$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6540401b-bc62-439f-9a85-287ef16081ad/01db8c84-cf0d-3a90-8732-b3fb421e02e2.roa File: 01db8c84-cf0d-3a90-8732-b3fb421e02e2.roa (raw, json) Hash identifier: Fnn/3dnoAhqymrQ444ys0cC4xZZH8p15IFzr0uwhiMY= Subject key identifier: 5F:72:E8:EE:1D:CA:4E:97:6F:29:56:57:6A:77:59:B0:C6:92:A3:61 Certificate issuer: /CN=6540401b-bc62-439f-9a85-287ef16081ad Certificate serial: 010D0C9F4328584A6C55D6C0DAA736CF89FE6C20 Authority key identifier: A2:7C:FE:71:E6:65:08:81:9E:CA:16:C7:7B:98:38:5A:8A:0F:F1:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6540401b-bc62-439f-9a85-287ef16081ad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6540401b-bc62-439f-9a85-287ef16081ad/01db8c84-cf0d-3a90-8732-b3fb421e02e2.roa Signing time: Sun 06 Jul 2025 01:00:49 +0000 ROA not before: Sun 06 Jul 2025 01:00:49 +0000 ROA not after: Sat 04 Oct 2025 01:00:49 +0000 asID: 46656 IP address blocks: 204.145.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6540401b-bc62-439f-9a85-287ef16081ad/6540401b-bc62-439f-9a85-287ef16081ad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6540401b-bc62-439f-9a85-287ef16081ad/6540401b-bc62-439f-9a85-287ef16081ad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6540401b-bc62-439f-9a85-287ef16081ad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6c:55:d6:c0:da:a7:36:cf:89:fe:6c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6540401b-bc62-439f-9a85-287ef16081ad Validity Not Before: Jul 6 01:00:49 2025 GMT Not After : Oct 4 01:00:49 2025 GMT Subject: CN=9c5f9b88-63b7-42d7-8b4f-b0f2be89ed72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c5:6a:35:b4:ff:68:cc:b1:3f:5c:52:ce:ab: 6a:69:1f:4d:7a:3c:c3:d3:c6:be:dc:2a:88:cf:86: 79:77:e1:91:72:52:07:71:fc:5b:ac:3b:f7:a2:87: 8b:cb:67:97:e0:98:f8:2a:13:72:3a:c5:4d:68:17: 60:6a:8e:23:76:f4:75:af:03:40:b3:24:f1:dd:cc: bc:a8:fd:7c:8d:12:bb:75:a8:4f:35:db:2d:92:91: 54:7f:8c:fd:f0:a3:3c:2b:1f:84:b6:72:4c:7d:60: b8:0e:c1:a4:b9:d3:34:59:6a:7f:d2:a9:cd:e4:e4: 11:00:30:d9:56:8f:92:51:ba:ff:c7:0b:49:37:68: 66:22:46:d8:e2:3a:a6:89:6c:16:8f:b5:44:b7:3c: 97:3c:bc:ba:71:7d:d9:3d:b5:3b:48:38:99:bf:04: 64:a5:be:7f:fc:83:f9:90:7f:78:8d:16:2e:d5:54: 30:95:37:32:93:63:d7:17:b5:7e:ee:22:da:37:1a: 2d:a5:39:e0:cc:79:eb:94:5a:4c:81:ee:32:db:7a: 64:a8:64:23:78:b1:e2:f5:34:c9:e6:a7:72:1c:a8: 01:af:28:2e:ba:ef:23:66:a2:1f:e8:40:68:8a:b9: 36:ed:de:1f:2b:3a:68:30:77:75:52:8e:3d:e0:1d: 14:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:72:E8:EE:1D:CA:4E:97:6F:29:56:57:6A:77:59:B0:C6:92:A3:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6540401b-bc62-439f-9a85-287ef16081ad/01db8c84-cf0d-3a90-8732-b3fb421e02e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6540401b-bc62-439f-9a85-287ef16081ad/6540401b-bc62-439f-9a85-287ef16081ad.crl X509v3 Authority Key Identifier: keyid:A2:7C:FE:71:E6:65:08:81:9E:CA:16:C7:7B:98:38:5A:8A:0F:F1:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6540401b-bc62-439f-9a85-287ef16081ad.cer sbgp-ipAddrBlock: critical IPv4: 204.145.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:b0:69:de:3b:87:f3:07:b3:30:dd:5c:2c:58:0b:d3:9f:35: a2:1a:63:a0:2b:89:36:6e:f0:ca:1f:da:5a:c0:4b:10:cd:60: c0:fe:19:44:70:7c:b7:6a:c9:ce:20:11:dd:b0:27:99:a6:25: c7:f0:14:84:a7:02:7a:1d:b3:cd:18:2f:66:d3:e0:dc:ea:b2: 64:f0:2f:9b:8c:38:c1:3c:1c:65:fb:31:b3:9a:d9:3a:22:eb: 03:94:01:49:6f:54:fe:42:5d:2e:2d:99:ef:bd:ab:49:71:3a: d9:bf:7f:90:a9:11:12:a7:76:a6:48:fd:7b:5e:5e:b0:31:3a: c8:bc:31:e8:d9:92:e3:7e:6f:a5:56:ff:ab:62:68:7e:16:f4: b5:69:21:b7:47:4c:45:d0:8c:a0:4e:e3:8c:92:b8:4a:ed:c6: 36:c2:40:c1:1e:db:80:c0:5d:99:ca:52:0b:2d:70:47:08:9c: 28:0f:96:58:6c:48:33:67:bd:1e:5a:cc:b8:99:8b:6e:f2:50: 91:d5:c9:e8:f3:fa:10:fe:b7:90:68:dc:8f:5d:9f:05:03:46: 4e:33:d4:d2:67:4d:61:76:c1:fb:2a:bc:cb:48:7b:d3:58:e2: 5d:5b:2a:d4:f9:14:6c:cf:e1:2a:fe:74:f8:35:6f:59:fe:16: f0:be:b3:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpsVdbA2qc2z4n+bCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjU0MDQwMWItYmM2Mi00MzlmLTlhODUtMjg3ZWYxNjA4 MWFkMB4XDTI1MDcwNjAxMDA0OVoXDTI1MTAwNDAxMDA0OVowLzEtMCsGA1UEAxMk OWM1ZjliODgtNjNiNy00MmQ3LThiNGYtYjBmMmJlODllZDcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMVqNbT/aMyxP1xSzqtqaR9NejzD08a+3CqI z4Z5d+GRclIHcfxbrDv3ooeLy2eX4Jj4KhNyOsVNaBdgao4jdvR1rwNAsyTx3cy8 qP18jRK7dahPNdstkpFUf4z98KM8Kx+EtnJMfWC4DsGkudM0WWp/0qnN5OQRADDZ Vo+SUbr/xwtJN2hmIkbY4jqmiWwWj7VEtzyXPLy6cX3ZPbU7SDiZvwRkpb5//IP5 kH94jRYu1VQwlTcyk2PXF7V+7iLaNxotpTngzHnrlFpMge4y23pkqGQjeLHi9TTJ 5qdyHKgBryguuu8jZqIf6EBoirk27d4fKzpoMHd1Uo494B0UIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF9y6O4dyk6XbylWV2p3WbDGkqNhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82NTQw NDAxYi1iYzYyLTQzOWYtOWE4NS0yODdlZjE2MDgxYWQvMDFkYjhjODQtY2YwZC0z YTkwLTg3MzItYjNmYjQyMWUwMmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNjU0MDQwMWItYmM2Mi00MzlmLTlh ODUtMjg3ZWYxNjA4MWFkLzY1NDA0MDFiLWJjNjItNDM5Zi05YTg1LTI4N2VmMTYw ODFhZC5jcmwwHwYDVR0jBBgwFoAUonz+ceZlCIGeyhbHe5g4WooP8RkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82NTQwNDAxYi1iYzYyLTQzOWYtOWE4NS0yODdl ZjE2MDgxYWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzJF4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGywad47h/MHszDdXCxYC9OfNaIaY6AriTZu8Mof2lrASxDNYMD+GURw fLdqyc4gEd2wJ5mmJcfwFISnAnods80YL2bT4NzqsmTwL5uMOME8HGX7MbOa2Toi 6wOUAUlvVP5CXS4tme+9q0lxOtm/f5CpERKndqZI/XteXrAxOsi8MejZkuN+b6VW /6tiaH4W9LVpIbdHTEXQjKBO44ySuErtxjbCQMEe24DAXZnKUgstcEcInCgPllhs SDNnvR5azLiZi27yUJHVyejz+hD+t5Bo3I9dnwUDRk4z1NJnTWF2wfsqvMtIe9NY 4l1bKtT5FGzP4Sr+dPg1b1n+FvC+syg= -----END CERTIFICATE-----Generated at Wed Jul 9 00:47:54 2025 by rpki-client