$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/9218521f-8532-33e1-a486-a6f6017ef1a1.roa File: 9218521f-8532-33e1-a486-a6f6017ef1a1.roa (raw, json) Hash identifier: x6YFtt3+NevjUdwrcAxvTU9malqn0+84EDtqQHKPcbI= Subject key identifier: 60:A3:A6:AC:02:59:3C:D8:81:3B:DC:CB:1F:80:0C:AE:8E:6A:B5:FE Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65 Certificate serial: 010D0C9F4328584A374AD1D4BA4E90609346FF40 Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/9218521f-8532-33e1-a486-a6f6017ef1a1.roa Signing time: Tue 17 Jun 2025 01:00:48 +0000 ROA not before: Tue 17 Jun 2025 01:00:48 +0000 ROA not after: Mon 15 Sep 2025 01:00:48 +0000 asID: 30103 IP address blocks: 149.137.96.0/21 maxlen: 24 149.137.104.0/21 maxlen: 24 149.137.112.0/21 maxlen: 24 149.137.120.0/21 maxlen: 24 156.45.64.0/21 maxlen: 24 156.45.72.0/21 maxlen: 24 156.45.80.0/21 maxlen: 24 156.45.88.0/21 maxlen: 24 156.45.96.0/21 maxlen: 24 156.45.104.0/21 maxlen: 24 156.45.112.0/21 maxlen: 24 156.45.120.0/21 maxlen: 24 206.247.0.0/21 maxlen: 24 206.247.8.0/21 maxlen: 24 206.247.16.0/21 maxlen: 24 206.247.24.0/21 maxlen: 24 206.247.32.0/21 maxlen: 24 206.247.40.0/21 maxlen: 24 206.247.48.0/21 maxlen: 24 206.247.56.0/21 maxlen: 24 206.247.64.0/21 maxlen: 24 206.247.72.0/21 maxlen: 24 206.247.80.0/21 maxlen: 24 206.247.88.0/21 maxlen: 24 206.247.96.0/21 maxlen: 24 206.247.104.0/21 maxlen: 24 206.247.112.0/21 maxlen: 24 206.247.120.0/21 maxlen: 24 206.247.128.0/21 maxlen: 24 206.247.136.0/21 maxlen: 24 206.247.144.0/21 maxlen: 24 206.247.152.0/21 maxlen: 24 206.247.160.0/21 maxlen: 24 206.247.168.0/21 maxlen: 24 206.247.176.0/21 maxlen: 24 206.247.184.0/21 maxlen: 24 206.247.192.0/21 maxlen: 24 206.247.200.0/21 maxlen: 24 206.247.208.0/21 maxlen: 24 206.247.216.0/21 maxlen: 24 206.247.224.0/21 maxlen: 24 206.247.232.0/21 maxlen: 24 206.247.240.0/21 maxlen: 24 206.247.248.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:37:4a:d1:d4:ba:4e:90:60:93:46:ff:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65 Validity Not Before: Jun 17 01:00:48 2025 GMT Not After : Sep 15 01:00:48 2025 GMT Subject: CN=6b43cabf-2f95-41fe-8abb-2c5babc329ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:7a:b8:db:b8:13:6f:38:7b:96:2a:e2:1f:9f: dc:b5:16:33:2a:e2:49:ac:09:50:ec:38:3e:98:3d: 5d:e2:f7:f8:79:61:e7:bc:3b:40:80:f1:20:9c:47: d4:93:71:8e:f3:db:d0:f1:e2:67:c4:6b:0d:32:5b: 11:db:e6:b5:c1:5d:b4:29:e6:80:c9:58:90:bd:a9: 6f:02:d7:d3:1d:94:c5:03:5a:07:49:d0:6c:5f:67: 0d:8c:bf:cf:70:6b:d4:80:f5:12:70:1c:05:0a:5c: 02:73:fb:42:23:92:75:54:8a:2d:d0:57:90:97:a6: db:8e:b9:5c:95:69:b2:bf:26:c5:72:f5:3c:d5:12: 1f:60:c5:b0:e2:e6:c3:65:7a:70:3c:a1:59:85:16: 5a:f8:cf:db:32:a6:1d:93:e3:7d:dd:02:13:1e:12: b7:63:4d:f1:fe:de:ee:68:f3:79:e7:bc:32:df:f2: 77:29:ed:08:ca:0a:83:01:64:98:d7:d1:fd:18:96: 01:0a:03:58:fe:f2:48:74:86:21:a6:05:7f:25:7f: ad:87:f0:93:1b:46:56:56:c4:9e:a8:0a:0f:25:72: 63:56:78:2c:c0:69:57:89:c4:8a:6c:19:14:9a:51: 28:56:3e:9f:f5:53:49:46:4d:e3:47:34:22:da:75: 77:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:A3:A6:AC:02:59:3C:D8:81:3B:DC:CB:1F:80:0C:AE:8E:6A:B5:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/9218521f-8532-33e1-a486-a6f6017ef1a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl X509v3 Authority Key Identifier: keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer sbgp-ipAddrBlock: critical IPv4: 149.137.96.0/19 156.45.64.0/18 206.247.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:43:4b:8d:61:63:68:e5:cb:33:bd:0a:6d:da:7c:78:36:c3: 33:ce:23:51:55:22:9d:87:5d:ca:26:1a:9b:69:11:21:e2:85: 89:5d:c7:ee:9d:f9:35:2d:6a:15:64:40:09:2f:a1:1a:e2:63: 44:57:8a:0b:8b:ac:5c:76:70:3e:9c:fe:99:2c:39:23:ef:46: 3c:ef:f6:13:4a:cf:f6:cb:36:54:98:9c:ee:08:78:2d:4a:eb: 35:be:c1:a0:0e:46:55:93:de:54:b9:ea:4a:73:2b:3b:fb:70: ce:02:e8:97:7e:3b:78:67:ba:de:0a:85:7c:82:fb:17:ec:77: 2d:b6:0a:ad:38:54:58:f2:d6:b4:12:e2:3c:78:49:17:fa:73: e6:aa:8e:98:f0:32:02:a7:4f:e9:60:41:c3:b9:a2:c3:a5:79: 06:dd:6e:5f:c9:5c:1e:57:36:fb:e3:3d:3e:b1:87:91:17:90: 59:2d:50:f2:81:8b:5f:af:e8:12:2e:f8:58:db:36:e9:1b:e0: da:3b:1b:97:67:7c:5d:f7:59:41:66:d7:e6:58:11:40:16:70: 83:b7:77:1b:62:6a:f3:85:35:ac:b3:c6:80:2a:e0:a4:ea:21: f3:b6:eb:92:69:3d:da:bc:e6:cd:14:c7:a7:e7:fd:13:c9:ca: ed:e3:44:01 -----BEGIN CERTIFICATE----- MIIGTjCCBTagAwIBAgIUAQ0Mn0MoWEo3StHUuk6QYJNG/0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx YzY1MB4XDTI1MDYxNzAxMDA0OFoXDTI1MDkxNTAxMDA0OFowLzEtMCsGA1UEAxMk NmI0M2NhYmYtMmY5NS00MWZlLThhYmItMmM1YmFiYzMyOWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXq427gTbzh7liriH5/ctRYzKuJJrAlQ7Dg+ mD1d4vf4eWHnvDtAgPEgnEfUk3GO89vQ8eJnxGsNMlsR2+a1wV20KeaAyViQvalv AtfTHZTFA1oHSdBsX2cNjL/PcGvUgPUScBwFClwCc/tCI5J1VIot0FeQl6bbjrlc lWmyvybFcvU81RIfYMWw4ubDZXpwPKFZhRZa+M/bMqYdk+N93QITHhK3Y03x/t7u aPN557wy3/J3Ke0IygqDAWSY19H9GJYBCgNY/vJIdIYhpgV/JX+th/CTG0ZWVsSe qAoPJXJjVngswGlXicSKbBkUmlEoVj6f9VNJRk3jRzQi2nV3NQIDAQABo4IDYDCC A1wwHQYDVR0OBBYEFGCjpqwCWTzYgTvcyx+ADK6OarX+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1 NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvOTIxODUyMWYtODUzMi0z M2UxLWE0ODYtYTZmNjAxN2VmMWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4 MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5 NjVhMjFjNjUuY2VyMCoGCCsGAQUFBwEHAQH/BBswGTAXBAIAATARAwQFlYlgAwQG nC1AAwMAzvcwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEAL0NLjWFjaOXLM70Kbdp8eDbDM84jUVUinYddyiYa m2kRIeKFiV3H7p35NS1qFWRACS+hGuJjRFeKC4usXHZwPpz+mSw5I+9GPO/2E0rP 9ss2VJic7gh4LUrrNb7BoA5GVZPeVLnqSnMrO/twzgLol347eGe63gqFfIL7F+x3 LbYKrThUWPLWtBLiPHhJF/pz5qqOmPAyAqdP6WBBw7miw6V5Bt1uX8lcHlc2++M9 PrGHkReQWS1Q8oGLX6/oEi74WNs26Rvg2jsbl2d8XfdZQWbX5lgRQBZwg7d3G2Jq 84U1rLPGgCrgpOoh87brkmk92rzmzRTHp+f9E8nK7eNEAQ== -----END CERTIFICATE-----Generated at Mon Jun 30 00:05:55 2025 by rpki-client