$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/5b0ddb67-4290-3846-ac72-b1a3c945414a.roa File: 5b0ddb67-4290-3846-ac72-b1a3c945414a.roa (raw, json) Hash identifier: jYWxlLv7BOK+g493fHRA8WkOfSYrwZ7TrkjpIvwQ7FY= Subject key identifier: BE:8F:2B:F8:E1:A1:7C:B6:B8:67:C6:CF:53:73:44:2B:46:74:39:23 Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F43285849393E955CBD5150F2D5C0DC00 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/5b0ddb67-4290-3846-ac72-b1a3c945414a.roa Signing time: Tue 18 Mar 2025 01:00:38 +0000 ROA not before: Tue 18 Mar 2025 01:00:38 +0000 ROA not after: Mon 16 Jun 2025 01:00:38 +0000 asID: 26554 IP address blocks: 216.224.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:39:3e:95:5c:bd:51:50:f2:d5:c0:dc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Mar 18 01:00:38 2025 GMT Not After : Jun 16 01:00:38 2025 GMT Subject: CN=7d3fcd68-3d30-491e-a771-8f334aff7a56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:c9:88:70:0e:e5:cd:cb:ed:f6:89:1d:37:ec: 8a:9c:df:f3:31:27:27:90:39:ef:cd:16:1d:f7:ce: 78:6a:a4:c7:7d:7c:f7:77:17:3e:f0:b7:3e:ab:e5: 38:3c:93:3e:e5:d5:9e:bd:85:a4:c6:d9:eb:71:2b: e9:2b:83:86:37:f1:cb:e6:62:c5:76:41:c6:68:60: 29:f9:24:90:c5:c1:e9:50:7c:ad:77:bb:43:e0:31: a6:06:31:84:29:18:31:4b:b7:32:4a:a9:4a:47:c0: 36:fe:57:1a:f4:4a:fc:ac:4c:a8:0c:b5:1f:42:c5: 61:5c:d2:24:e5:8e:75:e6:7a:13:fa:c0:f4:bd:b9: 2c:c2:f4:05:f3:c0:17:95:7f:d1:a0:a3:51:18:eb: 4b:94:fe:c7:b6:d3:1d:c9:71:bb:50:9c:6b:77:c7: dc:e4:eb:c6:03:0b:bc:90:da:f2:94:61:9e:13:48: 52:fe:94:02:e7:6d:d9:62:55:e6:7a:3b:4c:a8:25: f6:ac:8a:c0:7e:69:ae:1a:23:04:81:4c:31:f0:0d: 29:af:0e:6c:60:95:7f:43:e6:7e:45:c6:80:3e:c2: 95:fd:03:e3:aa:00:ff:66:24:24:43:f0:8d:9d:43: fa:c9:f8:ea:d7:ba:74:2e:b7:d5:46:86:59:58:b1: 25:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:8F:2B:F8:E1:A1:7C:B6:B8:67:C6:CF:53:73:44:2B:46:74:39:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/5b0ddb67-4290-3846-ac72-b1a3c945414a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 216.224.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:a1:43:c1:14:94:3e:c9:ab:40:3a:3d:1b:d5:d3:75:91:cb: 70:87:de:7a:56:c0:ab:47:92:1b:0c:28:eb:48:ef:1b:de:79: 99:69:09:6f:e2:b8:8d:3f:9e:f6:0f:c2:ec:14:6f:a2:c3:fc: fb:a1:50:8f:4f:00:be:7a:81:e1:e2:e0:cf:e8:05:90:10:94: 1e:78:36:38:a1:17:63:9a:0a:a6:9f:b1:0e:5f:2e:f2:5b:22: 62:14:bb:92:14:75:2a:17:59:3f:be:ca:ae:a4:29:ed:ce:e8: e2:cd:bf:07:00:41:1f:6d:94:91:50:05:35:66:db:01:72:b2: 6f:92:d9:61:67:63:33:b6:df:13:36:2c:72:09:cb:54:86:80: ca:16:65:9f:59:2d:49:89:e7:90:f1:4d:5e:29:42:6a:e3:ab: 4e:bf:18:5b:90:39:1c:d5:aa:b7:c5:40:30:54:98:d4:09:33: 95:b9:3f:2e:32:cf:df:08:85:2a:3e:c5:2b:19:b8:6d:63:db: 16:eb:58:0f:64:09:ae:f2:30:8f:ff:a4:01:3e:a0:ec:56:f4: cf:04:bc:cb:d7:15:94:6c:a7:ae:d6:26:d7:c0:25:e6:14:6a: 0b:d8:9c:24:d1:8d:e5:41:e5:77:c1:fc:b6:37:e6:07:c8:8d: 48:03:6e:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk5PpVcvVFQ8tXA3AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI1MDMxODAxMDAzOFoXDTI1MDYxNjAxMDAzOFowLzEtMCsGA1UEAxMk N2QzZmNkNjgtM2QzMC00OTFlLWE3NzEtOGYzMzRhZmY3YTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3cmIcA7lzcvt9okdN+yKnN/zMScnkDnvzRYd 9854aqTHfXz3dxc+8Lc+q+U4PJM+5dWevYWkxtnrcSvpK4OGN/HL5mLFdkHGaGAp +SSQxcHpUHytd7tD4DGmBjGEKRgxS7cySqlKR8A2/lca9Er8rEyoDLUfQsVhXNIk 5Y515noT+sD0vbkswvQF88AXlX/RoKNRGOtLlP7HttMdyXG7UJxrd8fc5OvGAwu8 kNrylGGeE0hS/pQC523ZYlXmejtMqCX2rIrAfmmuGiMEgUwx8A0prw5sYJV/Q+Z+ RcaAPsKV/QPjqgD/ZiQkQ/CNnUP6yfjq17p0LrfVRoZZWLEllQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL6PK/jhoXy2uGfGz1NzRCtGdDkjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvNWIwZGRiNjctNDI5MC0z ODQ2LWFjNzItYjFhM2M5NDU0MTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OB7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIihQ8EUlD7Jq0A6PRvV03WRy3CH3npWwKtHkhsMKOtI7xveeZlpCW/i uI0/nvYPwuwUb6LD/PuhUI9PAL56geHi4M/oBZAQlB54NjihF2OaCqafsQ5fLvJb ImIUu5IUdSoXWT++yq6kKe3O6OLNvwcAQR9tlJFQBTVm2wFysm+S2WFnYzO23xM2 LHIJy1SGgMoWZZ9ZLUmJ55DxTV4pQmrjq06/GFuQORzVqrfFQDBUmNQJM5W5Py4y z98IhSo+xSsZuG1j2xbrWA9kCa7yMI//pAE+oOxW9M8EvMvXFZRsp67WJtfAJeYU agvYnCTRjeVB5XfB/LY35gfIjUgDbpI= -----END CERTIFICATE-----Generated at Sat Apr 5 10:10:47 2025 by rpki-client