$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1fec04c2-2b6c-4e9a-8062-e420ac1a257a/c9aa9150-9841-397a-b807-599d98d7b122.roa File: c9aa9150-9841-397a-b807-599d98d7b122.roa (raw, json) Hash identifier: ge9ZoG0fP3lm8SMEZi2uUq/NMX6SkT3q7sc/XcSLTjA= Subject key identifier: 84:8E:69:DE:7A:C5:E4:40:D1:53:47:F5:BA:04:BA:96:DC:68:CD:E7 Certificate issuer: /CN=1fec04c2-2b6c-4e9a-8062-e420ac1a257a Certificate serial: 010D0C9F4328584980FC74826DEE7D30FF5E5B00 Authority key identifier: DA:A6:FB:CD:8D:FF:22:68:C4:1E:BA:AC:CE:80:24:86:BD:CD:D3:44 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1fec04c2-2b6c-4e9a-8062-e420ac1a257a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1fec04c2-2b6c-4e9a-8062-e420ac1a257a/c9aa9150-9841-397a-b807-599d98d7b122.roa Signing time: Sat 12 Apr 2025 17:45:58 +0000 ROA not before: Sat 12 Apr 2025 17:45:58 +0000 ROA not after: Fri 11 Jul 2025 17:45:58 +0000 asID: 25996 IP address blocks: 149.101.100.0/24 maxlen: 32 149.101.101.0/24 maxlen: 32 149.101.102.0/24 maxlen: 32 149.101.103.0/24 maxlen: 32 149.101.118.0/24 maxlen: 32 149.101.164.0/23 maxlen: 32 149.101.216.0/24 maxlen: 32 149.101.229.0/24 maxlen: 32 149.101.242.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1fec04c2-2b6c-4e9a-8062-e420ac1a257a/1fec04c2-2b6c-4e9a-8062-e420ac1a257a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1fec04c2-2b6c-4e9a-8062-e420ac1a257a/1fec04c2-2b6c-4e9a-8062-e420ac1a257a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1fec04c2-2b6c-4e9a-8062-e420ac1a257a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:80:fc:74:82:6d:ee:7d:30:ff:5e:5b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fec04c2-2b6c-4e9a-8062-e420ac1a257a Validity Not Before: Apr 12 17:45:58 2025 GMT Not After : Jul 11 17:45:58 2025 GMT Subject: CN=e87677b5-009e-440a-969d-f37197d0a09c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:d1:78:3c:7b:cd:e6:4b:14:de:6b:e7:6f:fb: 7f:a6:ea:5c:fe:0b:23:f7:55:c8:d5:20:2d:97:86: e6:08:83:ec:e9:68:60:32:4f:fb:6a:de:9c:56:35: 89:72:c4:9a:4a:d2:4d:69:26:88:98:e8:32:db:70: c2:c1:d5:3c:a6:b1:ca:6f:26:c2:37:52:7f:ce:bc: c2:66:36:e9:5a:ce:e1:32:d8:1d:89:9d:40:d7:5a: 1d:e5:01:a0:c9:80:ec:98:f3:7e:2e:41:fc:e4:a8: b6:90:cd:65:3b:6b:39:54:67:4f:bd:ab:95:eb:e7: 36:5a:d8:ed:c0:0e:05:65:94:81:f5:1a:eb:ef:b5: f8:59:19:27:21:f5:75:7d:38:da:2f:f1:c2:f1:3a: 01:3e:4f:6a:24:51:39:0d:5a:52:a6:3f:c1:db:66: f0:2b:1a:0c:6e:15:68:a5:ec:7d:c3:b4:26:4a:d5: 3a:5d:c1:3d:59:70:b4:e1:d5:c3:37:f7:52:31:f8: ac:6b:a4:62:5d:95:04:3e:30:e9:01:ab:a3:01:ab: 7f:46:6f:f7:23:11:21:3d:ae:b3:ae:31:3a:04:3f: 02:8e:5c:9d:c5:08:22:02:2c:d0:85:d5:ec:a1:b0: a3:1b:ee:8a:55:4a:79:d3:d6:da:94:0a:7a:a1:0f: b5:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:8E:69:DE:7A:C5:E4:40:D1:53:47:F5:BA:04:BA:96:DC:68:CD:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1fec04c2-2b6c-4e9a-8062-e420ac1a257a/c9aa9150-9841-397a-b807-599d98d7b122.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1fec04c2-2b6c-4e9a-8062-e420ac1a257a/1fec04c2-2b6c-4e9a-8062-e420ac1a257a.crl X509v3 Authority Key Identifier: keyid:DA:A6:FB:CD:8D:FF:22:68:C4:1E:BA:AC:CE:80:24:86:BD:CD:D3:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1fec04c2-2b6c-4e9a-8062-e420ac1a257a.cer sbgp-ipAddrBlock: critical IPv4: 149.101.100.0/22 149.101.118.0/24 149.101.164.0/23 149.101.216.0/24 149.101.229.0/24 149.101.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:94:d2:38:36:32:0d:c5:43:50:07:9c:04:1b:2e:2e:df:11: 2d:9c:2f:0f:e4:b7:a5:9f:5d:0d:b7:d0:bd:17:ad:ce:b2:65: 52:b7:08:3d:09:0d:c0:0e:e1:76:c5:84:15:16:ad:54:ef:d8: b5:16:32:e1:a5:4e:74:69:24:0f:db:c3:65:a9:5e:0f:1c:31: 41:e6:f6:a3:95:60:d2:3c:05:95:9c:94:24:5b:a0:53:b8:59: 68:83:c1:eb:a4:b9:11:8e:fe:d5:ac:be:2d:0a:ee:d6:bf:22: 78:11:d3:da:65:4b:e7:1b:cc:8c:ad:f3:40:af:6d:41:4c:b5: 25:86:cd:c3:9c:66:41:fa:a0:80:bd:3b:5f:4e:6d:ec:30:b8: 4b:ea:f4:5d:19:3b:92:46:98:00:e1:7c:2b:45:fc:77:4c:ea: 88:93:1c:79:56:ab:5d:cb:f8:b3:78:7e:2e:ac:65:12:b2:e4: e3:2e:e8:37:f4:59:06:4a:87:00:ef:df:8e:88:9f:6d:b2:a2: 11:1a:a2:20:ee:bb:ba:ff:a9:39:80:2d:fc:c4:b3:1e:ca:70: 9e:19:95:73:9c:1f:e7:23:28:87:ab:4b:30:36:4e:54:f4:ab: d6:9e:4b:c8:06:58:e4:7b:d0:47:9e:a7:a6:9d:53:77:e9:8a: fc:f9:ff:cf -----BEGIN CERTIFICATE----- MIIGYTCCBUmgAwIBAgIUAQ0Mn0MoWEmA/HSCbe59MP9eWwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZlYzA0YzItMmI2Yy00ZTlhLTgwNjItZTQyMGFjMWEy NTdhMB4XDTI1MDQxMjE3NDU1OFoXDTI1MDcxMTE3NDU1OFowLzEtMCsGA1UEAxMk ZTg3Njc3YjUtMDA5ZS00NDBhLTk2OWQtZjM3MTk3ZDBhMDljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdF4PHvN5ksU3mvnb/t/pupc/gsj91XI1SAt l4bmCIPs6WhgMk/7at6cVjWJcsSaStJNaSaImOgy23DCwdU8prHKbybCN1J/zrzC ZjbpWs7hMtgdiZ1A11od5QGgyYDsmPN+LkH85Ki2kM1lO2s5VGdPvauV6+c2Wtjt wA4FZZSB9Rrr77X4WRknIfV1fTjaL/HC8ToBPk9qJFE5DVpSpj/B22bwKxoMbhVo pex9w7QmStU6XcE9WXC04dXDN/dSMfisa6RiXZUEPjDpAaujAat/Rm/3IxEhPa6z rjE6BD8CjlydxQgiAizQhdXsobCjG+6KVUp509balAp6oQ+1GQIDAQABo4IDczCC A28wHQYDVR0OBBYEFISOad56xeRA0VNH9boEupbcaM3nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8xZmVj MDRjMi0yYjZjLTRlOWEtODA2Mi1lNDIwYWMxYTI1N2EvYzlhYTkxNTAtOTg0MS0z OTdhLWI4MDctNTk5ZDk4ZDdiMTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMWZlYzA0YzItMmI2Yy00ZTlhLTgw NjItZTQyMGFjMWEyNTdhLzFmZWMwNGMyLTJiNmMtNGU5YS04MDYyLWU0MjBhYzFh MjU3YS5jcmwwHwYDVR0jBBgwFoAU2qb7zY3/ImjEHrqszoAkhr3N00QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8xZmVjMDRjMi0yYjZjLTRlOWEtODA2Mi1lNDIw YWMxYTI1N2EuY2VyMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQClWVkAwQA lWV2AwQBlWWkAwQAlWXYAwQAlWXlAwQAlWXyMFQGA1UdIAEB/wRKMEgwRgYIKwYB BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEWU0jg2Mg3FQ1AH nAQbLi7fES2cLw/kt6WfXQ230L0Xrc6yZVK3CD0JDcAO4XbFhBUWrVTv2LUWMuGl TnRpJA/bw2WpXg8cMUHm9qOVYNI8BZWclCRboFO4WWiDweukuRGO/tWsvi0K7ta/ IngR09plS+cbzIyt80CvbUFMtSWGzcOcZkH6oIC9O19ObewwuEvq9F0ZO5JGmADh fCtF/HdM6oiTHHlWq13L+LN4fi6sZRKy5OMu6Df0WQZKhwDv346In22yohEaoiDu u7r/qTmALfzEsx7KcJ4ZlXOcH+cjKIerSzA2TlT0q9aeS8gGWOR70Eeep6adU3fp ivz5/88= -----END CERTIFICATE-----Generated at Sun May 4 08:26:52 2025 by rpki-client