$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/25a977fe-29ef-3042-9e24-ed4e07d83c91.roa File: 25a977fe-29ef-3042-9e24-ed4e07d83c91.roa (raw, json) Hash identifier: 9zOk9DSTuMtOJnI+/gjv8l9L3PzxkGCF6s+zVGFdzS8= Subject key identifier: CF:23:4C:79:48:DC:C4:ED:91:CA:F4:AA:FC:18:D3:28:0C:04:71:F9 Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F4328584A18954A1D55D96DEC22BE6170 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/25a977fe-29ef-3042-9e24-ed4e07d83c91.roa Signing time: Fri 06 Jun 2025 01:00:50 +0000 ROA not before: Fri 06 Jun 2025 01:00:50 +0000 ROA not after: Thu 04 Sep 2025 01:00:50 +0000 asID: 19786 IP address blocks: 216.224.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:18:95:4a:1d:55:d9:6d:ec:22:be:61:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Jun 6 01:00:50 2025 GMT Not After : Sep 4 01:00:50 2025 GMT Subject: CN=96513d3b-1c3e-4237-913d-5c95532483ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:39:25:51:8d:c5:14:49:2f:a3:2a:8b:32:a3: 1c:5d:3c:c8:9a:f5:79:25:9b:83:0c:06:e7:f3:45: da:c4:1a:05:9b:4e:9e:12:4f:5a:66:69:a0:71:f1: 49:49:11:5e:f8:4b:49:ce:77:d2:d1:5a:46:40:10: b4:6d:62:eb:05:fd:3e:ca:65:c5:5d:da:61:aa:14: a1:31:bd:ec:d0:0b:df:a9:64:41:c9:73:92:43:0a: b8:2d:29:7a:a1:7b:f7:b5:10:b7:89:84:c5:29:7a: e1:6e:ab:80:ab:01:29:c5:ca:ce:19:28:ba:53:46: 7f:aa:69:9d:1b:e4:9c:59:35:66:89:84:41:06:d6: 2b:46:e5:16:5b:2f:3b:5d:04:0c:1d:cf:43:2b:41: b5:59:8a:8e:84:c5:cb:60:85:16:47:27:2c:e5:3b: 17:96:8e:a1:06:3c:25:f4:a3:9f:c1:d3:9a:58:63: 5c:b9:6c:62:28:05:e6:af:ab:18:9d:e2:ad:37:5c: 7f:45:1b:86:75:c6:ed:b2:95:31:38:ba:18:9f:d7: 3b:12:14:33:17:d1:59:63:12:61:b9:2f:d3:23:fd: 67:a0:2e:c4:0f:29:7f:26:e9:98:2f:ca:79:c8:37: f7:63:f0:eb:27:98:0d:40:1f:2e:62:ae:2a:cb:33: 93:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:23:4C:79:48:DC:C4:ED:91:CA:F4:AA:FC:18:D3:28:0C:04:71:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/25a977fe-29ef-3042-9e24-ed4e07d83c91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 216.224.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:ab:83:e8:e0:b4:fa:a5:e5:6c:ed:09:c3:c0:e2:63:d6:6d: 42:69:37:ed:23:f4:73:8e:1f:2f:64:96:4c:98:a4:c3:2a:05: 5b:a9:41:8a:9a:5f:e1:67:21:47:1b:10:8c:2b:fa:0e:cb:23: 39:c5:42:b7:72:71:75:f1:25:35:40:4b:85:2b:ab:9f:8d:2c: dc:10:e3:b0:41:c0:b2:ef:bd:cb:b0:ce:86:c4:33:2e:23:8b: 58:02:49:5d:57:c9:c1:d5:ff:54:89:bd:28:0c:12:96:43:76: 9e:83:f6:01:94:6f:b0:e7:53:d4:a5:2d:b8:83:bc:ae:f9:f3: 80:1d:f2:a6:6c:3a:90:ba:25:31:aa:2d:48:55:6d:48:16:16: a7:b2:80:1e:6f:32:87:6b:a6:aa:70:5a:f5:cc:62:1b:7c:cf: 7b:be:6a:91:b6:ff:ea:db:83:42:3f:ff:f8:77:d4:3c:ea:f8: c9:d4:f6:06:b4:e0:71:7e:c8:72:2f:c9:63:3b:44:32:0d:9b: 35:42:fe:76:9b:7c:87:99:a1:e9:49:74:97:a0:ce:63:a4:86: 61:b2:75:7b:93:4a:b0:aa:10:7f:c7:27:d4:74:2c:79:bb:43: c5:99:f0:6b:12:15:77:60:6d:3d:09:95:32:a0:4e:9a:42:ef: e3:6a:44:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoYlUodVdlt7CK+YXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI1MDYwNjAxMDA1MFoXDTI1MDkwNDAxMDA1MFowLzEtMCsGA1UEAxMk OTY1MTNkM2ItMWMzZS00MjM3LTkxM2QtNWM5NTUzMjQ4M2VhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDklUY3FFEkvoyqLMqMcXTzImvV5JZuDDAbn 80XaxBoFm06eEk9aZmmgcfFJSRFe+EtJznfS0VpGQBC0bWLrBf0+ymXFXdphqhSh Mb3s0AvfqWRByXOSQwq4LSl6oXv3tRC3iYTFKXrhbquAqwEpxcrOGSi6U0Z/qmmd G+ScWTVmiYRBBtYrRuUWWy87XQQMHc9DK0G1WYqOhMXLYIUWRycs5TsXlo6hBjwl 9KOfwdOaWGNcuWxiKAXmr6sYneKtN1x/RRuGdcbtspUxOLoYn9c7EhQzF9FZYxJh uS/TI/1noC7EDyl/JumYL8p5yDf3Y/DrJ5gNQB8uYq4qyzOTPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM8jTHlI3MTtkcr0qvwY0ygMBHH5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvMjVhOTc3ZmUtMjllZi0z MDQyLTllMjQtZWQ0ZTA3ZDgzYzkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OB7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGurg+jgtPql5WztCcPA4mPWbUJpN+0j9HOOHy9klkyYpMMqBVupQYqa X+FnIUcbEIwr+g7LIznFQrdycXXxJTVAS4Urq5+NLNwQ47BBwLLvvcuwzobEMy4j i1gCSV1XycHV/1SJvSgMEpZDdp6D9gGUb7DnU9SlLbiDvK7584Ad8qZsOpC6JTGq LUhVbUgWFqeygB5vModrpqpwWvXMYht8z3u+apG2/+rbg0I///h31Dzq+MnU9ga0 4HF+yHIvyWM7RDINmzVC/nabfIeZoelJdJegzmOkhmGydXuTSrCqEH/HJ9R0LHm7 Q8WZ8GsSFXdgbT0JlTKgTppC7+NqRIg= -----END CERTIFICATE-----Generated at Sun Jun 8 07:16:40 2025 by rpki-client