$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/df57a1e8-6013-3293-a465-84479a07a6cb.roa File: df57a1e8-6013-3293-a465-84479a07a6cb.roa (raw, json) Hash identifier: IV0hv57d8LYFDD/BiFZ3J4GcXzlWfifyy6PvCT8bFe8= Subject key identifier: B1:43:55:15:FD:B0:D5:EC:55:AA:13:70:01:48:05:8F:30:3B:40:40 Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F43285849602118E45B85616FD3CB0700 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/df57a1e8-6013-3293-a465-84479a07a6cb.roa Signing time: Mon 31 Mar 2025 23:18:07 +0000 ROA not before: Mon 31 Mar 2025 23:18:07 +0000 ROA not after: Sun 29 Jun 2025 23:18:07 +0000 asID: 62005 IP address blocks: 69.176.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:60:21:18:e4:5b:85:61:6f:d3:cb:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Mar 31 23:18:07 2025 GMT Not After : Jun 29 23:18:07 2025 GMT Subject: CN=5f70064b-c1da-464a-b3dd-989f4545420e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c3:63:21:fc:d3:70:a8:25:95:8f:06:5b:6c: 37:e6:50:4a:42:19:4d:44:56:86:98:ad:91:c6:03: 0b:7e:ab:98:fe:8c:f8:c5:f3:1c:23:ce:6a:35:48: 97:90:70:26:87:4d:39:e5:ef:e1:ac:03:a6:17:ef: 19:7f:55:d7:94:01:69:f6:d2:83:b5:2b:41:f1:6d: 9f:0d:2c:83:66:33:b1:b4:f9:ef:29:f7:de:a3:9e: 7e:2d:01:db:a5:b0:e5:f8:f6:7f:f0:e8:d5:61:a7: 98:fb:9c:29:a2:e3:10:6b:cb:d4:05:da:95:1d:1f: fa:83:4b:4f:f3:3b:1c:96:fc:4e:94:cd:0d:f7:b6: 45:0a:bc:00:96:c0:45:ac:36:7a:bf:dc:c9:30:47: ae:4f:24:fe:2d:dc:0b:bb:2b:94:4d:7e:17:60:b4: 73:e6:e7:1b:7a:9d:9c:b7:48:94:18:fe:c7:f4:b8: 67:58:b7:d3:4f:13:8c:d9:6f:b9:e5:52:f0:6b:b0: a8:5e:17:6d:c5:66:da:24:56:bd:99:01:e2:31:57: b9:40:2d:5b:75:e6:5b:59:77:70:de:f8:b8:4d:15: 88:08:10:1a:36:c7:bf:59:b4:2f:5d:a6:23:58:11: 7e:69:b9:b9:be:4d:1f:99:27:d7:72:27:0a:a8:10: 8c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:43:55:15:FD:B0:D5:EC:55:AA:13:70:01:48:05:8F:30:3B:40:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/df57a1e8-6013-3293-a465-84479a07a6cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 69.176.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:88:a7:e5:6f:b8:18:fa:43:f5:d9:b8:07:dc:13:61:4e:d9: 9a:4f:f9:cc:6b:7e:0d:95:c4:73:5a:b0:3d:fa:65:c8:a6:b7: 31:09:a5:02:d0:57:91:3d:8b:ca:29:c5:d9:a1:aa:f6:9f:7b: 45:48:62:70:85:ac:d6:89:e7:8a:df:f7:37:0b:5b:0e:40:9c: 8b:a4:0d:79:45:3a:a0:17:d9:82:e0:3e:82:f9:93:dc:5e:b7: b8:99:e4:36:98:5f:28:8e:14:a0:80:32:28:fb:9e:c8:4e:a2: b2:0c:70:ae:a6:49:d8:af:e8:bf:0e:06:56:be:88:e6:b3:b6: 7e:4c:ad:e7:e8:ee:8d:37:a4:ba:cf:68:42:66:0f:fc:69:36: d4:9b:be:a2:a6:8a:c5:f4:73:b7:c0:65:4f:b9:06:ef:e1:c6: 2d:d1:05:c5:64:99:42:1b:02:ca:3e:fa:12:c3:36:02:31:02: 0d:ec:4c:e2:fe:28:01:2c:f7:8e:3e:5c:cb:fe:67:d3:eb:d0: d7:28:66:d4:b1:a2:30:9c:9e:a4:dd:b0:d6:8b:33:13:4a:b4: 04:3b:eb:2c:95:0c:b8:86:81:ec:2f:06:40:b3:32:9c:aa:33: f6:d9:e7:02:b9:09:92:a7:35:70:93:db:ca:35:f2:8b:f0:b4: ca:a7:14:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElgIRjkW4Vhb9PLBwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI1MDMzMTIzMTgwN1oXDTI1MDYyOTIzMTgwN1owLzEtMCsGA1UEAxMk NWY3MDA2NGItYzFkYS00NjRhLWIzZGQtOTg5ZjQ1NDU0MjBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8NjIfzTcKgllY8GW2w35lBKQhlNRFaGmK2R xgMLfquY/oz4xfMcI85qNUiXkHAmh0055e/hrAOmF+8Zf1XXlAFp9tKDtStB8W2f DSyDZjOxtPnvKffeo55+LQHbpbDl+PZ/8OjVYaeY+5wpouMQa8vUBdqVHR/6g0tP 8zsclvxOlM0N97ZFCrwAlsBFrDZ6v9zJMEeuTyT+LdwLuyuUTX4XYLRz5ucbep2c t0iUGP7H9LhnWLfTTxOM2W+55VLwa7CoXhdtxWbaJFa9mQHiMVe5QC1bdeZbWXdw 3vi4TRWICBAaNse/WbQvXaYjWBF+abm5vk0fmSfXcicKqBCMvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLFDVRX9sNXsVaoTcAFIBY8wO0BAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvZGY1N2ExZTgtNjAxMy0z MjkzLWE0NjUtODQ0NzlhMDdhNmNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARbBYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGCIp+VvuBj6Q/XZuAfcE2FO2ZpP+cxrfg2VxHNasD36ZcimtzEJpQLQ V5E9i8opxdmhqvafe0VIYnCFrNaJ54rf9zcLWw5AnIukDXlFOqAX2YLgPoL5k9xe t7iZ5DaYXyiOFKCAMij7nshOorIMcK6mSdiv6L8OBla+iOaztn5Mrefo7o03pLrP aEJmD/xpNtSbvqKmisX0c7fAZU+5Bu/hxi3RBcVkmUIbAso++hLDNgIxAg3sTOL+ KAEs944+XMv+Z9Pr0NcoZtSxojCcnqTdsNaLMxNKtAQ76yyVDLiGgewvBkCzMpyq M/bZ5wK5CZKnNXCT28o18ovwtMqnFBA= -----END CERTIFICATE-----Generated at Sat May 10 05:08:01 2025 by rpki-client