$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/dd6d5920-ffeb-3cb0-9f4f-42fa6e6974f2.roa File: dd6d5920-ffeb-3cb0-9f4f-42fa6e6974f2.roa (raw, json) Hash identifier: sSqL0LBLvnCO5VtR/659c9JPHH4c3ceTEVMTAl9Z3QM= Subject key identifier: D0:D7:41:51:14:E6:D3:B0:BD:47:14:18:8B:23:AF:32:FD:67:46:93 Certificate issuer: /CN=f5f2c804-b3b9-4b56-a719-dd72262a7a6d Certificate serial: 010D0C9F43285849CBCF9CC3825552BA005A0780 Authority key identifier: C4:60:1F:97:B9:F6:89:F4:CF:39:BD:79:3F:D8:3D:23:75:EC:42:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/dd6d5920-ffeb-3cb0-9f4f-42fa6e6974f2.roa Signing time: Fri 09 May 2025 13:01:00 +0000 ROA not before: Fri 09 May 2025 13:01:00 +0000 ROA not after: Thu 07 Aug 2025 13:01:00 +0000 asID: 26512 IP address blocks: 168.245.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cb:cf:9c:c3:82:55:52:ba:00:5a:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5f2c804-b3b9-4b56-a719-dd72262a7a6d Validity Not Before: May 9 13:01:00 2025 GMT Not After : Aug 7 13:01:00 2025 GMT Subject: CN=b4865f40-7d10-468d-8b8e-5d440cc17082 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:7e:17:ba:21:7c:27:fa:cf:d0:8d:b4:b0:bd: 35:fe:b4:c5:5b:44:46:70:c7:5e:d8:a9:0b:b4:4a: ef:85:fc:fd:e1:52:82:47:27:82:7a:90:7e:3e:0d: 55:51:54:cf:43:81:17:da:c6:f7:88:84:80:f6:fa: a0:8b:41:0c:b9:f5:9d:cf:91:e3:5e:b0:0f:85:d2: ed:f8:1f:5c:3e:fc:4d:fa:d4:54:50:98:87:f8:aa: 81:51:b4:fc:ca:12:a6:9c:c4:28:f8:db:03:45:85: 4c:78:69:bd:2e:10:22:1f:2b:78:35:d5:8a:ac:d7: 9d:c7:e4:d6:b8:1f:ac:27:26:0f:9c:e4:44:1b:74: 03:49:c3:95:72:32:0a:16:b0:68:f0:17:9f:87:b3: fe:7e:ff:ca:0f:6e:60:61:3e:ac:95:57:fa:11:32: 51:84:32:21:ed:ea:ad:e0:1d:bf:9f:e4:8f:55:9a: e1:67:ef:ef:64:a8:27:2f:12:48:0d:37:81:fa:aa: bb:4a:9e:01:1d:3c:b1:9c:58:44:c8:8e:9b:8b:e2: af:9d:bb:4b:51:6f:9c:7f:22:39:32:b7:f5:d4:c8: 6e:a1:4c:1d:95:55:97:8a:9f:bb:7d:d1:71:65:16: 80:c7:6f:48:a0:b7:94:08:e9:f1:33:64:3b:3e:b8: a9:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:D7:41:51:14:E6:D3:B0:BD:47:14:18:8B:23:AF:32:FD:67:46:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/dd6d5920-ffeb-3cb0-9f4f-42fa6e6974f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.crl X509v3 Authority Key Identifier: keyid:C4:60:1F:97:B9:F6:89:F4:CF:39:BD:79:3F:D8:3D:23:75:EC:42:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer sbgp-ipAddrBlock: critical IPv4: 168.245.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:3d:fc:86:5b:0d:9d:59:19:f5:16:bc:0d:28:9c:56:63:da: 93:12:c7:5c:17:fc:cd:e6:32:d2:c4:74:ae:71:14:33:78:84: 1b:21:79:bd:98:4a:b6:fe:8f:12:4c:31:48:00:68:c7:aa:82: 0f:b9:59:b1:44:29:6b:62:66:d5:c8:ea:de:1e:a5:1e:ec:a8: bf:c7:fc:43:53:5f:bd:fb:eb:5c:39:ad:f3:82:80:29:2a:80: 1b:fe:85:e0:29:81:f7:3d:e8:1f:19:c5:34:dc:3e:19:f0:90: 4e:56:ea:97:23:d9:e7:43:ee:fd:4c:b5:44:59:58:b8:f0:7c: bd:61:06:ae:4b:17:84:df:fb:2f:7e:15:33:11:91:45:fe:bd: c6:99:84:b5:c1:e3:40:48:03:07:0e:19:a2:40:1e:fa:ff:6d: f8:b6:b5:f2:9e:e8:69:4d:cc:6c:40:38:fe:28:e7:8b:66:3a: 9b:05:31:e3:af:1d:60:f2:5b:37:14:6b:36:50:62:64:e8:d0: 94:5d:50:d6:75:c5:96:1c:9e:d5:75:1e:43:8a:1b:30:1e:9e: 9a:c6:f3:51:c7:57:38:76:ca:09:1e:c9:00:be:64:e8:bb:8d: b7:17:b3:ae:da:a8:81:79:86:d5:da:04:8b:d5:fa:52:6b:d9: 58:1f:26:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnLz5zDglVSugBaB4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjVmMmM4MDQtYjNiOS00YjU2LWE3MTktZGQ3MjI2MmE3 YTZkMB4XDTI1MDUwOTEzMDEwMFoXDTI1MDgwNzEzMDEwMFowLzEtMCsGA1UEAxMk YjQ4NjVmNDAtN2QxMC00NjhkLThiOGUtNWQ0NDBjYzE3MDgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsH4XuiF8J/rP0I20sL01/rTFW0RGcMde2KkL tErvhfz94VKCRyeCepB+Pg1VUVTPQ4EX2sb3iISA9vqgi0EMufWdz5HjXrAPhdLt +B9cPvxN+tRUUJiH+KqBUbT8yhKmnMQo+NsDRYVMeGm9LhAiHyt4NdWKrNedx+TW uB+sJyYPnOREG3QDScOVcjIKFrBo8Befh7P+fv/KD25gYT6slVf6ETJRhDIh7eqt 4B2/n+SPVZrhZ+/vZKgnLxJIDTeB+qq7Sp4BHTyxnFhEyI6bi+KvnbtLUW+cfyI5 Mrf11MhuoUwdlVWXip+7fdFxZRaAx29IoLeUCOnxM2Q7PripCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNDXQVEU5tOwvUcUGIsjrzL9Z0aTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mNWYy YzgwNC1iM2I5LTRiNTYtYTcxOS1kZDcyMjYyYTdhNmQvZGQ2ZDU5MjAtZmZlYi0z Y2IwLTlmNGYtNDJmYTZlNjk3NGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjVmMmM4MDQtYjNiOS00YjU2LWE3 MTktZGQ3MjI2MmE3YTZkL2Y1ZjJjODA0LWIzYjktNGI1Ni1hNzE5LWRkNzIyNjJh N2E2ZC5jcmwwHwYDVR0jBBgwFoAUxGAfl7n2ifTPOb15P9g9I3XsQiEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mNWYyYzgwNC1iM2I5LTRiNTYtYTcxOS1kZDcy MjYyYTdhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqPWZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABs9/IZbDZ1ZGfUWvA0onFZj2pMSx1wX/M3mMtLEdK5xFDN4hBsheb2Y Srb+jxJMMUgAaMeqgg+5WbFEKWtiZtXI6t4epR7sqL/H/ENTX73761w5rfOCgCkq gBv+heApgfc96B8ZxTTcPhnwkE5W6pcj2edD7v1MtURZWLjwfL1hBq5LF4Tf+y9+ FTMRkUX+vcaZhLXB40BIAwcOGaJAHvr/bfi2tfKe6GlNzGxAOP4o54tmOpsFMeOv HWDyWzcUazZQYmTo0JRdUNZ1xZYcntV1HkOKGzAenprG81HHVzh2ygkeyQC+ZOi7 jbcXs67aqIF5htXaBIvV+lJr2VgfJu8= -----END CERTIFICATE-----Generated at Sun May 11 23:16:12 2025 by rpki-client