$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/5af8aa60-dc6e-369b-b0d6-c972a159f9e0.roa File: 5af8aa60-dc6e-369b-b0d6-c972a159f9e0.roa (raw, json) Hash identifier: ve1bAS/KA1o6MaQcdOoYE54x073hAcZ4HmMOGftSz8w= Subject key identifier: 0F:7E:E8:42:81:EE:A7:AE:5D:FA:C9:80:71:49:3F:FA:20:5A:C3:59 Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F4328584A0626E6522A1E6E07A60D3C00 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/5af8aa60-dc6e-369b-b0d6-c972a159f9e0.roa Signing time: Fri 30 May 2025 10:33:59 +0000 ROA not before: Fri 30 May 2025 10:33:59 +0000 ROA not after: Thu 28 Aug 2025 10:33:59 +0000 asID: 2914 IP address blocks: 216.83.40.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:06:26:e6:52:2a:1e:6e:07:a6:0d:3c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: May 30 10:33:59 2025 GMT Not After : Aug 28 10:33:59 2025 GMT Subject: CN=89de4520-28cf-47be-af08-c5514921015e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:67:ab:ca:0e:1c:80:e1:69:92:10:8e:77:32: 67:bd:7a:63:47:bd:c9:76:3a:94:8f:57:c4:82:57: 7f:3e:6d:be:ba:e9:18:5b:fd:b9:0a:15:10:43:36: c9:3c:70:1d:be:06:bd:21:d5:da:e8:ff:7b:d9:1b: de:06:b3:4d:25:55:17:f5:b4:9f:7f:a7:6f:4a:b3: 62:d5:63:38:0c:6d:e6:70:4c:d2:95:4e:b1:9a:ba: 42:bc:65:7b:c3:7f:1f:ae:4c:14:a3:03:ab:37:d9: 26:c4:b7:ae:25:fb:30:31:be:02:b1:04:fb:c3:96: 0a:33:21:81:2e:95:2c:e5:c6:08:44:78:19:bf:41: 5f:58:35:5f:aa:50:64:d8:f5:a3:b0:bb:eb:06:56: 61:f7:ad:b1:14:76:c3:fd:f2:48:b1:d0:f0:a6:49: 07:c9:59:02:b1:aa:da:0a:a6:f5:5a:d7:8f:85:75: f9:1b:10:5f:c2:9a:dd:cb:24:43:dc:9a:83:aa:cf: 3a:4e:91:6d:2e:71:13:cb:0f:47:98:3b:d9:3f:19: f7:d1:43:e5:db:c0:61:0a:61:01:43:d3:21:01:38: 31:02:f9:31:f2:25:2c:9a:58:24:69:dd:ee:b1:a8: 37:db:4b:1e:61:79:fb:0f:9d:80:77:26:70:67:34: ef:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:7E:E8:42:81:EE:A7:AE:5D:FA:C9:80:71:49:3F:FA:20:5A:C3:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/5af8aa60-dc6e-369b-b0d6-c972a159f9e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 216.83.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:13:c3:d0:4c:5b:a7:a6:26:b8:a8:4a:5e:1c:08:48:db:a0: 7e:07:15:47:aa:e7:61:b3:79:56:30:04:7b:1a:d5:31:42:08: 91:dd:0a:54:dc:df:8f:be:15:f6:03:b3:74:a1:3a:2f:17:48: 0b:09:a7:d0:c7:72:ef:12:d0:cd:48:a8:a3:53:9a:51:39:78: 78:de:2c:4d:5d:66:2e:c9:39:35:a5:48:a2:71:27:93:68:a3: d7:e9:a5:a0:0e:f5:5a:11:e7:8e:60:09:96:1c:de:65:93:98: 7f:2d:0b:2e:92:b6:f6:ce:ee:3a:38:50:6c:24:58:34:0e:bb: da:76:7d:a1:d7:04:7b:50:34:fb:4c:35:b2:76:39:e2:d3:d0: 63:4b:ea:cf:5d:dc:93:a0:19:04:28:8d:46:09:72:2d:c0:22: d1:b6:62:fb:f1:f3:75:b8:ae:77:bf:ca:f7:3f:c4:6f:86:3b: 7f:37:73:ef:02:3d:38:fe:91:0d:fa:c3:24:c3:b8:ff:00:eb: ee:ed:e9:ff:f6:0b:01:7e:e2:ae:41:4a:2d:d4:30:35:df:69: 75:a1:2f:9d:bd:ce:42:59:7c:d0:99:27:21:01:80:d8:ae:25: 38:2e:01:dc:55:4c:d8:c6:58:4f:16:a9:8f:e4:2b:a4:05:91: 9d:42:7a:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoGJuZSKh5uB6YNPAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI1MDUzMDEwMzM1OVoXDTI1MDgyODEwMzM1OVowLzEtMCsGA1UEAxMk ODlkZTQ1MjAtMjhjZi00N2JlLWFmMDgtYzU1MTQ5MjEwMTVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGeryg4cgOFpkhCOdzJnvXpjR73JdjqUj1fE gld/Pm2+uukYW/25ChUQQzbJPHAdvga9IdXa6P972RveBrNNJVUX9bSff6dvSrNi 1WM4DG3mcEzSlU6xmrpCvGV7w38frkwUowOrN9kmxLeuJfswMb4CsQT7w5YKMyGB LpUs5cYIRHgZv0FfWDVfqlBk2PWjsLvrBlZh962xFHbD/fJIsdDwpkkHyVkCsara Cqb1WtePhXX5GxBfwprdyyRD3JqDqs86TpFtLnETyw9HmDvZPxn30UPl28BhCmEB Q9MhATgxAvkx8iUsmlgkad3usag320seYXn7D52AdyZwZzTvtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA9+6EKB7qeuXfrJgHFJP/ogWsNZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvNWFmOGFhNjAtZGM2ZS0z NjliLWIwZDYtYzk3MmExNTlmOWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2FMoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD4Tw9BMW6emJrioSl4cCEjboH4HFUeq52GzeVYwBHsa1TFCCJHdClTc 34++FfYDs3ShOi8XSAsJp9DHcu8S0M1IqKNTmlE5eHjeLE1dZi7JOTWlSKJxJ5No o9fppaAO9VoR545gCZYc3mWTmH8tCy6StvbO7jo4UGwkWDQOu9p2faHXBHtQNPtM NbJ2OeLT0GNL6s9d3JOgGQQojUYJci3AItG2Yvvx83W4rne/yvc/xG+GO383c+8C PTj+kQ36wyTDuP8A6+7t6f/2CwF+4q5BSi3UMDXfaXWhL529zkJZfNCZJyEBgNiu JTguAdxVTNjGWE8WqY/kK6QFkZ1CepY= -----END CERTIFICATE-----Generated at Thu Jun 5 18:39:06 2025 by rpki-client