$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/b4383a28-7225-3a9f-8489-f65812ca279c.roa File: b4383a28-7225-3a9f-8489-f65812ca279c.roa (raw, json) Hash identifier: Kpw3nn7kcj/Lfo+ddPv/yA1xboTXfvEV+ZmNUERswfw= Subject key identifier: A9:7C:01:F4:1C:CD:C6:ED:1A:1D:07:D9:44:29:20:54:7E:C0:08:26 Certificate issuer: /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Certificate serial: 010D0C9F43285848B8F0C6DCF0DD96AA2A0C6C80 Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/b4383a28-7225-3a9f-8489-f65812ca279c.roa Signing time: Fri 31 Jan 2025 02:00:39 +0000 ROA not before: Fri 31 Jan 2025 02:00:39 +0000 ROA not after: Thu 01 May 2025 01:00:39 +0000 asID: 3738 IP address blocks: 192.250.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b8:f0:c6:dc:f0:dd:96:aa:2a:0c:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Validity Not Before: Jan 31 02:00:39 2025 GMT Not After : May 1 01:00:39 2025 GMT Subject: CN=c5513b48-d5af-4b58-9ca3-00c071355e29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:cb:00:45:f9:22:3e:c7:15:3f:4c:18:12:e7: 01:34:1b:f9:69:cc:25:7a:c2:3b:68:1e:6b:44:37: c5:b4:49:2f:48:0c:df:ef:98:d3:86:47:ee:7f:3d: 27:5c:be:e3:51:f5:7d:b4:90:76:34:90:9e:7c:1f: 45:58:03:bc:cf:93:7c:22:a9:d5:a6:6b:76:24:7c: 57:6e:b6:1c:a8:d2:f7:ee:da:1e:24:fd:43:14:8f: 62:01:8b:49:2c:8d:92:d2:d6:38:32:44:02:55:ad: ad:b6:e7:e0:48:99:f8:a4:b7:00:51:3a:ce:18:44: 8b:83:2c:ef:d5:0e:11:a5:4f:17:4c:fa:e9:82:9e: cd:c0:48:ea:9d:ea:f5:4c:a1:f3:10:43:6e:f5:fd: f4:10:2a:1b:86:43:7d:cc:79:f6:2f:a2:ae:56:0e: 71:23:5c:ab:ac:d1:d1:f4:2f:31:d3:c3:5b:8d:8e: f0:7e:b9:1a:ad:22:b6:e4:46:4a:4c:fd:70:7c:5d: 99:59:86:79:b8:8b:03:30:7f:37:0e:35:7b:54:6e: 73:f3:f7:a9:08:57:1c:1d:45:48:a9:46:af:32:4e: db:4f:c5:fb:31:e6:8d:63:37:1f:61:44:9b:89:37: 93:ff:7e:ad:49:c3:0e:a0:84:25:1d:e9:cf:73:f4: f6:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:7C:01:F4:1C:CD:C6:ED:1A:1D:07:D9:44:29:20:54:7E:C0:08:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/b4383a28-7225-3a9f-8489-f65812ca279c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl X509v3 Authority Key Identifier: keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer sbgp-ipAddrBlock: critical IPv4: 192.250.113.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:8f:48:d7:1e:f9:99:0e:97:ea:64:b6:c4:92:a1:1e:5c:d9: 14:b9:a3:e8:42:08:d5:12:62:de:40:cb:b0:fe:cc:b7:88:c9: df:a2:b4:97:02:d3:b2:13:71:d2:ca:f2:a2:b7:8b:e4:f0:b4: 90:52:24:0f:27:ad:4c:3b:48:fe:2e:ae:4d:d7:23:01:41:7a: 4f:af:27:8a:e7:29:b9:7e:e9:a2:69:55:f1:af:3e:df:43:b5: 54:df:15:c1:36:dc:0f:83:6c:6c:ed:6e:d5:b7:26:a6:f5:21: 2a:85:c4:ef:e1:d6:18:4c:4a:6e:56:ef:54:fe:ad:b3:0f:1d: 25:ca:2f:37:cf:aa:72:e9:12:d7:d3:6f:2a:1a:bc:49:40:4c: ee:16:12:0a:8e:7c:c1:47:6f:6a:7a:b8:46:da:8b:bf:6f:80: 42:9f:7b:27:25:92:3d:b2:b6:82:f3:44:3b:89:78:41:da:7b: f8:e8:67:0e:94:27:9d:11:6f:c7:cb:27:68:8e:3b:65:50:95: e2:06:6d:c6:e1:38:31:74:f7:bd:f2:7a:6b:0a:15:98:8e:c4: 04:d2:9f:80:53:d2:fb:30:34:0a:3e:e4:91:dc:60:9f:5c:cf: c0:d5:73:74:a8:1e:a8:bf:ba:fd:7e:a5:b7:21:0d:02:3c:49: c0:26:b2:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi48Mbc8N2WqioMbIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmJiYzAxMGUtYTNmNy00ZjZlLTlkNmMtZGFlNTVhNjhl YzAwMB4XDTI1MDEzMTAyMDAzOVoXDTI1MDUwMTAxMDAzOVowLzEtMCsGA1UEAxMk YzU1MTNiNDgtZDVhZi00YjU4LTljYTMtMDBjMDcxMzU1ZTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhcsARfkiPscVP0wYEucBNBv5acwlesI7aB5r RDfFtEkvSAzf75jThkfufz0nXL7jUfV9tJB2NJCefB9FWAO8z5N8IqnVpmt2JHxX brYcqNL37toeJP1DFI9iAYtJLI2S0tY4MkQCVa2ttufgSJn4pLcAUTrOGESLgyzv 1Q4RpU8XTPrpgp7NwEjqner1TKHzEENu9f30ECobhkN9zHn2L6KuVg5xI1yrrNHR 9C8x08NbjY7wfrkarSK25EZKTP1wfF2ZWYZ5uIsDMH83DjV7VG5z8/epCFccHUVI qUavMk7bT8X7MeaNYzcfYUSbiTeT/36tScMOoIQlHenPc/T2iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKl8AfQczcbtGh0H2UQpIFR+wAgmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82YmJj MDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1NWE2OGVjMDAvYjQzODNhMjgtNzIyNS0z YTlmLTg0ODktZjY1ODEyY2EyNzljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmJiYzAxMGUtYTNmNy00ZjZlLTlk NmMtZGFlNTVhNjhlYzAwLzZiYmMwMTBlLWEzZjctNGY2ZS05ZDZjLWRhZTU1YTY4 ZWMwMC5jcmwwHwYDVR0jBBgwFoAUhxTlRfZtXIg9hkvY4UwQsXZEEycwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82YmJjMDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1 NWE2OGVjMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPpxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKuPSNce+ZkOl+pktsSSoR5c2RS5o+hCCNUSYt5Ay7D+zLeIyd+itJcC 07ITcdLK8qK3i+TwtJBSJA8nrUw7SP4urk3XIwFBek+vJ4rnKbl+6aJpVfGvPt9D tVTfFcE23A+DbGztbtW3Jqb1ISqFxO/h1hhMSm5W71T+rbMPHSXKLzfPqnLpEtfT byoavElATO4WEgqOfMFHb2p6uEbai79vgEKfeyclkj2ytoLzRDuJeEHae/joZw6U J50Rb8fLJ2iOO2VQleIGbcbhODF0973yemsKFZiOxATSn4BT0vswNAo+5JHcYJ9c z8DVc3SoHqi/uv1+pbchDQI8ScAmsjk= -----END CERTIFICATE-----Generated at Thu Apr 17 23:35:24 2025 by rpki-client