$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/25a977fe-29ef-3042-9e24-ed4e07d83c91.roa File: 25a977fe-29ef-3042-9e24-ed4e07d83c91.roa (raw, json) Hash identifier: XDnCNlrRFqiScufoeu43TCddIgUmrkA32ppin5OTat4= Subject key identifier: EB:AC:A6:9B:0C:41:FA:71:6E:CF:A4:A4:BF:32:F1:34:1F:71:C1:49 Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F43285849393E9569C34EA0FF9BBE1D00 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/25a977fe-29ef-3042-9e24-ed4e07d83c91.roa Signing time: Tue 18 Mar 2025 01:00:38 +0000 ROA not before: Tue 18 Mar 2025 01:00:38 +0000 ROA not after: Mon 16 Jun 2025 01:00:38 +0000 asID: 19786 IP address blocks: 216.224.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:39:3e:95:69:c3:4e:a0:ff:9b:be:1d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Mar 18 01:00:38 2025 GMT Not After : Jun 16 01:00:38 2025 GMT Subject: CN=4df097df-5f43-452c-980d-c2769512d1fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:5d:18:a7:52:be:01:24:14:7d:c3:23:76:86: 15:e5:4a:f1:80:4d:f2:13:b5:bd:70:d8:3e:67:6e: db:69:ec:4e:6b:71:50:e6:29:06:12:09:01:ac:77: fe:0e:89:a2:72:59:6e:c8:a0:42:3a:57:9c:a5:c2: bd:9a:ee:11:a1:e6:ee:31:d3:66:ea:cd:b3:18:17: 99:bb:3e:8e:42:29:bb:34:b9:a4:16:a3:16:20:fe: a1:07:a1:42:31:50:24:a3:af:b7:9a:f8:cb:0f:20: 6b:81:1a:97:ab:59:8f:20:3a:be:9c:3a:df:9b:e3: 26:7f:9c:bf:44:37:c6:55:c4:26:dc:1b:33:44:63: 39:e0:04:cf:53:e8:d3:0a:51:70:c2:a8:96:03:a4: c5:e5:d1:62:2f:42:e8:ba:ba:10:8e:a7:4e:a5:2e: ab:bc:2d:49:73:42:03:bd:80:55:f6:bb:44:89:4b: 77:0e:0b:b4:cf:4a:41:2e:67:47:d6:4f:4f:15:cf: fc:73:1b:47:b7:ce:0d:4c:05:b9:c2:26:f4:b1:9f: 2c:c7:00:31:77:57:58:2a:10:c0:3a:27:e3:8e:95: ba:16:6d:ee:a9:28:fe:e5:40:82:db:48:cf:d4:a6: 42:4e:b7:59:00:3f:f4:8b:f0:4c:a5:bb:74:50:67: 73:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:AC:A6:9B:0C:41:FA:71:6E:CF:A4:A4:BF:32:F1:34:1F:71:C1:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/25a977fe-29ef-3042-9e24-ed4e07d83c91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 216.224.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:5a:33:86:34:06:c7:4e:49:f5:8b:4c:39:13:97:57:09:33: 0e:77:97:09:1f:ca:c1:fd:d7:d2:48:3a:ff:d4:1f:4a:27:79: 52:7a:66:46:43:1d:66:ad:48:8d:b2:e7:d5:85:3c:b5:06:f3: 95:a4:b3:97:d5:87:51:c8:5f:51:66:48:3f:00:90:6c:80:f0: 32:b4:cf:0b:ef:0e:af:c4:ec:e3:4d:42:46:cc:5b:de:e5:fc: 30:a2:34:f6:bd:a2:3f:ca:4c:eb:ed:bc:fa:99:4d:7b:3b:0a: 6f:a0:db:12:a6:6d:f0:40:8d:b4:c4:d7:83:aa:ad:90:6d:3c: 14:6f:c1:a5:7a:6e:2a:e9:f0:ef:df:39:26:58:6e:df:2b:75: 11:59:01:00:1b:42:b9:b6:80:b8:f5:8c:dd:0d:65:af:d2:a4: 3d:f1:d7:a3:49:01:a2:18:5c:25:14:4c:e2:f9:68:7a:bf:13: 49:5e:6c:9e:82:e0:2d:9e:4d:36:69:e8:09:7f:cd:f3:e8:fe: 37:9b:d9:b5:c5:37:4e:b7:b6:82:6f:ad:7c:ff:45:ee:53:c4: 9c:c9:46:89:ae:10:e8:18:53:31:34:ca:56:c8:e0:6a:7e:7d: 39:34:9f:71:9e:ea:a6:f1:a9:7f:de:2a:1f:bf:b2:13:27:f7: 56:bf:a7:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk5PpVpw06g/5u+HQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI1MDMxODAxMDAzOFoXDTI1MDYxNjAxMDAzOFowLzEtMCsGA1UEAxMk NGRmMDk3ZGYtNWY0My00NTJjLTk4MGQtYzI3Njk1MTJkMWZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi10Yp1K+ASQUfcMjdoYV5UrxgE3yE7W9cNg+ Z27baexOa3FQ5ikGEgkBrHf+DomiclluyKBCOlecpcK9mu4RoebuMdNm6s2zGBeZ uz6OQim7NLmkFqMWIP6hB6FCMVAko6+3mvjLDyBrgRqXq1mPIDq+nDrfm+Mmf5y/ RDfGVcQm3BszRGM54ATPU+jTClFwwqiWA6TF5dFiL0LouroQjqdOpS6rvC1Jc0ID vYBV9rtEiUt3Dgu0z0pBLmdH1k9PFc/8cxtHt84NTAW5wib0sZ8sxwAxd1dYKhDA OifjjpW6Fm3uqSj+5UCC20jP1KZCTrdZAD/0i/BMpbt0UGdzyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOusppsMQfpxbs+kpL8y8TQfccFJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvMjVhOTc3ZmUtMjllZi0z MDQyLTllMjQtZWQ0ZTA3ZDgzYzkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OB7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADVaM4Y0BsdOSfWLTDkTl1cJMw53lwkfysH919JIOv/UH0oneVJ6ZkZD HWatSI2y59WFPLUG85Wks5fVh1HIX1FmSD8AkGyA8DK0zwvvDq/E7ONNQkbMW97l /DCiNPa9oj/KTOvtvPqZTXs7Cm+g2xKmbfBAjbTE14OqrZBtPBRvwaV6birp8O/f OSZYbt8rdRFZAQAbQrm2gLj1jN0NZa/SpD3x16NJAaIYXCUUTOL5aHq/E0lebJ6C 4C2eTTZp6Al/zfPo/jeb2bXFN063toJvrXz/Re5TxJzJRomuEOgYUzE0ylbI4Gp+ fTk0n3Ge6qbxqX/eKh+/shMn91a/p6k= -----END CERTIFICATE-----Generated at Sun Apr 27 13:11:36 2025 by rpki-client