$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/299096e0-2f30-39c1-8e77-4fa18c746b04.roa File: 299096e0-2f30-39c1-8e77-4fa18c746b04.roa (raw, json) Hash identifier: LOZ/3zXcwOkeGDx4KGMnxlhxzW5U0V9LcuKFayTHRBM= Subject key identifier: 4C:B2:7E:FD:67:E3:A7:3F:E6:CA:7A:32:9B:8E:98:C1:25:89:7C:0D Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65 Certificate serial: 010D0C9F4328584957F407801C441AC74A846600 Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/299096e0-2f30-39c1-8e77-4fa18c746b04.roa Signing time: Sat 29 Mar 2025 01:00:39 +0000 ROA not before: Sat 29 Mar 2025 01:00:39 +0000 ROA not after: Fri 27 Jun 2025 01:00:39 +0000 asID: 30103 IP address blocks: 149.137.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:57:f4:07:80:1c:44:1a:c7:4a:84:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65 Validity Not Before: Mar 29 01:00:39 2025 GMT Not After : Jun 27 01:00:39 2025 GMT Subject: CN=84523e7f-c678-4e3c-afe5-d461b336cab4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:1d:91:33:d6:ab:45:f3:38:c8:45:20:dc:bd: 2e:9d:c3:77:d6:ec:1e:76:fa:71:14:90:b5:34:2d: a0:db:30:dd:0d:92:e7:13:53:9f:23:96:3a:e4:07: 17:7c:ae:7e:6c:4a:f9:07:14:e6:ee:c2:f4:55:63: a3:b8:1a:e3:53:77:a5:72:97:d5:ff:d2:03:52:9a: 00:f1:a6:27:94:59:89:f0:d4:64:05:a5:f8:54:db: 26:ac:86:e1:ca:1d:52:ab:d5:cb:aa:d9:c7:75:db: a1:cb:e4:56:cc:7a:ad:27:a0:c5:46:70:d1:fc:9c: 74:41:94:aa:48:14:4a:ce:6a:0f:3e:fd:de:74:fb: e2:2a:cc:ae:b2:5d:af:34:d6:c6:1e:0c:94:61:1d: 9a:d3:84:aa:30:73:f0:9e:ef:d7:a3:1d:f7:15:23: 1d:e1:94:b8:0f:c9:8a:c4:f7:9e:14:49:e6:ab:41: 05:05:a4:34:20:45:08:c3:c6:8d:fa:f8:07:ae:1d: f9:fa:c3:51:f7:80:d9:41:b1:7d:1a:13:dd:13:b8: 85:e3:d0:90:26:d6:41:be:aa:ed:93:16:a8:6c:87: 43:03:b4:31:f2:5b:9a:30:2b:04:b7:a0:d6:65:11: c8:f4:10:79:72:30:67:14:d7:4a:39:c6:2d:32:53: 12:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:B2:7E:FD:67:E3:A7:3F:E6:CA:7A:32:9B:8E:98:C1:25:89:7C:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/299096e0-2f30-39c1-8e77-4fa18c746b04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl X509v3 Authority Key Identifier: keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer sbgp-ipAddrBlock: critical IPv4: 149.137.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:9e:da:31:a6:ae:1f:24:68:9f:78:73:e6:80:d9:6d:30:cd: 12:75:ca:b1:0d:d7:71:ff:3a:aa:a0:eb:ab:5a:44:0f:1c:81: 89:6e:35:cb:50:73:6b:c3:22:36:bc:c9:3d:2f:72:e8:cb:b7: 05:5c:a1:cb:a4:c5:31:cc:d6:c3:05:dc:e6:98:57:df:3f:07: 0f:da:7f:8e:d8:ff:c7:89:e3:9c:9a:e6:b4:e7:e5:db:3b:7e: da:6b:21:fd:85:f3:0a:7a:1d:bb:35:ad:af:06:bd:8e:04:91: 95:9d:c7:ed:e9:45:7d:37:27:fe:d4:b6:b5:c1:30:fc:d0:8d: aa:38:be:c4:1c:3c:c3:2a:fe:14:65:d1:0a:3d:ba:21:40:50: ff:22:12:06:4a:5c:79:13:37:e2:ef:8b:c7:96:fe:de:8e:e7: d7:dd:ac:ad:3a:64:8b:d0:4b:c2:4d:a6:69:c7:d7:ce:cc:cf: ad:5b:0d:76:9a:2d:b8:3b:a7:41:36:94:9b:0f:bb:ab:52:05: 91:4f:92:24:5c:8f:f1:96:4c:e0:d7:68:09:44:09:06:24:e5: fa:cb:c0:88:6b:47:43:d8:08:1c:4a:3d:df:b9:d9:c1:00:dd: 1b:8a:07:36:94:fa:fd:6d:a2:2c:a3:67:5d:22:53:97:24:5f: 60:4a:20:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElX9AeAHEQax0qEZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx YzY1MB4XDTI1MDMyOTAxMDAzOVoXDTI1MDYyNzAxMDAzOVowLzEtMCsGA1UEAxMk ODQ1MjNlN2YtYzY3OC00ZTNjLWFmZTUtZDQ2MWIzMzZjYWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvR2RM9arRfM4yEUg3L0uncN31uwedvpxFJC1 NC2g2zDdDZLnE1OfI5Y65AcXfK5+bEr5BxTm7sL0VWOjuBrjU3elcpfV/9IDUpoA 8aYnlFmJ8NRkBaX4VNsmrIbhyh1Sq9XLqtnHdduhy+RWzHqtJ6DFRnDR/Jx0QZSq SBRKzmoPPv3edPviKsyusl2vNNbGHgyUYR2a04SqMHPwnu/Xox33FSMd4ZS4D8mK xPeeFEnmq0EFBaQ0IEUIw8aN+vgHrh35+sNR94DZQbF9GhPdE7iF49CQJtZBvqrt kxaobIdDA7Qx8luaMCsEt6DWZRHI9BB5cjBnFNdKOcYtMlMSxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEyyfv1n46c/5sp6MpuOmMEliXwNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1 NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvMjk5MDk2ZTAtMmYzMC0z OWMxLThlNzctNGZhMThjNzQ2YjA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4 MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5 NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClYkUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAECe2jGmrh8kaJ94c+aA2W0wzRJ1yrEN13H/Oqqg66taRA8cgYluNctQ c2vDIja8yT0vcujLtwVcocukxTHM1sMF3OaYV98/Bw/af47Y/8eJ45ya5rTn5ds7 ftprIf2F8wp6Hbs1ra8GvY4EkZWdx+3pRX03J/7UtrXBMPzQjao4vsQcPMMq/hRl 0Qo9uiFAUP8iEgZKXHkTN+Lvi8eW/t6O59fdrK06ZIvQS8JNpmnH187Mz61bDXaa Lbg7p0E2lJsPu6tSBZFPkiRcj/GWTODXaAlECQYk5frLwIhrR0PYCBxKPd+52cEA 3RuKBzaU+v1toiyjZ10iU5ckX2BKIKI= -----END CERTIFICATE-----Generated at Thu Apr 17 22:30:39 2025 by rpki-client