$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/a5fba1ee-30dd-3f77-bb59-98ac450d70e3.roa File: a5fba1ee-30dd-3f77-bb59-98ac450d70e3.roa (raw, json) Hash identifier: c9mDZ4jAgaWNFggm5MYU1ZnNMd1xGgFSMf8+YKwDGEg= Subject key identifier: 21:01:71:EA:41:3E:0E:11:6B:E9:55:6C:4C:14:AB:6C:66:12:41:3E Certificate issuer: /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Certificate serial: 010D0C9F43285849912F303173C06ACC157DA580 Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/a5fba1ee-30dd-3f77-bb59-98ac450d70e3.roa Signing time: Fri 18 Apr 2025 13:00:59 +0000 ROA not before: Fri 18 Apr 2025 13:00:59 +0000 ROA not after: Thu 17 Jul 2025 13:00:59 +0000 asID: 3738 IP address blocks: 192.250.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:91:2f:30:31:73:c0:6a:cc:15:7d:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Validity Not Before: Apr 18 13:00:59 2025 GMT Not After : Jul 17 13:00:59 2025 GMT Subject: CN=356d1281-730e-491f-9a84-54000bb524da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:e8:21:ee:bf:06:e6:1b:5a:00:91:92:ea:9a: 9b:90:5e:1a:ea:f9:45:c6:f1:24:1b:2b:ac:39:5d: 97:9c:61:56:49:ed:88:c7:03:05:09:57:cd:8d:2f: c1:19:ab:97:2b:7e:13:8d:29:a5:53:11:cb:d0:08: b3:64:14:86:6a:76:1d:7e:3a:70:96:53:a4:03:d4: f7:3d:d3:2c:0d:5d:74:ef:17:82:21:13:94:96:48: a3:69:47:54:bf:56:69:a1:9f:5c:99:67:8d:ed:d4: c1:c3:f1:92:e1:59:ae:ec:41:fd:8d:cf:3d:92:15: cc:37:43:0b:97:4c:76:9d:2f:15:cd:96:55:56:d7: 75:88:44:b6:cf:e9:ff:69:23:bc:eb:eb:f3:b6:21: 5b:8f:0b:e7:a8:07:ab:51:49:3c:e3:38:29:ec:a1: 06:49:7f:28:65:32:04:9e:29:b5:11:8b:be:8a:d3: 89:02:f9:83:89:d3:be:2d:e7:25:b3:fe:e1:dc:d0: 4e:a2:9f:d6:01:f5:ff:bd:97:10:c3:0d:40:2f:14: fc:45:58:78:44:19:4b:22:82:1c:5b:8f:fd:83:95: c8:86:b5:28:9e:e9:60:c7:9c:58:39:aa:42:6c:1e: 05:44:56:c4:c4:39:a0:69:b6:13:0a:1e:98:e2:59: 3d:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:01:71:EA:41:3E:0E:11:6B:E9:55:6C:4C:14:AB:6C:66:12:41:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/a5fba1ee-30dd-3f77-bb59-98ac450d70e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl X509v3 Authority Key Identifier: keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer sbgp-ipAddrBlock: critical IPv4: 192.250.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cf:2e:e7:e1:1f:4d:36:80:03:5e:ac:5d:ea:95:0c:6c:46:f7: 35:92:88:b2:a6:82:8b:b7:e5:a3:44:32:f4:e1:8a:06:ce:6f: 2e:d2:f5:77:0c:bb:ad:a2:80:15:d5:86:e1:07:33:3e:a5:97: 1a:65:3e:79:a6:86:f9:b7:5a:2c:ad:27:07:3d:cf:c5:f9:62: 33:15:18:62:e5:cf:21:e6:ef:67:59:30:ef:6b:2a:3b:bc:a8: 4a:78:bf:f4:38:4b:44:5d:b9:5c:70:bf:3e:4b:5d:64:1b:af: f1:1d:b2:9f:64:46:3c:19:7e:8d:45:b3:4a:14:3d:c4:82:54: 34:c2:69:fb:ad:dc:d0:9c:f5:71:ec:20:a7:5c:cc:39:49:d9: 97:4b:3e:9c:bc:21:3a:45:8e:26:9f:22:f6:62:75:f4:26:bf: 8f:5f:e8:7c:e3:6a:e7:93:57:cf:97:a4:c4:27:32:25:52:02: ca:22:72:84:17:1f:32:cc:d3:0f:c1:3f:ac:3b:2e:6f:31:52: ac:59:99:02:56:83:d3:9a:d8:1b:7f:b0:be:e6:38:62:bd:81: e0:1d:bf:c4:44:da:72:35:36:e9:41:ad:52:2b:9b:97:89:71: d9:48:3a:1c:67:5a:8b:5b:77:c5:c1:bd:82:ad:f9:39:8f:ed: ef:61:72:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmRLzAxc8BqzBV9pYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmJiYzAxMGUtYTNmNy00ZjZlLTlkNmMtZGFlNTVhNjhl YzAwMB4XDTI1MDQxODEzMDA1OVoXDTI1MDcxNzEzMDA1OVowLzEtMCsGA1UEAxMk MzU2ZDEyODEtNzMwZS00OTFmLTlhODQtNTQwMDBiYjUyNGRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiugh7r8G5htaAJGS6pqbkF4a6vlFxvEkGyus OV2XnGFWSe2IxwMFCVfNjS/BGauXK34TjSmlUxHL0AizZBSGanYdfjpwllOkA9T3 PdMsDV107xeCIROUlkijaUdUv1ZpoZ9cmWeN7dTBw/GS4Vmu7EH9jc89khXMN0ML l0x2nS8VzZZVVtd1iES2z+n/aSO86+vztiFbjwvnqAerUUk84zgp7KEGSX8oZTIE nim1EYu+itOJAvmDidO+Lecls/7h3NBOop/WAfX/vZcQww1ALxT8RVh4RBlLIoIc W4/9g5XIhrUonulgx5xYOapCbB4FRFbExDmgabYTCh6Y4lk9cQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCEBcepBPg4Ra+lVbEwUq2xmEkE+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82YmJj MDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1NWE2OGVjMDAvYTVmYmExZWUtMzBkZC0z Zjc3LWJiNTktOThhYzQ1MGQ3MGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmJiYzAxMGUtYTNmNy00ZjZlLTlk NmMtZGFlNTVhNjhlYzAwLzZiYmMwMTBlLWEzZjctNGY2ZS05ZDZjLWRhZTU1YTY4 ZWMwMC5jcmwwHwYDVR0jBBgwFoAUhxTlRfZtXIg9hkvY4UwQsXZEEycwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82YmJjMDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1 NWE2OGVjMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPqQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM8u5+EfTTaAA16sXeqVDGxG9zWSiLKmgou35aNEMvThigbOby7S9XcM u62igBXVhuEHMz6llxplPnmmhvm3WiytJwc9z8X5YjMVGGLlzyHm72dZMO9rKju8 qEp4v/Q4S0RduVxwvz5LXWQbr/Edsp9kRjwZfo1Fs0oUPcSCVDTCafut3NCc9XHs IKdczDlJ2ZdLPpy8ITpFjiafIvZidfQmv49f6HzjaueTV8+XpMQnMiVSAsoicoQX HzLM0w/BP6w7Lm8xUqxZmQJWg9Oa2Bt/sL7mOGK9geAdv8RE2nI1NulBrVIrm5eJ cdlIOhxnWotbd8XBvYKt+TmP7e9hciA= -----END CERTIFICATE-----Generated at Fri Apr 18 19:05:04 2025 by rpki-client