$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/aad407e5-2405-3161-a2de-56e1b758c3aa.roa File: aad407e5-2405-3161-a2de-56e1b758c3aa.roa (raw, json) Hash identifier: NN4LgnIKG5uQlIQsLm2dedF8p1XRRnPgI2NfBO8nmFw= Subject key identifier: 5D:4C:C2:BA:61:5D:AB:15:DF:9C:A2:8B:AE:22:70:9A:7E:F9:42:25 Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F4328584A511041112CAB693B200C2E80 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/aad407e5-2405-3161-a2de-56e1b758c3aa.roa Signing time: Thu 26 Jun 2025 06:33:59 +0000 ROA not before: Thu 26 Jun 2025 06:33:59 +0000 ROA not after: Wed 24 Sep 2025 06:33:59 +0000 asID: 152868 IP address blocks: 216.224.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:51:10:41:11:2c:ab:69:3b:20:0c:2e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Jun 26 06:33:59 2025 GMT Not After : Sep 24 06:33:59 2025 GMT Subject: CN=705daa9c-b610-469c-b01b-10fbd1fd4222 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:47:57:57:bc:31:5c:4a:f2:03:e2:04:49:a0: 17:bc:a2:f4:6e:8a:8e:3a:b1:ee:c1:f9:c6:c5:2a: 02:5d:7e:87:d7:8f:1b:8e:62:1c:35:05:d9:e0:c2: 00:fb:29:6f:cb:9e:3f:62:7a:ff:62:af:2d:09:61: 3b:41:37:02:b1:59:f0:69:d7:23:07:e2:1d:5f:6b: 5c:0f:2a:d6:ca:ca:05:d9:e1:27:53:98:99:9f:7c: 74:dd:c2:08:38:ff:8d:67:19:14:ef:58:60:0b:21: 43:51:a3:2f:a6:6c:d6:19:bc:f8:6d:b6:b6:40:7a: a1:64:5a:5b:2b:df:fc:bb:1f:8d:ec:53:90:a8:3e: 01:66:41:08:f4:e6:55:cb:6f:61:53:ea:f5:9e:c8: 85:37:49:74:2b:22:64:ea:fb:bd:33:1d:a9:c6:3d: 04:f7:e9:fb:dd:e7:76:ed:ff:4a:e5:3a:c3:b2:65: e4:0b:08:58:e4:a6:76:ee:ce:3b:84:33:64:59:06: a1:35:58:37:40:77:57:fa:63:2a:06:a1:5a:93:13: 45:5a:7d:09:d3:d5:93:06:67:7f:d4:eb:13:92:84: 54:ff:37:3c:e6:c5:0d:e2:7f:64:6f:d1:ea:6c:9d: 63:ee:17:22:68:bf:fc:60:ef:28:30:05:d7:83:15: c9:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:4C:C2:BA:61:5D:AB:15:DF:9C:A2:8B:AE:22:70:9A:7E:F9:42:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/aad407e5-2405-3161-a2de-56e1b758c3aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 216.224.115.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:b6:ab:13:49:19:30:6a:00:f0:4a:d2:7e:61:d5:42:f5:0e: 5d:b4:9e:5a:be:48:4a:b0:49:20:f5:8e:73:01:29:ee:54:ee: de:5a:bc:72:27:45:e8:72:75:a6:87:1e:92:74:ee:cc:3b:11: 44:55:b0:39:5c:d0:82:e2:ea:86:0e:3c:65:b7:e8:a8:65:01: 1c:84:d5:64:cd:04:03:64:33:82:13:e2:e3:81:3a:7a:c3:fc: 1b:4a:ba:48:1f:84:74:49:69:64:49:b5:0c:95:15:3b:ca:fe: d1:69:ee:38:d7:46:83:09:e9:1d:a8:1e:7a:ed:51:59:8b:45: 93:7b:8a:9e:9c:37:69:e9:5a:86:04:34:4b:78:23:27:88:8e: 7e:7c:cf:ee:76:72:d3:b3:8a:cc:ca:5b:4c:d2:b1:f8:6d:2f: 01:4c:7c:e4:98:40:f2:d7:e5:51:8c:90:29:a6:ff:4a:0c:72: 18:b2:c8:17:ca:2a:02:08:e3:37:43:ef:92:50:f7:06:9d:e1: 56:4a:1b:b6:f0:71:93:f1:f6:87:b3:59:ae:1c:17:de:b3:e1: 9e:fa:6f:38:3f:9f:ef:d4:e6:96:ad:f5:3b:87:c5:0d:65:44: 95:78:0c:65:f1:25:64:ca:60:78:9d:f4:40:c5:10:d8:c9:a2: 50:3b:14:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpREEERLKtpOyAMLoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI1MDYyNjA2MzM1OVoXDTI1MDkyNDA2MzM1OVowLzEtMCsGA1UEAxMk NzA1ZGFhOWMtYjYxMC00NjljLWIwMWItMTBmYmQxZmQ0MjIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEdXV7wxXEryA+IESaAXvKL0boqOOrHuwfnG xSoCXX6H148bjmIcNQXZ4MIA+ylvy54/Ynr/Yq8tCWE7QTcCsVnwadcjB+IdX2tc DyrWysoF2eEnU5iZn3x03cIIOP+NZxkU71hgCyFDUaMvpmzWGbz4bba2QHqhZFpb K9/8ux+N7FOQqD4BZkEI9OZVy29hU+r1nsiFN0l0KyJk6vu9Mx2pxj0E9+n73ed2 7f9K5TrDsmXkCwhY5KZ27s47hDNkWQahNVg3QHdX+mMqBqFakxNFWn0J09WTBmd/ 1OsTkoRU/zc85sUN4n9kb9HqbJ1j7hciaL/8YO8oMAXXgxXJVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF1MwrphXasV35yii64icJp++UIlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvYWFkNDA3ZTUtMjQwNS0z MTYxLWEyZGUtNTZlMWI3NThjM2FhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OBzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGO2qxNJGTBqAPBK0n5h1UL1Dl20nlq+SEqwSSD1jnMBKe5U7t5avHIn RehydaaHHpJ07sw7EURVsDlc0ILi6oYOPGW36KhlARyE1WTNBANkM4IT4uOBOnrD /BtKukgfhHRJaWRJtQyVFTvK/tFp7jjXRoMJ6R2oHnrtUVmLRZN7ip6cN2npWoYE NEt4IyeIjn58z+52ctOziszKW0zSsfhtLwFMfOSYQPLX5VGMkCmm/0oMchiyyBfK KgII4zdD75JQ9wad4VZKG7bwcZPx9oezWa4cF96z4Z76bzg/n+/U5pat9TuHxQ1l RJV4DGXxJWTKYHid9EDFENjJolA7FFo= -----END CERTIFICATE-----Generated at Tue Jul 1 16:11:55 2025 by rpki-client