$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/d88f230c-e5d4-34f8-b9aa-7f5dfc6c5322.roa File: d88f230c-e5d4-34f8-b9aa-7f5dfc6c5322.roa (raw, json) Hash identifier: 7GI6vKr7ySgeySU2McZdWIFJ3AMiwCrwQakd6cfCc1w= Subject key identifier: F0:29:B8:79:B1:F3:BC:42:E2:EC:61:B8:E3:70:A3:82:35:BD:05:3E Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65 Certificate serial: 010D0C9F4328584957F402BB4A927C609AE4CF00 Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/d88f230c-e5d4-34f8-b9aa-7f5dfc6c5322.roa Signing time: Sat 29 Mar 2025 01:00:39 +0000 ROA not before: Sat 29 Mar 2025 01:00:39 +0000 ROA not after: Fri 27 Jun 2025 01:00:39 +0000 asID: 30103 IP address blocks: 149.137.16.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:57:f4:02:bb:4a:92:7c:60:9a:e4:cf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65 Validity Not Before: Mar 29 01:00:39 2025 GMT Not After : Jun 27 01:00:39 2025 GMT Subject: CN=5e742658-168a-4de6-ab2b-46c7fc310175 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:27:79:a5:0e:9f:76:00:03:2e:e2:b5:52:fd: 01:87:73:44:b8:76:47:56:71:51:1e:81:bf:5a:fc: c6:12:62:26:02:aa:dc:5e:a2:dd:69:ca:db:e5:06: a6:41:2f:1b:b9:4e:b8:20:30:b1:83:6a:4c:fd:c5: 78:7c:c5:44:74:0a:d4:11:8f:c4:87:dd:20:18:49: 8c:cf:df:67:74:bc:7c:26:0b:93:84:95:95:cd:24: 7a:94:14:1c:93:1e:3d:52:eb:40:0e:26:81:16:3d: 4c:a3:90:ae:62:38:e0:7a:68:9b:31:17:91:53:6a: 10:35:ff:11:fe:f1:6c:2f:8b:57:e2:33:e0:87:8c: 9b:1d:42:09:d9:69:38:34:54:99:7a:3b:7e:2b:40: f9:40:42:86:75:87:c3:68:26:74:c9:c6:1c:01:90: 38:e1:5b:7e:d7:ae:dd:3e:07:73:1b:b5:1e:79:f2: 25:10:cd:95:0b:9d:6a:55:74:b6:c7:12:0d:ad:e2: 14:34:05:44:dc:e4:ea:f8:77:64:2a:a7:82:ad:50: 59:c8:dd:10:49:6f:38:eb:ab:c7:2b:4a:32:6a:c7: 76:76:1e:aa:26:16:67:88:bd:a6:08:a6:14:c4:d8: d9:19:69:11:19:0e:0a:d9:03:0f:93:06:71:8f:53: 5b:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:29:B8:79:B1:F3:BC:42:E2:EC:61:B8:E3:70:A3:82:35:BD:05:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/d88f230c-e5d4-34f8-b9aa-7f5dfc6c5322.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl X509v3 Authority Key Identifier: keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer sbgp-ipAddrBlock: critical IPv4: 149.137.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:86:75:1d:5d:63:48:d3:72:97:e9:68:0c:da:fa:cd:d8:01: 2d:94:ba:06:61:cb:ac:b9:fd:58:5c:d3:94:7d:d4:21:74:d8: a6:fc:61:e1:a8:05:81:a5:87:54:9c:5e:1d:33:01:69:4f:3d: a6:00:51:ba:1c:87:cd:7d:29:3c:dd:37:4e:f8:e0:f5:3b:94: 5b:49:1c:1f:80:93:0e:1f:ea:d1:af:f0:74:af:9b:11:6d:40: 9f:f7:dc:f8:40:d6:5c:36:20:f9:f1:be:9e:2c:8c:9d:08:6a: 41:cf:d8:7a:b5:62:3b:f2:55:70:00:54:4c:5a:4b:63:26:2b: 1f:0b:66:1c:00:3c:5a:bd:fc:eb:71:8d:12:55:de:10:b8:df: 3d:21:ff:9f:87:14:ff:a6:f9:96:8b:d7:31:3d:76:8d:cc:4d: fa:46:51:d0:e5:b7:57:a7:52:3d:16:61:eb:13:f8:53:69:5b: a4:eb:8b:0c:a6:4a:4b:02:1f:dd:f7:6f:6f:0e:30:d0:c1:0c: f4:1f:bc:ba:45:b7:13:b5:c4:a4:51:0c:6d:2d:43:79:e8:0f: ad:3f:ca:9e:d0:80:b5:86:9b:6e:ae:a6:e8:5d:d0:6b:3b:c0: 9b:76:de:67:15:76:43:46:20:48:07:bb:62:bd:26:2b:6c:99: a0:5b:4d:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElX9AK7SpJ8YJrkzwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx YzY1MB4XDTI1MDMyOTAxMDAzOVoXDTI1MDYyNzAxMDAzOVowLzEtMCsGA1UEAxMk NWU3NDI2NTgtMTY4YS00ZGU2LWFiMmItNDZjN2ZjMzEwMTc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjid5pQ6fdgADLuK1Uv0Bh3NEuHZHVnFRHoG/ WvzGEmImAqrcXqLdacrb5QamQS8buU64IDCxg2pM/cV4fMVEdArUEY/Eh90gGEmM z99ndLx8JguThJWVzSR6lBQckx49UutADiaBFj1Mo5CuYjjgemibMReRU2oQNf8R /vFsL4tX4jPgh4ybHUIJ2Wk4NFSZejt+K0D5QEKGdYfDaCZ0ycYcAZA44Vt+167d PgdzG7UeefIlEM2VC51qVXS2xxINreIUNAVE3OTq+HdkKqeCrVBZyN0QSW8466vH K0oyasd2dh6qJhZniL2mCKYUxNjZGWkRGQ4K2QMPkwZxj1NbQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPApuHmx87xC4uxhuONwo4I1vQU+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1 NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvZDg4ZjIzMGMtZTVkNC0z NGY4LWI5YWEtN2Y1ZGZjNmM1MzIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4 MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5 NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClYkQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH6GdR1dY0jTcpfpaAza+s3YAS2UugZhy6y5/Vhc05R91CF02Kb8YeGo BYGlh1ScXh0zAWlPPaYAUboch819KTzdN0744PU7lFtJHB+Akw4f6tGv8HSvmxFt QJ/33PhA1lw2IPnxvp4sjJ0IakHP2Hq1YjvyVXAAVExaS2MmKx8LZhwAPFq9/Otx jRJV3hC43z0h/5+HFP+m+ZaL1zE9do3MTfpGUdDlt1enUj0WYesT+FNpW6Triwym SksCH933b28OMNDBDPQfvLpFtxO1xKRRDG0tQ3noD60/yp7QgLWGm26upuhd0Gs7 wJt23mcVdkNGIEgHu2K9JitsmaBbTU0= -----END CERTIFICATE-----Generated at Sun Apr 6 17:42:43 2025 by rpki-client