$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1fec04c2-2b6c-4e9a-8062-e420ac1a257a/c9aa9150-9841-397a-b807-599d98d7b122.roa File: c9aa9150-9841-397a-b807-599d98d7b122.roa (raw, json) Hash identifier: QnQHL0wol0tdpTMD5kKRo2WIb4HIoIy6xwiZxGDFx44= Subject key identifier: 9D:32:4A:F3:D4:A0:C2:B6:43:06:0B:F7:EF:DB:18:F1:A1:8C:ED:55 Certificate issuer: /CN=1fec04c2-2b6c-4e9a-8062-e420ac1a257a Certificate serial: 010D0C9F4328584A612B07DCA673C0E4EA0B8480 Authority key identifier: DA:A6:FB:CD:8D:FF:22:68:C4:1E:BA:AC:CE:80:24:86:BD:CD:D3:44 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1fec04c2-2b6c-4e9a-8062-e420ac1a257a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1fec04c2-2b6c-4e9a-8062-e420ac1a257a/c9aa9150-9841-397a-b807-599d98d7b122.roa Signing time: Wed 02 Jul 2025 01:00:49 +0000 ROA not before: Wed 02 Jul 2025 01:00:49 +0000 ROA not after: Tue 30 Sep 2025 01:00:49 +0000 asID: 25996 IP address blocks: 149.101.100.0/24 maxlen: 32 149.101.101.0/24 maxlen: 32 149.101.102.0/24 maxlen: 32 149.101.103.0/24 maxlen: 32 149.101.118.0/24 maxlen: 32 149.101.164.0/23 maxlen: 32 149.101.216.0/24 maxlen: 32 149.101.229.0/24 maxlen: 32 149.101.242.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1fec04c2-2b6c-4e9a-8062-e420ac1a257a/1fec04c2-2b6c-4e9a-8062-e420ac1a257a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1fec04c2-2b6c-4e9a-8062-e420ac1a257a/1fec04c2-2b6c-4e9a-8062-e420ac1a257a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1fec04c2-2b6c-4e9a-8062-e420ac1a257a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Jul 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:61:2b:07:dc:a6:73:c0:e4:ea:0b:84:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fec04c2-2b6c-4e9a-8062-e420ac1a257a Validity Not Before: Jul 2 01:00:49 2025 GMT Not After : Sep 30 01:00:49 2025 GMT Subject: CN=f3ba430e-dc94-4fe3-96e3-d5445109cb7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:0b:37:ce:cd:49:03:db:9f:78:41:f6:1b:3b: 61:65:af:8f:42:87:48:92:dd:23:23:6a:3b:35:c7: 72:41:74:73:e0:cc:8c:f7:41:5a:62:bc:69:08:12: 71:a9:83:64:d1:21:94:b6:e5:14:97:ac:6b:ec:f3: e8:6b:40:6f:64:76:c0:a6:98:cf:54:ba:56:37:c1: bf:1c:78:c6:31:aa:cb:34:e3:09:c6:38:da:20:5c: 88:c3:54:36:51:20:23:ae:d8:44:4c:a4:04:75:72: 0b:48:28:96:9a:a2:bf:64:90:d8:82:fc:89:13:fa: cf:ce:15:9e:c2:11:5c:5f:21:c3:3a:27:41:c8:05: 6c:19:4d:22:21:d2:e4:34:2b:6a:65:99:4d:07:34: dc:9a:6c:ef:c4:fb:07:ad:5e:fd:86:23:1a:2b:df: b9:f6:be:22:5a:93:a0:20:a5:0a:01:01:0d:9f:f2: 84:e2:29:2b:67:be:7f:3f:08:85:b8:ef:02:59:f0: a9:79:b3:72:8a:c0:c0:68:75:68:e1:52:fb:73:c1: 8c:11:2b:c2:8a:1f:d4:a2:be:64:af:4f:ff:15:e1: b1:5f:d9:d6:c0:e4:37:98:9d:12:de:e1:77:07:0c: ce:4d:de:e3:d8:00:eb:d3:21:d8:0e:96:5c:48:45: 8e:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:32:4A:F3:D4:A0:C2:B6:43:06:0B:F7:EF:DB:18:F1:A1:8C:ED:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1fec04c2-2b6c-4e9a-8062-e420ac1a257a/c9aa9150-9841-397a-b807-599d98d7b122.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1fec04c2-2b6c-4e9a-8062-e420ac1a257a/1fec04c2-2b6c-4e9a-8062-e420ac1a257a.crl X509v3 Authority Key Identifier: keyid:DA:A6:FB:CD:8D:FF:22:68:C4:1E:BA:AC:CE:80:24:86:BD:CD:D3:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1fec04c2-2b6c-4e9a-8062-e420ac1a257a.cer sbgp-ipAddrBlock: critical IPv4: 149.101.100.0/22 149.101.118.0/24 149.101.164.0/23 149.101.216.0/24 149.101.229.0/24 149.101.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:8f:4d:47:24:ff:bf:29:9a:28:96:07:4e:7e:ad:ea:a6:59: ac:7d:8f:f1:7b:6d:a2:22:72:a1:7e:33:cb:20:c3:8a:d0:6c: ff:19:ad:bb:09:c2:63:24:8a:f9:e9:52:96:4d:d7:db:5d:9d: e9:eb:06:44:94:69:36:a1:c4:41:90:4e:3f:6b:a5:55:6a:6b: 7f:50:39:5a:f0:65:f1:64:14:3b:79:e5:74:05:7c:ad:e4:f4: 57:9f:42:3b:0b:28:12:2c:a0:8c:a1:76:06:b8:b8:e4:85:d3: 6a:05:81:c8:59:0a:cd:32:63:16:27:0d:78:c3:00:00:72:bb: d3:2c:a8:d8:48:b2:14:6f:11:c9:25:6f:ce:2c:ec:39:f9:1d: 1e:39:b3:c0:89:de:5e:79:6f:af:79:19:13:37:0d:eb:68:5d: 77:30:24:dc:cd:0e:88:47:5d:38:1f:71:a1:09:3a:bb:21:84: 06:bc:be:9e:9f:9a:4d:7a:62:61:fe:cd:e4:30:a4:5d:a0:d5: 74:b2:df:cd:ff:78:19:08:ac:32:8f:86:7f:c6:dc:89:35:5e: 4e:23:53:3f:b0:78:4c:6e:fd:26:2d:50:75:8e:e4:5c:58:a3: 4e:1a:73:78:04:94:73:e7:1c:19:49:cc:c5:12:a9:ca:15:c5: ec:09:15:18 -----BEGIN CERTIFICATE----- MIIGYTCCBUmgAwIBAgIUAQ0Mn0MoWEphKwfcpnPA5OoLhIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZlYzA0YzItMmI2Yy00ZTlhLTgwNjItZTQyMGFjMWEy NTdhMB4XDTI1MDcwMjAxMDA0OVoXDTI1MDkzMDAxMDA0OVowLzEtMCsGA1UEAxMk ZjNiYTQzMGUtZGM5NC00ZmUzLTk2ZTMtZDU0NDUxMDljYjdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiws3zs1JA9ufeEH2GzthZa+PQodIkt0jI2o7 NcdyQXRz4MyM90FaYrxpCBJxqYNk0SGUtuUUl6xr7PPoa0BvZHbAppjPVLpWN8G/ HHjGMarLNOMJxjjaIFyIw1Q2USAjrthETKQEdXILSCiWmqK/ZJDYgvyJE/rPzhWe whFcXyHDOidByAVsGU0iIdLkNCtqZZlNBzTcmmzvxPsHrV79hiMaK9+59r4iWpOg IKUKAQENn/KE4ikrZ75/PwiFuO8CWfCpebNyisDAaHVo4VL7c8GMESvCih/Uor5k r0//FeGxX9nWwOQ3mJ0S3uF3BwzOTd7j2ADr0yHYDpZcSEWO6QIDAQABo4IDczCC A28wHQYDVR0OBBYEFJ0ySvPUoMK2QwYL9+/bGPGhjO1VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8xZmVj MDRjMi0yYjZjLTRlOWEtODA2Mi1lNDIwYWMxYTI1N2EvYzlhYTkxNTAtOTg0MS0z OTdhLWI4MDctNTk5ZDk4ZDdiMTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMWZlYzA0YzItMmI2Yy00ZTlhLTgw NjItZTQyMGFjMWEyNTdhLzFmZWMwNGMyLTJiNmMtNGU5YS04MDYyLWU0MjBhYzFh MjU3YS5jcmwwHwYDVR0jBBgwFoAU2qb7zY3/ImjEHrqszoAkhr3N00QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8xZmVjMDRjMi0yYjZjLTRlOWEtODA2Mi1lNDIw YWMxYTI1N2EuY2VyMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQClWVkAwQA lWV2AwQBlWWkAwQAlWXYAwQAlWXlAwQAlWXyMFQGA1UdIAEB/wRKMEgwRgYIKwYB BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIKPTUck/78pmiiW B05+reqmWax9j/F7baIicqF+M8sgw4rQbP8ZrbsJwmMkivnpUpZN19tdnenrBkSU aTahxEGQTj9rpVVqa39QOVrwZfFkFDt55XQFfK3k9FefQjsLKBIsoIyhdga4uOSF 02oFgchZCs0yYxYnDXjDAAByu9MsqNhIshRvEcklb84s7Dn5HR45s8CJ3l55b695 GRM3DetoXXcwJNzNDohHXTgfcaEJOrshhAa8vp6fmk16YmH+zeQwpF2g1XSy383/ eBkIrDKPhn/G3Ik1Xk4jUz+weExu/SYtUHWO5FxYo04ac3gElHPnHBlJzMUSqcoV xewJFRg= -----END CERTIFICATE-----Generated at Thu Jul 10 20:05:29 2025 by rpki-client