$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/4d61b739-1b41-3732-9d1f-021c5f422c4a.roa File: 4d61b739-1b41-3732-9d1f-021c5f422c4a.roa (raw, json) Hash identifier: 2IjDXt042hv8P0dS7xf1xC5WADBG5mcanSvKSpAmLt0= Subject key identifier: 75:6D:70:D8:AD:A6:68:B8:0B:75:1C:81:2A:90:FC:80:C0:67:C8:6B Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F432858492CB2078E82DCF8AC52B3C240 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/4d61b739-1b41-3732-9d1f-021c5f422c4a.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 211373 IP address blocks: 216.224.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b2:07:8e:82:dc:f8:ac:52:b3:c2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=38752cc6-ebe4-4240-ab4c-3c53f1ee0532 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:7c:f3:8a:9e:cf:1c:57:bc:6a:8d:95:21:d3: 84:da:25:79:ea:76:7f:cb:91:5a:64:0d:ea:66:ec: 18:b8:21:f2:4a:76:f8:ff:79:a4:a6:b8:34:c4:96: 73:a3:7d:56:f1:15:a7:3c:cd:57:34:3f:5e:c1:29: db:35:b1:a9:df:c9:50:f9:35:07:a0:5a:4b:c8:83: 18:3d:23:2c:a0:21:c6:e3:a2:a7:1e:4e:af:70:84: cf:27:fc:04:ba:85:5b:66:4e:a3:f0:36:06:63:b6: 21:54:c9:75:ae:49:cf:d1:cc:e2:12:12:ea:3d:a8: 5e:2b:18:02:1b:2e:0a:75:c0:ae:e8:f4:b1:19:3a: d0:4a:86:8e:12:05:37:cb:ec:80:b1:68:b9:87:85: 6a:f1:8a:02:83:fd:35:d8:a8:6b:e1:15:98:30:87: 09:dc:c5:4c:0e:18:ec:ad:d2:fb:39:02:9b:50:2f: 59:58:e2:52:3a:d2:81:e2:79:73:8d:ed:7a:88:b0: 6f:cd:df:a1:42:02:4f:46:35:2a:f5:6f:e4:1a:b0: f8:98:b3:60:54:5c:d4:3e:dd:9f:d8:3c:60:f1:ae: b0:32:eb:53:ed:58:cb:24:dd:a8:65:72:50:dc:fb: e3:74:77:f3:87:9d:8b:9f:9d:9f:7b:f5:8c:51:64: c5:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:6D:70:D8:AD:A6:68:B8:0B:75:1C:81:2A:90:FC:80:C0:67:C8:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/4d61b739-1b41-3732-9d1f-021c5f422c4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 216.224.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:7d:4a:e4:7d:38:49:76:e5:49:6a:1e:bd:ea:5c:d8:7a:fa: ca:24:b2:57:cd:65:ba:59:2c:b1:4b:b5:0e:f6:8c:93:58:dd: b9:6e:ad:da:ef:6a:fd:c0:38:d0:19:a9:84:db:9f:02:89:1c: 22:cb:69:82:18:ce:32:af:48:13:1a:8a:27:67:a3:a2:34:2a: 43:75:f2:f1:85:54:a2:8f:2a:88:71:93:9f:48:f0:90:47:cd: 4e:dc:54:2d:39:61:c3:a8:6d:54:34:09:ba:5a:fd:00:b7:15: 75:7d:43:66:71:7b:b9:fd:62:cc:e4:d3:9a:8a:9d:bb:c0:c3: 01:9a:56:54:0d:ad:3a:39:ec:13:3e:fe:70:f5:cb:45:b2:96: 26:58:e6:7c:63:f0:87:c0:cb:6b:fc:56:0c:25:94:ac:6f:3d: ab:58:12:3a:6a:a9:04:12:7d:20:ea:d9:1d:2e:53:1f:b7:d3: cb:3e:d7:8d:5c:64:e5:21:0b:61:d4:ad:a8:bd:76:6d:c9:2c: ad:4b:b6:04:21:9b:a4:78:eb:0e:36:84:28:d2:d1:24:93:62: db:09:52:fe:9f:58:23:dc:63:75:99:6a:7e:81:cb:ad:9a:a0: f0:da:98:8c:37:49:99:3a:3d:30:f6:dc:78:b1:ac:6b:b6:c3: d7:f7:5f:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssgeOgtz4rFKzwkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk Mzg3NTJjYzYtZWJlNC00MjQwLWFiNGMtM2M1M2YxZWUwNTMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3zzip7PHFe8ao2VIdOE2iV56nZ/y5FaZA3q ZuwYuCHySnb4/3mkprg0xJZzo31W8RWnPM1XND9ewSnbNbGp38lQ+TUHoFpLyIMY PSMsoCHG46KnHk6vcITPJ/wEuoVbZk6j8DYGY7YhVMl1rknP0cziEhLqPaheKxgC Gy4KdcCu6PSxGTrQSoaOEgU3y+yAsWi5h4Vq8YoCg/012Khr4RWYMIcJ3MVMDhjs rdL7OQKbUC9ZWOJSOtKB4nlzje16iLBvzd+hQgJPRjUq9W/kGrD4mLNgVFzUPt2f 2Dxg8a6wMutT7VjLJN2oZXJQ3PvjdHfzh52Ln52fe/WMUWTFswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHVtcNitpmi4C3UcgSqQ/IDAZ8hrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvNGQ2MWI3MzktMWI0MS0z NzMyLTlkMWYtMDIxYzVmNDIyYzRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OBwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEZ9SuR9OEl25UlqHr3qXNh6+sokslfNZbpZLLFLtQ72jJNY3blurdrv av3AONAZqYTbnwKJHCLLaYIYzjKvSBMaiidno6I0KkN18vGFVKKPKohxk59I8JBH zU7cVC05YcOobVQ0Cbpa/QC3FXV9Q2Zxe7n9Yszk05qKnbvAwwGaVlQNrTo57BM+ /nD1y0WyliZY5nxj8IfAy2v8VgwllKxvPatYEjpqqQQSfSDq2R0uUx+308s+141c ZOUhC2HUrai9dm3JLK1LtgQhm6R46w42hCjS0SSTYtsJUv6fWCPcY3WZan6By62a oPDamIw3SZk6PTD23HixrGu2w9f3X7A= -----END CERTIFICATE-----Generated at Fri Apr 4 19:22:12 2025 by rpki-client