$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ddca69e6-9438-397c-9f05-162b5ddfce07.roa File: ddca69e6-9438-397c-9f05-162b5ddfce07.roa (raw, json) Hash identifier: JRJq5HkCuQ2AjIRe7EXbOmCEa/9A3Kcj4KqvTZvt8Qs= Subject key identifier: E0:50:AA:57:C5:2C:31:10:25:14:22:75:AD:EF:35:8D:DA:F5:58:68 Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F4328584A66C073701ED19430F212A880 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ddca69e6-9438-397c-9f05-162b5ddfce07.roa Signing time: Fri 04 Jul 2025 01:00:49 +0000 ROA not before: Fri 04 Jul 2025 01:00:49 +0000 ROA not after: Thu 02 Oct 2025 01:00:49 +0000 asID: 834 IP address blocks: 216.83.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:66:c0:73:70:1e:d1:94:30:f2:12:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Jul 4 01:00:49 2025 GMT Not After : Oct 2 01:00:49 2025 GMT Subject: CN=5387c99a-7f14-485a-a1be-4237cf382b03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:76:0b:b9:c4:86:a0:b4:b4:25:32:f3:62:0c: 3c:e1:ea:0a:9f:f5:5f:05:3f:a5:36:f3:96:dd:8d: 70:95:7d:5c:53:39:40:3c:07:34:fe:ce:3e:ad:76: 26:cd:90:57:f9:68:e6:af:6f:10:88:0f:0f:91:21: ce:38:87:62:4e:47:dc:04:92:57:59:09:50:ad:3b: 2c:21:96:ca:1d:ca:c7:e4:17:b6:5a:3f:3e:9e:73: e8:ff:97:4a:bf:b8:d6:e0:11:49:a2:e1:ac:05:47: 34:46:49:ea:c2:fe:e3:77:04:f4:f2:0e:de:77:a3: 92:f4:f4:2b:27:c4:0a:d9:fc:b8:1c:0c:80:bb:79: 73:2e:38:1b:5a:97:d2:1b:19:48:4a:c2:50:e0:b4: 67:6d:34:82:56:ca:64:9f:91:61:6d:58:b1:35:b6: eb:1c:6e:d1:ed:ee:94:a3:55:b4:13:9a:5f:7b:79: 11:28:03:89:d4:09:bb:37:be:60:86:f4:33:64:da: 1c:6a:a3:06:99:f6:dc:0a:71:cf:7f:58:0f:6f:c5: 7d:e6:98:62:11:a4:0a:75:79:98:61:8b:e7:45:c6: df:e8:63:34:fe:31:a5:5f:28:c2:ca:7e:5f:0d:90: ca:48:d5:70:c2:c8:71:b9:26:d4:8e:66:d3:66:fb: 92:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:50:AA:57:C5:2C:31:10:25:14:22:75:AD:EF:35:8D:DA:F5:58:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ddca69e6-9438-397c-9f05-162b5ddfce07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 216.83.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:b0:26:83:15:72:d1:5f:8c:5c:66:b4:92:e3:da:d4:02:00: 0a:10:ab:58:08:b5:18:81:96:a5:72:5e:a2:7d:24:51:8f:54: 89:e3:c4:5c:b6:77:d4:84:44:5e:b9:26:09:6a:da:ae:34:50: 70:63:70:14:94:5f:d6:23:83:86:2d:04:17:d5:23:c5:9f:0b: 0f:ae:ae:33:62:a1:60:16:71:7b:bf:41:1d:bb:48:9b:0d:4e: 67:0d:95:07:ad:7a:35:e9:6e:a1:2d:82:af:c8:85:50:9c:33: 63:ac:e1:0d:b3:e0:f3:1e:02:8d:27:e1:b7:f7:52:82:4d:f8: 52:5c:b3:df:c7:0b:c7:75:38:fc:c9:e1:97:7a:bb:83:4c:84: 92:77:5d:57:c9:21:eb:18:9c:68:07:63:56:d7:28:7c:5e:05: c7:0f:28:4a:76:19:e7:fa:eb:57:41:a8:db:51:ca:c2:8c:59: 8c:10:a2:88:01:17:82:15:26:ba:a8:85:b9:1c:19:dd:8b:44: b6:6a:b2:4b:c1:08:de:3f:20:03:89:ea:98:1e:37:3c:ca:a7: 8b:f3:de:0f:9a:e8:08:11:8f:51:24:97:86:99:55:3d:6a:77: 65:1a:13:c9:48:44:78:2f:00:56:a2:ff:bf:00:e3:50:b1:87: c6:ce:a7:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpmwHNwHtGUMPISqIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI1MDcwNDAxMDA0OVoXDTI1MTAwMjAxMDA0OVowLzEtMCsGA1UEAxMk NTM4N2M5OWEtN2YxNC00ODVhLWExYmUtNDIzN2NmMzgyYjAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3YLucSGoLS0JTLzYgw84eoKn/VfBT+lNvOW 3Y1wlX1cUzlAPAc0/s4+rXYmzZBX+Wjmr28QiA8PkSHOOIdiTkfcBJJXWQlQrTss IZbKHcrH5Be2Wj8+nnPo/5dKv7jW4BFJouGsBUc0Rknqwv7jdwT08g7ed6OS9PQr J8QK2fy4HAyAu3lzLjgbWpfSGxlISsJQ4LRnbTSCVspkn5FhbVixNbbrHG7R7e6U o1W0E5pfe3kRKAOJ1Am7N75ghvQzZNocaqMGmfbcCnHPf1gPb8V95phiEaQKdXmY YYvnRcbf6GM0/jGlXyjCyn5fDZDKSNVwwshxuSbUjmbTZvuSIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOBQqlfFLDEQJRQida3vNY3a9VhoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvZGRjYTY5ZTYtOTQzOC0z OTdjLTlmMDUtMTYyYjVkZGZjZTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF2FMgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADKwJoMVctFfjFxmtJLj2tQCAAoQq1gItRiBlqVyXqJ9JFGPVInjxFy2 d9SERF65Jglq2q40UHBjcBSUX9Yjg4YtBBfVI8WfCw+urjNioWAWcXu/QR27SJsN TmcNlQetejXpbqEtgq/IhVCcM2Os4Q2z4PMeAo0n4bf3UoJN+FJcs9/HC8d1OPzJ 4Zd6u4NMhJJ3XVfJIesYnGgHY1bXKHxeBccPKEp2Gef661dBqNtRysKMWYwQoogB F4IVJrqohbkcGd2LRLZqskvBCN4/IAOJ6pgeNzzKp4vz3g+a6AgRj1Ekl4aZVT1q d2UaE8lIRHgvAFai/78A41Cxh8bOpyE= -----END CERTIFICATE-----Generated at Tue Jul 22 11:49:41 2025 by rpki-client