$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/9411b785-4038-33d4-9dd1-c69173f72935.roa File: 9411b785-4038-33d4-9dd1-c69173f72935.roa (raw, json) Hash identifier: 6TUEPT4ZFSXoXRwv6era8FB0s1755uU/GKd+yyDIo8o= Subject key identifier: 61:D8:DE:C9:69:37:B8:07:D7:82:2F:14:07:8E:65:16:A7:BB:15:A2 Certificate issuer: /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Certificate serial: 010D0C9F4328584976A99204AE6EA27A4C837700 Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/9411b785-4038-33d4-9dd1-c69173f72935.roa Signing time: Wed 09 Apr 2025 01:00:47 +0000 ROA not before: Wed 09 Apr 2025 01:00:47 +0000 ROA not after: Tue 08 Jul 2025 01:00:47 +0000 asID: 3738 IP address blocks: 192.250.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:76:a9:92:04:ae:6e:a2:7a:4c:83:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Validity Not Before: Apr 9 01:00:47 2025 GMT Not After : Jul 8 01:00:47 2025 GMT Subject: CN=44f14ce1-34cb-46b9-ad4e-87d283f11369 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:73:4e:56:11:92:1d:60:90:5b:77:60:88:20: c5:1b:20:7c:e3:83:01:c9:d1:71:65:85:0c:2d:35: 00:41:d0:24:11:a0:c9:82:bf:1c:3b:8d:a9:42:33: 0b:29:fd:2a:c4:05:b0:76:f2:26:9a:48:5a:c0:c5: fc:07:d5:03:96:31:3a:ae:f6:41:75:53:d4:57:83: a0:b7:d3:59:12:2f:1d:b7:63:36:71:3d:5b:bd:f6: d1:20:20:93:e4:7c:32:63:38:83:7e:80:4e:e3:4d: 2f:74:31:30:66:99:57:a6:27:ed:d9:43:03:0a:b4: 74:18:50:c7:d2:5b:9f:53:fd:86:f8:37:33:63:4d: 9a:c0:d0:74:25:7f:e6:93:2e:29:81:7f:74:ea:82: d3:d7:19:39:c0:c1:9a:9e:a1:28:ca:bd:c9:9d:12: bc:fa:76:b4:d9:84:0b:ff:14:ce:85:66:5f:cf:5f: 4e:6b:c3:4d:af:ef:8b:b5:1a:6d:b9:25:3f:43:5b: fb:53:cb:71:52:e1:ad:43:7c:2b:bb:82:5e:7d:08: 02:5e:a8:d6:07:71:08:f3:37:64:23:b3:29:22:d1: 92:0d:1e:24:39:4a:7d:9f:4d:90:c9:09:e5:c1:e5: 30:65:40:76:8a:6b:be:8b:72:36:8a:43:03:fd:7c: df:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:D8:DE:C9:69:37:B8:07:D7:82:2F:14:07:8E:65:16:A7:BB:15:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/9411b785-4038-33d4-9dd1-c69173f72935.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl X509v3 Authority Key Identifier: keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer sbgp-ipAddrBlock: critical IPv4: 192.250.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:da:f8:7d:8b:5e:e7:c9:81:8f:3f:f2:f0:ad:94:b7:ea:e3: 48:eb:ee:dd:98:b4:44:41:d8:43:8a:58:fb:24:aa:fe:3e:49: 07:fe:34:c7:9b:02:28:02:fe:27:1e:72:e9:de:bb:48:69:1c: a1:85:e0:48:56:18:23:c0:b9:62:3e:b3:15:e9:d3:4e:6b:09: 06:ed:5a:cd:64:22:2f:74:81:c3:4c:5b:e3:8f:82:5d:07:05: 7e:e2:40:b7:55:d2:6e:16:45:3d:87:33:eb:92:34:17:ca:75: 1f:d7:22:e9:77:ad:6a:a3:d4:b0:b3:dd:55:20:61:9f:15:6f: e3:3b:8b:6f:ee:94:61:fd:13:76:38:30:6b:5f:ec:58:a1:8e: b5:c4:30:97:fb:1c:21:8f:79:97:b1:91:1d:1c:76:87:ce:1c: c5:37:0f:82:b8:83:2a:3f:52:81:8b:3d:19:e9:35:0c:13:7d: 53:5d:1f:c2:8c:4b:b6:8b:33:16:e0:bb:19:3f:96:53:51:3a: c5:eb:f8:dd:65:ca:27:f0:b3:4f:1f:ac:24:84:ea:7b:92:0b: 3b:8b:bc:a7:c4:0c:0f:1b:44:72:df:50:43:fd:04:30:b6:41: fc:6c:bb:20:45:c4:f4:89:7c:9c:5c:27:35:24:bb:e6:31:f8: c8:d5:44:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl2qZIErm6iekyDdwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmJiYzAxMGUtYTNmNy00ZjZlLTlkNmMtZGFlNTVhNjhl YzAwMB4XDTI1MDQwOTAxMDA0N1oXDTI1MDcwODAxMDA0N1owLzEtMCsGA1UEAxMk NDRmMTRjZTEtMzRjYi00NmI5LWFkNGUtODdkMjgzZjExMzY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3NOVhGSHWCQW3dgiCDFGyB844MBydFxZYUM LTUAQdAkEaDJgr8cO42pQjMLKf0qxAWwdvImmkhawMX8B9UDljE6rvZBdVPUV4Og t9NZEi8dt2M2cT1bvfbRICCT5HwyYziDfoBO400vdDEwZplXpift2UMDCrR0GFDH 0lufU/2G+DczY02awNB0JX/mky4pgX906oLT1xk5wMGanqEoyr3JnRK8+na02YQL /xTOhWZfz19Oa8NNr++LtRptuSU/Q1v7U8txUuGtQ3wru4JefQgCXqjWB3EI8zdk I7MpItGSDR4kOUp9n02QyQnlweUwZUB2imu+i3I2ikMD/XzfIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGHY3slpN7gH14IvFAeOZRanuxWiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82YmJj MDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1NWE2OGVjMDAvOTQxMWI3ODUtNDAzOC0z M2Q0LTlkZDEtYzY5MTczZjcyOTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmJiYzAxMGUtYTNmNy00ZjZlLTlk NmMtZGFlNTVhNjhlYzAwLzZiYmMwMTBlLWEzZjctNGY2ZS05ZDZjLWRhZTU1YTY4 ZWMwMC5jcmwwHwYDVR0jBBgwFoAUhxTlRfZtXIg9hkvY4UwQsXZEEycwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82YmJjMDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1 NWE2OGVjMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPokMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABva+H2LXufJgY8/8vCtlLfq40jr7t2YtERB2EOKWPskqv4+SQf+NMeb AigC/icecuneu0hpHKGF4EhWGCPAuWI+sxXp005rCQbtWs1kIi90gcNMW+OPgl0H BX7iQLdV0m4WRT2HM+uSNBfKdR/XIul3rWqj1LCz3VUgYZ8Vb+M7i2/ulGH9E3Y4 MGtf7FihjrXEMJf7HCGPeZexkR0cdofOHMU3D4K4gyo/UoGLPRnpNQwTfVNdH8KM S7aLMxbguxk/llNROsXr+N1lyifws08frCSE6nuSCzuLvKfEDA8bRHLfUEP9BDC2 QfxsuyBFxPSJfJxcJzUku+Yx+MjVRG8= -----END CERTIFICATE-----Generated at Fri Apr 18 19:03:09 2025 by rpki-client