$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/3eb00bed-be48-37ec-b3f2-15cc2b5e3427.roa File: 3eb00bed-be48-37ec-b3f2-15cc2b5e3427.roa (raw, json) Hash identifier: OHOaFpanBSXDzPEgMPcyLkwb9p067bMjKBBGAhmtUs4= Subject key identifier: 64:93:16:55:57:66:F0:A1:66:35:BE:22:B4:E0:AC:92:CF:DD:AA:65 Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65 Certificate serial: 010D0C9F432858496CE456AF3E59335EA1736940 Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/3eb00bed-be48-37ec-b3f2-15cc2b5e3427.roa Signing time: Sat 05 Apr 2025 13:01:01 +0000 ROA not before: Sat 05 Apr 2025 13:01:01 +0000 ROA not after: Fri 04 Jul 2025 13:01:01 +0000 asID: 30103 IP address blocks: 149.137.24.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6c:e4:56:af:3e:59:33:5e:a1:73:69:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65 Validity Not Before: Apr 5 13:01:01 2025 GMT Not After : Jul 4 13:01:01 2025 GMT Subject: CN=8eaf5682-39c3-447c-9817-3a21dcf3553c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:96:e0:e1:3e:02:fc:0a:0c:5e:6e:1c:4b:dd: e5:a6:79:e4:56:bc:77:0d:dc:79:d6:29:50:5d:20: 3f:d3:9d:cb:8a:75:4f:4a:e4:43:1e:3b:83:e3:0e: 5c:1f:11:ae:52:0c:60:c2:76:c3:da:2a:f2:a3:5e: 56:80:48:1d:1b:85:0a:ba:0c:51:09:bc:24:29:36: 47:e8:44:4b:e9:9b:d4:a6:1d:b9:25:e8:29:7e:6d: 70:b4:09:da:6d:31:13:37:ca:f6:6f:9b:7e:49:4d: 04:66:f9:8b:f9:65:90:39:eb:3d:b6:07:ac:be:47: 49:e2:15:78:01:6c:e2:04:02:78:ea:21:82:e5:f7: e0:0c:b4:77:ae:35:15:16:85:fe:19:25:ed:12:72: cf:fc:66:78:4f:f7:ea:08:d8:93:40:2c:92:03:a2: 2a:e9:53:f2:87:61:97:65:9d:5b:ad:92:a2:15:4e: 71:d4:67:79:a4:aa:cb:08:73:b1:49:e7:4f:ed:00: 73:28:3f:e8:2d:cc:b7:86:0d:2d:0d:23:14:db:52: 7a:d4:65:4c:da:13:3b:78:11:b2:95:00:91:08:00: df:30:0d:84:5a:86:67:50:28:b5:2c:b5:6f:ec:18: 0f:41:b6:67:e6:51:13:b6:01:1d:1c:68:20:af:eb: 0f:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:93:16:55:57:66:F0:A1:66:35:BE:22:B4:E0:AC:92:CF:DD:AA:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/3eb00bed-be48-37ec-b3f2-15cc2b5e3427.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl X509v3 Authority Key Identifier: keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer sbgp-ipAddrBlock: critical IPv4: 149.137.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:bd:d4:c7:9a:59:24:7b:c4:fc:85:c1:46:23:c1:42:42:05: 91:50:f6:20:76:e7:bf:6b:c3:54:44:72:e1:6e:13:a6:d3:22: 71:d6:f3:69:b4:42:f2:c8:77:00:e6:78:2d:1f:06:8e:01:40: 0a:23:f4:f0:87:12:e8:b2:69:e5:da:dd:ea:88:5b:00:e4:0b: 48:c3:f3:63:57:7f:27:d0:e4:e6:97:e3:f4:61:95:c6:e1:76: 18:d9:16:e4:ea:53:9c:f7:fe:7f:8f:cb:71:1b:24:15:b0:18: ea:9c:13:8f:17:05:8a:ea:2d:4f:f2:5c:cf:20:8b:a9:d9:d5: 6a:b2:53:8b:17:18:52:40:10:ed:97:20:4d:8f:01:4a:76:0b: bb:31:5b:94:db:d5:73:94:cf:3b:3b:52:69:c2:24:26:bf:b2: fe:28:55:14:99:bb:9d:a6:b0:a5:f0:df:64:84:72:b6:5d:65: 1d:0f:4a:db:fb:1a:e3:59:32:6e:22:0f:89:c2:d3:b0:2c:3d: 52:fb:70:8e:16:0a:c7:b9:db:c3:4b:17:88:f9:e3:cd:f2:f9: 11:1c:2d:c9:89:39:a2:fa:47:09:fa:2c:91:fd:37:42:b1:24: 9f:81:43:6f:ba:7b:50:d6:a6:e2:03:bc:c0:63:e1:41:9a:6d: 66:29:65:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEls5FavPlkzXqFzaUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx YzY1MB4XDTI1MDQwNTEzMDEwMVoXDTI1MDcwNDEzMDEwMVowLzEtMCsGA1UEAxMk OGVhZjU2ODItMzljMy00NDdjLTk4MTctM2EyMWRjZjM1NTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAipbg4T4C/AoMXm4cS93lpnnkVrx3Ddx51ilQ XSA/053LinVPSuRDHjuD4w5cHxGuUgxgwnbD2iryo15WgEgdG4UKugxRCbwkKTZH 6ERL6ZvUph25Jegpfm1wtAnabTETN8r2b5t+SU0EZvmL+WWQOes9tgesvkdJ4hV4 AWziBAJ46iGC5ffgDLR3rjUVFoX+GSXtEnLP/GZ4T/fqCNiTQCySA6Iq6VPyh2GX ZZ1brZKiFU5x1Gd5pKrLCHOxSedP7QBzKD/oLcy3hg0tDSMU21J61GVM2hM7eBGy lQCRCADfMA2EWoZnUCi1LLVv7BgPQbZn5lETtgEdHGggr+sP6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGSTFlVXZvChZjW+IrTgrJLP3aplMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1 NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvM2ViMDBiZWQtYmU0OC0z N2VjLWIzZjItMTVjYzJiNWUzNDI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4 MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5 NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDlYkYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHe91MeaWSR7xPyFwUYjwUJCBZFQ9iB2579rw1REcuFuE6bTInHW82m0 QvLIdwDmeC0fBo4BQAoj9PCHEuiyaeXa3eqIWwDkC0jD82NXfyfQ5OaX4/Rhlcbh dhjZFuTqU5z3/n+Py3EbJBWwGOqcE48XBYrqLU/yXM8gi6nZ1WqyU4sXGFJAEO2X IE2PAUp2C7sxW5Tb1XOUzzs7UmnCJCa/sv4oVRSZu52msKXw32SEcrZdZR0PStv7 GuNZMm4iD4nC07AsPVL7cI4WCse528NLF4j5483y+REcLcmJOaL6Rwn6LJH9N0Kx JJ+BQ2+6e1DWpuIDvMBj4UGabWYpZQo= -----END CERTIFICATE-----Generated at Thu Apr 17 22:49:42 2025 by rpki-client