$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604dd155-d846-413d-9d18-9c6d0f03ee8c/7e4e5dd3-74fb-3038-a179-39719feb837d.roa File: 7e4e5dd3-74fb-3038-a179-39719feb837d.roa (raw, json) Hash identifier: rZf13vt1xJMBlZPWtm02czjn4ya1CBKJwe8yy0cBVys= Subject key identifier: 8B:31:75:01:4D:78:51:F1:52:87:BC:BB:70:3A:05:C8:77:8B:BC:C1 Certificate issuer: /CN=604dd155-d846-413d-9d18-9c6d0f03ee8c Certificate serial: 010D0C9F4328584AE4610E717600DD1321F41680 Authority key identifier: 00:51:50:EB:64:2D:CF:14:38:42:64:24:75:FB:18:0E:0E:43:B1:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604dd155-d846-413d-9d18-9c6d0f03ee8c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604dd155-d846-413d-9d18-9c6d0f03ee8c/7e4e5dd3-74fb-3038-a179-39719feb837d.roa Signing time: Mon 18 Aug 2025 01:00:33 +0000 ROA not before: Mon 18 Aug 2025 01:00:33 +0000 ROA not after: Sun 16 Nov 2025 02:00:33 +0000 asID: 6579 IP address blocks: 209.205.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604dd155-d846-413d-9d18-9c6d0f03ee8c/604dd155-d846-413d-9d18-9c6d0f03ee8c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604dd155-d846-413d-9d18-9c6d0f03ee8c/604dd155-d846-413d-9d18-9c6d0f03ee8c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604dd155-d846-413d-9d18-9c6d0f03ee8c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:61:0e:71:76:00:dd:13:21:f4:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=604dd155-d846-413d-9d18-9c6d0f03ee8c Validity Not Before: Aug 18 01:00:33 2025 GMT Not After : Nov 16 02:00:33 2025 GMT Subject: CN=4a2ab323-17c2-43fd-be4a-2a8cf64134f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:cb:77:88:11:24:99:66:00:b5:e1:0d:e0:50: 5c:7c:58:4e:65:9e:3b:fa:30:7e:29:9b:04:ce:dd: 24:0a:bd:dc:45:7b:66:ab:4b:38:64:5f:05:ca:92: b1:78:79:84:b4:75:0b:d2:94:65:a0:6c:ba:bf:ee: 42:17:ec:86:e9:78:fa:26:bb:84:cc:06:b3:23:b4: 8a:6b:76:1b:88:d3:20:67:4e:c0:15:44:c1:e5:30: 39:7f:21:fb:67:f4:4c:78:2b:03:86:2d:69:e4:ec: 2c:63:6e:11:84:d1:89:01:b7:d4:c4:04:3d:97:cb: 46:f9:f5:8d:d3:c7:35:b5:14:e5:43:b8:3a:68:87: 32:ae:db:83:7f:0e:7a:95:5b:c5:79:51:5c:b8:4e: 5a:bd:ef:d8:53:89:3b:75:60:4a:42:bc:58:ec:5e: 72:82:1b:51:5b:1e:fa:06:81:1f:28:c9:74:42:d1: 61:58:1d:56:35:25:fc:8a:98:11:ed:23:4c:05:d3: 37:70:4f:97:1b:09:75:e6:2f:fa:3e:72:f1:f7:2b: c5:27:21:f9:4c:42:a8:40:9c:d2:a2:ce:0e:aa:b2: 23:51:9f:9d:48:37:92:a3:9a:70:fe:55:70:f9:b0: 37:f8:f4:d5:bc:eb:f5:1f:2c:2a:bb:0f:5e:01:16: 39:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:31:75:01:4D:78:51:F1:52:87:BC:BB:70:3A:05:C8:77:8B:BC:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604dd155-d846-413d-9d18-9c6d0f03ee8c/7e4e5dd3-74fb-3038-a179-39719feb837d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604dd155-d846-413d-9d18-9c6d0f03ee8c/604dd155-d846-413d-9d18-9c6d0f03ee8c.crl X509v3 Authority Key Identifier: keyid:00:51:50:EB:64:2D:CF:14:38:42:64:24:75:FB:18:0E:0E:43:B1:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604dd155-d846-413d-9d18-9c6d0f03ee8c.cer sbgp-ipAddrBlock: critical IPv4: 209.205.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:1b:d5:df:9b:9f:19:32:55:dd:d7:0f:02:8f:cd:f8:dc:fa: f7:17:3e:5f:83:1a:7c:d6:5c:28:81:62:c1:7d:73:a9:6a:f6: b9:59:63:5e:e2:09:43:59:d8:dc:55:dd:00:32:5c:5b:f7:01: bd:ea:0d:1e:eb:6a:10:69:27:7b:2b:49:da:8a:91:bc:c1:af: c7:4a:e1:d9:f9:86:3f:f8:e5:d3:d6:a7:f6:80:1d:fd:6c:5e: 75:8c:1c:89:88:73:b4:5d:6a:6b:7a:b7:d5:4d:a7:fb:fb:28: 6f:fb:5d:db:b3:d3:04:3f:f6:3a:c5:55:0b:33:4c:c6:21:4e: 69:07:d1:ac:37:e5:27:b5:27:6e:bc:8c:57:0f:9a:59:f5:9a: 6d:45:74:9e:b5:7f:6a:f1:b1:be:e3:5c:1e:ab:70:be:e9:65: 35:5b:f3:d3:e7:bc:b6:af:75:a4:7c:26:21:4d:16:6b:43:4b: f7:dd:d8:cc:1a:41:b7:a5:26:29:ec:89:29:42:7f:dd:39:7f: c1:56:54:2e:2b:76:55:5a:4d:fb:94:77:9a:05:d8:5b:5d:c5: d9:0f:60:d6:37:ce:38:c2:eb:df:da:7e:09:06:c5:5b:5e:24: 62:1f:54:d6:f3:88:28:9d:a1:f2:63:5e:ae:4b:e5:a3:52:42: a0:63:0a:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErkYQ5xdgDdEyH0FoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjA0ZGQxNTUtZDg0Ni00MTNkLTlkMTgtOWM2ZDBmMDNl ZThjMB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk NGEyYWIzMjMtMTdjMi00M2ZkLWJlNGEtMmE4Y2Y2NDEzNGY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkst3iBEkmWYAteEN4FBcfFhOZZ47+jB+KZsE zt0kCr3cRXtmq0s4ZF8FypKxeHmEtHUL0pRloGy6v+5CF+yG6Xj6JruEzAazI7SK a3YbiNMgZ07AFUTB5TA5fyH7Z/RMeCsDhi1p5OwsY24RhNGJAbfUxAQ9l8tG+fWN 08c1tRTlQ7g6aIcyrtuDfw56lVvFeVFcuE5ave/YU4k7dWBKQrxY7F5yghtRWx76 BoEfKMl0QtFhWB1WNSX8ipgR7SNMBdM3cE+XGwl15i/6PnLx9yvFJyH5TEKoQJzS os4OqrIjUZ+dSDeSo5pw/lVw+bA3+PTVvOv1Hywquw9eARY5CwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIsxdQFNeFHxUoe8u3A6Bch3i7zBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82MDRk ZDE1NS1kODQ2LTQxM2QtOWQxOC05YzZkMGYwM2VlOGMvN2U0ZTVkZDMtNzRmYi0z MDM4LWExNzktMzk3MTlmZWI4MzdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjA0ZGQxNTUtZDg0Ni00MTNkLTlk MTgtOWM2ZDBmMDNlZThjLzYwNGRkMTU1LWQ4NDYtNDEzZC05ZDE4LTljNmQwZjAz ZWU4Yy5jcmwwHwYDVR0jBBgwFoAUAFFQ62QtzxQ4QmQkdfsYDg5DsdcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82MDRkZDE1NS1kODQ2LTQxM2QtOWQxOC05YzZk MGYwM2VlOGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0c3wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFwb1d+bnxkyVd3XDwKPzfjc+vcXPl+DGnzWXCiBYsF9c6lq9rlZY17i CUNZ2NxV3QAyXFv3Ab3qDR7rahBpJ3srSdqKkbzBr8dK4dn5hj/45dPWp/aAHf1s XnWMHImIc7Rdamt6t9VNp/v7KG/7Xduz0wQ/9jrFVQszTMYhTmkH0aw35Se1J268 jFcPmln1mm1FdJ61f2rxsb7jXB6rcL7pZTVb89PnvLavdaR8JiFNFmtDS/fd2Mwa QbelJinsiSlCf905f8FWVC4rdlVaTfuUd5oF2FtdxdkPYNY3zjjC69/afgkGxVte JGIfVNbziCidofJjXq5L5aNSQqBjCvk= -----END CERTIFICATE-----Generated at Sun Aug 24 07:39:20 2025 by rpki-client