$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/153b1b20-0859-4b1b-9ffe-37e90041a8cc/d833a937-fd68-3b12-a552-2d99af1447a0.roa File: d833a937-fd68-3b12-a552-2d99af1447a0.roa (raw, json) Hash identifier: 0ziXN+JCNmyPlXatt981F893JYsUHKKGWnlzAqJwav0= Subject key identifier: C5:C2:72:1C:E8:1F:06:33:C2:B1:F4:1D:BA:36:95:6D:10:82:CD:85 Certificate issuer: /CN=153b1b20-0859-4b1b-9ffe-37e90041a8cc Certificate serial: 010D0C9F4328584B0B769E81E8C750A797FCB540 Authority key identifier: A5:FC:2C:AC:D1:55:F0:F7:FE:C9:19:C9:B6:F3:DF:50:B2:8C:76:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/153b1b20-0859-4b1b-9ffe-37e90041a8cc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/153b1b20-0859-4b1b-9ffe-37e90041a8cc/d833a937-fd68-3b12-a552-2d99af1447a0.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 198949 IP address blocks: 198.180.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/153b1b20-0859-4b1b-9ffe-37e90041a8cc/153b1b20-0859-4b1b-9ffe-37e90041a8cc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/153b1b20-0859-4b1b-9ffe-37e90041a8cc/153b1b20-0859-4b1b-9ffe-37e90041a8cc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/153b1b20-0859-4b1b-9ffe-37e90041a8cc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:9e:81:e8:c7:50:a7:97:fc:b5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=153b1b20-0859-4b1b-9ffe-37e90041a8cc Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=f15ade92-66f1-4b29-8204-58a63a9b10da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d8:d1:97:10:13:df:e1:75:cb:8e:68:b7:84: 4f:19:26:35:b2:88:e4:6c:91:f1:91:c6:46:ac:bc: aa:21:9f:54:02:7f:3e:4c:3d:d4:18:ac:08:6d:92: 2d:64:45:ce:f4:62:47:b8:1a:2f:d9:06:1c:00:69: 98:6f:5f:67:c8:5d:a2:8e:e0:b7:12:57:bf:2b:c9: dd:c4:12:85:2e:71:72:a0:b1:29:a4:75:97:eb:f0: 34:00:ad:dc:72:89:eb:0c:1f:7e:13:c9:21:01:68: 01:be:b8:fd:4e:d6:b7:7f:4d:fd:8e:df:7a:7a:ff: f7:5a:f1:4a:20:01:e4:0e:ed:6d:ed:a4:a6:17:ab: a3:b3:57:f0:8d:5b:61:e9:53:78:81:bd:e4:09:34: 48:cb:9e:3d:12:11:31:e7:fb:60:d3:b2:34:b7:2c: 4f:4b:1a:73:51:3d:c4:27:37:8c:5d:16:e1:7c:04: 2f:77:93:bb:8c:f6:57:75:8d:a3:6a:6a:84:1c:7d: 4d:34:95:16:f7:57:13:be:85:45:31:a8:ae:d9:4e: d7:7c:86:c2:d5:09:cb:8f:f1:14:51:c6:ad:fb:10: 7f:1f:36:02:3f:de:af:1d:96:cf:b1:11:3b:29:42: b9:25:5f:ed:6e:a9:71:07:8f:7b:46:0d:7f:ea:25: 3e:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:C2:72:1C:E8:1F:06:33:C2:B1:F4:1D:BA:36:95:6D:10:82:CD:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/153b1b20-0859-4b1b-9ffe-37e90041a8cc/d833a937-fd68-3b12-a552-2d99af1447a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/153b1b20-0859-4b1b-9ffe-37e90041a8cc/153b1b20-0859-4b1b-9ffe-37e90041a8cc.crl X509v3 Authority Key Identifier: keyid:A5:FC:2C:AC:D1:55:F0:F7:FE:C9:19:C9:B6:F3:DF:50:B2:8C:76:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/153b1b20-0859-4b1b-9ffe-37e90041a8cc.cer sbgp-ipAddrBlock: critical IPv4: 198.180.229.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:73:06:ee:b9:6c:72:a7:26:a0:ce:82:1e:41:e8:df:54:ba: d4:eb:20:86:9d:89:c6:69:ab:02:44:94:2b:c7:17:e0:1c:64: 41:35:f5:51:33:d0:d3:90:f5:5f:e0:87:90:9f:49:bb:7a:be: 3d:94:78:b2:22:5d:50:b9:0e:87:34:9f:26:db:78:27:a2:fd: 38:40:56:bb:ce:b8:a9:93:36:f9:ef:7e:ef:2a:34:5c:e7:a0: c6:71:c5:51:dd:36:8e:0a:ad:cb:c8:d2:ec:f1:23:04:db:03: 6c:62:21:67:11:ae:b6:ef:da:29:f2:ec:6f:48:34:0f:6d:04: 2c:b9:84:7c:a8:a8:84:cb:02:b6:64:86:52:ae:a0:43:2c:04: a4:3d:e3:a8:1b:91:41:84:d0:fa:27:6a:b9:78:2e:cf:59:29: 69:4c:b0:66:f2:b4:ef:00:db:d1:0f:91:6d:db:d8:59:06:76: ca:35:df:b3:ec:79:62:1e:38:e7:e3:98:68:de:e8:a7:84:1d: 45:71:f4:f1:39:e6:41:8c:02:55:28:c3:ea:62:c2:15:7d:2f: 5b:a2:1e:35:24:08:97:ce:09:b6:48:f3:bc:48:8e:01:85:30: 52:89:f9:5a:4e:56:97:ad:fa:68:6f:e8:ff:e2:18:d0:79:7f: 70:5e:23:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdp6B6MdQp5f8tUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTUzYjFiMjAtMDg1OS00YjFiLTlmZmUtMzdlOTAwNDFh OGNjMB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk ZjE1YWRlOTItNjZmMS00YjI5LTgyMDQtNThhNjNhOWIxMGRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldjRlxAT3+F1y45ot4RPGSY1sojkbJHxkcZG rLyqIZ9UAn8+TD3UGKwIbZItZEXO9GJHuBov2QYcAGmYb19nyF2ijuC3Ele/K8nd xBKFLnFyoLEppHWX6/A0AK3cconrDB9+E8khAWgBvrj9Tta3f039jt96ev/3WvFK IAHkDu1t7aSmF6ujs1fwjVth6VN4gb3kCTRIy549EhEx5/tg07I0tyxPSxpzUT3E JzeMXRbhfAQvd5O7jPZXdY2jamqEHH1NNJUW91cTvoVFMaiu2U7XfIbC1QnLj/EU Ucat+xB/HzYCP96vHZbPsRE7KUK5JV/tbqlxB497Rg1/6iU+gwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMXCchzoHwYzwrH0Hbo2lW0Qgs2FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xNTNi MWIyMC0wODU5LTRiMWItOWZmZS0zN2U5MDA0MWE4Y2MvZDgzM2E5MzctZmQ2OC0z YjEyLWE1NTItMmQ5OWFmMTQ0N2EwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMTUzYjFiMjAtMDg1OS00YjFiLTlm ZmUtMzdlOTAwNDFhOGNjLzE1M2IxYjIwLTA4NTktNGIxYi05ZmZlLTM3ZTkwMDQx YThjYy5jcmwwHwYDVR0jBBgwFoAUpfwsrNFV8Pf+yRnJtvPfULKMdvYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xNTNiMWIyMC0wODU5LTRiMWItOWZmZS0zN2U5 MDA0MWE4Y2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxrTlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFdzBu65bHKnJqDOgh5B6N9UutTrIIadicZpqwJElCvHF+AcZEE19VEz 0NOQ9V/gh5CfSbt6vj2UeLIiXVC5Doc0nybbeCei/ThAVrvOuKmTNvnvfu8qNFzn oMZxxVHdNo4KrcvI0uzxIwTbA2xiIWcRrrbv2iny7G9INA9tBCy5hHyoqITLArZk hlKuoEMsBKQ946gbkUGE0Ponarl4Ls9ZKWlMsGbytO8A29EPkW3b2FkGdso137Ps eWIeOOfjmGje6KeEHUVx9PE55kGMAlUow+piwhV9L1uiHjUkCJfOCbZI87xIjgGF MFKJ+VpOVpet+mhv6P/iGNB5f3BeIzc= -----END CERTIFICATE-----Generated at Mon Oct 20 02:39:08 2025 by rpki-client