$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/702f69c0-4ec8-311b-935d-382c2fabdcef.roa File: 702f69c0-4ec8-311b-935d-382c2fabdcef.roa (raw, json) Hash identifier: Jq2mKSGDAL10qZm/2VJ6uqK3OcC8djRfFfO10NZ+or8= Subject key identifier: 48:B1:2D:84:EF:77:6B:2D:0C:F0:28:B2:0C:10:CF:5B:73:BE:21:C0 Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F432858499AF472CD846B51D4BD225F58 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/702f69c0-4ec8-311b-935d-382c2fabdcef.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 13335 IP address blocks: 216.224.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:72:cd:84:6b:51:d4:bd:22:5f:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=79d25097-a2ac-4e2a-8cf5-70c9556b5ac0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:96:03:33:67:19:a8:66:da:5e:1d:99:32:9d: 42:ac:87:a3:8a:61:fe:e0:a5:90:a9:d1:27:e7:ef: d0:21:a9:7d:16:10:5e:dd:a8:79:c6:d5:de:fb:ba: 9c:7e:39:7a:69:8d:e7:fc:f5:93:61:c5:ee:27:b6: 8d:9c:52:7d:8c:d7:0d:8c:a3:fa:a8:5e:91:af:16: 87:ab:ec:d1:a5:7b:e0:80:81:b1:09:b0:ac:16:6b: 39:f9:8b:4f:80:1d:93:31:68:40:7e:fa:f5:59:94: 65:96:59:32:87:60:ce:53:b9:1b:c9:0c:f4:9e:3c: 86:54:3d:81:fd:44:5c:fe:df:b2:e3:4f:08:63:d9: 04:25:d3:4c:e6:ff:bb:1c:01:92:6f:04:92:3a:43: 07:0f:4b:a6:4f:39:95:ce:97:ac:93:ff:63:5d:a4: 8f:9a:57:05:b9:f7:7e:9a:13:32:13:ed:a4:84:61: a9:60:7c:0f:e0:b8:bd:76:01:92:a4:7f:85:63:d7: 03:70:a9:6a:ab:ab:84:a5:ba:08:3d:8a:00:ae:3b: 1a:34:07:0a:05:68:5a:84:5a:dc:f1:87:59:90:83: 7d:ef:68:c5:a1:d9:81:b2:61:f4:d1:a7:73:0a:60: 6f:17:6f:b3:90:df:a6:7a:f1:5f:fc:a0:55:c9:7a: a7:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:B1:2D:84:EF:77:6B:2D:0C:F0:28:B2:0C:10:CF:5B:73:BE:21:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/702f69c0-4ec8-311b-935d-382c2fabdcef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 216.224.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:a0:97:95:d7:f4:e2:32:27:b1:b5:da:78:04:5d:71:0b:7b: 63:0d:56:80:67:24:23:d7:c0:de:dc:e0:fc:f4:43:e7:3a:93: a2:47:06:69:d5:83:63:fc:ef:6d:00:76:e3:f9:b0:aa:05:54: 65:42:a5:21:7f:8a:f7:49:3c:7f:97:d4:5d:25:dd:36:5b:31: 69:be:39:3b:19:b4:70:0f:29:dc:26:0b:a9:61:4e:11:a4:2b: d3:39:5c:5c:20:e9:9a:9f:84:b5:49:19:f5:c8:d9:03:8c:fc: 38:aa:81:09:6d:a4:79:91:b0:c8:cd:9d:50:7f:e0:6b:4f:0a: 9b:f4:61:84:d8:58:be:53:a8:80:51:85:67:0a:e5:1b:9d:dc: 02:4a:7e:92:09:e7:ac:c5:b2:45:87:44:84:37:e6:51:d9:6e: 8b:43:05:e5:9a:33:02:8a:0f:7d:6d:74:ed:eb:9b:5c:d4:6a: 98:18:97:a4:69:a4:6e:01:86:e2:24:89:b4:83:98:cb:5a:9a: 95:2c:33:e9:6e:f9:f2:6e:d6:69:31:db:1b:e5:51:1b:54:ac: 39:b8:53:c1:d8:57:ae:55:66:5b:52:10:e7:12:25:d0:92:4a: 40:31:18:26:2f:b5:49:98:b4:6b:42:fb:5e:a6:b7:b3:f8:a3: 83:9d:5d:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9HLNhGtR1L0iX1gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk NzlkMjUwOTctYTJhYy00ZTJhLThjZjUtNzBjOTU1NmI1YWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJYDM2cZqGbaXh2ZMp1CrIejimH+4KWQqdEn 5+/QIal9FhBe3ah5xtXe+7qcfjl6aY3n/PWTYcXuJ7aNnFJ9jNcNjKP6qF6RrxaH q+zRpXvggIGxCbCsFms5+YtPgB2TMWhAfvr1WZRlllkyh2DOU7kbyQz0njyGVD2B /URc/t+y408IY9kEJdNM5v+7HAGSbwSSOkMHD0umTzmVzpesk/9jXaSPmlcFufd+ mhMyE+2khGGpYHwP4Li9dgGSpH+FY9cDcKlqq6uEpboIPYoArjsaNAcKBWhahFrc 8YdZkIN972jFodmBsmH00adzCmBvF2+zkN+mevFf/KBVyXqncwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEixLYTvd2stDPAosgwQz1tzviHAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvNzAyZjY5YzAtNGVjOC0z MTFiLTkzNWQtMzgyYzJmYWJkY2VmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OB5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGOgl5XX9OIyJ7G12ngEXXELe2MNVoBnJCPXwN7c4Pz0Q+c6k6JHBmnV g2P8720AduP5sKoFVGVCpSF/ivdJPH+X1F0l3TZbMWm+OTsZtHAPKdwmC6lhThGk K9M5XFwg6ZqfhLVJGfXI2QOM/DiqgQltpHmRsMjNnVB/4GtPCpv0YYTYWL5TqIBR hWcK5Rud3AJKfpIJ56zFskWHRIQ35lHZbotDBeWaMwKKD31tdO3rm1zUapgYl6Rp pG4BhuIkibSDmMtampUsM+lu+fJu1mkx2xvlURtUrDm4U8HYV65VZltSEOcSJdCS SkAxGCYvtUmYtGtC+16mt7P4o4OdXaU= -----END CERTIFICATE-----Generated at Sat May 10 10:28:02 2025 by rpki-client