$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/299096e0-2f30-39c1-8e77-4fa18c746b04.roa File: 299096e0-2f30-39c1-8e77-4fa18c746b04.roa (raw, json) Hash identifier: njPB7qnTlYGNWn8G9YbnLFuDpMHTAtSFhkwrbxfGQ40= Subject key identifier: F4:FC:52:A8:1B:0F:B5:74:D0:C2:FB:EC:AC:63:D5:8F:5D:5F:CC:9E Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65 Certificate serial: 010D0C9F4328584A374ADA37F66CA4BE77024C80 Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/299096e0-2f30-39c1-8e77-4fa18c746b04.roa Signing time: Tue 17 Jun 2025 01:00:48 +0000 ROA not before: Tue 17 Jun 2025 01:00:48 +0000 ROA not after: Mon 15 Sep 2025 01:00:48 +0000 asID: 30103 IP address blocks: 149.137.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:37:4a:da:37:f6:6c:a4:be:77:02:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65 Validity Not Before: Jun 17 01:00:48 2025 GMT Not After : Sep 15 01:00:48 2025 GMT Subject: CN=37b77a46-c349-47ff-9ed9-10fe74149d7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:55:8f:69:b2:ab:45:bb:f9:03:63:2f:5e:27: 46:be:3d:a7:01:a5:e0:47:e8:db:6f:e7:c0:47:24: 26:3e:e0:08:63:f3:b9:9e:61:dc:e3:a8:0a:32:63: 6c:ac:59:2b:70:21:45:e3:cf:c8:f2:95:96:c1:f5: 95:07:67:0e:c2:9f:6f:a9:f2:73:98:8e:56:31:f1: 8d:01:94:5b:31:34:83:f2:71:7d:50:7a:93:49:fa: 92:f9:d8:ad:31:b0:39:74:4d:b9:45:42:9d:0d:76: 9e:d3:dd:63:e6:9a:40:fa:5f:3f:64:0b:8b:c2:22: fb:d2:f1:a2:34:91:ad:0d:c7:4f:30:43:61:7d:0d: e8:8a:b5:28:48:13:68:b2:55:5b:05:58:05:46:8b: 65:37:6e:82:38:29:c2:22:cc:d1:1e:64:db:4b:46: 13:f0:d4:c2:4b:f1:f9:ad:5f:06:50:1a:d7:46:aa: 92:2c:44:12:11:98:33:63:20:a0:42:35:e0:39:94: 20:e4:18:c9:36:9a:ec:b8:9e:8e:ed:dd:23:4d:49: c6:fa:5a:f0:66:a2:88:90:5c:33:0a:b6:91:4a:bb: 01:e8:54:eb:70:5e:5c:83:4a:92:10:2b:e3:e6:38: fe:c7:e2:e0:1c:18:37:36:9d:aa:d2:9d:7b:b2:e5: 3d:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:FC:52:A8:1B:0F:B5:74:D0:C2:FB:EC:AC:63:D5:8F:5D:5F:CC:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/299096e0-2f30-39c1-8e77-4fa18c746b04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl X509v3 Authority Key Identifier: keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer sbgp-ipAddrBlock: critical IPv4: 149.137.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:62:77:5d:11:34:67:1d:2c:bc:9d:25:df:d9:1a:ea:e7:57: 19:9c:97:47:b5:8b:80:be:24:15:ae:dd:11:91:e8:55:ae:dd: b4:32:df:e4:08:22:77:2e:4a:1b:1c:17:84:12:13:d2:1b:73: 42:f8:c9:9c:59:04:59:19:34:4f:aa:e2:8e:12:7a:fd:2a:4b: f2:69:23:fa:62:06:30:68:15:b5:db:20:8f:cd:88:28:19:47: eb:9e:c1:4b:1d:d0:77:4b:1e:b0:12:a6:1f:e5:e8:cb:80:d2: f8:4e:c7:42:1d:3a:fa:d5:a0:f7:65:97:83:74:d1:a2:d7:ac: 28:3c:b3:60:d7:ec:79:57:da:a2:45:84:bc:0d:5d:b0:cc:ba: b2:c7:ac:4e:3c:7c:77:4e:d1:00:3d:36:36:21:68:11:d4:26: 2c:73:fd:5f:f0:ee:79:f8:c9:83:2f:25:e3:33:d5:be:c3:ee: 62:88:76:97:38:6e:77:af:c8:39:19:79:f2:bc:cd:45:d7:58: 7c:ef:9a:c0:d2:44:7c:e9:91:91:16:89:57:70:e5:f6:9a:33: cc:5f:bb:b4:71:75:41:6e:0d:26:4d:2f:8f:c2:a1:b5:a8:ce: 2f:5b:1b:28:33:ea:e5:c7:fa:59:32:18:c5:4e:85:85:5c:fd: 20:75:34:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo3Sto39mykvncCTIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx YzY1MB4XDTI1MDYxNzAxMDA0OFoXDTI1MDkxNTAxMDA0OFowLzEtMCsGA1UEAxMk MzdiNzdhNDYtYzM0OS00N2ZmLTllZDktMTBmZTc0MTQ5ZDdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFWPabKrRbv5A2MvXidGvj2nAaXgR+jbb+fA RyQmPuAIY/O5nmHc46gKMmNsrFkrcCFF48/I8pWWwfWVB2cOwp9vqfJzmI5WMfGN AZRbMTSD8nF9UHqTSfqS+ditMbA5dE25RUKdDXae091j5ppA+l8/ZAuLwiL70vGi NJGtDcdPMENhfQ3oirUoSBNoslVbBVgFRotlN26COCnCIszRHmTbS0YT8NTCS/H5 rV8GUBrXRqqSLEQSEZgzYyCgQjXgOZQg5BjJNprsuJ6O7d0jTUnG+lrwZqKIkFwz CraRSrsB6FTrcF5cg0qSECvj5jj+x+LgHBg3Np2q0p17suU9BQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPT8UqgbD7V00ML77Kxj1Y9dX8yeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1 NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvMjk5MDk2ZTAtMmYzMC0z OWMxLThlNzctNGZhMThjNzQ2YjA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4 MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5 NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClYkUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADdid10RNGcdLLydJd/ZGurnVxmcl0e1i4C+JBWu3RGR6FWu3bQy3+QI IncuShscF4QSE9Ibc0L4yZxZBFkZNE+q4o4Sev0qS/JpI/piBjBoFbXbII/NiCgZ R+uewUsd0HdLHrASph/l6MuA0vhOx0IdOvrVoPdll4N00aLXrCg8s2DX7HlX2qJF hLwNXbDMurLHrE48fHdO0QA9NjYhaBHUJixz/V/w7nn4yYMvJeMz1b7D7mKIdpc4 bnevyDkZefK8zUXXWHzvmsDSRHzpkZEWiVdw5faaM8xfu7RxdUFuDSZNL4/CobWo zi9bGygz6uXH+lkyGMVOhYVc/SB1NGg= -----END CERTIFICATE-----Generated at Sun Jun 29 23:38:08 2025 by rpki-client