$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/d88f230c-e5d4-34f8-b9aa-7f5dfc6c5322.roa File: d88f230c-e5d4-34f8-b9aa-7f5dfc6c5322.roa (raw, json) Hash identifier: YMfWrwfB0eVt9HpvZjWg3PNz6mj6JsixFFXTI7+8+QM= Subject key identifier: 2B:9A:5B:1E:A3:92:EF:49:32:A8:A1:61:70:CD:04:17:22:57:0E:EF Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65 Certificate serial: 010D0C9F4328584B1806D35F25E00029AF241700 Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/d88f230c-e5d4-34f8-b9aa-7f5dfc6c5322.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 30103 IP address blocks: 149.137.16.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:06:d3:5f:25:e0:00:29:af:24:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65 Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=3ee786ad-0f91-463b-ada6-eae289ee4f05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:1a:db:5d:b7:7b:fd:16:ba:42:f7:41:c3:89: 54:cc:21:ca:57:09:b8:da:1e:18:39:bb:48:0e:b1: 93:46:28:7b:d1:b2:45:8b:98:bc:92:b2:c8:99:fe: 62:9d:46:cf:37:92:1c:d0:64:7a:24:f9:4a:69:99: 3c:31:30:6f:2f:ea:5a:9f:bf:58:8b:27:8e:ec:63: fc:5c:9b:53:02:2e:5d:8c:11:e3:b5:4b:a3:83:ec: 05:9c:fd:9c:cd:5b:f8:b3:09:21:21:c7:e1:09:14: 0c:ec:6f:97:d5:2e:ea:b0:72:ed:c7:f0:ed:f8:09: 1e:bb:80:9a:cd:5b:e4:8c:9d:76:39:a2:a4:2a:2e: 8f:d0:3f:1c:7d:22:4c:67:6c:32:af:07:91:06:63: fc:6f:3d:82:5d:bd:22:21:38:9f:a3:4f:18:a0:67: cf:84:01:82:5b:a4:fc:5f:c1:eb:36:dc:83:7b:28: 15:d6:8e:2c:a1:67:52:d2:22:d4:09:3b:82:e7:aa: 13:46:f0:35:76:5f:73:2c:26:d3:8c:85:b5:41:bb: f7:7c:7a:e2:6a:9b:eb:85:ec:73:ee:54:8c:c5:67: 21:a3:38:5f:07:94:78:40:f8:1e:ba:8a:97:df:ac: a5:2a:e9:6c:96:b7:c4:9d:3d:64:a1:68:d3:3e:84: e4:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:9A:5B:1E:A3:92:EF:49:32:A8:A1:61:70:CD:04:17:22:57:0E:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/d88f230c-e5d4-34f8-b9aa-7f5dfc6c5322.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl X509v3 Authority Key Identifier: keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer sbgp-ipAddrBlock: critical IPv4: 149.137.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:31:ff:7f:b1:e4:b0:fe:fb:68:68:2d:da:e0:f3:b8:b8:80: 3e:78:bf:e1:c6:e4:85:b3:9a:4c:99:da:96:13:5f:01:fb:30: f7:95:3d:3a:ff:76:ec:79:b5:7a:9d:51:61:c1:69:ac:3e:a0: 75:cc:e0:f2:ca:b2:02:38:bf:1b:80:a6:ac:72:f1:79:a1:7c: 51:7d:1a:4c:fe:bc:fb:19:c8:96:53:3e:48:1e:5b:a6:97:88: 1b:35:0f:ae:a4:30:41:a1:79:5a:44:d4:71:9a:48:2a:01:2a: 57:bb:ea:0e:25:53:d9:d8:5d:64:e6:28:5e:43:11:62:4d:83: d4:7e:d4:38:92:ef:ae:86:d9:a9:22:5f:39:ab:a0:2e:fd:b1: b6:3e:ab:3f:33:67:b8:4a:e4:07:90:6d:6c:2c:f3:6d:31:29: 73:72:cc:69:b1:23:14:98:55:57:f1:5c:cf:ba:28:9c:a9:0b: 1e:77:38:59:01:42:49:8b:5f:2e:25:c8:35:62:af:59:a9:41: 0b:02:1b:4f:cc:24:c7:b7:d9:7e:6d:a8:00:14:83:25:4e:df: 5f:04:63:b0:6c:1a:9a:dd:33:4e:f4:20:bd:9d:7a:54:f5:29: e4:33:10:42:b6:63:3e:ab:74:8f:77:3f:b6:ff:bf:1d:05:aa: 89:56:7d:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsYBtNfJeAAKa8kFwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx YzY1MB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk M2VlNzg2YWQtMGY5MS00NjNiLWFkYTYtZWFlMjg5ZWU0ZjA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRrbXbd7/Ra6QvdBw4lUzCHKVwm42h4YObtI DrGTRih70bJFi5i8krLImf5inUbPN5Ic0GR6JPlKaZk8MTBvL+pan79YiyeO7GP8 XJtTAi5djBHjtUujg+wFnP2czVv4swkhIcfhCRQM7G+X1S7qsHLtx/Dt+Akeu4Ca zVvkjJ12OaKkKi6P0D8cfSJMZ2wyrweRBmP8bz2CXb0iITifo08YoGfPhAGCW6T8 X8HrNtyDeygV1o4soWdS0iLUCTuC56oTRvA1dl9zLCbTjIW1Qbv3fHriapvrhexz 7lSMxWchozhfB5R4QPgeuoqX36ylKulslrfEnT1koWjTPoTk9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCuaWx6jku9JMqihYXDNBBciVw7vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1 NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvZDg4ZjIzMGMtZTVkNC0z NGY4LWI5YWEtN2Y1ZGZjNmM1MzIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4 MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5 NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClYkQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJsx/3+x5LD++2hoLdrg87i4gD54v+HG5IWzmkyZ2pYTXwH7MPeVPTr/ dux5tXqdUWHBaaw+oHXM4PLKsgI4vxuApqxy8XmhfFF9Gkz+vPsZyJZTPkgeW6aX iBs1D66kMEGheVpE1HGaSCoBKle76g4lU9nYXWTmKF5DEWJNg9R+1DiS766G2aki XzmroC79sbY+qz8zZ7hK5AeQbWws820xKXNyzGmxIxSYVVfxXM+6KJypCx53OFkB QkmLXy4lyDVir1mpQQsCG0/MJMe32X5tqAAUgyVO318EY7BsGprdM070IL2delT1 KeQzEEK2Yz6rdI93P7b/vx0FqolWfaI= -----END CERTIFICATE-----Generated at Mon Oct 20 21:15:07 2025 by rpki-client