$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/c846aec1-c1c4-31df-9606-f6ad9cd6ea80.roa File: c846aec1-c1c4-31df-9606-f6ad9cd6ea80.roa (raw, json) Hash identifier: ccXgelSJQsBm0fOG7sSFE7hLdgoN/AaoDR+Hkj79dw4= Subject key identifier: D2:81:60:E5:87:D0:7A:01:68:EC:BB:AC:3F:85:39:2C:69:5E:59:2B Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65 Certificate serial: 010D0C9F432858495ABEC9DA6767062876626F00 Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/c846aec1-c1c4-31df-9606-f6ad9cd6ea80.roa Signing time: Sun 30 Mar 2025 01:00:47 +0000 ROA not before: Sun 30 Mar 2025 01:00:47 +0000 ROA not after: Sat 28 Jun 2025 01:00:47 +0000 asID: 30103 IP address blocks: 149.137.0.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5a:be:c9:da:67:67:06:28:76:62:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65 Validity Not Before: Mar 30 01:00:47 2025 GMT Not After : Jun 28 01:00:47 2025 GMT Subject: CN=89526038-0a29-48e6-ab9c-d3606847362d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:01:61:29:3d:f1:32:c8:de:4e:24:5f:f1:59: ef:d6:d1:28:1e:d8:45:64:44:e0:f4:92:9f:19:91: f2:30:d6:af:76:3c:f7:1d:ed:33:ed:49:de:e1:27: b0:1c:02:32:16:3a:83:3f:e1:49:61:ed:c3:71:c6: 33:a4:a4:1b:47:69:a7:ad:1e:23:0a:1e:f5:59:7e: ea:6b:87:94:fc:bf:aa:f6:93:a4:65:da:c8:67:9b: b9:92:c9:36:17:c7:0f:87:93:7e:40:93:1e:9e:99: 79:7f:41:6c:b9:4c:10:c5:4f:ee:06:68:ea:54:b0: e6:40:84:44:90:e2:91:32:5b:ce:87:ea:9e:c7:62: da:ce:76:5c:9f:a9:51:5d:52:12:4a:98:9c:e1:f0: d5:a2:43:96:bb:0e:83:e8:ec:71:8b:26:b3:6c:9f: 78:c5:ee:10:bb:fc:3d:c7:fd:89:a5:20:5a:e6:cb: 01:3a:b5:ae:8a:6c:cb:e6:cb:e3:56:8e:b2:22:fd: 9d:13:24:d0:a5:97:35:d5:04:df:89:e5:25:b6:c3: e5:93:ce:d3:e2:61:99:20:96:22:f3:1b:45:59:ef: 9d:d5:bd:c7:ad:74:a1:5f:db:ed:08:6d:9d:8e:88: 85:de:13:55:e2:89:42:8f:e3:05:f1:61:5e:f8:f5: c7:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:81:60:E5:87:D0:7A:01:68:EC:BB:AC:3F:85:39:2C:69:5E:59:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/c846aec1-c1c4-31df-9606-f6ad9cd6ea80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl X509v3 Authority Key Identifier: keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer sbgp-ipAddrBlock: critical IPv4: 149.137.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:21:f2:a1:2f:35:a6:26:a4:c2:4d:56:17:bf:9c:d8:d4:f9: 39:76:15:75:e8:9d:51:f5:1f:24:bd:7c:15:38:e0:83:23:d7: ba:5c:6b:dd:25:17:ff:72:59:24:04:66:2e:4c:b0:c1:e8:ea: 4a:46:11:0e:fc:0a:6e:68:92:a7:46:f2:4c:cd:ff:7b:c4:58: 51:db:6a:3f:a4:80:87:5d:f9:d4:9b:ef:b4:1c:e5:ec:df:3d: a1:c3:30:a0:38:ff:70:79:cc:51:66:ae:60:93:36:ca:32:c2: da:f5:4e:4f:0f:bf:05:10:1e:77:63:99:25:f9:75:1f:24:13: 8d:a6:07:28:f8:6e:e8:09:df:4e:79:61:ff:98:04:d9:66:7d: fb:58:c4:09:9d:d5:4f:ab:0b:7f:1d:e0:11:a1:ec:57:76:10: e7:c3:d6:a6:71:ca:2c:57:07:7a:b5:cc:5a:97:45:89:c5:44: cc:7f:e4:8a:7f:df:b9:8b:95:97:53:62:bc:9b:88:83:8a:31: 04:07:29:33:e2:82:4e:af:8c:cc:18:e6:e2:f7:f3:9a:36:7d: 6d:70:61:60:a3:d8:0b:99:bf:c5:ee:0f:f9:31:26:cd:5d:2e: 7e:d4:2d:12:9b:ff:ca:29:39:1e:16:e6:0a:0d:df:ec:58:04: c7:fa:4f:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElavsnaZ2cGKHZibwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx YzY1MB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk ODk1MjYwMzgtMGEyOS00OGU2LWFiOWMtZDM2MDY4NDczNjJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgAFhKT3xMsjeTiRf8Vnv1tEoHthFZETg9JKf GZHyMNavdjz3He0z7Une4SewHAIyFjqDP+FJYe3DccYzpKQbR2mnrR4jCh71WX7q a4eU/L+q9pOkZdrIZ5u5ksk2F8cPh5N+QJMenpl5f0FsuUwQxU/uBmjqVLDmQIRE kOKRMlvOh+qex2LaznZcn6lRXVISSpic4fDVokOWuw6D6OxxiyazbJ94xe4Qu/w9 x/2JpSBa5ssBOrWuimzL5svjVo6yIv2dEyTQpZc11QTfieUltsPlk87T4mGZIJYi 8xtFWe+d1b3HrXShX9vtCG2djoiF3hNV4olCj+MF8WFe+PXHDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNKBYOWH0HoBaOy7rD+FOSxpXlkrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1 NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvYzg0NmFlYzEtYzFjNC0z MWRmLTk2MDYtZjZhZDljZDZlYTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4 MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5 NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDlYkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH8h8qEvNaYmpMJNVhe/nNjU+Tl2FXXonVH1HyS9fBU44IMj17pca90l F/9yWSQEZi5MsMHo6kpGEQ78Cm5okqdG8kzN/3vEWFHbaj+kgIdd+dSb77Qc5ezf PaHDMKA4/3B5zFFmrmCTNsoywtr1Tk8PvwUQHndjmSX5dR8kE42mByj4bugJ3055 Yf+YBNlmfftYxAmd1U+rC38d4BGh7Fd2EOfD1qZxyixXB3q1zFqXRYnFRMx/5Ip/ 37mLlZdTYrybiIOKMQQHKTPigk6vjMwY5uL385o2fW1wYWCj2AuZv8XuD/kxJs1d Ln7ULRKb/8opOR4W5goN3+xYBMf6Txg= -----END CERTIFICATE-----Generated at Sun Apr 6 17:43:22 2025 by rpki-client