$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/71ecd9ec-2b15-3e1e-907f-25aa017c573e.roa File: 71ecd9ec-2b15-3e1e-907f-25aa017c573e.roa (raw, json) Hash identifier: i8+65piXCTQ9S1CKePPkwLYN6yRKbdhGrb4yTtrdXvg= Subject key identifier: E7:E5:B4:32:20:0B:A2:F2:33:49:D4:DE:AD:DA:E4:85:01:81:65:67 Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F4328584AC0165311DEE24A9AA0BC6480 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/71ecd9ec-2b15-3e1e-907f-25aa017c573e.roa Signing time: Tue 05 Aug 2025 01:00:32 +0000 ROA not before: Tue 05 Aug 2025 01:00:32 +0000 ROA not after: Mon 03 Nov 2025 02:00:32 +0000 asID: 20001 IP address blocks: 216.224.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c0:16:53:11:de:e2:4a:9a:a0:bc:64:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Aug 5 01:00:32 2025 GMT Not After : Nov 3 02:00:32 2025 GMT Subject: CN=127345b0-7aeb-44bf-b500-f2bfb73cab38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f5:65:fa:38:70:9a:c1:15:0b:df:fc:71:e8: f2:89:5c:51:de:bc:13:cd:a8:4d:ef:2c:2d:b2:96: 62:29:d7:9e:01:a8:72:bd:96:01:6d:4a:17:92:70: 9d:72:d4:18:46:f6:f0:7b:11:e2:c0:4f:60:8c:f2: 8e:3b:8b:16:b9:f7:f3:28:9d:ff:43:05:68:6c:7c: 0e:3a:6f:52:27:b9:41:3a:14:09:b2:c6:0a:b1:fb: 7d:75:09:b2:46:86:cc:1f:77:23:b9:9c:eb:73:b4: d7:79:ab:2b:48:8d:a2:60:ea:9e:60:53:2d:90:6e: d2:8b:9d:12:ae:14:d3:1b:20:2b:27:68:b0:24:6c: b8:32:26:9f:f2:f7:54:a7:04:22:64:70:af:63:ea: 20:bf:f3:b4:51:44:e9:74:21:ac:5b:51:5d:8f:d6: f8:ff:25:48:0d:73:7d:90:89:13:06:54:e2:89:e8: b5:7a:d5:b9:13:d5:d0:16:8f:00:cb:20:16:a1:99: 77:5e:7a:d4:2c:ce:a6:09:3c:21:15:e3:40:41:37: 06:4b:8e:83:e9:f5:f0:05:32:e9:ed:8a:6f:84:c9: b8:5d:41:ed:a2:cb:7c:76:e8:7a:bf:3d:31:ff:56: 38:52:fa:e1:54:3f:77:e8:4a:62:e5:73:c4:69:dd: 06:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:E5:B4:32:20:0B:A2:F2:33:49:D4:DE:AD:DA:E4:85:01:81:65:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/71ecd9ec-2b15-3e1e-907f-25aa017c573e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 216.224.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:e5:ab:94:c5:92:53:fc:bc:68:b3:f4:25:2c:67:97:41:f0: e6:ca:5d:b4:16:a1:94:f0:d7:75:3b:90:98:09:0f:64:b2:32: 65:ed:70:79:30:35:7b:1d:be:b7:02:05:f3:db:d4:a6:e4:8e: c8:8f:f0:15:20:76:9f:4c:bf:56:7c:13:92:b7:66:5f:a0:35: c2:8f:45:7a:3e:bc:03:e1:6c:29:8b:6d:98:95:2b:3c:0b:09: a9:a6:3f:1a:b1:8c:f2:b5:e4:af:d3:3d:97:2f:5e:a8:09:ba: 94:fa:f5:f8:76:69:09:06:86:6e:bb:47:89:9d:d1:9c:80:aa: 3f:f1:a8:db:db:7e:a4:8b:1c:05:8d:92:c0:a1:18:64:a4:e4: f8:4f:67:7a:51:f5:7a:85:ba:a1:87:c8:75:79:62:ab:53:33: 0a:c9:5d:5d:9f:fa:2e:04:d0:60:b8:04:88:95:3d:39:67:01: 29:87:cb:c7:6a:85:3a:bf:5c:f7:f3:69:17:4d:88:fe:f2:5b: 65:e3:c5:e9:e7:a0:20:6c:fa:fc:65:04:14:ae:69:21:65:20: cb:a3:69:98:98:2d:f8:c8:10:ae:d9:04:a8:94:97:ea:51:31: 1d:83:0a:61:44:7b:bf:c2:ff:fe:ae:c4:5f:a3:27:0d:f7:3a: 5f:e8:41:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErAFlMR3uJKmqC8ZIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI1MDgwNTAxMDAzMloXDTI1MTEwMzAyMDAzMlowLzEtMCsGA1UEAxMk MTI3MzQ1YjAtN2FlYi00NGJmLWI1MDAtZjJiZmI3M2NhYjM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfVl+jhwmsEVC9/8cejyiVxR3rwTzahN7ywt spZiKdeeAahyvZYBbUoXknCdctQYRvbwexHiwE9gjPKOO4sWuffzKJ3/QwVobHwO Om9SJ7lBOhQJssYKsft9dQmyRobMH3cjuZzrc7TXeasrSI2iYOqeYFMtkG7Si50S rhTTGyArJ2iwJGy4Miaf8vdUpwQiZHCvY+ogv/O0UUTpdCGsW1Fdj9b4/yVIDXN9 kIkTBlTiiei1etW5E9XQFo8AyyAWoZl3XnrULM6mCTwhFeNAQTcGS46D6fXwBTLp 7YpvhMm4XUHtost8duh6vz0x/1Y4UvrhVD936Epi5XPEad0GswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOfltDIgC6LyM0nU3q3a5IUBgWVnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvNzFlY2Q5ZWMtMmIxNS0z ZTFlLTkwN2YtMjVhYTAxN2M1NzNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OB1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFnlq5TFklP8vGiz9CUsZ5dB8ObKXbQWoZTw13U7kJgJD2SyMmXtcHkw NXsdvrcCBfPb1KbkjsiP8BUgdp9Mv1Z8E5K3Zl+gNcKPRXo+vAPhbCmLbZiVKzwL CammPxqxjPK15K/TPZcvXqgJupT69fh2aQkGhm67R4md0ZyAqj/xqNvbfqSLHAWN ksChGGSk5PhPZ3pR9XqFuqGHyHV5YqtTMwrJXV2f+i4E0GC4BIiVPTlnASmHy8dq hTq/XPfzaRdNiP7yW2XjxennoCBs+vxlBBSuaSFlIMujaZiYLfjIEK7ZBKiUl+pR MR2DCmFEe7/C//6uxF+jJw33Ol/oQQo= -----END CERTIFICATE-----Generated at Sat Aug 23 18:12:15 2025 by rpki-client