$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6540401b-bc62-439f-9a85-287ef16081ad/01db8c84-cf0d-3a90-8732-b3fb421e02e2.roa File: 01db8c84-cf0d-3a90-8732-b3fb421e02e2.roa (raw, json) Hash identifier: R3THNOrW9zkw5MjiPB53sI54wwpzl1ZUv7qte82rhak= Subject key identifier: 31:EA:23:9F:E2:86:68:02:1A:DE:30:EA:4B:D1:DC:54:2A:CE:3A:C0 Certificate issuer: /CN=6540401b-bc62-439f-9a85-287ef16081ad Certificate serial: 010D0C9F43285848ADC6164ED56E466486BE60F0 Authority key identifier: A2:7C:FE:71:E6:65:08:81:9E:CA:16:C7:7B:98:38:5A:8A:0F:F1:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6540401b-bc62-439f-9a85-287ef16081ad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6540401b-bc62-439f-9a85-287ef16081ad/01db8c84-cf0d-3a90-8732-b3fb421e02e2.roa Signing time: Mon 27 Jan 2025 02:00:39 +0000 ROA not before: Mon 27 Jan 2025 02:00:39 +0000 ROA not after: Sun 27 Apr 2025 01:00:39 +0000 asID: 46656 IP address blocks: 204.145.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6540401b-bc62-439f-9a85-287ef16081ad/6540401b-bc62-439f-9a85-287ef16081ad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6540401b-bc62-439f-9a85-287ef16081ad/6540401b-bc62-439f-9a85-287ef16081ad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6540401b-bc62-439f-9a85-287ef16081ad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ad:c6:16:4e:d5:6e:46:64:86:be:60:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6540401b-bc62-439f-9a85-287ef16081ad Validity Not Before: Jan 27 02:00:39 2025 GMT Not After : Apr 27 01:00:39 2025 GMT Subject: CN=2ac56f61-7223-44a0-a25b-1d75a4750e08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:64:29:0c:0b:32:26:70:fd:aa:a0:97:93:e8: a1:63:ef:6f:b7:41:68:22:ca:ef:2b:d7:f3:84:3a: 04:80:04:cf:ed:bb:94:8a:57:6e:97:cb:f9:86:23: e0:b5:20:0e:1e:c9:60:a8:fb:65:a7:c8:77:42:aa: 3b:05:cf:38:8d:c9:c1:4f:2e:23:63:e5:b2:7a:27: 62:26:74:26:c6:a4:ed:d6:07:a7:1e:ae:90:5b:69: b4:2d:fd:8d:79:c2:ae:6e:1f:26:7b:71:b9:f9:10: 98:20:57:43:3e:96:04:d4:46:b4:85:50:4f:82:bb: b7:f9:88:51:e0:f5:11:a3:d2:c7:ad:3e:1a:a8:e0: b5:2e:ec:ba:43:61:b3:6a:a1:76:93:05:5d:e5:16: 37:a6:8b:0d:f6:b8:72:16:74:8c:fc:da:59:52:80: 22:28:1c:1b:0a:ed:b7:81:b0:5f:2f:89:a8:0c:b7: 3d:fd:86:bf:67:b0:fb:45:dd:ef:48:5f:67:a5:95: 8a:61:74:a6:1e:ab:ef:e4:89:29:44:97:2f:7b:f0: 89:59:0c:c8:9a:e0:5a:d6:75:12:fe:d3:f8:7e:dd: 74:f6:9b:b2:4b:d1:aa:a6:1b:0b:0a:07:d5:28:5c: 71:39:a6:7e:4e:4a:0f:ea:e8:59:b8:39:e9:99:f4: c3:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:EA:23:9F:E2:86:68:02:1A:DE:30:EA:4B:D1:DC:54:2A:CE:3A:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6540401b-bc62-439f-9a85-287ef16081ad/01db8c84-cf0d-3a90-8732-b3fb421e02e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6540401b-bc62-439f-9a85-287ef16081ad/6540401b-bc62-439f-9a85-287ef16081ad.crl X509v3 Authority Key Identifier: keyid:A2:7C:FE:71:E6:65:08:81:9E:CA:16:C7:7B:98:38:5A:8A:0F:F1:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6540401b-bc62-439f-9a85-287ef16081ad.cer sbgp-ipAddrBlock: critical IPv4: 204.145.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:11:9e:10:1f:34:40:af:ce:49:37:55:60:f6:ee:e0:79:5a: af:0a:c8:34:08:40:ca:4f:c2:1d:43:dc:bd:2d:44:c2:86:e3: 76:6d:0f:77:4b:15:5f:9d:3c:a1:57:ce:5f:58:2e:eb:0d:be: f8:a4:13:79:35:47:35:6f:3b:b5:ec:ba:17:74:7e:f3:73:ca: df:6e:ec:a0:df:15:9d:25:01:9a:fc:5d:d4:67:5e:db:a5:89: 98:01:24:97:73:64:77:b9:98:88:8e:4f:29:59:06:cd:20:46: 94:3d:a7:04:5d:fe:59:84:72:61:d3:b9:eb:83:61:bb:ec:ef: 64:46:e1:db:cc:87:5f:32:38:56:2e:bc:c8:75:06:c6:9d:0d: 77:3d:a3:ca:fd:6a:11:17:a0:1e:87:cf:25:c1:cd:68:95:91: 4c:73:9b:4f:b1:8d:73:a1:0b:cf:4c:8d:d0:ad:ce:23:30:d1: 99:5f:63:a7:d9:9a:68:48:34:33:da:cd:54:9f:e9:e7:f9:00: 3e:95:c9:32:fb:59:82:b6:5c:49:4e:e8:46:6e:bf:08:57:37: 38:e5:15:24:5a:6f:1b:30:39:45:39:d1:b7:80:6f:4c:2e:54: 1e:dc:69:28:21:b8:a1:05:80:ed:e0:0b:39:68:36:d7:d3:c5: 04:6a:2a:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEitxhZO1W5GZIa+YPAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjU0MDQwMWItYmM2Mi00MzlmLTlhODUtMjg3ZWYxNjA4 MWFkMB4XDTI1MDEyNzAyMDAzOVoXDTI1MDQyNzAxMDAzOVowLzEtMCsGA1UEAxMk MmFjNTZmNjEtNzIyMy00NGEwLWEyNWItMWQ3NWE0NzUwZTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGQpDAsyJnD9qqCXk+ihY+9vt0FoIsrvK9fz hDoEgATP7buUildul8v5hiPgtSAOHslgqPtlp8h3Qqo7Bc84jcnBTy4jY+Wyeidi JnQmxqTt1genHq6QW2m0Lf2NecKubh8me3G5+RCYIFdDPpYE1Ea0hVBPgru3+YhR 4PURo9LHrT4aqOC1Luy6Q2GzaqF2kwVd5RY3posN9rhyFnSM/NpZUoAiKBwbCu23 gbBfL4moDLc9/Ya/Z7D7Rd3vSF9npZWKYXSmHqvv5IkpRJcve/CJWQzImuBa1nUS /tP4ft109puyS9GqphsLCgfVKFxxOaZ+TkoP6uhZuDnpmfTDCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDHqI5/ihmgCGt4w6kvR3FQqzjrAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82NTQw NDAxYi1iYzYyLTQzOWYtOWE4NS0yODdlZjE2MDgxYWQvMDFkYjhjODQtY2YwZC0z YTkwLTg3MzItYjNmYjQyMWUwMmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNjU0MDQwMWItYmM2Mi00MzlmLTlh ODUtMjg3ZWYxNjA4MWFkLzY1NDA0MDFiLWJjNjItNDM5Zi05YTg1LTI4N2VmMTYw ODFhZC5jcmwwHwYDVR0jBBgwFoAUonz+ceZlCIGeyhbHe5g4WooP8RkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82NTQwNDAxYi1iYzYyLTQzOWYtOWE4NS0yODdl ZjE2MDgxYWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzJF4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIcRnhAfNECvzkk3VWD27uB5Wq8KyDQIQMpPwh1D3L0tRMKG43ZtD3dL FV+dPKFXzl9YLusNvvikE3k1RzVvO7Xsuhd0fvNzyt9u7KDfFZ0lAZr8XdRnXtul iZgBJJdzZHe5mIiOTylZBs0gRpQ9pwRd/lmEcmHTueuDYbvs72RG4dvMh18yOFYu vMh1BsadDXc9o8r9ahEXoB6HzyXBzWiVkUxzm0+xjXOhC89MjdCtziMw0ZlfY6fZ mmhINDPazVSf6ef5AD6VyTL7WYK2XElO6EZuvwhXNzjlFSRabxswOUU50beAb0wu VB7caSghuKEFgO3gCzloNtfTxQRqKtc= -----END CERTIFICATE-----Generated at Fri Apr 4 19:55:14 2025 by rpki-client