$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/eca12f89-04b2-3504-a940-6dd9edca63b4.roa File: eca12f89-04b2-3504-a940-6dd9edca63b4.roa (raw, json) Hash identifier: Uj15dfgdpOzp9P9QIe5xRtqDOkkW3AR7gVwH1MpRZNE= Subject key identifier: F5:F5:57:37:29:0E:0B:3F:2E:E6:93:FC:B2:4E:68:F0:A6:FB:36:F7 Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65 Certificate serial: 010D0C9F4328584B2CF6E5C3A6FBE4F7EBF3DEA8 Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/eca12f89-04b2-3504-a940-6dd9edca63b4.roa Signing time: Sat 13 Sep 2025 01:00:33 +0000 ROA not before: Sat 13 Sep 2025 01:00:33 +0000 ROA not after: Fri 12 Dec 2025 02:00:33 +0000 asID: 30103 IP address blocks: 149.137.40.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2c:f6:e5:c3:a6:fb:e4:f7:eb:f3:de:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65 Validity Not Before: Sep 13 01:00:33 2025 GMT Not After : Dec 12 02:00:33 2025 GMT Subject: CN=fd369b3d-8fc7-40fa-a821-081ff2ec666c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:f6:25:83:4c:9f:ed:2d:a3:fb:be:38:c5:27: 4c:ec:8e:f5:fc:b1:5b:1f:e5:44:c5:bd:20:8c:0a: c1:53:90:24:0b:5b:9d:3f:15:f9:b9:cf:fe:48:d9: 97:a3:f9:72:a6:c9:fe:43:21:b2:24:20:4f:f2:af: 58:7b:f6:f2:a0:68:da:10:a0:30:88:10:32:51:d8: 8f:02:95:56:88:75:7b:d1:84:be:5a:6b:b6:ae:b3: e7:47:09:40:f4:ea:7c:3c:14:6e:71:6a:36:f5:82: 65:bd:b8:53:8b:ac:3d:34:61:5f:cf:d3:16:e6:3c: 4c:00:66:34:2e:e1:d5:d2:18:cf:f1:e9:f2:59:ca: 15:7b:d0:54:b3:c4:58:22:57:fd:c3:4c:28:b9:ab: 2f:d9:59:b7:b8:a9:dd:f8:4c:3e:58:27:64:98:72: a9:04:5a:82:19:ac:39:38:40:df:ef:4d:b4:1f:c9: 3e:71:92:51:cc:0f:be:c2:f0:40:e9:33:b9:92:59: 76:c5:b6:73:32:9a:54:64:0f:a4:36:f9:f9:32:8a: 7f:60:e0:82:9c:72:af:dc:10:a4:3b:42:b3:1b:dd: 80:e6:c9:f9:b3:42:01:53:5e:7b:f4:c6:e7:ae:c6: 8e:6b:c9:60:2f:73:7e:b3:44:ed:d4:68:9c:da:90: c9:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:F5:57:37:29:0E:0B:3F:2E:E6:93:FC:B2:4E:68:F0:A6:FB:36:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/eca12f89-04b2-3504-a940-6dd9edca63b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl X509v3 Authority Key Identifier: keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer sbgp-ipAddrBlock: critical IPv4: 149.137.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:9d:bf:62:6f:f9:82:0c:92:83:e5:b9:79:9d:2c:7b:4f:ca: 6a:76:71:46:20:8c:16:40:1e:6a:f8:d6:20:2c:f6:a2:b4:2c: bf:1d:e6:12:1f:d0:24:02:0a:98:8a:57:82:f4:40:2a:3b:07: c2:53:b3:d9:ce:15:9e:0d:be:38:bb:a8:2a:e3:49:9a:aa:66: da:d5:dd:a2:c8:8a:bf:09:b8:b2:c2:65:eb:21:8c:23:d5:f6: 14:42:a3:a4:d8:5c:b4:14:f0:cb:66:33:a8:90:41:8c:41:7e: be:45:62:0e:f1:56:4e:f7:7c:43:11:51:26:e4:b8:91:a2:66: a7:5d:c8:60:dc:6b:16:75:0f:5b:96:e2:82:e2:1c:fb:e4:19: 05:c9:79:23:02:1d:56:3b:9f:3c:64:9a:d4:72:47:a2:29:3e: 73:ec:74:f5:22:4b:52:d0:a8:d7:b7:38:85:1b:3c:78:ad:48: 00:1d:2c:6c:20:28:ec:19:79:93:b0:90:a3:4f:7b:16:9e:84: e2:48:8e:83:03:df:7c:39:90:57:f4:29:af:26:c9:a1:68:6d: 65:c5:bc:59:12:9d:c8:3e:3c:4a:ac:44:bf:a6:27:8b:d9:45: eb:a6:42:e1:8e:6d:d3:c0:70:6f:51:e9:52:e7:75:dd:b2:07: 58:f9:d0:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEss9uXDpvvk9+vz3qgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx YzY1MB4XDTI1MDkxMzAxMDAzM1oXDTI1MTIxMjAyMDAzM1owLzEtMCsGA1UEAxMk ZmQzNjliM2QtOGZjNy00MGZhLWE4MjEtMDgxZmYyZWM2NjZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+PYlg0yf7S2j+744xSdM7I71/LFbH+VExb0g jArBU5AkC1udPxX5uc/+SNmXo/lypsn+QyGyJCBP8q9Ye/byoGjaEKAwiBAyUdiP ApVWiHV70YS+Wmu2rrPnRwlA9Op8PBRucWo29YJlvbhTi6w9NGFfz9MW5jxMAGY0 LuHV0hjP8enyWcoVe9BUs8RYIlf9w0wouasv2Vm3uKnd+Ew+WCdkmHKpBFqCGaw5 OEDf7020H8k+cZJRzA++wvBA6TO5kll2xbZzMppUZA+kNvn5Mop/YOCCnHKv3BCk O0KzG92A5sn5s0IBU1579MbnrsaOa8lgL3N+s0Tt1Gic2pDJNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPX1VzcpDgs/LuaT/LJOaPCm+zb3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1 NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvZWNhMTJmODktMDRiMi0z NTA0LWE5NDAtNmRkOWVkY2E2M2I0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4 MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5 NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDlYkoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEudv2Jv+YIMkoPluXmdLHtPymp2cUYgjBZAHmr41iAs9qK0LL8d5hIf 0CQCCpiKV4L0QCo7B8JTs9nOFZ4Nvji7qCrjSZqqZtrV3aLIir8JuLLCZeshjCPV 9hRCo6TYXLQU8MtmM6iQQYxBfr5FYg7xVk73fEMRUSbkuJGiZqddyGDcaxZ1D1uW 4oLiHPvkGQXJeSMCHVY7nzxkmtRyR6IpPnPsdPUiS1LQqNe3OIUbPHitSAAdLGwg KOwZeZOwkKNPexaehOJIjoMD33w5kFf0Ka8myaFobWXFvFkSncg+PEqsRL+mJ4vZ ReumQuGObdPAcG9R6VLndd2yB1j50NM= -----END CERTIFICATE-----Generated at Mon Oct 20 16:31:35 2025 by rpki-client