$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/cad770ff-8ba0-3986-8c3b-1e1353e0da01.roa File: cad770ff-8ba0-3986-8c3b-1e1353e0da01.roa (raw, json) Hash identifier: 29cOHSF6ASKeeCdCR9zo2FWmgPK2DeNWo0i6s5sUyos= Subject key identifier: C4:84:52:5D:2B:77:56:9A:92:93:E8:6D:98:FD:4A:A0:5F:AD:10:78 Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F4328584A480AEA82B0D0C6A1D9C35E00 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/cad770ff-8ba0-3986-8c3b-1e1353e0da01.roa Signing time: Mon 23 Jun 2025 01:00:49 +0000 ROA not before: Mon 23 Jun 2025 01:00:49 +0000 ROA not after: Sun 21 Sep 2025 01:00:49 +0000 asID: 211373 IP address blocks: 96.43.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:48:0a:ea:82:b0:d0:c6:a1:d9:c3:5e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Jun 23 01:00:49 2025 GMT Not After : Sep 21 01:00:49 2025 GMT Subject: CN=549c249e-50d0-4d85-b58b-e0f0e3fe22d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:5b:e9:59:36:9d:c5:c0:4e:e3:3b:f6:8f:0b: 43:0e:82:30:7e:79:53:dd:e2:94:e1:02:bb:c0:c1: 9d:12:56:24:75:81:77:44:56:8f:79:b4:d7:3e:5a: 61:c7:7e:5f:84:39:3a:2b:88:86:39:ae:d2:e2:d1: 8a:77:14:6c:65:94:91:4a:ff:f4:d9:33:bc:e2:52: 46:62:fc:00:b2:5a:60:f9:0e:b6:a0:c4:0b:11:91: da:03:02:22:2d:5e:93:6d:0e:19:11:42:8c:34:c0: f7:3f:a7:0d:06:4c:db:2f:49:6e:a6:88:ec:82:ff: 93:af:45:32:3c:24:2f:2e:ad:2e:81:14:2d:ec:f2: 88:68:1f:af:89:ee:fc:02:61:73:ad:e9:01:71:3c: b0:e6:00:01:cd:91:82:1a:06:53:40:41:e6:22:13: 4f:9f:67:69:12:60:f1:50:8b:2b:42:f9:de:11:ca: 82:5f:d8:0a:4d:80:8d:6b:3d:db:ec:3d:cb:77:3c: 89:b5:7e:97:ee:76:d1:75:b3:56:f9:61:51:72:26: 7e:2c:8c:cb:d5:14:f7:f3:e1:7e:70:46:8a:40:c0: 37:36:81:ac:79:e0:ad:34:38:4a:de:58:df:6d:d5: 33:b3:77:d1:09:0c:55:8e:be:ae:91:83:13:65:ae: 67:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:84:52:5D:2B:77:56:9A:92:93:E8:6D:98:FD:4A:A0:5F:AD:10:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/cad770ff-8ba0-3986-8c3b-1e1353e0da01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 96.43.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:20:38:a5:0d:66:3b:72:a1:2b:14:54:47:8d:84:0a:49:65: d4:22:d9:58:68:7b:14:8e:f7:97:8e:f8:c7:d5:cc:4d:c2:45: 52:15:26:d1:79:a4:7b:1a:1d:e0:e3:a0:24:76:77:3f:42:e6: 10:59:b8:c2:04:77:c1:46:88:d2:47:24:19:64:4e:19:f7:6b: 2c:95:ab:7b:f6:6b:26:7d:ee:8c:78:bf:61:6a:85:c7:d6:f4: a6:70:8f:cf:e8:fb:7e:48:4b:2f:0c:9b:fd:81:dd:2c:4b:fa: ca:b3:04:d6:9b:4d:1d:af:46:d8:75:31:5d:47:5f:e4:4c:0d: 3a:b5:8b:40:b0:b5:4f:63:c2:0b:49:b4:d5:f6:22:a6:ac:9f: 84:fe:ae:32:3a:0f:00:60:c8:64:4a:51:12:df:09:2a:6b:db: 66:cc:7c:9b:cd:8f:6d:51:67:5d:13:4b:88:8e:72:15:77:2d: b4:c2:b3:50:e2:f8:bf:30:9e:42:9a:45:92:0b:c7:4a:b8:07: b6:83:b7:83:0c:a3:0a:a6:28:67:9e:1b:91:70:58:74:7e:c0: db:b3:e8:24:43:e5:94:71:a9:57:0e:27:76:0c:55:46:cb:39: 9c:70:22:1a:7f:75:98:24:03:dd:2e:73:64:d2:93:f3:48:8c: c7:0a:45:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpICuqCsNDGodnDXgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI1MDYyMzAxMDA0OVoXDTI1MDkyMTAxMDA0OVowLzEtMCsGA1UEAxMk NTQ5YzI0OWUtNTBkMC00ZDg1LWI1OGItZTBmMGUzZmUyMmQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7VvpWTadxcBO4zv2jwtDDoIwfnlT3eKU4QK7 wMGdElYkdYF3RFaPebTXPlphx35fhDk6K4iGOa7S4tGKdxRsZZSRSv/02TO84lJG YvwAslpg+Q62oMQLEZHaAwIiLV6TbQ4ZEUKMNMD3P6cNBkzbL0lupojsgv+Tr0Uy PCQvLq0ugRQt7PKIaB+vie78AmFzrekBcTyw5gABzZGCGgZTQEHmIhNPn2dpEmDx UIsrQvneEcqCX9gKTYCNaz3b7D3LdzyJtX6X7nbRdbNW+WFRciZ+LIzL1RT38+F+ cEaKQMA3NoGseeCtNDhK3ljfbdUzs3fRCQxVjr6ukYMTZa5n3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMSEUl0rd1aakpPobZj9SqBfrRB4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvY2FkNzcwZmYtOGJhMC0z OTg2LThjM2ItMWUxMzUzZTBkYTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYCtmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACogOKUNZjtyoSsUVEeNhApJZdQi2VhoexSO95eO+MfVzE3CRVIVJtF5 pHsaHeDjoCR2dz9C5hBZuMIEd8FGiNJHJBlkThn3ayyVq3v2ayZ97ox4v2FqhcfW 9KZwj8/o+35ISy8Mm/2B3SxL+sqzBNabTR2vRth1MV1HX+RMDTq1i0CwtU9jwgtJ tNX2Iqasn4T+rjI6DwBgyGRKURLfCSpr22bMfJvNj21RZ10TS4iOchV3LbTCs1Di +L8wnkKaRZILx0q4B7aDt4MMowqmKGeeG5FwWHR+wNuz6CRD5ZRxqVcOJ3YMVUbL OZxwIhp/dZgkA90uc2TSk/NIjMcKRfU= -----END CERTIFICATE-----Generated at Sun Jun 29 09:08:27 2025 by rpki-client