$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/a1e82ba1-1e27-3adb-b1e7-e24032654fa4.roa File: a1e82ba1-1e27-3adb-b1e7-e24032654fa4.roa (raw, json) Hash identifier: cNAXrECdfhmpo+E3mFPn3rL3Y0Jalo5tVX4GzdbrT0k= Subject key identifier: B2:FF:B2:7A:E1:10:7A:FF:57:38:4F:00:FC:45:CD:D7:BA:BB:1B:63 Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F4328584A612B2190A70665E43FB59A80 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/a1e82ba1-1e27-3adb-b1e7-e24032654fa4.roa Signing time: Wed 02 Jul 2025 01:00:49 +0000 ROA not before: Wed 02 Jul 2025 01:00:49 +0000 ROA not after: Tue 30 Sep 2025 01:00:49 +0000 asID: 6402 IP address blocks: 69.176.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:61:2b:21:90:a7:06:65:e4:3f:b5:9a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Jul 2 01:00:49 2025 GMT Not After : Sep 30 01:00:49 2025 GMT Subject: CN=7a4f5565-a297-4052-91e5-3658199ee8cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:d7:03:61:9c:0d:53:9e:ee:37:40:36:d5:f9: 6e:ec:fd:c4:9d:c3:50:31:f2:b7:a4:56:76:7a:04: ff:7f:9e:fa:45:2d:47:a5:85:2b:33:77:45:7d:78: c2:cc:77:49:97:77:1f:72:03:44:15:f0:27:3c:a2: a0:1d:f4:40:1c:88:15:93:77:28:a7:d8:57:72:ad: 5a:37:d8:50:2f:fc:64:97:21:ab:8d:c6:c3:b7:66: fd:2e:35:7d:c9:d8:fb:fa:58:4c:95:c2:e9:a4:ee: 44:79:e6:8d:a3:50:72:12:ad:c2:b9:82:99:28:e1: 04:af:dc:a0:d6:34:61:a2:f4:c9:4a:cd:8c:e2:c6: dd:81:67:11:47:0a:9f:2c:03:65:79:15:ad:90:e8: 35:26:9c:5a:ea:5c:25:7f:e5:6a:a8:91:ef:57:d5: 83:37:19:f2:2f:56:ee:49:da:d8:df:d7:44:94:8d: 6a:53:34:1c:02:f4:aa:e2:79:d5:33:f7:96:da:4d: 07:ef:de:83:5c:6f:cb:a4:1d:f5:b6:99:a2:5f:79: 5d:95:6c:f0:69:21:35:cc:99:c7:46:2d:86:04:73: 96:15:41:bf:17:b0:45:81:c1:34:fd:b9:db:36:e5: 12:ad:e0:80:69:cc:49:49:fd:bd:47:77:12:c7:4d: 97:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:FF:B2:7A:E1:10:7A:FF:57:38:4F:00:FC:45:CD:D7:BA:BB:1B:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/a1e82ba1-1e27-3adb-b1e7-e24032654fa4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 69.176.92.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:bd:cd:65:fa:74:b9:39:1f:ca:79:24:2c:eb:0c:df:f1:b7: 22:7b:41:27:12:73:90:bd:f3:0f:f4:f1:7d:0c:6a:d5:ce:2c: d8:61:65:da:3c:cd:d3:35:f2:b0:ed:d8:54:f0:26:88:5e:27: 55:53:40:61:5d:dd:d5:4a:0d:47:2c:c8:bb:3c:23:c6:5d:66: b8:80:1f:e6:fb:a6:55:99:91:51:d3:22:bc:0a:c8:63:87:7d: f0:03:6b:4f:b0:12:95:7c:6a:5b:71:56:44:79:d7:3b:26:f8: c8:7b:7e:19:8a:cb:b9:11:00:3e:f8:96:25:1a:17:3b:de:75: da:52:83:16:9a:96:ef:61:2e:72:89:af:b6:59:1f:41:70:ce: 72:f5:f4:cf:5f:d4:6a:7c:f8:06:55:ad:df:17:29:00:fc:a6: a2:59:ed:42:94:e4:52:44:70:a5:3a:34:d7:2e:26:7e:1c:74: 94:c8:3c:24:26:ac:ba:80:3b:26:d5:07:8d:5e:89:63:ac:cb: 97:67:71:58:f0:bc:fb:e2:98:02:5c:62:da:5a:09:24:a8:ab: 07:98:d7:e3:82:fe:9f:05:8d:2e:87:38:a5:2d:a0:8f:26:13: b9:b4:18:f0:55:3f:a3:cc:45:52:66:9b:52:be:93:4c:e6:d5: 89:3c:08:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEphKyGQpwZl5D+1moAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI1MDcwMjAxMDA0OVoXDTI1MDkzMDAxMDA0OVowLzEtMCsGA1UEAxMk N2E0ZjU1NjUtYTI5Ny00MDUyLTkxZTUtMzY1ODE5OWVlOGNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtcDYZwNU57uN0A21flu7P3EncNQMfK3pFZ2 egT/f576RS1HpYUrM3dFfXjCzHdJl3cfcgNEFfAnPKKgHfRAHIgVk3cop9hXcq1a N9hQL/xklyGrjcbDt2b9LjV9ydj7+lhMlcLppO5EeeaNo1ByEq3CuYKZKOEEr9yg 1jRhovTJSs2M4sbdgWcRRwqfLANleRWtkOg1Jpxa6lwlf+VqqJHvV9WDNxnyL1bu SdrY39dElI1qUzQcAvSq4nnVM/eW2k0H796DXG/LpB31tpmiX3ldlWzwaSE1zJnH Ri2GBHOWFUG/F7BFgcE0/bnbNuUSreCAacxJSf29R3cSx02XKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLL/snrhEHr/VzhPAPxFzde6uxtjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvYTFlODJiYTEtMWUyNy0z YWRiLWIxZTctZTI0MDMyNjU0ZmE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARbBcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAW9zWX6dLk5H8p5JCzrDN/xtyJ7QScSc5C98w/08X0MatXOLNhhZdo8 zdM18rDt2FTwJoheJ1VTQGFd3dVKDUcsyLs8I8ZdZriAH+b7plWZkVHTIrwKyGOH ffADa0+wEpV8altxVkR51zsm+Mh7fhmKy7kRAD74liUaFzveddpSgxaalu9hLnKJ r7ZZH0FwznL19M9f1Gp8+AZVrd8XKQD8pqJZ7UKU5FJEcKU6NNcuJn4cdJTIPCQm rLqAOybVB41eiWOsy5dncVjwvPvimAJcYtpaCSSoqweY1+OC/p8FjS6HOKUtoI8m E7m0GPBVP6PMRVJmm1K+k0zm1Yk8CAY= -----END CERTIFICATE-----Generated at Tue Jul 22 11:50:31 2025 by rpki-client