$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/779a63bf-08f6-3f6f-bed1-9894398f6634.roa File: 779a63bf-08f6-3f6f-bed1-9894398f6634.roa (raw, json) Hash identifier: Kdy00MQfoTHRe4eyJsIGhhPOhCNBIqaM7ZSThG6hvjk= Subject key identifier: 14:29:B8:1F:22:5C:F3:53:E9:B9:3B:0C:8A:BD:C2:88:7D:68:23:27 Certificate issuer: /CN=d6d708e8-5964-4587-8db1-e22545ec38a3 Certificate serial: 010D0C9F43285849512F55BF90FB9E11152ECD80 Authority key identifier: 96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/779a63bf-08f6-3f6f-bed1-9894398f6634.roa Signing time: Wed 26 Mar 2025 14:49:41 +0000 ROA not before: Wed 26 Mar 2025 14:49:41 +0000 ROA not after: Tue 24 Jun 2025 14:49:41 +0000 asID: 21947 IP address blocks: 192.150.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:51:2f:55:bf:90:fb:9e:11:15:2e:cd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6d708e8-5964-4587-8db1-e22545ec38a3 Validity Not Before: Mar 26 14:49:41 2025 GMT Not After : Jun 24 14:49:41 2025 GMT Subject: CN=9338d2b2-502f-4983-9d15-963c1d9ae4f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ff:30:34:bc:71:e3:02:fe:65:bf:bc:7f:65: c5:cb:fa:cf:3e:82:7d:ce:b8:fd:1d:5f:40:82:b3: 8e:3f:11:dc:1b:45:07:f4:61:18:71:21:b3:e6:dc: 9e:df:e3:c1:3a:63:4c:e1:01:26:6c:d5:5f:2a:57: 02:fd:c9:e5:1f:f0:ee:c0:87:29:35:e6:4b:c4:ae: 13:9e:32:a5:eb:f8:23:50:85:1c:a4:78:44:2c:2a: 25:9b:6c:a6:5a:d7:2d:e4:b5:38:f0:87:87:5a:1d: cf:51:10:43:37:2e:0b:a0:b0:b9:e0:a1:bf:bc:b1: c5:66:22:fd:b0:9d:e1:d0:78:1d:c3:55:1e:36:a3: 32:24:e5:00:97:3d:cc:29:d1:07:6f:99:34:f0:56: 62:28:3c:09:35:fc:67:35:f3:3a:46:d8:f0:d2:de: 2c:f7:8e:1b:2f:6d:57:4a:53:06:a0:39:dc:af:82: 9e:21:a1:82:a2:31:15:9c:a7:ea:85:62:c6:ee:e0: d5:44:12:cd:73:11:42:1f:37:11:90:b6:e9:af:e7: 0b:27:a9:c8:af:6c:12:a6:7e:de:2d:cb:53:2e:dd: 26:1a:bb:20:ee:5d:3a:d2:09:46:df:54:a1:a0:b0: c0:4d:a8:15:14:d6:d6:e0:68:1d:f4:9e:e9:d0:29: 61:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:29:B8:1F:22:5C:F3:53:E9:B9:3B:0C:8A:BD:C2:88:7D:68:23:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/779a63bf-08f6-3f6f-bed1-9894398f6634.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl X509v3 Authority Key Identifier: keyid:96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer sbgp-ipAddrBlock: critical IPv4: 192.150.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:ca:e2:1b:dd:b1:a8:8e:b8:a0:06:24:2a:63:1b:9b:30:e8: 20:7d:b8:62:18:fa:b2:2e:90:89:01:55:26:e2:d5:29:79:75: 20:87:05:b5:78:fd:0e:19:29:16:ab:e9:c7:7b:e0:0e:7b:a0: 2b:23:c9:af:79:4f:06:4b:f5:08:72:70:10:e1:46:04:81:89: 90:2d:7c:1f:e6:e9:85:2e:68:95:84:99:25:5b:c8:d3:03:2e: da:f1:4e:d6:e6:dc:8a:b8:21:72:78:c2:7f:f1:a6:8e:4d:f4: 2f:fb:84:c5:ae:3d:3a:4c:97:61:b3:3e:6c:6f:33:5e:0e:96: 9c:0d:cb:1f:b5:c9:cd:4f:5b:8b:12:a3:65:7e:6e:d0:17:a9: dc:28:7c:20:68:b3:7d:cf:f6:a9:27:2b:2f:50:42:c9:29:74: f3:e6:2a:78:45:6d:b0:45:a6:d5:25:46:8b:41:be:6f:7f:20: 29:3a:8f:d1:d8:69:46:fb:fb:1c:ec:60:82:32:2e:b8:7e:19: 08:ba:d2:31:7b:f0:38:5e:68:d9:c2:8f:1b:03:1f:37:d8:00: c1:e9:ad:e7:9b:a8:af:ee:5e:5a:5c:ad:ff:00:29:ec:55:21: 4e:58:a5:67:4e:03:e3:61:04:49:9c:32:ae:5a:90:b2:7e:28: 8b:82:b7:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElRL1W/kPueERUuzYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZkNzA4ZTgtNTk2NC00NTg3LThkYjEtZTIyNTQ1ZWMz OGEzMB4XDTI1MDMyNjE0NDk0MVoXDTI1MDYyNDE0NDk0MVowLzEtMCsGA1UEAxMk OTMzOGQyYjItNTAyZi00OTgzLTlkMTUtOTYzYzFkOWFlNGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/8wNLxx4wL+Zb+8f2XFy/rPPoJ9zrj9HV9A grOOPxHcG0UH9GEYcSGz5tye3+PBOmNM4QEmbNVfKlcC/cnlH/DuwIcpNeZLxK4T njKl6/gjUIUcpHhELColm2ymWtct5LU48IeHWh3PURBDNy4LoLC54KG/vLHFZiL9 sJ3h0Hgdw1UeNqMyJOUAlz3MKdEHb5k08FZiKDwJNfxnNfM6Rtjw0t4s944bL21X SlMGoDncr4KeIaGCojEVnKfqhWLG7uDVRBLNcxFCHzcRkLbpr+cLJ6nIr2wSpn7e LctTLt0mGrsg7l060glG31ShoLDATagVFNbW4Ggd9J7p0ClhEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBQpuB8iXPNT6bk7DIq9woh9aCMnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3 MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1NDVlYzM4YTMvNzc5YTYzYmYtMDhmNi0z ZjZmLWJlZDEtOTg5NDM5OGY2NjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDZkNzA4ZTgtNTk2NC00NTg3LThk YjEtZTIyNTQ1ZWMzOGEzL2Q2ZDcwOGU4LTU5NjQtNDU4Ny04ZGIxLWUyMjU0NWVj MzhhMy5jcmwwHwYDVR0jBBgwFoAUlk9xUziI2saVrlqCb+yvOhpfLHQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1 NDVlYzM4YTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwJaYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHLK4hvdsaiOuKAGJCpjG5sw6CB9uGIY+rIukIkBVSbi1Sl5dSCHBbV4 /Q4ZKRar6cd74A57oCsjya95TwZL9QhycBDhRgSBiZAtfB/m6YUuaJWEmSVbyNMD LtrxTtbm3Iq4IXJ4wn/xpo5N9C/7hMWuPTpMl2GzPmxvM14OlpwNyx+1yc1PW4sS o2V+btAXqdwofCBos33P9qknKy9QQskpdPPmKnhFbbBFptUlRotBvm9/ICk6j9HY aUb7+xzsYIIyLrh+GQi60jF78DheaNnCjxsDHzfYAMHpreebqK/uXlpcrf8AKexV IU5YpWdOA+NhBEmcMq5akLJ+KIuCt6U= -----END CERTIFICATE-----Generated at Sun Apr 6 11:06:06 2025 by rpki-client