$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/8ebd5ea6-d466-3f77-81c4-3e46fccf2011.roa File: 8ebd5ea6-d466-3f77-81c4-3e46fccf2011.roa (raw, json) Hash identifier: pL0RcPykK40FfsUREGVOSuJJZcca+AZ20V8jSTjj9Ng= Subject key identifier: D5:E5:AF:5F:07:60:AE:0B:A8:57:EC:DE:5B:CE:0F:CE:42:35:B9:BA Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F43285849C904D5E68877F7C532422080 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/8ebd5ea6-d466-3f77-81c4-3e46fccf2011.roa Signing time: Thu 08 May 2025 13:01:00 +0000 ROA not before: Thu 08 May 2025 13:01:00 +0000 ROA not after: Wed 06 Aug 2025 13:01:00 +0000 asID: 396356 IP address blocks: 216.224.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c9:04:d5:e6:88:77:f7:c5:32:42:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: May 8 13:01:00 2025 GMT Not After : Aug 6 13:01:00 2025 GMT Subject: CN=ca97423c-fddb-4766-a7d3-8f5a53f6a9e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:09:e6:95:f4:02:a2:7b:60:1f:69:79:12:d1: 2e:a7:d0:c8:dd:1d:71:33:dc:87:b4:93:eb:3c:6c: 95:d1:5c:49:69:ff:9d:02:6a:fb:3d:b5:54:10:37: b8:db:2e:ef:d0:36:93:8c:a6:1c:97:90:80:04:a4: e3:d8:c2:02:b0:43:42:2c:b6:58:bd:3e:1b:c6:36: f1:87:48:c8:4f:61:d1:dc:dc:48:22:34:b9:53:6f: 2a:d4:50:53:60:20:61:d2:52:1f:91:a9:a5:e8:a2: df:fc:95:82:0c:10:88:36:9f:b4:df:c5:d8:9f:84: 32:86:bb:28:b7:d7:23:65:23:c0:47:1f:79:58:8d: bc:d1:f8:36:75:2d:e8:1a:9d:18:e2:fc:15:0b:b3: 2e:be:24:fb:72:e1:68:2b:4f:7a:80:59:f7:34:e8: 3b:66:03:26:6f:18:4a:89:b3:95:91:a9:0a:4a:fc: f4:f2:74:a8:56:fe:d4:ad:4a:89:99:b7:3d:4f:90: 97:6b:1d:50:d0:16:58:be:01:3c:3a:c4:62:1a:38: 73:18:19:83:06:a6:5b:c2:a6:b9:45:d9:c9:ec:93: 9b:38:5f:ab:a4:be:82:2b:b3:6a:0a:bf:08:13:0f: d9:21:ed:b0:24:4e:49:e8:01:6b:86:9a:82:28:3d: 6a:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:E5:AF:5F:07:60:AE:0B:A8:57:EC:DE:5B:CE:0F:CE:42:35:B9:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/8ebd5ea6-d466-3f77-81c4-3e46fccf2011.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 216.224.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:15:3b:ab:17:39:2f:d1:36:4e:7b:54:96:d8:fc:fb:b8:6d: da:55:ac:80:2d:75:36:86:a1:70:02:70:72:42:10:18:18:01: 32:24:a2:e0:0c:a5:73:fa:15:bf:3c:bd:01:85:1f:5c:ff:ea: b5:0a:a7:27:db:57:bf:2c:81:c6:b6:03:63:bc:99:ce:c7:3d: b3:7b:5b:c1:cd:53:63:68:82:87:9b:11:c6:bb:df:ae:5c:a7: c4:36:e1:92:cb:86:31:65:25:2e:ee:83:08:d0:e6:14:a3:f1: 77:f4:42:27:af:fa:1e:ed:9a:59:55:3e:56:cd:37:e2:d9:ec: 86:bb:c0:b7:d3:22:31:b1:37:15:3e:3e:03:6b:ac:cf:e5:79: 70:d3:85:11:c7:31:b6:6f:a4:fc:22:70:80:47:73:4e:58:34: 85:f6:dc:f1:04:0d:ff:88:7b:3b:90:6a:3f:85:44:b4:88:6f: e3:ba:34:59:2d:3e:2f:4b:54:79:5c:88:4f:68:47:79:8b:1d: 7a:f4:73:e2:97:13:cf:e5:a9:32:8e:07:e9:a9:b0:fa:22:77: 3d:98:ca:25:fc:b8:54:34:c9:62:b0:63:82:39:a0:eb:bf:14: f1:a8:d6:e9:4e:0e:e2:d3:c1:15:be:af:4c:24:aa:13:29:02: ad:8c:ea:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnJBNXmiHf3xTJCIIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI1MDUwODEzMDEwMFoXDTI1MDgwNjEzMDEwMFowLzEtMCsGA1UEAxMk Y2E5NzQyM2MtZmRkYi00NzY2LWE3ZDMtOGY1YTUzZjZhOWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5gnmlfQContgH2l5EtEup9DI3R1xM9yHtJPr PGyV0VxJaf+dAmr7PbVUEDe42y7v0DaTjKYcl5CABKTj2MICsENCLLZYvT4bxjbx h0jIT2HR3NxIIjS5U28q1FBTYCBh0lIfkaml6KLf/JWCDBCINp+038XYn4Qyhrso t9cjZSPARx95WI280fg2dS3oGp0Y4vwVC7MuviT7cuFoK096gFn3NOg7ZgMmbxhK ibOVkakKSvz08nSoVv7UrUqJmbc9T5CXax1Q0BZYvgE8OsRiGjhzGBmDBqZbwqa5 RdnJ7JObOF+rpL6CK7NqCr8IEw/ZIe2wJE5J6AFrhpqCKD1qaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNXlr18HYK4LqFfs3lvOD85CNbm6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvOGViZDVlYTYtZDQ2Ni0z Zjc3LTgxYzQtM2U0NmZjY2YyMDExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OB9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFcVO6sXOS/RNk57VJbY/Pu4bdpVrIAtdTaGoXACcHJCEBgYATIkouAM pXP6Fb88vQGFH1z/6rUKpyfbV78sgca2A2O8mc7HPbN7W8HNU2NogoebEca7365c p8Q24ZLLhjFlJS7ugwjQ5hSj8Xf0Qiev+h7tmllVPlbNN+LZ7Ia7wLfTIjGxNxU+ PgNrrM/leXDThRHHMbZvpPwicIBHc05YNIX23PEEDf+IezuQaj+FRLSIb+O6NFkt Pi9LVHlciE9oR3mLHXr0c+KXE8/lqTKOB+mpsPoidz2YyiX8uFQ0yWKwY4I5oOu/ FPGo1ulODuLTwRW+r0wkqhMpAq2M6vk= -----END CERTIFICATE-----Generated at Fri May 9 13:58:08 2025 by rpki-client