$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/fc927540-428b-37cb-903f-ca1e8fb6454c.roa File: fc927540-428b-37cb-903f-ca1e8fb6454c.roa (raw, json) Hash identifier: 7lG2HkVqJdHNW1K6syc3Uv0ECGrBKJ7Yaj14/2eMJCw= Subject key identifier: BB:3D:90:F9:9D:0B:41:E3:47:25:BA:5E:66:17:E3:D8:AD:71:1B:7C Certificate issuer: /CN=d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1 Certificate serial: 010D0C9F43285849AE7F443E143340F600EDE380 Authority key identifier: 5A:15:4B:45:E3:B1:02:C5:CE:B2:56:2D:B9:0F:CE:3B:E5:C5:75:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/fc927540-428b-37cb-903f-ca1e8fb6454c.roa Signing time: Tue 29 Apr 2025 01:00:47 +0000 ROA not before: Tue 29 Apr 2025 01:00:47 +0000 ROA not after: Mon 28 Jul 2025 01:00:47 +0000 asID: 160 IP address blocks: 198.177.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ae:7f:44:3e:14:33:40:f6:00:ed:e3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1 Validity Not Before: Apr 29 01:00:47 2025 GMT Not After : Jul 28 01:00:47 2025 GMT Subject: CN=8b1dfe9c-0f98-4a00-ab0a-8a4d647ebace Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:77:8e:a5:26:f9:2e:35:09:ba:fd:65:bb:1f: a7:af:4e:56:be:47:78:2a:4d:03:2f:cd:4c:6c:eb: a5:16:73:7d:a9:4a:d1:10:cd:00:4d:3a:66:a4:31: 75:8f:11:cf:ae:c7:51:33:10:0c:ab:1e:c7:31:60: 30:9e:3e:bd:b1:09:f9:ee:9b:aa:3d:65:a2:e8:74: 07:00:59:a3:43:31:52:98:b7:de:1e:f9:6b:cb:f4: 1a:ca:a7:98:fa:83:d9:0e:14:c7:00:04:b9:27:f3: 36:93:88:c1:32:56:f7:d4:a0:c5:da:d0:3f:0b:c6: da:c9:8a:53:fd:1a:41:0c:85:33:fa:1d:2f:a9:4d: e0:34:a6:f8:7f:46:b8:3b:ad:02:40:eb:d6:cf:97: 97:c2:1a:e0:c2:46:bd:f3:f6:6a:c3:e3:30:d3:ce: 2e:bf:70:43:69:67:ca:e8:01:8d:9b:b6:ed:d6:e7: 87:9d:97:a7:e4:63:54:6b:01:e1:b3:19:df:03:03: 1f:6f:e1:3a:18:bc:97:70:d6:03:6a:91:04:7d:be: 1b:39:74:70:07:1a:c5:a5:00:17:a1:cb:52:31:6d: c8:d6:00:8e:f7:a6:02:f2:5c:cb:df:ff:27:21:be: 86:36:2f:8a:22:ee:b1:a9:66:92:5d:74:ad:b1:22: 4d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:3D:90:F9:9D:0B:41:E3:47:25:BA:5E:66:17:E3:D8:AD:71:1B:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/fc927540-428b-37cb-903f-ca1e8fb6454c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.crl X509v3 Authority Key Identifier: keyid:5A:15:4B:45:E3:B1:02:C5:CE:B2:56:2D:B9:0F:CE:3B:E5:C5:75:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.cer sbgp-ipAddrBlock: critical IPv4: 198.177.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:c3:d3:78:de:d3:a2:ca:61:b7:75:13:d0:c4:9a:2c:96:48: e8:b0:b6:74:ec:46:c4:61:21:c5:2a:2e:e2:ff:9b:45:12:a4: 8a:e4:f8:08:bd:54:f0:e6:41:9a:1c:05:d3:ea:72:70:e0:89: b7:15:e0:24:b4:0f:29:a1:75:1d:a1:b0:95:8b:24:4f:c1:9e: a7:a4:93:eb:b4:aa:ea:84:b5:07:73:80:7b:e0:93:cf:85:90: a0:0b:4c:46:ab:7c:97:32:b3:fb:52:48:45:bb:89:5d:55:74: 71:42:b6:30:b5:fd:4d:42:db:8d:1e:5f:8e:71:53:7d:67:0a: 61:59:12:35:eb:a9:a6:42:02:dd:ab:26:77:a0:4e:07:26:0f: 76:7b:73:c0:0b:7d:13:05:96:53:95:05:8c:77:d2:a4:6e:e3: dc:8c:a9:7d:00:9b:37:4e:99:ce:85:dd:34:aa:33:ac:c2:58: c7:8b:ed:be:89:6f:95:d0:85:1b:25:5c:ea:ef:ea:83:0a:3d: a3:ee:6b:e7:65:8f:e5:7f:3d:dd:95:a4:8e:3e:52:f0:a7:c8: d6:ec:70:6b:f6:7c:ae:a6:fd:8a:9a:70:41:33:7a:82:f6:2d: 27:03:31:07:b0:20:42:26:be:e9:20:d3:15:fd:c7:9b:4c:f1: 63:f9:38:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmuf0Q+FDNA9gDt44AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDRiMzI2M2EtNGNjYy00YzBmLWEyMGMtMmY1OWJiYzdm YWMxMB4XDTI1MDQyOTAxMDA0N1oXDTI1MDcyODAxMDA0N1owLzEtMCsGA1UEAxMk OGIxZGZlOWMtMGY5OC00YTAwLWFiMGEtOGE0ZDY0N2ViYWNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtneOpSb5LjUJuv1lux+nr05Wvkd4Kk0DL81M bOulFnN9qUrREM0ATTpmpDF1jxHPrsdRMxAMqx7HMWAwnj69sQn57puqPWWi6HQH AFmjQzFSmLfeHvlry/QayqeY+oPZDhTHAAS5J/M2k4jBMlb31KDF2tA/C8bayYpT /RpBDIUz+h0vqU3gNKb4f0a4O60CQOvWz5eXwhrgwka98/Zqw+Mw084uv3BDaWfK 6AGNm7bt1ueHnZen5GNUawHhsxnfAwMfb+E6GLyXcNYDapEEfb4bOXRwBxrFpQAX octSMW3I1gCO96YC8lzL3/8nIb6GNi+KIu6xqWaSXXStsSJNXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLs9kPmdC0HjRyW6XmYX49itcRt8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kNGIz MjYzYS00Y2NjLTRjMGYtYTIwYy0yZjU5YmJjN2ZhYzEvZmM5Mjc1NDAtNDI4Yi0z N2NiLTkwM2YtY2ExZThmYjY0NTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZDRiMzI2M2EtNGNjYy00YzBmLWEy MGMtMmY1OWJiYzdmYWMxL2Q0YjMyNjNhLTRjY2MtNGMwZi1hMjBjLTJmNTliYmM3 ZmFjMS5jcmwwHwYDVR0jBBgwFoAUWhVLReOxAsXOslYtuQ/OO+XFdRMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kNGIzMjYzYS00Y2NjLTRjMGYtYTIwYy0yZjU5 YmJjN2ZhYzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxrGZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK7D03je06LKYbd1E9DEmiyWSOiwtnTsRsRhIcUqLuL/m0USpIrk+Ai9 VPDmQZocBdPqcnDgibcV4CS0DymhdR2hsJWLJE/Bnqekk+u0quqEtQdzgHvgk8+F kKALTEarfJcys/tSSEW7iV1VdHFCtjC1/U1C240eX45xU31nCmFZEjXrqaZCAt2r JnegTgcmD3Z7c8ALfRMFllOVBYx30qRu49yMqX0AmzdOmc6F3TSqM6zCWMeL7b6J b5XQhRslXOrv6oMKPaPua+dlj+V/Pd2VpI4+UvCnyNbscGv2fK6m/YqacEEzeoL2 LScDMQewIEImvukg0xX9x5tM8WP5OMM= -----END CERTIFICATE-----Generated at Tue Apr 29 16:16:38 2025 by rpki-client