$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/3405defc-6a0c-3fba-9a02-73cbbe0d11f3.roa File: 3405defc-6a0c-3fba-9a02-73cbbe0d11f3.roa (raw, json) Hash identifier: zzbyQxy3JRdWEntH5FjhC1es3cfEY+i9GSHbBYtbjCI= Subject key identifier: 0C:AD:14:B7:D6:B5:87:97:52:61:B8:38:95:A1:8F:07:CB:DA:F9:99 Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F43285849749249A9D032D19279D06980 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/3405defc-6a0c-3fba-9a02-73cbbe0d11f3.roa Signing time: Tue 08 Apr 2025 07:02:21 +0000 ROA not before: Tue 08 Apr 2025 07:02:21 +0000 ROA not after: Mon 07 Jul 2025 07:02:21 +0000 asID: 54004 IP address blocks: 216.83.32.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:74:92:49:a9:d0:32:d1:92:79:d0:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Apr 8 07:02:21 2025 GMT Not After : Jul 7 07:02:21 2025 GMT Subject: CN=b28e651c-934a-4e24-9346-62a074ec75ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:f2:f3:6e:fd:14:ef:a9:79:86:cf:6d:70:69: 55:f2:2a:2f:83:0b:8f:13:55:ef:18:41:6b:47:e8: 61:66:8f:94:6c:80:ca:7e:4c:72:74:af:ff:5a:25: c1:c2:6c:71:2d:e9:78:c3:66:e6:d7:67:40:ce:db: d2:c4:b8:05:c9:97:cc:4d:f6:3e:d9:53:95:ac:42: 78:59:7c:61:a0:9a:66:fb:44:a3:d7:50:68:0c:22: 33:cb:85:17:ea:94:79:5b:81:57:d9:b5:f4:01:34: 12:ca:0b:b5:3d:57:fe:fb:1b:88:6d:e8:8f:26:bc: 95:46:43:3c:4e:f9:00:c0:1a:ab:4c:ee:c1:1a:4d: 1e:0f:77:64:46:52:eb:69:27:4f:86:ef:15:20:b5: 42:c6:73:c0:66:91:c2:68:9d:a1:6e:e4:c5:85:ee: 59:86:ef:ac:8e:7c:b0:4c:3a:01:57:32:52:ae:60: 81:76:0f:08:0d:a2:86:2b:b5:24:e3:55:4a:a5:46: a2:19:bc:e4:ae:04:3d:4b:d6:74:f1:8b:ea:f2:3f: ad:54:8a:03:03:33:68:75:20:76:98:b8:5e:f5:b4: de:2f:57:34:42:6e:e7:13:11:18:cd:1e:58:b1:5b: 38:98:32:91:3d:b5:14:64:e7:81:41:68:bd:53:69: 23:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:AD:14:B7:D6:B5:87:97:52:61:B8:38:95:A1:8F:07:CB:DA:F9:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/3405defc-6a0c-3fba-9a02-73cbbe0d11f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 216.83.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:8e:15:7a:7a:30:aa:40:ff:29:61:54:b9:4a:b2:3f:5d:4a: d3:97:08:04:c2:c7:6f:8d:ad:31:a8:f7:7f:02:60:8e:83:7d: d4:56:21:2f:f2:ba:0b:59:1b:42:66:78:2c:e5:67:55:2d:a9: cd:9b:d9:a8:d0:78:ea:f8:81:cf:09:3b:5a:bd:32:19:44:6b: cf:10:64:b8:64:a8:de:bf:67:81:11:e3:9b:9c:a2:33:50:14: e9:8d:78:d6:ea:20:96:3e:cc:c9:32:f9:f2:c8:8a:23:4f:87: 90:bb:bc:0b:07:fc:02:97:a9:aa:f4:60:be:ba:6d:c6:f0:36: d0:92:bc:a5:dc:07:31:70:be:02:68:1e:f7:ed:71:c0:8d:47: 73:14:d0:30:7b:c0:f5:72:ac:f7:94:c2:c1:b3:11:8f:e3:24: 0d:10:80:19:f8:9b:4b:5f:c5:3f:67:b7:37:d7:9a:b5:8f:86: 56:32:af:6b:ec:4f:13:fe:23:04:a6:25:f7:ec:dc:b3:01:14: d2:1d:1c:9e:85:15:c0:6a:9d:db:aa:08:fc:34:e1:56:e5:51: 1c:94:aa:30:9c:b3:df:a5:54:e4:b8:e9:e9:89:0c:ce:a1:2a: 9c:9e:f5:f9:df:bd:8d:cd:f6:23:e8:d3:dd:f0:7f:6b:fd:62: b2:6d:fe:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl0kkmp0DLRknnQaYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI1MDQwODA3MDIyMVoXDTI1MDcwNzA3MDIyMVowLzEtMCsGA1UEAxMk YjI4ZTY1MWMtOTM0YS00ZTI0LTkzNDYtNjJhMDc0ZWM3NWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfLzbv0U76l5hs9tcGlV8iovgwuPE1XvGEFr R+hhZo+UbIDKfkxydK//WiXBwmxxLel4w2bm12dAztvSxLgFyZfMTfY+2VOVrEJ4 WXxhoJpm+0Sj11BoDCIzy4UX6pR5W4FX2bX0ATQSygu1PVf++xuIbeiPJryVRkM8 TvkAwBqrTO7BGk0eD3dkRlLraSdPhu8VILVCxnPAZpHCaJ2hbuTFhe5Zhu+sjnyw TDoBVzJSrmCBdg8IDaKGK7Uk41VKpUaiGbzkrgQ9S9Z08Yvq8j+tVIoDAzNodSB2 mLhe9bTeL1c0Qm7nExEYzR5YsVs4mDKRPbUUZOeBQWi9U2kjUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAytFLfWtYeXUmG4OJWhjwfL2vmZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvMzQwNWRlZmMtNmEwYy0z ZmJhLTlhMDItNzNjYmJlMGQxMWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2FMgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHGOFXp6MKpA/ylhVLlKsj9dStOXCATCx2+NrTGo938CYI6DfdRWIS/y ugtZG0JmeCzlZ1Utqc2b2ajQeOr4gc8JO1q9MhlEa88QZLhkqN6/Z4ER45ucojNQ FOmNeNbqIJY+zMky+fLIiiNPh5C7vAsH/AKXqar0YL66bcbwNtCSvKXcBzFwvgJo HvftccCNR3MU0DB7wPVyrPeUwsGzEY/jJA0QgBn4m0tfxT9ntzfXmrWPhlYyr2vs TxP+IwSmJffs3LMBFNIdHJ6FFcBqnduqCPw04VblURyUqjCcs9+lVOS46emJDM6h Kpye9fnfvY3N9iPo093wf2v9YrJt/tw= -----END CERTIFICATE-----Generated at Sun Apr 27 07:22:21 2025 by rpki-client