$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/299096e0-2f30-39c1-8e77-4fa18c746b04.roa File: 299096e0-2f30-39c1-8e77-4fa18c746b04.roa (raw, json) Hash identifier: 2CMQ8+YTuGqYrazrCI2HQveCxRiENDQFMy1++RM37VY= Subject key identifier: 48:42:C2:CD:FE:80:31:FF:8B:97:47:BF:CC:75:6C:69:92:FE:11:22 Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65 Certificate serial: 010D0C9F4328584DBA3AFEB2FD3E77CD5E115900 Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/299096e0-2f30-39c1-8e77-4fa18c746b04.roa Signing time: Tue 05 May 2026 01:00:23 +0000 ROA not before: Tue 05 May 2026 01:00:23 +0000 ROA not after: Mon 03 Aug 2026 01:00:23 +0000 asID: 30103 IP address blocks: 149.137.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ba:3a:fe:b2:fd:3e:77:cd:5e:11:59:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65 Validity Not Before: May 5 01:00:23 2026 GMT Not After : Aug 3 01:00:23 2026 GMT Subject: CN=536641fb-e11b-418d-8f10-65d4b9d3f105 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:9d:40:46:e5:e9:08:85:b9:42:ea:41:de:92: db:07:d9:e5:57:30:1c:18:16:c2:4f:42:75:5b:eb: a1:30:ab:f7:e6:e3:5a:4a:99:70:2b:0f:13:81:40: cc:64:fe:16:33:72:b1:4c:82:29:cb:1c:d5:b4:7a: 43:3a:47:33:77:6c:96:00:6b:3d:f6:26:0a:12:ef: 71:54:1c:11:64:79:b4:ef:87:bb:ad:d5:27:bf:48: b5:5e:70:83:b5:14:14:93:21:23:3f:92:d7:cb:cd: 65:1f:b9:c6:a5:27:cc:c0:ca:2d:da:6a:70:fe:ed: 15:8a:b5:3b:a8:64:e9:92:87:2c:d9:5f:0f:31:72: cb:53:b9:a5:da:78:26:40:c1:5b:fd:fc:39:20:70: 16:f0:7b:4f:ef:b9:4a:54:5b:19:85:50:ee:18:eb: cf:9e:d3:f2:1f:16:8a:86:25:e5:5b:f2:b1:4f:77: 91:1b:57:f4:8f:2c:ac:7b:14:f6:22:b3:95:3e:0d: 67:09:74:77:7d:b0:79:81:fd:5b:72:9c:72:66:cb: 1a:b9:fe:4e:b0:7e:22:ab:91:7c:83:9e:b7:1d:60: fb:c6:7d:f4:2d:4d:4e:97:d1:c7:1f:0b:05:9a:88: 2c:09:e1:83:4d:0d:04:54:cd:90:bb:d5:0d:3c:94: 8f:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:42:C2:CD:FE:80:31:FF:8B:97:47:BF:CC:75:6C:69:92:FE:11:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/299096e0-2f30-39c1-8e77-4fa18c746b04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl X509v3 Authority Key Identifier: keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer sbgp-ipAddrBlock: critical IPv4: 149.137.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:c8:2b:40:24:c5:d7:b0:7d:c2:fe:bb:7b:95:78:0c:4d:2a: 73:63:52:6b:84:ea:82:44:c7:74:54:4f:02:7e:9f:01:b4:a1: 8e:b3:c9:9e:f5:57:97:90:17:c1:e5:92:24:2b:a6:de:ad:d9: bf:c4:eb:09:3b:e6:2f:c2:d2:a0:74:21:8f:ac:ec:70:4c:4d: 55:d0:7d:a8:f7:69:20:eb:2a:3f:9a:4d:55:36:45:12:a2:bc: 23:cf:c5:8d:ba:4b:75:d0:11:68:33:1b:8a:3f:b4:51:89:fa: 1c:ac:a9:ef:d4:05:9e:e5:dd:2c:fd:17:06:e2:7d:8c:af:dc: b9:0f:2f:82:9b:78:ff:b8:d9:e2:23:ea:18:14:f2:1d:64:fe: 7e:49:13:32:f9:34:74:a2:fa:a7:ec:c4:16:9c:c0:07:43:10: 78:d3:3f:6d:64:39:31:0b:78:cf:54:93:bb:e8:6c:a2:f9:bc: c6:ac:b6:5d:d9:a1:8c:aa:c6:ee:bb:53:4f:b1:c7:bf:4e:c8: 76:b3:1b:63:f9:73:a3:51:40:ec:a9:d5:3c:37:11:9a:5a:36: fe:92:6b:95:5c:96:da:b3:5f:25:25:c1:34:be:3e:31:00:29: 0b:6c:6f:87:52:c7:2e:6c:58:af:d9:65:e5:b4:1f:3a:62:b0: 47:a6:0b:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE26Ov6y/T53zV4RWQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx YzY1MB4XDTI2MDUwNTAxMDAyM1oXDTI2MDgwMzAxMDAyM1owLzEtMCsGA1UEAxMk NTM2NjQxZmItZTExYi00MThkLThmMTAtNjVkNGI5ZDNmMTA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJ1ARuXpCIW5QupB3pLbB9nlVzAcGBbCT0J1 W+uhMKv35uNaSplwKw8TgUDMZP4WM3KxTIIpyxzVtHpDOkczd2yWAGs99iYKEu9x VBwRZHm074e7rdUnv0i1XnCDtRQUkyEjP5LXy81lH7nGpSfMwMot2mpw/u0VirU7 qGTpkocs2V8PMXLLU7ml2ngmQMFb/fw5IHAW8HtP77lKVFsZhVDuGOvPntPyHxaK hiXlW/KxT3eRG1f0jyysexT2IrOVPg1nCXR3fbB5gf1bcpxyZssauf5OsH4iq5F8 g563HWD7xn30LU1Ol9HHHwsFmogsCeGDTQ0EVM2Qu9UNPJSPpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEhCws3+gDH/i5dHv8x1bGmS/hEiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1 NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvMjk5MDk2ZTAtMmYzMC0z OWMxLThlNzctNGZhMThjNzQ2YjA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4 MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5 NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClYkUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKbIK0AkxdewfcL+u3uVeAxNKnNjUmuE6oJEx3RUTwJ+nwG0oY6zyZ71 V5eQF8HlkiQrpt6t2b/E6wk75i/C0qB0IY+s7HBMTVXQfaj3aSDrKj+aTVU2RRKi vCPPxY26S3XQEWgzG4o/tFGJ+hysqe/UBZ7l3Sz9FwbifYyv3LkPL4KbeP+42eIj 6hgU8h1k/n5JEzL5NHSi+qfsxBacwAdDEHjTP21kOTELeM9Uk7vobKL5vMastl3Z oYyqxu67U0+xx79OyHazG2P5c6NRQOyp1Tw3EZpaNv6Sa5VcltqzXyUlwTS+PjEA KQtsb4dSxy5sWK/ZZeW0HzpisEemCw4= -----END CERTIFICATE-----Generated at Wed May 13 13:22:34 2026 by rpki-client