEAxMk YzI0MGNjMjktNGJjMS00ZWMyLTliNTUtMDQzMDFhNDI2ZGQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgfIY+pdZ6jaJRN9omHWwfBgrLLLYXFVjt4e5 5JnhVB6377ZZ8FNCLvXJkWBaDR5cxMUNYqoeA2bR+ab4ySuq82RX/yH18tBq3a0K ezwkzf+I+sPkojgNo22rBO2T8+BPNNl7Eaqu6yhsBBFiQKjyHKay8JUCyvr6lGub jDCQxuS0nwdnlXORdaGJdqYnFjzGKg/uz7mEQ7Pyr6lOWZwH6QMNzRGWSFzO2W2E 3VFBZp27SD60Xns/hwmxeQ5ozJ4Uz89Cet2Ha+X6HZaBNIHJ5rOQJ9lbU3pw/msu ID2Tfzyzfg89f89oi2Ronyi4vzzenZ0I6WJaQeAnAG39WQrdXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMzPx3Mxa/ltjcA/03FzMEpSu2swMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82YmJj MDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1NWE2OGVjMDAvM2YwYTRkZDktNjVkZi0z YjYxLWIxOGUtNjdjMDI5MzI3Y2E3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmJiYzAxMGUtYTNmNy00ZjZlLTlk NmMtZGFlNTVhNjhlYzAwLzZiYmMwMTBlLWEzZjctNGY2ZS05ZDZjLWRhZTU1YTY4 ZWMwMC5jcmwwHwYDVR0jBBgwFoAUhxTlRfZtXIg9hkvY4UwQsXZEEycwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82YmJjMDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1 NWE2OGVjMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPpEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC+VSbgskSTZUgdhbXEfU7RuHZCupJUAKpFU1YzcVTMZ1qYahRjz6dbR FMhzrOqMKHPqPEjpfIjvW4c9CxB2nUql7I8CZj+n6VFtg1c1fKu43VU9rYD8UYz6 6nPjlrERzZdFdlA3BpS7yAUm1CkJiF3NHyIEeDItKwKVqgPnQ/2mLUCVO5tIvk85 UHQ2dhJTzJXyzxhYNSMsEDTTMjC/Q3QZRlBCO7WluHmk1SdrOkJ2Y0obZk6jFdLi PV7lflxjHLWN6DkBk8X4gYkL0zEsaCJe07AFnzu9MyKK6N4n96IQRWPC4CQtpPiZ aQYWSht55tY0rdtWrAPrDthC4YmUAiI= -----END CERTIFICATE-----Generated at Thu Jul 10 23:49:40 2025 by rpki-client