$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/75509c44-4ef8-307f-b60b-0a559214e957.roa File: 75509c44-4ef8-307f-b60b-0a559214e957.roa (raw, json) Hash identifier: 5M3NFZDcWmT9BKrOkC/9VbKbrgBrnRj8FMTSRtgTUbo= Subject key identifier: D8:D1:39:33:28:9B:90:6E:62:3D:55:97:84:08:69:3A:22:90:F6:FC Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F432858498D80B8B01CFBB86C4724E500 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/75509c44-4ef8-307f-b60b-0a559214e957.roa Signing time: Thu 17 Apr 2025 05:22:10 +0000 ROA not before: Thu 17 Apr 2025 05:22:10 +0000 ROA not after: Wed 16 Jul 2025 05:22:10 +0000 asID: 62610 IP address blocks: 216.83.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8d:80:b8:b0:1c:fb:b8:6c:47:24:e5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Apr 17 05:22:10 2025 GMT Not After : Jul 16 05:22:10 2025 GMT Subject: CN=d17ed875-5cea-4c82-ab35-8926652c5a3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:eb:6d:c7:d9:bc:55:5e:9f:43:e5:d1:09:c5: 68:f7:c5:57:47:f6:43:50:cc:87:4a:72:8b:30:3b: c0:d2:66:90:d6:8c:37:6f:49:3f:28:6c:d7:e4:90: 73:1d:4c:4b:24:18:1c:b8:ed:70:57:74:b9:0b:1a: fb:59:3f:c6:40:77:7e:b8:22:3f:64:e1:e5:73:22: 8a:40:dc:79:c7:78:f6:38:62:aa:8c:a2:c0:9d:a7: 26:93:56:b2:58:c3:b1:45:bf:b4:5b:01:6b:88:b3: cf:2f:96:9c:82:a7:50:dc:7b:8d:ee:cf:ee:89:f8: 9a:7e:b6:fd:07:41:e0:18:75:a6:bc:d0:7b:16:cf: ec:8f:bd:9d:56:84:9e:78:61:c4:d9:b8:9c:17:85: 4a:95:d0:2a:1f:86:b7:1b:cf:22:27:6d:37:97:73: 05:ca:1d:c5:1a:ed:f2:61:28:c4:d8:e9:68:ce:00: 61:d0:9c:b8:c2:32:b5:a9:7d:bf:16:84:64:1f:2b: 9b:fb:19:a8:cf:9d:d4:9e:c7:23:ef:67:f1:3f:2a: f8:57:3d:be:71:fa:67:d9:73:6e:45:3c:bf:79:da: 2f:58:b4:da:45:a0:e1:4c:52:47:97:36:dd:c6:3a: 6d:ee:6d:41:54:ee:d6:10:28:c1:b5:2c:90:2f:02: 6b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:D1:39:33:28:9B:90:6E:62:3D:55:97:84:08:69:3A:22:90:F6:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/75509c44-4ef8-307f-b60b-0a559214e957.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 216.83.47.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:a4:94:67:d7:64:3c:1a:94:9a:2c:49:33:e8:34:32:6e:bd: 06:0d:5a:84:59:8e:de:8f:25:9c:99:8b:35:e3:fe:68:2e:92: b8:ba:83:ca:e3:4d:0f:05:ec:a4:2d:d3:f2:b6:5e:3a:85:91: 8b:67:9b:17:59:55:41:50:0a:0e:2a:ba:a3:0d:18:d7:24:8f: 6a:0f:84:8f:e4:15:41:5b:1e:ae:1b:7c:4c:35:5e:c5:70:79: e5:fd:f9:bb:4c:69:18:49:8b:7a:02:11:27:22:b7:7c:de:64: 9f:71:f5:0e:12:d3:27:a6:88:e2:a5:b5:55:29:63:8f:e3:c2: a9:40:37:75:c3:8b:50:a4:d8:46:23:ed:79:3d:a5:76:db:7e: c5:64:03:5f:f2:91:11:ed:91:2a:2c:b5:f3:39:0e:1a:1f:6a: 7f:13:48:41:81:80:d6:49:f7:18:3a:41:9e:bb:84:ea:41:17: a9:3e:02:38:0a:eb:64:1e:bb:36:54:b4:1b:4b:b8:b9:16:80: 05:30:df:68:62:56:eb:39:47:de:eb:84:cc:0d:46:39:c2:bd: 20:c0:85:5c:a7:28:aa:c8:a3:b7:2a:84:1e:76:f1:72:85:29: b4:64:92:c8:d5:05:51:a0:0c:d2:c7:e7:59:70:05:cb:1e:b0: f6:97:9c:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmNgLiwHPu4bEck5QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI1MDQxNzA1MjIxMFoXDTI1MDcxNjA1MjIxMFowLzEtMCsGA1UEAxMk ZDE3ZWQ4NzUtNWNlYS00YzgyLWFiMzUtODkyNjY1MmM1YTNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+ttx9m8VV6fQ+XRCcVo98VXR/ZDUMyHSnKL MDvA0maQ1ow3b0k/KGzX5JBzHUxLJBgcuO1wV3S5Cxr7WT/GQHd+uCI/ZOHlcyKK QNx5x3j2OGKqjKLAnacmk1ayWMOxRb+0WwFriLPPL5acgqdQ3HuN7s/uifiafrb9 B0HgGHWmvNB7Fs/sj72dVoSeeGHE2bicF4VKldAqH4a3G88iJ203l3MFyh3FGu3y YSjE2OlozgBh0Jy4wjK1qX2/FoRkHyub+xmoz53Unscj72fxPyr4Vz2+cfpn2XNu RTy/edovWLTaRaDhTFJHlzbdxjpt7m1BVO7WECjBtSyQLwJr9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNjROTMom5BuYj1Vl4QIaToikPb8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvNzU1MDljNDQtNGVmOC0z MDdmLWI2MGItMGE1NTkyMTRlOTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2FMvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAaklGfXZDwalJosSTPoNDJuvQYNWoRZjt6PJZyZizXj/mgukri6g8rj TQ8F7KQt0/K2XjqFkYtnmxdZVUFQCg4quqMNGNckj2oPhI/kFUFbHq4bfEw1XsVw eeX9+btMaRhJi3oCEScit3zeZJ9x9Q4S0yemiOKltVUpY4/jwqlAN3XDi1Ck2EYj 7Xk9pXbbfsVkA1/ykRHtkSostfM5Dhofan8TSEGBgNZJ9xg6QZ67hOpBF6k+AjgK 62QeuzZUtBtLuLkWgAUw32hiVus5R97rhMwNRjnCvSDAhVynKKrIo7cqhB528XKF KbRkksjVBVGgDNLH51lwBcsesPaXnPk= -----END CERTIFICATE-----Generated at Sat Apr 26 14:53:31 2025 by rpki-client