$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604dd155-d846-413d-9d18-9c6d0f03ee8c/7e4e5dd3-74fb-3038-a179-39719feb837d.roa File: 7e4e5dd3-74fb-3038-a179-39719feb837d.roa (raw, json) Hash identifier: jNfYua4WMnDYayA85FwRhyGZ5VYwi0w69lU0qSh8EPU= Subject key identifier: 80:35:5A:A4:B6:28:87:64:1B:22:78:95:3C:03:13:F5:5F:6E:C5:76 Certificate issuer: /CN=604dd155-d846-413d-9d18-9c6d0f03ee8c Certificate serial: 010D0C9F4328584A03A5434B6CEF600833ED9BC0 Authority key identifier: 00:51:50:EB:64:2D:CF:14:38:42:64:24:75:FB:18:0E:0E:43:B1:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604dd155-d846-413d-9d18-9c6d0f03ee8c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604dd155-d846-413d-9d18-9c6d0f03ee8c/7e4e5dd3-74fb-3038-a179-39719feb837d.roa Signing time: Thu 29 May 2025 13:01:03 +0000 ROA not before: Thu 29 May 2025 13:01:03 +0000 ROA not after: Wed 27 Aug 2025 13:01:03 +0000 asID: 6579 IP address blocks: 209.205.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604dd155-d846-413d-9d18-9c6d0f03ee8c/604dd155-d846-413d-9d18-9c6d0f03ee8c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604dd155-d846-413d-9d18-9c6d0f03ee8c/604dd155-d846-413d-9d18-9c6d0f03ee8c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604dd155-d846-413d-9d18-9c6d0f03ee8c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Jul 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:03:a5:43:4b:6c:ef:60:08:33:ed:9b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=604dd155-d846-413d-9d18-9c6d0f03ee8c Validity Not Before: May 29 13:01:03 2025 GMT Not After : Aug 27 13:01:03 2025 GMT Subject: CN=70e9efd0-3fdf-457c-a4c7-dddbba0b5373 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:54:0b:e6:bc:9c:ff:23:43:77:6a:17:5a:46: 67:ce:e4:24:8a:7b:ab:c2:23:26:3e:f7:1c:2b:94: 2b:25:c4:78:05:23:50:9f:1d:af:d9:21:2e:ff:46: a8:d5:e8:6e:ee:c6:59:47:b0:0e:4f:dc:31:65:8a: a1:05:90:ab:6f:ed:52:4c:11:aa:9a:34:a3:ab:1d: 31:55:57:a1:d4:8d:93:e9:e9:b1:15:92:cf:38:d5: d3:fe:43:77:e7:5c:13:fa:44:01:f1:28:b8:69:f5: 7c:b4:ed:18:b0:25:66:e1:0d:93:7f:3e:4c:64:4c: bd:17:25:c6:13:2b:71:df:94:54:d2:ba:17:7b:f2: 6a:03:9c:c6:68:43:4f:88:e0:d8:d4:df:e9:45:60: 81:b1:3a:99:37:2c:b0:93:14:83:45:67:8f:91:e9: db:1e:ee:e3:d2:d5:c2:0d:66:46:d2:dd:0b:c1:40: 42:e8:cb:d7:cd:23:ba:a3:5d:d4:d5:8d:e4:fe:65: ec:d4:7a:40:4a:e2:85:75:5b:22:81:07:cc:fe:29: 57:85:42:34:bb:b2:81:0a:59:81:75:7c:11:49:6e: 48:4e:a4:97:c3:8e:42:90:00:4e:dc:9a:fc:0b:a3: 78:6b:a6:25:c1:ca:d9:4f:76:56:5d:06:c5:f4:57: f9:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:35:5A:A4:B6:28:87:64:1B:22:78:95:3C:03:13:F5:5F:6E:C5:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604dd155-d846-413d-9d18-9c6d0f03ee8c/7e4e5dd3-74fb-3038-a179-39719feb837d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604dd155-d846-413d-9d18-9c6d0f03ee8c/604dd155-d846-413d-9d18-9c6d0f03ee8c.crl X509v3 Authority Key Identifier: keyid:00:51:50:EB:64:2D:CF:14:38:42:64:24:75:FB:18:0E:0E:43:B1:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604dd155-d846-413d-9d18-9c6d0f03ee8c.cer sbgp-ipAddrBlock: critical IPv4: 209.205.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:06:46:ea:6f:be:86:77:3e:82:e4:f7:1a:98:5a:71:9f:19: bb:4b:ca:35:3d:64:9d:18:8c:66:92:61:c9:9b:e8:ce:dd:82: cb:2e:3d:e7:24:76:c9:9e:01:42:ec:e5:29:69:1d:d6:21:e3: 18:50:60:23:f7:c1:72:8f:93:3d:7d:3c:b9:4d:4c:86:11:21: 58:5e:5c:fd:13:61:a1:6f:58:95:27:bb:49:4d:b8:36:cd:83: ff:75:4a:e7:84:50:0f:a2:60:c4:b4:db:20:5f:7e:c5:31:0e: 16:c5:f6:74:22:95:35:fb:d8:9b:2c:20:d3:72:27:02:b0:92: c1:0a:e4:8c:ec:c4:40:9f:f6:6d:a8:e8:44:3d:55:70:26:4f: 30:4c:d7:bb:8e:d5:d5:30:1d:66:79:de:e9:58:26:77:19:8b: 54:4b:23:14:37:a0:e4:82:d4:ba:65:dd:5f:c1:4b:53:fb:33: 2a:6b:c5:89:3d:2d:b1:fb:c3:eb:cb:d6:e1:a0:81:b4:ad:5f: 03:99:17:b8:84:e8:f8:5e:42:da:e8:d6:1f:15:44:9a:c7:06: 6b:b0:8a:9e:bb:5b:4a:2f:0c:93:51:02:c6:af:8f:c0:a9:bc: 19:5f:20:53:ca:a1:3c:fa:65:3e:90:b9:5b:42:f9:18:de:4e: 1e:b3:59:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoDpUNLbO9gCDPtm8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjA0ZGQxNTUtZDg0Ni00MTNkLTlkMTgtOWM2ZDBmMDNl ZThjMB4XDTI1MDUyOTEzMDEwM1oXDTI1MDgyNzEzMDEwM1owLzEtMCsGA1UEAxMk NzBlOWVmZDAtM2ZkZi00NTdjLWE0YzctZGRkYmJhMGI1MzczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFQL5ryc/yNDd2oXWkZnzuQkinurwiMmPvcc K5QrJcR4BSNQnx2v2SEu/0ao1ehu7sZZR7AOT9wxZYqhBZCrb+1STBGqmjSjqx0x VVeh1I2T6emxFZLPONXT/kN351wT+kQB8Si4afV8tO0YsCVm4Q2Tfz5MZEy9FyXG Eytx35RU0roXe/JqA5zGaENPiODY1N/pRWCBsTqZNyywkxSDRWePkenbHu7j0tXC DWZG0t0LwUBC6MvXzSO6o13U1Y3k/mXs1HpASuKFdVsigQfM/ilXhUI0u7KBClmB dXwRSW5ITqSXw45CkABO3Jr8C6N4a6YlwcrZT3ZWXQbF9Ff5swIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIA1WqS2KIdkGyJ4lTwDE/VfbsV2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82MDRk ZDE1NS1kODQ2LTQxM2QtOWQxOC05YzZkMGYwM2VlOGMvN2U0ZTVkZDMtNzRmYi0z MDM4LWExNzktMzk3MTlmZWI4MzdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjA0ZGQxNTUtZDg0Ni00MTNkLTlk MTgtOWM2ZDBmMDNlZThjLzYwNGRkMTU1LWQ4NDYtNDEzZC05ZDE4LTljNmQwZjAz ZWU4Yy5jcmwwHwYDVR0jBBgwFoAUAFFQ62QtzxQ4QmQkdfsYDg5DsdcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82MDRkZDE1NS1kODQ2LTQxM2QtOWQxOC05YzZk MGYwM2VlOGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0c3wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACkGRupvvoZ3PoLk9xqYWnGfGbtLyjU9ZJ0YjGaSYcmb6M7dgssuPeck dsmeAULs5SlpHdYh4xhQYCP3wXKPkz19PLlNTIYRIVheXP0TYaFvWJUnu0lNuDbN g/91SueEUA+iYMS02yBffsUxDhbF9nQilTX72JssINNyJwKwksEK5IzsxECf9m2o 6EQ9VXAmTzBM17uO1dUwHWZ53ulYJncZi1RLIxQ3oOSC1Lpl3V/BS1P7MyprxYk9 LbH7w+vL1uGggbStXwOZF7iE6PheQtro1h8VRJrHBmuwip67W0ovDJNRAsavj8Cp vBlfIFPKoTz6ZT6QuVtC+RjeTh6zWWU= -----END CERTIFICATE-----Generated at Fri Jul 11 05:22:47 2025 by rpki-client