$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/3fa4d696-276f-36ac-9131-15dddd8bc011.roa File: 3fa4d696-276f-36ac-9131-15dddd8bc011.roa (raw, json) Hash identifier: LOrafuFU0WO4/AxOTBzqbRpZkdvAaTQmoxqsC9bOFKw= Subject key identifier: E9:F7:A9:C3:53:A1:6F:ED:C9:73:3D:D0:DD:D3:68:B4:20:3B:D7:CC Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F4328584A3A15923F8857E823B3A17720 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/3fa4d696-276f-36ac-9131-15dddd8bc011.roa Signing time: Wed 18 Jun 2025 01:00:50 +0000 ROA not before: Wed 18 Jun 2025 01:00:50 +0000 ROA not after: Tue 16 Sep 2025 01:00:50 +0000 asID: 16509 IP address blocks: 216.224.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 21 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3a:15:92:3f:88:57:e8:23:b3:a1:77:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Jun 18 01:00:50 2025 GMT Not After : Sep 16 01:00:50 2025 GMT Subject: CN=3285e1ea-919c-4646-b1bd-3b79ca013df3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:91:50:10:7b:b6:a1:83:f6:5b:c5:23:96:55: c6:60:87:0b:6b:04:fb:78:31:32:56:97:ad:62:a7: 3e:63:07:a8:5b:26:e3:b1:d1:dd:ba:1a:94:45:3e: fe:e7:5e:e4:5c:46:f4:aa:3e:af:5a:a3:bd:de:1e: 55:40:6a:75:76:33:ad:87:85:3f:8f:6a:eb:53:9d: 04:a1:88:24:f1:83:33:e5:ad:79:b3:c0:e3:19:3e: 2b:fd:43:35:96:8c:d8:37:23:9a:9d:e6:02:a3:21: 32:31:2e:dc:7f:b3:d2:9e:7b:8a:54:1b:6c:7f:b9: 6a:e7:3e:cb:8a:ad:ff:67:2f:d7:3f:1c:f7:e1:5d: d2:8f:ac:95:cd:70:d9:ee:b0:f3:a5:ae:6b:55:fe: 97:2a:a4:c5:8b:5f:cc:5f:d7:da:6a:cf:15:23:7f: 54:b0:94:f4:40:17:d0:00:a7:c3:50:2d:23:9e:e6: 05:ed:f9:63:6f:16:5f:d1:da:c0:7a:dc:c1:26:83: 1f:ea:b7:43:9c:7e:74:eb:24:d9:6a:8f:8a:3c:3b: 7a:4a:3d:98:21:a4:af:56:17:54:ed:ab:46:fb:83: 3f:b7:bd:a3:07:73:b5:e3:c3:77:2c:a4:7c:81:8f: 51:28:9c:63:42:29:2b:1e:a9:26:36:98:f3:5a:c5: 40:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:F7:A9:C3:53:A1:6F:ED:C9:73:3D:D0:DD:D3:68:B4:20:3B:D7:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/3fa4d696-276f-36ac-9131-15dddd8bc011.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 216.224.119.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:c9:d9:da:49:5a:36:0c:b5:54:66:2c:da:bb:36:f7:50:71: 7c:ae:44:50:e5:58:cd:58:db:c3:0a:11:49:89:17:01:c8:18: 62:67:34:f3:e6:cf:cd:02:e5:fa:2a:cd:99:0c:ae:b9:8b:08: 86:8d:29:99:c9:f6:05:c8:dc:fd:f3:88:f9:95:d2:3c:c5:23: fa:d8:0b:7d:af:89:90:a5:5b:27:f8:42:ca:c4:22:97:1d:a4: 50:c8:e6:64:8d:8e:94:67:c9:aa:bf:58:96:72:d2:17:9a:3d: 47:48:be:7b:ca:16:44:46:5b:30:71:e9:a2:d9:db:2e:ff:c9: 14:8c:27:24:77:23:69:bf:94:8e:c2:55:65:d4:cc:ef:16:52: 89:67:54:d5:57:65:d8:48:4e:4f:db:91:2a:22:b9:98:ed:a6: 73:ca:93:46:6d:de:81:57:de:e4:e7:31:95:f9:d7:6f:3f:d9: b4:c5:14:50:bc:74:c4:e9:df:49:6e:00:bc:b2:7e:7f:54:19: af:b6:d0:4a:5e:df:42:7d:a4:7c:d4:62:14:fd:62:a2:a0:9e: 43:ff:3f:4a:06:f6:04:59:0f:41:af:3a:65:0f:26:7d:33:39: 8a:04:63:1f:84:6c:00:60:9a:ee:38:28:d2:2c:e5:c0:67:3b: bc:f2:ae:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo6FZI/iFfoI7OhdyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI1MDYxODAxMDA1MFoXDTI1MDkxNjAxMDA1MFowLzEtMCsGA1UEAxMk MzI4NWUxZWEtOTE5Yy00NjQ2LWIxYmQtM2I3OWNhMDEzZGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5FQEHu2oYP2W8UjllXGYIcLawT7eDEyVpet Yqc+YweoWybjsdHduhqURT7+517kXEb0qj6vWqO93h5VQGp1djOth4U/j2rrU50E oYgk8YMz5a15s8DjGT4r/UM1lozYNyOaneYCoyEyMS7cf7PSnnuKVBtsf7lq5z7L iq3/Zy/XPxz34V3Sj6yVzXDZ7rDzpa5rVf6XKqTFi1/MX9faas8VI39UsJT0QBfQ AKfDUC0jnuYF7fljbxZf0drAetzBJoMf6rdDnH506yTZao+KPDt6Sj2YIaSvVhdU 7atG+4M/t72jB3O148N3LKR8gY9RKJxjQikrHqkmNpjzWsVA1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOn3qcNToW/tyXM90N3TaLQgO9fMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvM2ZhNGQ2OTYtMjc2Zi0z NmFjLTkxMzEtMTVkZGRkOGJjMDExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OB3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFTJ2dpJWjYMtVRmLNq7NvdQcXyuRFDlWM1Y28MKEUmJFwHIGGJnNPPm z80C5foqzZkMrrmLCIaNKZnJ9gXI3P3ziPmV0jzFI/rYC32viZClWyf4QsrEIpcd pFDI5mSNjpRnyaq/WJZy0heaPUdIvnvKFkRGWzBx6aLZ2y7/yRSMJyR3I2m/lI7C VWXUzO8WUolnVNVXZdhITk/bkSoiuZjtpnPKk0Zt3oFX3uTnMZX5128/2bTFFFC8 dMTp30luALyyfn9UGa+20Epe30J9pHzUYhT9YqKgnkP/P0oG9gRZD0GvOmUPJn0z OYoEYx+EbABgmu44KNIs5cBnO7zyrlk= -----END CERTIFICATE-----Generated at Thu Jun 19 21:07:51 2025 by rpki-client