$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/7d40b806-6e57-3364-94a7-44f7700041ca.roa File: 7d40b806-6e57-3364-94a7-44f7700041ca.roa (raw, json) Hash identifier: NZHxD3fuVy0cxsn67XY5Vv6WCBMNCbBJ9U333XGMTj0= Subject key identifier: 66:51:EF:D2:FF:1B:D7:31:CA:46:D9:B5:A7:A9:26:34:A8:35:6C:3D Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F4328584A3B7AFCA1BDECE61DEA421E00 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/7d40b806-6e57-3364-94a7-44f7700041ca.roa Signing time: Wed 18 Jun 2025 13:01:06 +0000 ROA not before: Wed 18 Jun 2025 13:01:06 +0000 ROA not after: Tue 16 Sep 2025 13:01:06 +0000 asID: 23470 IP address blocks: 216.224.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:7a:fc:a1:bd:ec:e6:1d:ea:42:1e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Jun 18 13:01:06 2025 GMT Not After : Sep 16 13:01:06 2025 GMT Subject: CN=2967bd04-91fb-4ca8-8422-cc0506eac15b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:dd:4c:96:52:f2:0d:64:1b:0b:7a:f3:1e:73: d5:22:d9:90:a8:28:1c:8d:ca:64:88:41:c8:a8:78: e5:31:70:06:74:17:b4:e9:fa:eb:54:fa:e9:81:65: ff:c0:27:da:65:68:b2:e0:e8:99:3f:17:39:a8:55: 75:35:2d:8d:15:98:06:1e:a8:0f:d7:92:0e:6b:ab: b9:ec:05:28:0b:a3:0b:85:b5:32:86:ab:fa:99:4b: 1d:bf:3c:ef:e6:d8:0b:a2:c1:aa:7a:f5:d8:ec:cf: df:ee:53:c4:0f:a5:b6:ca:b9:2f:c3:ee:4a:6d:7e: 90:04:e8:0d:f7:86:a9:c2:0d:1f:68:5a:75:37:32: b6:ec:8d:79:a6:63:cf:b3:53:f5:be:61:6b:8e:73: 71:94:b6:83:78:14:fc:e5:1a:eb:10:fe:f1:84:0f: 31:36:1a:83:12:b0:dd:73:ac:cb:6a:cc:c9:52:7d: 77:e9:0d:a0:5e:c9:a0:b0:82:46:f1:15:c8:b3:29: 02:b5:0b:f6:64:15:53:58:a6:a2:c0:c4:1d:83:61: 8c:0a:7f:2c:41:66:a1:c7:90:7f:ee:2d:ec:1e:94: 54:2c:fc:44:26:8b:6e:2e:fa:1d:43:0a:d0:39:e1: 73:f7:6a:0e:b3:d6:ee:9f:91:b2:c0:61:de:ad:fb: 26:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:51:EF:D2:FF:1B:D7:31:CA:46:D9:B5:A7:A9:26:34:A8:35:6C:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/7d40b806-6e57-3364-94a7-44f7700041ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 216.224.118.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:c4:ea:f1:c1:95:fa:9d:f3:27:c9:a1:11:4f:ba:16:cf:aa: 40:95:bf:11:53:a7:7e:19:4f:6f:f0:e5:74:0b:a2:25:ea:24: 11:e0:ec:37:b1:d1:76:cf:c9:7e:d4:dd:49:0f:d0:ed:88:b7: 22:3e:16:ba:0a:9f:f6:dd:d5:72:8f:d6:5a:ee:d6:46:ff:2b: ff:dd:dd:bb:29:d0:05:38:d6:5a:fe:96:21:52:f2:fe:f2:09: b9:fb:74:49:e9:9b:93:02:06:63:1a:02:60:ee:9d:eb:b4:a3: fe:72:47:cd:b1:d5:b6:a3:da:af:65:4e:5f:bd:52:ae:20:53: 39:cb:e8:09:4d:7c:a9:85:7d:e0:72:ce:a8:92:a1:42:88:3a: b6:c2:31:b7:a0:e5:c2:31:c4:99:5c:98:e6:f3:92:5b:87:b1: 61:b0:30:0c:5b:c2:2b:5e:c5:d9:e2:8b:bb:12:2d:5e:2d:37: 30:b9:31:e2:eb:82:6e:fe:60:de:c7:7d:98:dc:42:08:7c:23: 44:4d:7f:dc:26:69:d6:6d:fe:ac:51:3f:01:eb:a4:66:b1:f5: 67:8c:be:17:b4:e4:e7:1c:be:3b:60:6c:c5:76:97:ab:3b:9d: fc:65:6f:11:14:31:f4:eb:64:a1:01:4a:cc:f5:d0:74:82:fc: b2:d0:f8:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo7evyhvezmHepCHgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI1MDYxODEzMDEwNloXDTI1MDkxNjEzMDEwNlowLzEtMCsGA1UEAxMk Mjk2N2JkMDQtOTFmYi00Y2E4LTg0MjItY2MwNTA2ZWFjMTViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA491MllLyDWQbC3rzHnPVItmQqCgcjcpkiEHI qHjlMXAGdBe06frrVPrpgWX/wCfaZWiy4OiZPxc5qFV1NS2NFZgGHqgP15IOa6u5 7AUoC6MLhbUyhqv6mUsdvzzv5tgLosGqevXY7M/f7lPED6W2yrkvw+5KbX6QBOgN 94apwg0faFp1NzK27I15pmPPs1P1vmFrjnNxlLaDeBT85RrrEP7xhA8xNhqDErDd c6zLaszJUn136Q2gXsmgsIJG8RXIsykCtQv2ZBVTWKaiwMQdg2GMCn8sQWahx5B/ 7i3sHpRULPxEJotuLvodQwrQOeFz92oOs9bun5GywGHerfsmPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGZR79L/G9cxykbZtaepJjSoNWw9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvN2Q0MGI4MDYtNmU1Ny0z MzY0LTk0YTctNDRmNzcwMDA0MWNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OB2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH7E6vHBlfqd8yfJoRFPuhbPqkCVvxFTp34ZT2/w5XQLoiXqJBHg7Dex 0XbPyX7U3UkP0O2ItyI+FroKn/bd1XKP1lru1kb/K//d3bsp0AU41lr+liFS8v7y Cbn7dEnpm5MCBmMaAmDuneu0o/5yR82x1baj2q9lTl+9Uq4gUznL6AlNfKmFfeBy zqiSoUKIOrbCMbeg5cIxxJlcmObzkluHsWGwMAxbwitexdnii7sSLV4tNzC5MeLr gm7+YN7HfZjcQgh8I0RNf9wmadZt/qxRPwHrpGax9WeMvhe05OccvjtgbMV2l6s7 nfxlbxEUMfTrZKEBSsz10HSC/LLQ+MA= -----END CERTIFICATE-----Generated at Tue Jul 1 07:43:19 2025 by rpki-client