$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/67376c8e-267d-36f2-814a-f2c489f44f6e.roa File: 67376c8e-267d-36f2-814a-f2c489f44f6e.roa (raw, json) Hash identifier: +E1jjfH9+Xa/xFgu3qIIs7C4XcDIGsb/kL0fadhhOEs= Subject key identifier: 64:4E:E4:28:B6:0C:4B:16:BD:F1:A0:11:51:57:6F:C6:6C:9A:57:6A Certificate issuer: /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Certificate serial: 010D0C9F4328584A7085F2A9D04D1B596A2ED180 Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/67376c8e-267d-36f2-814a-f2c489f44f6e.roa Signing time: Mon 07 Jul 2025 13:01:05 +0000 ROA not before: Mon 07 Jul 2025 13:01:05 +0000 ROA not after: Sun 05 Oct 2025 13:01:05 +0000 asID: 3738 IP address blocks: 192.250.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Jul 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:70:85:f2:a9:d0:4d:1b:59:6a:2e:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Validity Not Before: Jul 7 13:01:05 2025 GMT Not After : Oct 5 13:01:05 2025 GMT Subject: CN=3aa0f895-fb71-40e4-a078-9b4973beb882 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:26:fd:ee:e1:ad:61:02:63:df:51:76:b2:fd: 56:19:ad:b7:8a:f6:8e:20:16:19:b5:f9:e7:66:b8: 5f:fe:63:13:bb:f0:d1:ee:ac:64:7f:be:73:51:eb: 0e:70:ee:28:ee:0a:6f:7f:d1:44:0f:59:0d:c4:1e: f3:36:41:e2:25:2d:6f:dc:a1:57:a2:86:01:08:d3: 2d:dc:48:41:ed:ed:be:77:f3:49:62:7b:66:ef:80: 6f:9b:52:cf:7e:bf:0c:42:a9:aa:73:25:7f:a3:a8: 9b:be:29:17:a5:f3:61:81:33:2c:d4:78:30:ac:61: 2f:bc:81:ce:70:30:1b:47:51:24:4c:3a:31:b2:4f: c3:ed:63:d2:ca:b4:e8:ae:ad:f3:4d:fe:ef:98:77: 80:f2:61:4a:eb:7e:ec:36:cc:2e:b4:1c:4f:c9:87: ac:a1:4c:3f:11:c1:75:54:69:7b:e7:71:54:04:85: 36:96:fa:e3:53:10:9d:69:63:46:2d:19:e3:1e:00: 8a:26:c9:1f:08:f4:7a:11:d2:76:52:ea:bb:d0:20: 76:f0:10:27:29:27:32:f2:36:4d:a1:c8:41:fb:e0: 9c:9c:a3:7d:a3:de:68:e8:23:76:49:d9:c5:66:35: 82:a3:1d:32:1e:2f:fb:05:19:e9:00:71:f5:ac:d8: 72:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:4E:E4:28:B6:0C:4B:16:BD:F1:A0:11:51:57:6F:C6:6C:9A:57:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/67376c8e-267d-36f2-814a-f2c489f44f6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl X509v3 Authority Key Identifier: keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer sbgp-ipAddrBlock: critical IPv4: 192.250.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:da:bb:f9:3a:0e:d4:c9:e1:59:71:d2:c7:25:b3:53:c3:11: 5e:39:2f:20:f4:4b:b2:d2:b8:55:e2:71:38:3f:38:93:c0:94: b3:6c:9e:88:4b:d7:5c:96:3c:7d:62:3a:20:00:04:a3:d8:71: 99:96:a7:b1:fc:c5:f0:21:a7:d1:fa:0b:c4:a5:ca:c3:d0:16: 28:a6:07:78:3b:3a:a5:c2:e6:35:99:c7:db:02:bb:cf:52:89: 71:6a:d6:84:19:5a:1c:8e:67:2d:a1:eb:8f:9b:17:ea:5f:b7: 3a:cb:6f:71:29:c5:59:1d:88:79:7e:39:8c:dc:b7:51:f2:51: f7:d2:67:ce:ec:66:65:ae:0e:99:22:f9:18:62:33:af:d0:09: c6:fc:ba:47:be:da:e5:e6:da:f8:b3:a4:39:33:06:08:35:cc: c7:7a:00:74:e0:a1:87:ea:76:37:9e:ea:e5:ba:92:63:b2:2a: 4b:56:7f:09:08:c6:a9:a0:b3:bf:83:c9:da:ca:52:e8:d1:cf: 3f:02:8c:36:e8:8e:46:b7:c6:c3:5f:bf:7d:bd:db:5d:c2:cb: ae:90:76:6c:c3:6b:9d:7b:fc:41:91:59:b7:7a:75:36:c5:77: 26:7d:98:b9:28:1c:70:1a:e5:f6:16:f8:d1:56:0a:b5:d4:a6: 2d:21:47:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpwhfKp0E0bWWou0YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmJiYzAxMGUtYTNmNy00ZjZlLTlkNmMtZGFlNTVhNjhl YzAwMB4XDTI1MDcwNzEzMDEwNVoXDTI1MTAwNTEzMDEwNVowLzEtMCsGA1UEAxMk M2FhMGY4OTUtZmI3MS00MGU0LWEwNzgtOWI0OTczYmViODgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCb97uGtYQJj31F2sv1WGa23ivaOIBYZtfnn Zrhf/mMTu/DR7qxkf75zUesOcO4o7gpvf9FED1kNxB7zNkHiJS1v3KFXooYBCNMt 3EhB7e2+d/NJYntm74Bvm1LPfr8MQqmqcyV/o6ibvikXpfNhgTMs1HgwrGEvvIHO cDAbR1EkTDoxsk/D7WPSyrTorq3zTf7vmHeA8mFK637sNswutBxPyYesoUw/EcF1 VGl753FUBIU2lvrjUxCdaWNGLRnjHgCKJskfCPR6EdJ2Uuq70CB28BAnKScy8jZN ochB++CcnKN9o95o6CN2SdnFZjWCox0yHi/7BRnpAHH1rNhydwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGRO5Ci2DEsWvfGgEVFXb8ZsmldqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82YmJj MDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1NWE2OGVjMDAvNjczNzZjOGUtMjY3ZC0z NmYyLTgxNGEtZjJjNDg5ZjQ0ZjZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmJiYzAxMGUtYTNmNy00ZjZlLTlk NmMtZGFlNTVhNjhlYzAwLzZiYmMwMTBlLWEzZjctNGY2ZS05ZDZjLWRhZTU1YTY4 ZWMwMC5jcmwwHwYDVR0jBBgwFoAUhxTlRfZtXIg9hkvY4UwQsXZEEycwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82YmJjMDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1 NWE2OGVjMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPqaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFHau/k6DtTJ4Vlx0scls1PDEV45LyD0S7LSuFXicTg/OJPAlLNsnohL 11yWPH1iOiAABKPYcZmWp7H8xfAhp9H6C8SlysPQFiimB3g7OqXC5jWZx9sCu89S iXFq1oQZWhyOZy2h64+bF+pftzrLb3EpxVkdiHl+OYzct1HyUffSZ87sZmWuDpki +RhiM6/QCcb8uke+2uXm2vizpDkzBgg1zMd6AHTgoYfqdjee6uW6kmOyKktWfwkI xqmgs7+DydrKUujRzz8CjDbojka3xsNfv329213Cy66QdmzDa517/EGRWbd6dTbF dyZ9mLkoHHAa5fYW+NFWCrXUpi0hRy4= -----END CERTIFICATE-----Generated at Thu Jul 10 23:49:44 2025 by rpki-client