$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/09d2f343-ab41-3977-b59f-c0d921d8e7d0.roa File: 09d2f343-ab41-3977-b59f-c0d921d8e7d0.roa (raw, json) Hash identifier: LhHkY1CIDyiy+vD7PZOrFF3K6WNqbl7fR/i8F/hFv6U= Subject key identifier: 0B:C0:D0:B0:59:7F:CA:9D:11:DB:6F:1F:6D:57:26:55:72:1B:5D:A7 Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F4328584A66C07325D968F9EA5245AE00 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/09d2f343-ab41-3977-b59f-c0d921d8e7d0.roa Signing time: Fri 04 Jul 2025 01:00:49 +0000 ROA not before: Fri 04 Jul 2025 01:00:49 +0000 ROA not after: Thu 02 Oct 2025 01:00:49 +0000 asID: 7018 IP address blocks: 69.176.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:66:c0:73:25:d9:68:f9:ea:52:45:ae:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Jul 4 01:00:49 2025 GMT Not After : Oct 2 01:00:49 2025 GMT Subject: CN=e037612e-8fef-4d99-bd9f-7606f9aa25d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:29:d5:92:ae:43:42:d8:5f:84:32:f5:8c:1b: de:d8:b8:b1:e7:84:92:84:ca:c2:97:b9:ad:90:54: 16:0b:6a:88:8b:f2:dc:05:aa:67:92:a6:fe:f5:cc: a2:ec:94:55:58:44:3b:6f:fb:e9:7f:90:5f:28:d8: 5f:cd:7e:76:d5:bd:cc:88:a9:83:26:09:30:65:b5: 75:68:14:8f:03:fa:52:68:6b:0c:72:91:0c:2d:7b: 49:23:a4:08:c0:40:8e:ef:8f:ad:83:c8:d7:41:d0: fd:64:dc:c1:49:9f:63:6b:6d:62:04:d3:8e:be:a3: 07:99:db:c2:0f:d4:fd:97:5b:85:b9:2a:fd:b6:c2: 48:50:0b:3e:40:d7:ef:e2:d3:07:6d:3a:a2:f6:f0: 4b:4c:f9:57:37:38:a9:87:7e:72:d6:9c:6b:86:c6: d6:09:6b:bc:b6:ab:39:f6:4e:17:a2:53:dd:31:6f: f7:8e:ba:81:e9:6c:66:d9:bb:d5:93:3f:34:b5:b5: f5:69:b9:6d:96:03:4c:64:97:be:4d:e9:f4:1f:f6: f0:30:6a:74:ad:b4:df:8e:7d:5c:89:66:a7:f2:bf: aa:37:d0:9f:14:e9:f8:a1:8f:4b:7f:33:18:1c:12: ce:18:c1:82:b1:17:1b:16:38:a2:53:42:33:77:7e: d3:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:C0:D0:B0:59:7F:CA:9D:11:DB:6F:1F:6D:57:26:55:72:1B:5D:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/09d2f343-ab41-3977-b59f-c0d921d8e7d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 69.176.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:ba:11:d1:ed:7f:93:17:8e:1b:5e:c3:2b:0b:79:68:ba:de: e9:96:21:a0:7c:7c:c2:cb:02:58:32:51:c6:d1:30:97:a0:23: 9e:e8:0a:27:d3:6e:59:f1:38:5d:6e:84:bd:b5:af:1e:2e:42: fc:b7:36:b0:28:92:62:9a:82:16:aa:6a:6c:51:70:2b:8d:06: 19:fe:5d:2c:00:55:dd:67:53:d1:2f:bd:0b:c7:59:77:b6:f7: 5c:cf:53:80:94:57:ae:d0:30:e0:21:89:51:01:29:64:4d:38: 80:c7:83:b2:d3:58:5e:7d:6e:6c:c7:b4:84:96:69:f8:2d:31: 47:62:a4:a3:2f:cb:cd:6e:ed:fd:23:30:b7:65:62:35:55:1b: 10:ea:ff:fd:e9:01:22:7b:cb:7f:ee:5f:0b:06:fe:8b:70:0e: d3:ac:5c:f9:83:23:1a:9e:71:7f:05:60:ed:f1:56:57:ae:a5: 7e:90:b3:5d:07:bf:c7:1d:94:e3:8d:95:7b:22:5a:97:a6:65: b2:4a:b9:41:ba:a6:2b:c8:6c:b5:35:0a:b2:96:2e:61:17:91: e3:88:07:6e:cb:61:40:82:09:6a:44:5c:a9:fe:e6:2f:c9:0d: 55:b5:fc:c3:32:50:db:ce:30:d3:5d:21:38:10:30:c9:72:93: fd:6c:f9:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpmwHMl2Wj56lJFrgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI1MDcwNDAxMDA0OVoXDTI1MTAwMjAxMDA0OVowLzEtMCsGA1UEAxMk ZTAzNzYxMmUtOGZlZi00ZDk5LWJkOWYtNzYwNmY5YWEyNWQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhynVkq5DQthfhDL1jBve2Lix54SShMrCl7mt kFQWC2qIi/LcBapnkqb+9cyi7JRVWEQ7b/vpf5BfKNhfzX521b3MiKmDJgkwZbV1 aBSPA/pSaGsMcpEMLXtJI6QIwECO74+tg8jXQdD9ZNzBSZ9ja21iBNOOvqMHmdvC D9T9l1uFuSr9tsJIUAs+QNfv4tMHbTqi9vBLTPlXNziph35y1pxrhsbWCWu8tqs5 9k4XolPdMW/3jrqB6Wxm2bvVkz80tbX1abltlgNMZJe+Ten0H/bwMGp0rbTfjn1c iWan8r+qN9CfFOn4oY9LfzMYHBLOGMGCsRcbFjiiU0Izd37TtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAvA0LBZf8qdEdtvH21XJlVyG12nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvMDlkMmYzNDMtYWI0MS0z OTc3LWI1OWYtYzBkOTIxZDhlN2QwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARbBeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACe6EdHtf5MXjhtewysLeWi63umWIaB8fMLLAlgyUcbRMJegI57oCifT blnxOF1uhL21rx4uQvy3NrAokmKaghaqamxRcCuNBhn+XSwAVd1nU9EvvQvHWXe2 91zPU4CUV67QMOAhiVEBKWRNOIDHg7LTWF59bmzHtISWafgtMUdipKMvy81u7f0j MLdlYjVVGxDq//3pASJ7y3/uXwsG/otwDtOsXPmDIxqecX8FYO3xVleupX6Qs10H v8cdlOONlXsiWpemZbJKuUG6pivIbLU1CrKWLmEXkeOIB27LYUCCCWpEXKn+5i/J DVW1/MMyUNvOMNNdITgQMMlyk/1s+co= -----END CERTIFICATE-----Generated at Tue Jul 22 11:48:42 2025 by rpki-client