$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/17d7e761-9bfc-3e8c-bff6-08bba8c78157.roa File: 17d7e761-9bfc-3e8c-bff6-08bba8c78157.roa (raw, json) Hash identifier: 4+IPTcWQQGpZCCRW+SVQJDL9abTyUQN7syMeSPwoZ/c= Subject key identifier: 15:A9:D5:8C:1A:FC:DC:16:3D:C6:C2:49:A9:94:F7:89:CB:28:6F:40 Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65 Certificate serial: 010D0C9F4328584B1AD18CEC7F9B0CB7330A2600 Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/17d7e761-9bfc-3e8c-bff6-08bba8c78157.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 30103 IP address blocks: 149.137.8.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:8c:ec:7f:9b:0c:b7:33:0a:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65 Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=42f66dbc-e98a-4564-ab95-b5e08299d29b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:aa:ca:fc:a9:14:58:dc:eb:47:31:d2:5d:9b: af:22:32:61:5a:e8:69:8d:17:5d:2c:3a:5e:83:35: fe:ca:80:7c:1f:9b:1c:11:03:b7:85:17:43:97:d3: 6f:0d:3e:08:2f:94:3b:8e:bd:54:39:e9:54:9f:87: a9:94:25:af:cc:17:2d:48:e2:23:c7:8c:0b:8d:c5: 45:3f:c0:8f:74:ae:35:de:18:95:25:9b:01:31:b0: 4e:48:bc:85:ed:ea:78:73:e2:59:bb:2b:67:53:e7: e1:bf:25:c8:2d:58:51:71:a3:07:be:77:39:22:99: 0e:6a:eb:41:af:35:8b:16:2c:38:d4:26:e6:b7:1d: 98:3e:3f:ed:69:e0:d3:1b:0d:a2:4d:8e:18:30:c8: a6:ae:58:8f:ca:c1:59:6d:3c:15:89:57:26:79:57: 2d:e1:0b:0f:30:8a:21:94:fc:3f:b7:71:f1:5b:4e: 77:6a:fd:fd:c9:bf:5a:21:0f:b1:61:2f:9a:b6:33: 25:d0:0e:b6:a3:7a:5c:41:ac:4e:74:2d:0d:8e:69: bd:2e:96:cc:8f:84:fe:9d:7c:0c:bb:ab:05:2c:2b: e2:ab:1e:3b:b1:6a:79:c3:fe:b9:10:9a:1d:de:fc: 42:e0:fa:2c:cd:ca:b8:6f:ae:6f:4e:98:95:e0:13: 14:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:A9:D5:8C:1A:FC:DC:16:3D:C6:C2:49:A9:94:F7:89:CB:28:6F:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/17d7e761-9bfc-3e8c-bff6-08bba8c78157.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl X509v3 Authority Key Identifier: keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer sbgp-ipAddrBlock: critical IPv4: 149.137.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:7a:4a:2d:ce:3c:2d:30:ca:c0:20:75:0f:18:d3:fb:1f:2c: c0:27:f4:f6:13:8a:a3:06:31:67:68:5e:38:2e:bb:72:15:b8: f5:20:eb:0b:5d:ab:e7:39:aa:08:0f:e1:aa:00:a6:d6:ee:c7: db:d1:ac:13:b1:6f:d5:6f:fd:18:54:af:87:3f:49:0f:9f:a6: 03:68:0e:f7:96:e3:6b:58:90:0b:cc:df:f2:ee:39:26:07:7d: 5e:f0:b9:8a:65:3b:e5:15:f6:86:eb:d5:03:27:1d:80:07:40: f2:3e:de:f6:ab:6e:f4:04:ff:d2:19:04:1e:04:56:14:4a:d7: 3d:dd:cc:58:01:86:30:de:df:fa:77:d2:5f:73:50:1c:5e:f2: 43:6d:4b:6d:33:78:84:e7:ba:f4:05:60:a8:3f:bf:3a:49:ba: 57:0e:0b:ff:70:a8:16:85:a5:65:eb:c6:4a:ea:04:90:92:b5: 25:1c:1c:6e:41:52:31:f5:08:bf:b2:e8:34:8c:b2:ec:38:e8: eb:99:1c:59:11:89:6c:5a:95:c7:17:7e:50:6e:73:1d:8b:21: 09:cb:d0:b6:42:eb:0e:23:2b:9b:c7:7d:71:11:eb:c2:d9:a5: f0:87:56:8e:ad:4a:d0:f4:cf:7c:9e:47:ce:68:96:62:e3:b0: 6b:66:1b:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0Yzsf5sMtzMKJgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx YzY1MB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk NDJmNjZkYmMtZTk4YS00NTY0LWFiOTUtYjVlMDgyOTlkMjliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0KrK/KkUWNzrRzHSXZuvIjJhWuhpjRddLDpe gzX+yoB8H5scEQO3hRdDl9NvDT4IL5Q7jr1UOelUn4eplCWvzBctSOIjx4wLjcVF P8CPdK413hiVJZsBMbBOSLyF7ep4c+JZuytnU+fhvyXILVhRcaMHvnc5IpkOautB rzWLFiw41Cbmtx2YPj/taeDTGw2iTY4YMMimrliPysFZbTwViVcmeVct4QsPMIoh lPw/t3HxW053av39yb9aIQ+xYS+atjMl0A62o3pcQaxOdC0Njmm9LpbMj4T+nXwM u6sFLCviqx47sWp5w/65EJod3vxC4Poszcq4b65vTpiV4BMUhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBWp1Ywa/NwWPcbCSamU94nLKG9AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1 NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvMTdkN2U3NjEtOWJmYy0z ZThjLWJmZjYtMDhiYmE4Yzc4MTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4 MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5 NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDlYkIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEd6Si3OPC0wysAgdQ8Y0/sfLMAn9PYTiqMGMWdoXjguu3IVuPUg6wtd q+c5qggP4aoAptbux9vRrBOxb9Vv/RhUr4c/SQ+fpgNoDveW42tYkAvM3/LuOSYH fV7wuYplO+UV9obr1QMnHYAHQPI+3varbvQE/9IZBB4EVhRK1z3dzFgBhjDe3/p3 0l9zUBxe8kNtS20zeITnuvQFYKg/vzpJulcOC/9wqBaFpWXrxkrqBJCStSUcHG5B UjH1CL+y6DSMsuw46OuZHFkRiWxalccXflBucx2LIQnL0LZC6w4jK5vHfXER68LZ pfCHVo6tStD0z3yeR85olmLjsGtmGwM= -----END CERTIFICATE-----Generated at Mon Oct 20 16:31:41 2025 by rpki-client