$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/3fa4d696-276f-36ac-9131-15dddd8bc011.roa File: 3fa4d696-276f-36ac-9131-15dddd8bc011.roa (raw, json) Hash identifier: iO7oALMK5iA5CsfmOt6f2PsVA9IwL88W0HzucyIdydI= Subject key identifier: A7:E7:CE:5C:58:26:D4:1A:6F:30:26:D6:6D:48:70:A0:A7:74:70:FA Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F432858495ABEE0237B1CB9A62EF2CE00 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/3fa4d696-276f-36ac-9131-15dddd8bc011.roa Signing time: Sun 30 Mar 2025 01:00:47 +0000 ROA not before: Sun 30 Mar 2025 01:00:47 +0000 ROA not after: Sat 28 Jun 2025 01:00:47 +0000 asID: 16509 IP address blocks: 216.224.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5a:be:e0:23:7b:1c:b9:a6:2e:f2:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Mar 30 01:00:47 2025 GMT Not After : Jun 28 01:00:47 2025 GMT Subject: CN=f9d317dd-4071-4236-bad9-15607369f6d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:fb:e0:23:9f:26:6c:70:96:d6:eb:89:40:28: 24:bf:30:82:b7:bb:50:c6:c5:03:18:45:0f:a0:9b: 47:73:48:bc:db:81:b2:49:4c:37:34:a6:a4:96:23: eb:69:6f:51:11:8d:7d:da:d0:96:7a:b7:7c:38:e9: e2:73:80:44:86:58:03:d8:72:3b:9c:93:7a:52:f3: 5b:50:88:c8:49:b3:62:9e:a3:b9:48:19:1f:20:a7: 23:54:fe:b5:ad:65:be:f8:34:22:55:63:75:ce:de: 13:e5:42:46:7f:75:1b:6a:0b:0d:f0:98:dd:9d:3a: ed:ca:51:da:c1:7c:f7:d9:c7:15:a0:1c:7d:e2:d7: a1:a3:28:bc:ce:92:83:a1:23:2e:f1:8a:20:fe:e0: e4:0b:7c:41:5e:aa:7c:ba:5c:b2:18:e1:9d:4d:2d: be:19:7c:2c:ff:bf:e2:1a:f3:4e:bc:99:15:43:37: 67:95:81:33:ed:67:d4:0b:f6:d0:5e:56:d7:e6:62: 00:08:03:be:b4:d4:08:e5:52:8c:e1:d9:6f:fd:49: a2:c1:35:4d:b4:ac:f5:34:ee:40:83:33:9c:04:e7: 22:26:1e:7e:9f:14:8b:92:9a:bf:25:7a:82:c1:17: 90:ed:fd:4a:0e:fa:bd:48:9f:ea:eb:3f:03:14:09: d6:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:E7:CE:5C:58:26:D4:1A:6F:30:26:D6:6D:48:70:A0:A7:74:70:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/3fa4d696-276f-36ac-9131-15dddd8bc011.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 216.224.119.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:3b:83:2f:22:74:c3:71:8f:64:35:23:88:c7:8e:b9:bd:6f: aa:04:ea:c4:45:8c:ba:f3:38:9e:e9:6f:e1:f5:b6:ef:3e:60: da:4c:f9:05:c4:14:cf:25:43:ae:c7:d5:c0:63:bd:9b:26:db: 61:3d:10:54:41:b7:5e:21:08:70:6b:35:7c:b7:2b:d5:e4:bb: 6d:d5:ce:93:a8:73:25:d7:2b:eb:92:ba:23:fb:d4:2b:1f:bd: 5f:38:26:f3:04:2c:9a:43:3f:0c:c5:c0:1d:aa:f0:68:43:a0: bd:7e:e6:b5:99:58:e4:7d:52:12:3b:e5:ad:a4:37:54:40:25: 6e:c1:79:dc:85:a7:a5:dc:9f:9c:3f:9a:b3:bf:f2:8d:da:09: c0:5b:5c:ef:99:a0:af:69:64:3d:67:75:4a:b3:e0:ed:d8:c9: f8:2a:3d:4f:ff:cd:be:1f:2a:bb:01:8d:8f:46:17:d5:b6:60: 08:e9:82:4f:9d:9d:50:b9:65:e0:f5:c0:22:53:22:5f:60:bd: 29:73:6d:c8:a7:bb:52:23:6d:3c:f3:7c:a3:97:af:48:ee:93: 21:6f:3b:f7:4d:1c:c1:be:95:0b:fc:21:f1:de:13:90:33:8d: 3e:45:e7:0c:8e:6c:40:45:9d:de:ea:a2:d6:e5:f5:61:51:92: 61:9b:f0:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElavuAjexy5pi7yzgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk ZjlkMzE3ZGQtNDA3MS00MjM2LWJhZDktMTU2MDczNjlmNmQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/vgI58mbHCW1uuJQCgkvzCCt7tQxsUDGEUP oJtHc0i824GySUw3NKakliPraW9REY192tCWerd8OOnic4BEhlgD2HI7nJN6UvNb UIjISbNinqO5SBkfIKcjVP61rWW++DQiVWN1zt4T5UJGf3UbagsN8JjdnTrtylHa wXz32ccVoBx94tehoyi8zpKDoSMu8Yog/uDkC3xBXqp8ulyyGOGdTS2+GXws/7/i GvNOvJkVQzdnlYEz7WfUC/bQXlbX5mIACAO+tNQI5VKM4dlv/UmiwTVNtKz1NO5A gzOcBOciJh5+nxSLkpq/JXqCwReQ7f1KDvq9SJ/q6z8DFAnW2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKfnzlxYJtQabzAm1m1IcKCndHD6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvM2ZhNGQ2OTYtMjc2Zi0z NmFjLTkxMzEtMTVkZGRkOGJjMDExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OB3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG47gy8idMNxj2Q1I4jHjrm9b6oE6sRFjLrzOJ7pb+H1tu8+YNpM+QXE FM8lQ67H1cBjvZsm22E9EFRBt14hCHBrNXy3K9Xku23VzpOocyXXK+uSuiP71Csf vV84JvMELJpDPwzFwB2q8GhDoL1+5rWZWOR9UhI75a2kN1RAJW7BedyFp6Xcn5w/ mrO/8o3aCcBbXO+ZoK9pZD1ndUqz4O3YyfgqPU//zb4fKrsBjY9GF9W2YAjpgk+d nVC5ZeD1wCJTIl9gvSlzbcinu1IjbTzzfKOXr0jukyFvO/dNHMG+lQv8IfHeE5Az jT5F5wyObEBFnd7qotbl9WFRkmGb8AU= -----END CERTIFICATE-----Generated at Sat Apr 26 16:52:21 2025 by rpki-client