$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a/d6a3954a-281e-3441-b4f0-d432435afda3.roa File: d6a3954a-281e-3441-b4f0-d432435afda3.roa (raw, json) Hash identifier: y+rrBDP7PhOH5jNKfQYfqReIFA8+mFX1deTNEemVo2c= Subject key identifier: 38:CC:5E:EF:00:75:4A:8D:4A:23:C5:EC:03:A8:96:DB:6C:4E:7A:A5 Certificate issuer: /CN=c98136f0-3efc-4dfb-a3fe-596d9a8df01a Certificate serial: 010D0C9F432858498E647C954B10E7B9D2B16F00 Authority key identifier: F9:A6:75:02:28:D4:3A:8D:33:46:9E:1C:BC:95:0E:36:D7:3B:3E:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a/d6a3954a-281e-3441-b4f0-d432435afda3.roa Signing time: Thu 17 Apr 2025 13:01:00 +0000 ROA not before: Thu 17 Apr 2025 13:01:00 +0000 ROA not after: Wed 16 Jul 2025 13:01:00 +0000 asID: 31898 IP address blocks: 192.35.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a/c98136f0-3efc-4dfb-a3fe-596d9a8df01a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a/c98136f0-3efc-4dfb-a3fe-596d9a8df01a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 24 Jun 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8e:64:7c:95:4b:10:e7:b9:d2:b1:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c98136f0-3efc-4dfb-a3fe-596d9a8df01a Validity Not Before: Apr 17 13:01:00 2025 GMT Not After : Jul 16 13:01:00 2025 GMT Subject: CN=3af21237-e3c6-42d8-b117-7e3b820b726f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:59:19:29:e9:5d:54:66:d3:e2:c5:20:1d:41: 22:1b:87:88:28:b4:4e:a6:56:6f:e6:47:ca:0a:cd: 66:7a:3a:d0:81:5c:8d:df:1b:77:a5:46:ff:79:f1: c0:fa:62:44:d6:30:a0:88:b8:33:ad:40:d7:0b:81: 5b:c2:fb:1d:1c:5b:fb:5b:21:92:65:d9:a8:ae:2d: d9:2f:2f:f6:05:74:77:fa:90:b1:80:84:0f:b9:3d: bc:41:21:f4:05:ac:3f:a3:86:d3:5c:9f:4c:cc:ea: 53:a7:3a:98:b7:60:79:75:f9:eb:65:f3:c3:5a:59: 3f:09:21:77:ca:a8:26:66:31:13:32:59:2e:67:7c: 07:62:14:b5:36:29:b0:e0:f0:c6:52:8b:10:1e:d8: a9:78:cc:36:99:49:a0:87:22:0a:4d:90:1e:4b:cf: 5c:49:90:e3:d4:72:4a:4f:c2:dc:77:35:b3:91:80: f6:86:a7:ce:e5:97:45:0a:ca:37:54:82:4b:10:dd: 38:3e:47:f8:f7:72:ea:1e:63:7d:a6:53:72:79:09: a9:2b:22:d0:c0:66:98:4e:44:e4:33:77:4a:b0:43: 9e:1d:7c:1a:c9:e9:00:9c:b8:c6:3b:d0:d2:7a:97: 80:60:9d:d7:61:3c:26:41:bb:79:e9:64:27:32:5b: e4:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:CC:5E:EF:00:75:4A:8D:4A:23:C5:EC:03:A8:96:DB:6C:4E:7A:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a/d6a3954a-281e-3441-b4f0-d432435afda3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a/c98136f0-3efc-4dfb-a3fe-596d9a8df01a.crl X509v3 Authority Key Identifier: keyid:F9:A6:75:02:28:D4:3A:8D:33:46:9E:1C:BC:95:0E:36:D7:3B:3E:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a.cer sbgp-ipAddrBlock: critical IPv4: 192.35.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:67:42:28:7e:e7:1b:4a:f5:34:26:7d:36:32:97:fc:72:1d: 0c:87:cc:8c:4f:ff:7a:0f:11:c2:65:26:10:79:a9:99:4a:2e: c0:35:49:fe:fe:16:2c:7d:87:40:25:47:d9:e2:c7:99:0e:b8: c6:65:7c:a4:47:01:f7:0b:82:9d:0d:2c:97:c0:a7:b7:63:a6: 36:5a:62:7e:b6:df:49:46:78:0d:1b:7c:49:bf:b7:a7:65:df: 95:ad:71:a6:ba:4e:f7:15:b4:20:5c:83:38:5a:fa:dd:df:84: ab:9e:a6:26:cd:ed:3e:20:0a:23:51:bd:39:44:43:5e:69:d0: 88:03:40:ac:3f:c7:0e:4c:c5:1b:03:40:cf:bc:37:f7:c9:f7: 89:cb:3f:74:a2:7e:ed:d8:ec:6a:42:1d:d8:ea:30:27:d4:61: 97:83:c9:3a:05:44:e3:e5:7b:1e:6e:b6:b9:10:b3:22:6a:97: dd:a3:ed:63:88:d3:e9:53:63:e6:ff:5d:30:bb:c0:ab:9b:ea: 16:70:2e:91:ce:71:7e:b3:03:a5:88:c4:e8:aa:fe:46:e5:24: ab:32:f9:f7:ad:77:69:fb:bb:4b:88:e6:7c:6d:a6:6c:b7:2a: dc:cc:37:19:1a:66:ec:15:56:39:91:12:3c:a3:34:c6:bf:25: 08:0f:34:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmOZHyVSxDnudKxbwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzk4MTM2ZjAtM2VmYy00ZGZiLWEzZmUtNTk2ZDlhOGRm MDFhMB4XDTI1MDQxNzEzMDEwMFoXDTI1MDcxNjEzMDEwMFowLzEtMCsGA1UEAxMk M2FmMjEyMzctZTNjNi00MmQ4LWIxMTctN2UzYjgyMGI3MjZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVkZKeldVGbT4sUgHUEiG4eIKLROplZv5kfK Cs1mejrQgVyN3xt3pUb/efHA+mJE1jCgiLgzrUDXC4FbwvsdHFv7WyGSZdmori3Z Ly/2BXR3+pCxgIQPuT28QSH0Baw/o4bTXJ9MzOpTpzqYt2B5dfnrZfPDWlk/CSF3 yqgmZjETMlkuZ3wHYhS1Nimw4PDGUosQHtipeMw2mUmghyIKTZAeS89cSZDj1HJK T8LcdzWzkYD2hqfO5ZdFCso3VIJLEN04Pkf493LqHmN9plNyeQmpKyLQwGaYTkTk M3dKsEOeHXwayekAnLjGO9DSepeAYJ3XYTwmQbt56WQnMlvkKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDjMXu8AdUqNSiPF7AOolttsTnqlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jOTgx MzZmMC0zZWZjLTRkZmItYTNmZS01OTZkOWE4ZGYwMWEvZDZhMzk1NGEtMjgxZS0z NDQxLWI0ZjAtZDQzMjQzNWFmZGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzk4MTM2ZjAtM2VmYy00ZGZiLWEz ZmUtNTk2ZDlhOGRmMDFhL2M5ODEzNmYwLTNlZmMtNGRmYi1hM2ZlLTU5NmQ5YThk ZjAxYS5jcmwwHwYDVR0jBBgwFoAU+aZ1AijUOo0zRp4cvJUONtc7Pn0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jOTgxMzZmMC0zZWZjLTRkZmItYTNmZS01OTZk OWE4ZGYwMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCP6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACNnQih+5xtK9TQmfTYyl/xyHQyHzIxP/3oPEcJlJhB5qZlKLsA1Sf7+ Fix9h0AlR9nix5kOuMZlfKRHAfcLgp0NLJfAp7djpjZaYn6230lGeA0bfEm/t6dl 35Wtcaa6TvcVtCBcgzha+t3fhKuepibN7T4gCiNRvTlEQ15p0IgDQKw/xw5MxRsD QM+8N/fJ94nLP3Sifu3Y7GpCHdjqMCfUYZeDyToFROPlex5utrkQsyJql92j7WOI 0+lTY+b/XTC7wKub6hZwLpHOcX6zA6WIxOiq/kblJKsy+fetd2n7u0uI5nxtpmy3 KtzMNxkaZuwVVjmREjyjNMa/JQgPNEU= -----END CERTIFICATE-----Generated at Mon Jun 23 06:31:08 2025 by rpki-client