$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/d88f230c-e5d4-34f8-b9aa-7f5dfc6c5322.roa File: d88f230c-e5d4-34f8-b9aa-7f5dfc6c5322.roa (raw, json) Hash identifier: X2U4tNEv3VyhIeabbuHvZOap4bwjGjHW67skfNVHc9Q= Subject key identifier: 77:DF:27:72:ED:E5:7A:AD:8F:6C:45:D3:15:FC:C5:08:96:D5:83:79 Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65 Certificate serial: 010D0C9F4328584A374AD1BD67A21FB28496AC20 Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/d88f230c-e5d4-34f8-b9aa-7f5dfc6c5322.roa Signing time: Tue 17 Jun 2025 01:00:48 +0000 ROA not before: Tue 17 Jun 2025 01:00:48 +0000 ROA not after: Mon 15 Sep 2025 01:00:48 +0000 asID: 30103 IP address blocks: 149.137.16.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:37:4a:d1:bd:67:a2:1f:b2:84:96:ac:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65 Validity Not Before: Jun 17 01:00:48 2025 GMT Not After : Sep 15 01:00:48 2025 GMT Subject: CN=a781685b-9adb-46fc-a9ea-9186733c8321 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:7c:02:dc:05:f0:46:2f:5c:14:e9:cb:19:cd: 6f:3f:2c:b3:4c:4e:ae:57:50:f8:20:e1:b6:fa:f1: f5:ee:a0:e9:db:fe:e4:74:96:0b:e6:af:c9:92:4a: 26:6d:b0:a4:41:03:da:78:5f:cd:68:ee:ca:cc:81: f7:47:64:92:7f:e7:d1:11:1e:32:b8:68:0f:86:18: 7d:52:99:72:8f:cb:32:ed:f0:35:39:5b:3a:59:07: 52:b4:c6:d1:ae:67:86:8c:71:4d:e8:b9:7c:08:fd: 64:96:0b:22:5d:9c:5c:bd:60:0f:ee:5f:6b:f8:2c: 64:0f:8b:84:89:55:10:08:1c:de:d6:fb:db:f0:aa: f7:00:6a:5e:73:6f:83:12:0d:51:ae:5f:fb:a6:86: 7c:f0:8b:b7:ae:b3:e3:0b:5a:c2:b0:3f:de:42:88: 6e:52:f5:33:58:45:c9:5d:01:54:bb:b9:7c:e6:9b: 05:7f:03:db:5c:da:85:4c:34:48:b5:7c:46:d0:51: b5:1a:37:b9:29:61:19:a6:03:b1:45:e0:f9:f1:e7: ee:8c:05:f0:e5:b3:eb:14:6f:00:d0:b5:85:07:c8: 83:fa:e1:e8:2e:e4:ca:23:55:cd:2e:dd:07:d9:e7: a9:a2:31:17:d4:5a:fe:0e:3c:9a:31:a6:bc:39:fb: 8f:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:DF:27:72:ED:E5:7A:AD:8F:6C:45:D3:15:FC:C5:08:96:D5:83:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/d88f230c-e5d4-34f8-b9aa-7f5dfc6c5322.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl X509v3 Authority Key Identifier: keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer sbgp-ipAddrBlock: critical IPv4: 149.137.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:1b:9f:be:4f:20:41:b9:6a:33:fa:df:b2:ab:67:6b:ba:e4: a5:b4:9d:e9:3f:af:ae:25:01:ef:85:2a:ae:36:14:16:5d:b3: bd:b4:0d:05:8c:b4:d1:83:e1:94:df:4d:1d:3b:3d:98:cd:02: dd:b7:ef:0a:eb:64:db:e5:bf:bb:d6:62:d5:f9:b9:ab:ac:6e: f0:b8:6e:65:b4:61:a4:af:47:08:ce:a7:83:a9:b2:8a:b2:7a: 87:c1:24:5e:ab:a6:15:a0:46:85:df:1b:56:48:bc:39:76:18: 6a:14:80:ea:79:e3:49:ea:80:ee:8b:c5:6f:8c:aa:1e:41:0c: c3:aa:f3:85:7e:9d:5e:99:8b:a8:34:4d:e2:a5:ff:74:20:37: 19:6e:4d:04:66:52:54:97:32:5b:f0:6a:e5:ac:d6:cc:ec:b1: db:41:63:33:9a:95:0d:54:5e:2a:2d:30:9a:11:8f:56:a6:3f: 70:bc:2d:e0:91:b3:28:a4:eb:ee:ea:17:ae:0b:65:96:cc:d4: 91:c1:f8:bc:0c:72:3f:1d:37:1e:9c:95:14:02:99:45:ea:a1: d1:39:2d:5c:c8:a2:74:a7:ad:f6:86:07:35:aa:90:4a:4d:55: 4f:ec:79:c0:b6:4b:f2:2c:ea:82:fc:6e:57:a9:8f:71:23:7e: d1:0d:85:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo3StG9Z6IfsoSWrCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx YzY1MB4XDTI1MDYxNzAxMDA0OFoXDTI1MDkxNTAxMDA0OFowLzEtMCsGA1UEAxMk YTc4MTY4NWItOWFkYi00NmZjLWE5ZWEtOTE4NjczM2M4MzIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXwC3AXwRi9cFOnLGc1vPyyzTE6uV1D4IOG2 +vH17qDp2/7kdJYL5q/JkkombbCkQQPaeF/NaO7KzIH3R2SSf+fRER4yuGgPhhh9 Uplyj8sy7fA1OVs6WQdStMbRrmeGjHFN6Ll8CP1klgsiXZxcvWAP7l9r+CxkD4uE iVUQCBze1vvb8Kr3AGpec2+DEg1Rrl/7poZ88Iu3rrPjC1rCsD/eQohuUvUzWEXJ XQFUu7l85psFfwPbXNqFTDRItXxG0FG1Gje5KWEZpgOxReD58efujAXw5bPrFG8A 0LWFB8iD+uHoLuTKI1XNLt0H2eepojEX1Fr+DjyaMaa8OfuPXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHffJ3Lt5Xqtj2xF0xX8xQiW1YN5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1 NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvZDg4ZjIzMGMtZTVkNC0z NGY4LWI5YWEtN2Y1ZGZjNmM1MzIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4 MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5 NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClYkQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE4bn75PIEG5ajP637KrZ2u65KW0nek/r64lAe+FKq42FBZds720DQWM tNGD4ZTfTR07PZjNAt237wrrZNvlv7vWYtX5uausbvC4bmW0YaSvRwjOp4Opsoqy eofBJF6rphWgRoXfG1ZIvDl2GGoUgOp540nqgO6LxW+Mqh5BDMOq84V+nV6Zi6g0 TeKl/3QgNxluTQRmUlSXMlvwauWs1szssdtBYzOalQ1UXiotMJoRj1amP3C8LeCR syik6+7qF64LZZbM1JHB+LwMcj8dNx6clRQCmUXqodE5LVzIonSnrfaGBzWqkEpN VU/secC2S/Is6oL8blepj3EjftENhfo= -----END CERTIFICATE-----Generated at Mon Jun 30 04:46:33 2025 by rpki-client