$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/702f69c0-4ec8-311b-935d-382c2fabdcef.roa File: 702f69c0-4ec8-311b-935d-382c2fabdcef.roa (raw, json) Hash identifier: gofRv0B1lRrkWIffL7+0fQioc+jixSr57O/46CF3j2c= Subject key identifier: F8:DA:A8:6A:FC:BE:77:A8:BC:A5:7D:CC:6A:7C:DA:2A:59:18:98:73 Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F4328584A7A4B60CBB98CD4104EFBF500 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/702f69c0-4ec8-311b-935d-382c2fabdcef.roa Signing time: Fri 11 Jul 2025 01:00:51 +0000 ROA not before: Fri 11 Jul 2025 01:00:51 +0000 ROA not after: Thu 09 Oct 2025 01:00:51 +0000 asID: 13335 IP address blocks: 216.224.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7a:4b:60:cb:b9:8c:d4:10:4e:fb:f5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Jul 11 01:00:51 2025 GMT Not After : Oct 9 01:00:51 2025 GMT Subject: CN=b509dbd3-4d1f-4952-949f-95dc65d5ec7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c7:d9:8a:21:81:4b:51:60:44:de:ff:09:5d: 9f:0e:24:e6:b0:d0:ce:f7:09:20:8e:59:86:7c:a9: 4e:9b:24:14:dd:95:3c:98:7a:d3:8d:1d:d1:fc:89: 01:1a:00:71:53:68:f8:56:3c:dc:a5:de:c2:3b:5e: 96:f3:3a:9e:08:99:f5:b1:14:5c:bc:78:61:4d:cb: 4d:67:e5:39:6e:fb:3c:ae:33:e4:3d:93:f8:6b:65: 82:83:06:bf:22:d0:ba:08:ff:da:ed:50:c1:14:14: 8d:0e:61:d0:82:54:55:b8:f1:08:34:64:75:4f:26: 4e:54:1c:3e:a8:45:0c:74:07:a7:93:ea:7f:9b:da: 13:11:85:64:3d:ee:6f:d1:da:0b:65:16:35:fc:49: 37:96:f5:fd:70:35:21:1e:50:49:1e:eb:62:bb:9d: 62:c3:14:43:d2:36:1b:ae:90:98:38:b5:3a:6b:8c: 57:65:79:c7:9f:9b:01:19:72:12:a9:0f:7a:cd:3b: 45:5b:b4:6e:c0:e2:5f:6a:14:18:1a:1d:f8:5e:6e: e8:38:d8:fe:fb:a6:37:01:8a:1c:44:86:ad:28:b8: a1:6a:93:9a:ef:42:93:0b:2a:b1:8a:88:53:a3:be: 79:bc:4d:8a:b1:c0:94:8a:5e:5d:3a:57:9a:7d:51: 7c:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:DA:A8:6A:FC:BE:77:A8:BC:A5:7D:CC:6A:7C:DA:2A:59:18:98:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/702f69c0-4ec8-311b-935d-382c2fabdcef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 216.224.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:85:de:9c:93:3e:2f:6c:71:ff:88:0b:a3:e1:14:8a:c1:0b: 3e:cb:57:20:84:a1:24:4b:08:db:d5:39:c5:98:6c:18:8b:84: 47:e1:ab:96:c0:de:bd:de:0d:69:35:16:56:20:69:75:d3:e5: 6e:fc:5a:40:ba:79:23:d6:ae:c6:9d:83:b4:81:bf:7f:52:9f: b8:5d:49:4f:3b:8d:2d:0e:1f:ed:59:58:94:6f:70:1a:58:1a: 50:5e:79:69:11:ba:65:65:c5:d4:cc:fe:f6:0c:3e:28:ee:65: 0c:d1:a3:60:f8:c5:6a:83:96:e8:7f:f4:c1:9b:2c:85:40:17: 18:d0:ba:d6:5d:c1:51:ae:57:36:7b:7c:2c:83:a4:1f:b6:5c: 55:15:7b:a2:92:7e:d9:d6:82:47:ce:2f:cd:08:e2:1f:76:1e: e0:0e:99:f0:a8:04:19:6d:3b:ea:59:db:73:d0:13:92:6e:d7: 47:a3:47:f1:43:6e:bd:64:14:b7:f4:54:68:ed:f6:e1:3c:22: 42:8e:04:7b:23:7a:d7:bd:f6:b5:be:70:8a:87:1d:09:5f:9c: b0:95:04:28:1e:df:05:bd:8f:c2:44:90:9d:c5:ed:60:cf:c1: 1f:1b:8e:b1:b7:cc:31:e7:cc:99:aa:5e:0a:a8:89:fe:c6:88: 76:e3:b4:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp6S2DLuYzUEE779QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI1MDcxMTAxMDA1MVoXDTI1MTAwOTAxMDA1MVowLzEtMCsGA1UEAxMk YjUwOWRiZDMtNGQxZi00OTUyLTk0OWYtOTVkYzY1ZDVlYzdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMfZiiGBS1FgRN7/CV2fDiTmsNDO9wkgjlmG fKlOmyQU3ZU8mHrTjR3R/IkBGgBxU2j4Vjzcpd7CO16W8zqeCJn1sRRcvHhhTctN Z+U5bvs8rjPkPZP4a2WCgwa/ItC6CP/a7VDBFBSNDmHQglRVuPEINGR1TyZOVBw+ qEUMdAenk+p/m9oTEYVkPe5v0doLZRY1/Ek3lvX9cDUhHlBJHutiu51iwxRD0jYb rpCYOLU6a4xXZXnHn5sBGXISqQ96zTtFW7RuwOJfahQYGh34Xm7oONj++6Y3AYoc RIatKLihapOa70KTCyqxiohTo755vE2KscCUil5dOleafVF8MQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPjaqGr8vneovKV9zGp82ipZGJhzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvNzAyZjY5YzAtNGVjOC0z MTFiLTkzNWQtMzgyYzJmYWJkY2VmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OB5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHyF3pyTPi9scf+IC6PhFIrBCz7LVyCEoSRLCNvVOcWYbBiLhEfhq5bA 3r3eDWk1FlYgaXXT5W78WkC6eSPWrsadg7SBv39Sn7hdSU87jS0OH+1ZWJRvcBpY GlBeeWkRumVlxdTM/vYMPijuZQzRo2D4xWqDluh/9MGbLIVAFxjQutZdwVGuVzZ7 fCyDpB+2XFUVe6KSftnWgkfOL80I4h92HuAOmfCoBBltO+pZ23PQE5Ju10ejR/FD br1kFLf0VGjt9uE8IkKOBHsjete99rW+cIqHHQlfnLCVBCge3wW9j8JEkJ3F7WDP wR8bjrG3zDHnzJmqXgqoif7GiHbjtNk= -----END CERTIFICATE-----Generated at Tue Jul 22 11:54:16 2025 by rpki-client