$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/9ac4592f-54b4-32dd-9da1-2b504063b789.roa File: 9ac4592f-54b4-32dd-9da1-2b504063b789.roa (raw, json) Hash identifier: 3G3VJcWx+qH2+MGebg4B3BKkbqILSwl7mHT2RZPy9jQ= Subject key identifier: 6C:9A:EB:CC:65:07:84:DF:51:29:FC:95:C9:A0:D1:D7:8D:29:37:B3 Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F43285848E8F94D3732219227AA031880 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/9ac4592f-54b4-32dd-9da1-2b504063b789.roa Signing time: Mon 17 Feb 2025 06:56:44 +0000 ROA not before: Mon 17 Feb 2025 06:56:44 +0000 ROA not after: Sun 18 May 2025 05:56:44 +0000 asID: 16509 IP address blocks: 216.83.56.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e8:f9:4d:37:32:21:92:27:aa:03:18:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Feb 17 06:56:44 2025 GMT Not After : May 18 05:56:44 2025 GMT Subject: CN=e35e3958-c374-4b30-b4a8-47d6c12ed8f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:2b:40:5c:c8:92:37:39:82:7f:cd:d5:22:f7: 29:ab:f0:ac:c0:92:d0:3a:0a:3c:e6:ef:cc:36:67: 4b:91:fa:40:42:97:d9:a4:b2:2b:66:86:25:23:2f: 2a:73:a6:7b:40:2c:33:11:9d:f6:d8:de:f9:80:b5: f4:d9:1b:81:ea:68:72:05:7b:63:f6:c2:d8:a6:da: 88:14:90:64:cc:ec:e2:1e:48:ea:9d:78:f0:3f:a3: 9a:20:c6:e8:0f:f1:f7:b3:88:13:ba:10:2b:19:99: 7c:4a:fe:0d:92:ce:4e:7d:ad:76:1d:7b:47:d3:c9: 62:e6:a1:6f:80:8f:72:aa:dc:0b:6e:ad:98:43:02: 35:9e:cb:95:46:9f:52:ab:6a:63:8c:47:26:8b:5c: 43:26:d4:db:b7:ca:be:9b:c9:39:04:b4:24:4a:56: 12:9b:d9:69:cb:ef:47:0b:d0:c9:c3:45:7f:1d:59: 53:ae:80:af:db:e8:0e:de:ee:ee:40:f1:4f:0a:ce: f9:f0:fd:1c:c6:5a:19:d5:5f:f5:53:53:f7:dc:bc: 82:97:76:42:76:84:44:df:2c:c4:c1:fa:62:07:82: 9f:d0:43:95:c6:1e:eb:4e:80:6e:1c:81:d0:b2:7c: f9:4c:21:d5:b6:4d:50:8f:a5:d1:75:9e:05:2b:af: f0:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:9A:EB:CC:65:07:84:DF:51:29:FC:95:C9:A0:D1:D7:8D:29:37:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/9ac4592f-54b4-32dd-9da1-2b504063b789.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 216.83.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:56:20:05:78:e0:89:a7:6e:38:cc:84:7d:16:67:fd:df:66: 42:13:3b:78:73:f4:8b:cd:6f:97:85:49:7c:76:80:91:9f:90: 8a:75:0f:c7:db:18:7c:68:98:49:33:7f:ca:bf:6c:b6:aa:aa: 95:16:b5:70:3a:71:4e:26:38:b7:f3:dd:08:46:67:49:33:51: 67:d3:03:26:34:58:7e:3a:26:2f:8a:53:92:31:6a:f1:e7:b8: 67:9b:fc:2d:2d:8a:c1:2d:b0:9c:a1:2a:85:04:37:c4:bb:1f: 6e:07:ec:21:52:92:ae:77:c4:2a:ff:08:63:68:d3:a3:5c:81: 35:1c:a4:8b:17:d6:9f:85:b4:a4:87:59:81:ac:70:b4:ef:65: 1c:cf:0d:49:cb:06:a6:51:c3:97:a2:f6:52:45:71:a2:27:35: 02:78:26:d2:1f:81:49:71:23:38:f9:cf:15:8c:5e:dc:11:83: e5:ba:c2:be:ff:00:e9:2f:32:fd:34:5b:23:d1:20:57:24:8c: b6:91:1c:bc:4c:22:95:e4:f3:74:5f:63:6b:d8:52:fe:7c:f7: 2d:34:22:ef:56:47:c0:f4:98:b3:81:c7:55:16:5c:d0:91:d3: 51:de:f2:7c:cd:3f:36:3e:92:11:a2:fa:f1:66:16:1f:1e:7e: 40:71:0e:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjo+U03MiGSJ6oDGIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI1MDIxNzA2NTY0NFoXDTI1MDUxODA1NTY0NFowLzEtMCsGA1UEAxMk ZTM1ZTM5NTgtYzM3NC00YjMwLWI0YTgtNDdkNmMxMmVkOGY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzStAXMiSNzmCf83VIvcpq/CswJLQOgo85u/M NmdLkfpAQpfZpLIrZoYlIy8qc6Z7QCwzEZ322N75gLX02RuB6mhyBXtj9sLYptqI FJBkzOziHkjqnXjwP6OaIMboD/H3s4gTuhArGZl8Sv4Nks5Ofa12HXtH08li5qFv gI9yqtwLbq2YQwI1nsuVRp9Sq2pjjEcmi1xDJtTbt8q+m8k5BLQkSlYSm9lpy+9H C9DJw0V/HVlTroCv2+gO3u7uQPFPCs758P0cxloZ1V/1U1P33LyCl3ZCdoRE3yzE wfpiB4Kf0EOVxh7rToBuHIHQsnz5TCHVtk1Qj6XRdZ4FK6/wIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGya68xlB4TfUSn8lcmg0deNKTezMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvOWFjNDU5MmYtNTRiNC0z MmRkLTlkYTEtMmI1MDQwNjNiNzg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2FM4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGdWIAV44ImnbjjMhH0WZ/3fZkITO3hz9IvNb5eFSXx2gJGfkIp1D8fb GHxomEkzf8q/bLaqqpUWtXA6cU4mOLfz3QhGZ0kzUWfTAyY0WH46Ji+KU5IxavHn uGeb/C0tisEtsJyhKoUEN8S7H24H7CFSkq53xCr/CGNo06NcgTUcpIsX1p+FtKSH WYGscLTvZRzPDUnLBqZRw5ei9lJFcaInNQJ4JtIfgUlxIzj5zxWMXtwRg+W6wr7/ AOkvMv00WyPRIFckjLaRHLxMIpXk83RfY2vYUv589y00Iu9WR8D0mLOBx1UWXNCR 01He8nzNPzY+khGi+vFmFh8efkBxDnE= -----END CERTIFICATE-----Generated at Sat Apr 26 19:24:14 2025 by rpki-client