$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/9c768e03-d7a8-3d81-8486-ef4f5c3a9c3a.roa File: 9c768e03-d7a8-3d81-8486-ef4f5c3a9c3a.roa (raw, json) Hash identifier: MGGS+uKKp7Y8z+AdZD3JmBiiTX5IMiN7Q17wFV3FMSk= Subject key identifier: 93:88:7B:80:A9:4D:D9:C9:2E:D7:AD:43:19:98:F1:E5:4F:FF:EF:33 Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F4328584A0C056DCC1425BB6C4CF5DAC0 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/9c768e03-d7a8-3d81-8486-ef4f5c3a9c3a.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 211373 IP address blocks: 216.224.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:05:6d:cc:14:25:bb:6c:4c:f5:da:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=5c60fc75-b37c-4150-8ae0-7a0a1def8db6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:6e:08:df:db:17:a1:52:1d:40:fe:1f:71:d7: 2c:3b:08:9b:07:89:50:1f:9a:b4:ed:b1:18:c9:40: da:80:b2:40:80:88:ff:42:5b:b6:aa:16:07:10:e7: 74:47:b7:00:1a:4a:d1:57:95:a8:c0:48:32:53:32: 06:27:46:a5:0f:fe:41:0e:44:85:b6:c5:84:e5:30: 1d:3a:94:2e:da:38:ee:ee:43:2b:e5:28:47:f6:63: c1:26:32:ad:20:aa:3d:64:ce:0b:33:fe:01:39:32: 83:9e:ae:7d:de:6d:f2:42:72:d1:2d:af:b2:6a:2f: 84:e0:fd:98:2e:7b:90:ef:ed:99:56:f0:39:ca:17: 04:4d:88:b9:cc:13:df:e9:a2:a5:cc:e2:b4:eb:c1: f7:07:f8:ad:8b:ab:b3:bb:3a:6a:f8:6d:da:1f:47: af:43:b2:91:c3:d7:f0:45:bc:d3:84:0c:6e:4c:df: 1f:ad:54:52:0c:31:34:07:79:87:33:7e:14:5c:80: 63:3f:87:14:da:c6:5e:23:23:e9:a6:42:07:48:00: 63:4f:b9:4d:24:6b:bd:41:a7:a1:11:1f:cc:17:fa: 7d:bf:9f:16:49:68:2a:46:d5:59:f3:2b:db:1c:0c: dd:71:40:72:41:2d:fb:a3:bd:66:71:b5:f0:e4:1d: 7e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:88:7B:80:A9:4D:D9:C9:2E:D7:AD:43:19:98:F1:E5:4F:FF:EF:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/9c768e03-d7a8-3d81-8486-ef4f5c3a9c3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 216.224.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:24:0f:49:bc:66:74:2f:2d:69:d2:d8:bc:a5:12:b1:d9:20: 69:17:25:32:9b:1f:0c:a4:c6:29:6a:34:04:d1:65:ab:21:c9: cd:7a:95:46:8c:79:71:11:4e:47:e9:b9:8b:2f:2b:73:65:f0: d1:fe:04:20:ef:95:9e:30:14:5a:33:bd:4f:e6:61:49:40:21: 4a:f2:4e:c7:b2:93:0d:6e:9d:49:a9:be:4b:aa:ab:a9:22:26: 55:af:f7:0e:0e:7c:72:5c:fe:1d:f5:ab:d2:9e:41:bd:93:ca: e1:94:a7:e8:77:06:0e:62:7f:74:6b:11:f1:fd:e9:82:02:e9: f4:8a:0b:4b:c3:a3:e7:af:4f:91:00:06:1a:6d:ac:57:0b:1c: a4:59:aa:be:ac:e6:61:fc:00:5f:07:89:3b:b2:72:e2:71:e8: ef:d0:5d:5e:86:49:51:a9:44:bd:55:87:51:3a:f0:17:9f:3b: db:bd:35:bf:02:0a:a8:29:5a:f2:9c:05:99:50:72:5d:c6:93: 77:3f:8c:98:97:77:50:86:37:6c:ae:ec:63:4e:91:0a:8e:92: 5a:d8:0d:50:3b:2a:02:89:0a:5e:08:48:2c:d5:cd:03:13:5e: c5:95:2e:1a:bc:a7:3f:d8:0a:19:7f:4d:97:b9:8d:e2:5a:7e: 60:1a:68:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBW3MFCW7bEz12sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk NWM2MGZjNzUtYjM3Yy00MTUwLThhZTAtN2EwYTFkZWY4ZGI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlm4I39sXoVIdQP4fcdcsOwibB4lQH5q07bEY yUDagLJAgIj/Qlu2qhYHEOd0R7cAGkrRV5WowEgyUzIGJ0alD/5BDkSFtsWE5TAd OpQu2jju7kMr5ShH9mPBJjKtIKo9ZM4LM/4BOTKDnq593m3yQnLRLa+yai+E4P2Y LnuQ7+2ZVvA5yhcETYi5zBPf6aKlzOK068H3B/iti6uzuzpq+G3aH0evQ7KRw9fw RbzThAxuTN8frVRSDDE0B3mHM34UXIBjP4cU2sZeIyPppkIHSABjT7lNJGu9Qaeh ER/MF/p9v58WSWgqRtVZ8yvbHAzdcUByQS37o71mcbXw5B1+EwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJOIe4CpTdnJLtetQxmY8eVP/+8zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvOWM3NjhlMDMtZDdhOC0z ZDgxLTg0ODYtZWY0ZjVjM2E5YzNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OB/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFskD0m8ZnQvLWnS2LylErHZIGkXJTKbHwykxilqNATRZashyc16lUaM eXERTkfpuYsvK3Nl8NH+BCDvlZ4wFFozvU/mYUlAIUryTseykw1unUmpvkuqq6ki JlWv9w4OfHJc/h31q9KeQb2TyuGUp+h3Bg5if3RrEfH96YIC6fSKC0vDo+evT5EA BhptrFcLHKRZqr6s5mH8AF8HiTuycuJx6O/QXV6GSVGpRL1Vh1E68BefO9u9Nb8C CqgpWvKcBZlQcl3Gk3c/jJiXd1CGN2yu7GNOkQqOklrYDVA7KgKJCl4ISCzVzQMT XsWVLhq8pz/YChl/TZe5jeJafmAaaAU= -----END CERTIFICATE-----Generated at Fri Jun 6 16:35:47 2025 by rpki-client