$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/9ac4592f-54b4-32dd-9da1-2b504063b789.roa File: 9ac4592f-54b4-32dd-9da1-2b504063b789.roa (raw, json) Hash identifier: iIADSJfQaP6F+98++zVfhS8xkkds6e2FzDNyYNCuwzE= Subject key identifier: E0:25:C5:8C:1C:0A:09:F0:D2:32:FF:BE:06:6B:8C:08:FB:DF:BC:71 Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F43285849C904D3FC72F5F8ED3BD10A60 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/9ac4592f-54b4-32dd-9da1-2b504063b789.roa Signing time: Thu 08 May 2025 13:01:00 +0000 ROA not before: Thu 08 May 2025 13:01:00 +0000 ROA not after: Wed 06 Aug 2025 13:01:00 +0000 asID: 16509 IP address blocks: 216.83.56.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c9:04:d3:fc:72:f5:f8:ed:3b:d1:0a:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: May 8 13:01:00 2025 GMT Not After : Aug 6 13:01:00 2025 GMT Subject: CN=47c2af99-f182-4f17-92c7-811b78408be8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:82:ac:99:0d:77:88:f3:df:e0:9e:c1:fb:d8: 7c:57:14:38:3c:1e:dc:38:8f:6c:4c:48:76:bf:03: 2a:96:15:5b:89:1a:65:17:63:57:60:70:02:aa:35: 6e:65:37:5e:1f:c9:36:00:d5:44:69:fa:d6:f6:91: 1e:4d:8a:38:71:fc:62:aa:6e:50:cb:30:3c:4c:d0: d1:f2:c5:8a:5d:42:02:e2:d7:46:55:26:3d:0d:fd: 1c:61:f2:62:d5:26:22:d9:74:91:79:1b:b9:15:c7: 73:c6:94:9d:51:17:33:68:57:c5:e3:d2:03:ad:27: 32:74:22:75:0c:51:a6:cf:06:c9:81:c6:63:20:45: bc:30:28:d4:ef:20:a8:66:2c:bd:07:89:47:ca:56: 59:f1:54:e9:c7:50:8f:07:9d:78:00:09:44:17:52: ed:b9:97:25:2b:dd:c4:f3:a1:5e:b3:ca:d7:9b:8d: fc:6c:8f:09:aa:6f:bb:37:64:84:24:d1:44:d8:05: b6:ff:1a:e0:66:e3:5e:0e:45:a4:50:8f:0e:54:8f: 76:22:3b:e7:f4:e1:d4:29:8b:96:22:02:9f:70:2d: 5e:3d:e8:61:8b:22:f0:99:de:fb:32:5d:8f:8d:9f: ce:50:13:f7:a8:cd:ad:86:cc:a9:02:31:ed:84:d7: e3:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:25:C5:8C:1C:0A:09:F0:D2:32:FF:BE:06:6B:8C:08:FB:DF:BC:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/9ac4592f-54b4-32dd-9da1-2b504063b789.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 216.83.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:e3:db:d5:91:1c:76:3c:d1:88:2e:93:bf:ca:32:f2:e6:96: 07:80:95:a9:cc:f4:6a:a6:1c:d4:0b:66:95:04:87:c2:82:75: 4c:1b:68:39:d3:d3:96:16:90:40:40:01:70:6e:8f:a6:a0:81: d4:2d:e7:2b:16:f8:d4:98:f2:7a:e8:8d:6e:6e:c2:8d:64:be: 9f:a7:ac:4e:c4:3f:d0:26:ee:52:97:fe:e9:18:a6:ad:70:f6: 07:77:12:65:d0:9b:6d:18:76:33:c0:16:21:e6:41:dd:62:37: 7b:d2:37:5d:84:ed:d7:5a:80:14:1a:e3:54:25:a6:c6:56:07: a5:43:2e:ec:ef:f1:a5:66:18:bf:3f:ee:6d:2c:36:e0:27:ce: 07:08:fa:61:06:5b:9b:ed:35:9f:ca:51:58:28:d8:44:a0:06: 43:60:ab:71:00:96:a8:a5:d6:c5:4a:95:a9:4c:4e:67:c5:91: 92:de:e9:a4:b8:13:35:fe:8e:45:64:80:47:61:29:f2:0c:7f: 66:7a:fb:ec:06:78:37:58:e6:e3:79:83:93:55:33:6f:25:74: b1:1e:c3:22:4f:54:34:17:06:df:9e:cc:a7:d4:ae:e2:a0:a0: 5d:6e:fa:74:8d:c8:2e:b5:ba:3c:3b:68:c5:50:00:c0:01:41: 38:e7:e7:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnJBNP8cvX47TvRCmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI1MDUwODEzMDEwMFoXDTI1MDgwNjEzMDEwMFowLzEtMCsGA1UEAxMk NDdjMmFmOTktZjE4Mi00ZjE3LTkyYzctODExYjc4NDA4YmU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIKsmQ13iPPf4J7B+9h8VxQ4PB7cOI9sTEh2 vwMqlhVbiRplF2NXYHACqjVuZTdeH8k2ANVEafrW9pEeTYo4cfxiqm5QyzA8TNDR 8sWKXUIC4tdGVSY9Df0cYfJi1SYi2XSReRu5FcdzxpSdURczaFfF49IDrScydCJ1 DFGmzwbJgcZjIEW8MCjU7yCoZiy9B4lHylZZ8VTpx1CPB514AAlEF1LtuZclK93E 86Fes8rXm438bI8Jqm+7N2SEJNFE2AW2/xrgZuNeDkWkUI8OVI92Ijvn9OHUKYuW IgKfcC1ePehhiyLwmd77Ml2PjZ/OUBP3qM2thsypAjHthNfjPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOAlxYwcCgnw0jL/vgZrjAj737xxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvOWFjNDU5MmYtNTRiNC0z MmRkLTlkYTEtMmI1MDQwNjNiNzg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2FM4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACDj29WRHHY80Yguk7/KMvLmlgeAlanM9GqmHNQLZpUEh8KCdUwbaDnT 05YWkEBAAXBuj6aggdQt5ysW+NSY8nrojW5uwo1kvp+nrE7EP9Am7lKX/ukYpq1w 9gd3EmXQm20YdjPAFiHmQd1iN3vSN12E7ddagBQa41QlpsZWB6VDLuzv8aVmGL8/ 7m0sNuAnzgcI+mEGW5vtNZ/KUVgo2ESgBkNgq3EAlqil1sVKlalMTmfFkZLe6aS4 EzX+jkVkgEdhKfIMf2Z6++wGeDdY5uN5g5NVM28ldLEewyJPVDQXBt+ezKfUruKg oF1u+nSNyC61ujw7aMVQAMABQTjn5/M= -----END CERTIFICATE-----Generated at Sat May 10 13:22:19 2025 by rpki-client