$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/779a63bf-08f6-3f6f-bed1-9894398f6634.roa File: 779a63bf-08f6-3f6f-bed1-9894398f6634.roa (raw, json) Hash identifier: +X90B62H2XfLk81i3e1aLqILU3RA2i6Xafx/VGLiF28= Subject key identifier: 8B:3B:23:37:DE:1A:15:21:80:F7:AF:A3:0F:96:34:76:3C:42:8E:5D Certificate issuer: /CN=d6d708e8-5964-4587-8db1-e22545ec38a3 Certificate serial: 010D0C9F4328584A31B563034AB23880A01AEE00 Authority key identifier: 96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/779a63bf-08f6-3f6f-bed1-9894398f6634.roa Signing time: Sun 15 Jun 2025 01:00:49 +0000 ROA not before: Sun 15 Jun 2025 01:00:49 +0000 ROA not after: Sat 13 Sep 2025 01:00:49 +0000 asID: 21947 IP address blocks: 192.150.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:31:b5:63:03:4a:b2:38:80:a0:1a:ee:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6d708e8-5964-4587-8db1-e22545ec38a3 Validity Not Before: Jun 15 01:00:49 2025 GMT Not After : Sep 13 01:00:49 2025 GMT Subject: CN=189cc9fa-8c6e-4c98-bfde-6942c6192df8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d1:3d:f2:cb:76:e0:cb:73:77:5d:32:f6:61: ef:59:92:f6:b7:63:b0:c9:86:e3:f2:e1:4d:8a:65: 7f:a3:19:93:e9:f9:46:34:e7:27:e0:16:73:24:71: 2d:2b:cc:6f:e4:30:1c:4e:5d:65:a4:7a:2c:2f:18: 66:80:14:6a:dd:19:f4:a4:36:28:43:40:4c:4a:4b: 6b:aa:c0:88:24:c7:5f:40:c5:74:4e:ee:1e:39:95: d8:18:9c:ce:bf:72:d3:18:1a:cd:1c:6e:45:ee:4b: 64:b9:a3:d4:2d:9f:4d:99:7d:1b:74:42:39:60:9d: 54:51:1c:19:0a:39:60:8e:10:e3:03:b8:91:1d:b5: 62:6f:69:4d:01:85:4a:cb:51:84:70:02:d6:f9:22: 4c:15:09:71:9f:14:fe:fa:33:e0:22:a2:29:2d:36: ba:ee:74:50:0c:72:26:62:b8:90:99:ec:35:26:7f: 98:2f:69:e7:61:95:ed:2f:06:37:34:d9:0f:ba:be: 9b:ac:db:76:b9:34:72:5c:08:ad:16:7c:a4:5a:55: f0:d3:3c:14:e4:bc:8c:b2:56:16:34:64:8c:7b:78: bf:2c:0d:05:8a:11:26:c5:58:90:e2:c3:89:1b:99: a3:78:1e:53:1a:90:cf:c1:fe:7a:22:4e:68:f9:fc: b9:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:3B:23:37:DE:1A:15:21:80:F7:AF:A3:0F:96:34:76:3C:42:8E:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/779a63bf-08f6-3f6f-bed1-9894398f6634.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl X509v3 Authority Key Identifier: keyid:96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer sbgp-ipAddrBlock: critical IPv4: 192.150.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:73:6d:e3:17:6c:ce:51:30:c1:1c:a2:3f:2c:95:1a:14:c1: aa:c1:6a:35:8e:88:7b:b2:64:85:c4:98:15:44:fb:0d:3b:a5: 1a:34:62:d9:46:99:c5:26:0b:4f:25:8f:89:ae:82:c3:2d:e4: f3:4d:73:4f:a4:b6:bd:9e:86:45:49:23:a7:61:58:e3:98:df: 62:ab:10:0b:d5:75:f5:76:d2:bf:1f:47:68:28:f5:e9:f0:12: 33:0e:63:82:8e:02:c9:ca:c3:7b:4c:f9:72:0e:95:cb:c6:05: 31:8c:d9:36:a0:e1:8b:75:bd:23:63:cb:39:c6:27:5b:5a:8b: 16:df:7c:07:07:65:16:2e:9a:c0:55:d6:89:0c:04:c0:19:d6: 0a:6e:7b:43:6c:fc:31:57:7c:39:31:ed:71:21:37:b5:c5:3b: f2:0b:d6:94:a2:83:e5:f2:f3:b0:04:c8:74:6e:84:e0:4a:07: d6:87:12:b3:5e:aa:57:6c:ee:43:7c:94:d2:62:aa:ac:4f:9f: 56:07:32:e9:af:d9:06:ca:8f:ac:73:e5:da:6c:4b:18:35:d0: 8d:7a:f7:40:41:6f:b2:77:b0:d7:2e:8d:a7:1e:c0:40:c9:38: 7a:c2:f7:5e:eb:8c:d1:d7:e5:c2:9b:fe:a9:26:ac:82:dc:e2: 5e:23:5c:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoxtWMDSrI4gKAa7gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZkNzA4ZTgtNTk2NC00NTg3LThkYjEtZTIyNTQ1ZWMz OGEzMB4XDTI1MDYxNTAxMDA0OVoXDTI1MDkxMzAxMDA0OVowLzEtMCsGA1UEAxMk MTg5Y2M5ZmEtOGM2ZS00Yzk4LWJmZGUtNjk0MmM2MTkyZGY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNE98st24Mtzd10y9mHvWZL2t2OwyYbj8uFN imV/oxmT6flGNOcn4BZzJHEtK8xv5DAcTl1lpHosLxhmgBRq3Rn0pDYoQ0BMSktr qsCIJMdfQMV0Tu4eOZXYGJzOv3LTGBrNHG5F7ktkuaPULZ9NmX0bdEI5YJ1UURwZ CjlgjhDjA7iRHbVib2lNAYVKy1GEcALW+SJMFQlxnxT++jPgIqIpLTa67nRQDHIm YriQmew1Jn+YL2nnYZXtLwY3NNkPur6brNt2uTRyXAitFnykWlXw0zwU5LyMslYW NGSMe3i/LA0FihEmxViQ4sOJG5mjeB5TGpDPwf56Ik5o+fy5UwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIs7IzfeGhUhgPevow+WNHY8Qo5dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3 MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1NDVlYzM4YTMvNzc5YTYzYmYtMDhmNi0z ZjZmLWJlZDEtOTg5NDM5OGY2NjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDZkNzA4ZTgtNTk2NC00NTg3LThk YjEtZTIyNTQ1ZWMzOGEzL2Q2ZDcwOGU4LTU5NjQtNDU4Ny04ZGIxLWUyMjU0NWVj MzhhMy5jcmwwHwYDVR0jBBgwFoAUlk9xUziI2saVrlqCb+yvOhpfLHQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1 NDVlYzM4YTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwJaYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEtzbeMXbM5RMMEcoj8slRoUwarBajWOiHuyZIXEmBVE+w07pRo0YtlG mcUmC08lj4mugsMt5PNNc0+ktr2ehkVJI6dhWOOY32KrEAvVdfV20r8fR2go9enw EjMOY4KOAsnKw3tM+XIOlcvGBTGM2Tag4Yt1vSNjyznGJ1taixbffAcHZRYumsBV 1okMBMAZ1gpue0Ns/DFXfDkx7XEhN7XFO/IL1pSig+Xy87AEyHRuhOBKB9aHErNe qlds7kN8lNJiqqxPn1YHMumv2QbKj6xz5dpsSxg10I1690BBb7J3sNcujacewEDJ OHrC917rjNHX5cKb/qkmrILc4l4jXPQ= -----END CERTIFICATE-----Generated at Mon Jun 16 22:10:35 2025 by rpki-client