$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/153b1b20-0859-4b1b-9ffe-37e90041a8cc/d833a937-fd68-3b12-a552-2d99af1447a0.roa File: d833a937-fd68-3b12-a552-2d99af1447a0.roa (raw, json) Hash identifier: MAQliY2GffC1RnCc9ZTB8Kbn6KSHO6vCf6Op/JqIbAE= Subject key identifier: 3A:21:B2:EE:1D:1D:BD:19:95:28:79:E9:CB:CE:FC:71:6F:EF:F9:8D Certificate issuer: /CN=153b1b20-0859-4b1b-9ffe-37e90041a8cc Certificate serial: 010D0C9F432858494B640D3813AFA7A25A5FEE00 Authority key identifier: A5:FC:2C:AC:D1:55:F0:F7:FE:C9:19:C9:B6:F3:DF:50:B2:8C:76:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/153b1b20-0859-4b1b-9ffe-37e90041a8cc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/153b1b20-0859-4b1b-9ffe-37e90041a8cc/d833a937-fd68-3b12-a552-2d99af1447a0.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 198949 IP address blocks: 198.180.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/153b1b20-0859-4b1b-9ffe-37e90041a8cc/153b1b20-0859-4b1b-9ffe-37e90041a8cc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/153b1b20-0859-4b1b-9ffe-37e90041a8cc/153b1b20-0859-4b1b-9ffe-37e90041a8cc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/153b1b20-0859-4b1b-9ffe-37e90041a8cc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:0d:38:13:af:a7:a2:5a:5f:ee:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=153b1b20-0859-4b1b-9ffe-37e90041a8cc Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=77f0272a-eb8f-4421-adf6-3fce034c4d4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:1d:76:ff:a1:1c:cf:b4:5c:44:20:4e:62:47: 99:c7:fa:0a:20:e2:64:85:6b:bd:dc:13:07:6b:ca: 14:90:b7:b0:15:b3:20:61:58:17:1f:d3:56:10:ce: 09:8b:7a:c6:b3:ef:d6:67:1b:3a:c2:07:af:1b:ec: 8c:89:d9:e8:39:d5:07:38:51:09:77:97:ce:3e:7a: f3:7e:70:3e:4c:fd:41:1a:63:d4:2a:f0:6d:ef:d6: 0c:3b:ef:f1:07:17:9a:1f:75:0c:98:06:25:b1:64: f3:d3:d7:06:3e:45:a7:a1:1d:8f:5f:d3:08:b9:91: 82:ea:cd:85:68:ea:0e:40:b1:f3:8a:b6:01:0b:e1: 01:06:dc:ee:e0:89:79:fa:3d:82:2e:95:10:88:28: cc:c6:24:e1:44:f0:25:c6:39:16:32:e9:dd:12:4a: a8:96:00:d6:69:c6:47:63:04:2c:0c:84:83:79:f9: 96:5e:b6:78:ed:8f:cd:39:c1:e0:e8:21:a7:bb:94: 75:8a:63:99:e3:52:8e:23:b3:d9:50:c6:83:46:11: 03:25:24:8a:e2:ef:e4:c0:5b:8e:da:06:93:a7:ad: 48:d4:15:52:9c:37:5b:f2:63:50:b5:06:3b:99:82: c7:c9:9e:67:34:b2:94:eb:ea:29:50:20:cd:78:d2: f2:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:21:B2:EE:1D:1D:BD:19:95:28:79:E9:CB:CE:FC:71:6F:EF:F9:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/153b1b20-0859-4b1b-9ffe-37e90041a8cc/d833a937-fd68-3b12-a552-2d99af1447a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/153b1b20-0859-4b1b-9ffe-37e90041a8cc/153b1b20-0859-4b1b-9ffe-37e90041a8cc.crl X509v3 Authority Key Identifier: keyid:A5:FC:2C:AC:D1:55:F0:F7:FE:C9:19:C9:B6:F3:DF:50:B2:8C:76:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/153b1b20-0859-4b1b-9ffe-37e90041a8cc.cer sbgp-ipAddrBlock: critical IPv4: 198.180.229.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d1:42:67:ff:af:c4:92:af:3e:e8:af:1f:57:49:ee:0b:f6:e8: 0a:e9:b7:28:85:ce:c3:a2:95:b0:16:b1:b2:48:5e:64:68:75: 43:24:1d:58:b7:d8:10:2a:e2:a9:09:75:7b:f2:07:26:77:dc: 08:65:89:4b:54:5b:3b:9a:ae:df:01:2b:d2:ef:43:fb:db:8b: 97:17:cc:a0:b4:01:7d:b9:dc:25:18:3f:58:7b:af:18:f0:4d: 1b:0e:33:2a:73:ce:21:a0:87:cf:19:fe:10:85:13:b3:c7:7c: ad:a5:52:8d:e3:b1:2d:3f:3f:cf:14:aa:b1:3f:1b:b1:a3:07: fb:36:b8:5b:25:a2:45:e1:cd:bb:ac:42:59:9b:2f:15:06:ca: 7a:aa:dc:7d:20:36:f8:62:95:de:2a:47:b8:49:6c:13:6c:e8: 36:b8:3d:6e:06:5d:92:10:02:35:e9:49:ea:7b:d4:29:ca:46: d0:cb:7a:30:ee:45:cd:13:41:61:dd:d9:0a:5e:14:c1:02:06: 85:e9:38:b0:08:4f:36:6f:3d:55:70:c2:d3:52:87:5d:af:8b: b2:1a:e1:24:77:cb:72:5b:36:11:ec:2c:f5:78:9a:cf:e9:37: 72:2b:47:26:92:58:19:3a:9f:df:4c:59:94:e7:ec:88:db:42: 89:b0:74:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZA04E6+nolpf7gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTUzYjFiMjAtMDg1OS00YjFiLTlmZmUtMzdlOTAwNDFh OGNjMB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk NzdmMDI3MmEtZWI4Zi00NDIxLWFkZjYtM2ZjZTAzNGM0ZDRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsh12/6Ecz7RcRCBOYkeZx/oKIOJkhWu93BMH a8oUkLewFbMgYVgXH9NWEM4Ji3rGs+/WZxs6wgevG+yMidnoOdUHOFEJd5fOPnrz fnA+TP1BGmPUKvBt79YMO+/xBxeaH3UMmAYlsWTz09cGPkWnoR2PX9MIuZGC6s2F aOoOQLHzirYBC+EBBtzu4Il5+j2CLpUQiCjMxiThRPAlxjkWMundEkqolgDWacZH YwQsDISDefmWXrZ47Y/NOcHg6CGnu5R1imOZ41KOI7PZUMaDRhEDJSSK4u/kwFuO 2gaTp61I1BVSnDdb8mNQtQY7mYLHyZ5nNLKU6+opUCDNeNLyNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDohsu4dHb0ZlSh56cvO/HFv7/mNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xNTNi MWIyMC0wODU5LTRiMWItOWZmZS0zN2U5MDA0MWE4Y2MvZDgzM2E5MzctZmQ2OC0z YjEyLWE1NTItMmQ5OWFmMTQ0N2EwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMTUzYjFiMjAtMDg1OS00YjFiLTlm ZmUtMzdlOTAwNDFhOGNjLzE1M2IxYjIwLTA4NTktNGIxYi05ZmZlLTM3ZTkwMDQx YThjYy5jcmwwHwYDVR0jBBgwFoAUpfwsrNFV8Pf+yRnJtvPfULKMdvYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xNTNiMWIyMC0wODU5LTRiMWItOWZmZS0zN2U5 MDA0MWE4Y2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxrTlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANFCZ/+vxJKvPuivH1dJ7gv26ArptyiFzsOilbAWsbJIXmRodUMkHVi3 2BAq4qkJdXvyByZ33AhliUtUWzuart8BK9LvQ/vbi5cXzKC0AX253CUYP1h7rxjw TRsOMypzziGgh88Z/hCFE7PHfK2lUo3jsS0/P88UqrE/G7GjB/s2uFslokXhzbus QlmbLxUGynqq3H0gNvhild4qR7hJbBNs6Da4PW4GXZIQAjXpSep71CnKRtDLejDu Rc0TQWHd2QpeFMECBoXpOLAITzZvPVVwwtNSh12vi7Ia4SR3y3JbNhHsLPV4ms/p N3IrRyaSWBk6n99MWZTn7IjbQomwdCw= -----END CERTIFICATE-----Generated at Mon Apr 28 15:20:01 2025 by rpki-client