$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/b145b5a2-f186-3b8c-a9f2-9b76582dcea2.roa File: b145b5a2-f186-3b8c-a9f2-9b76582dcea2.roa (raw, json) Hash identifier: DHg+lVDG5UX2S7PnaZIz/uzuegK92xePRVACfvawxNk= Subject key identifier: 65:78:6A:0F:71:10:E8:BC:B2:7F:C6:4D:0B:F4:50:F7:F8:4C:88:58 Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F43285849C904D3BF3B75F0ECEE953280 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/b145b5a2-f186-3b8c-a9f2-9b76582dcea2.roa Signing time: Thu 08 May 2025 13:01:00 +0000 ROA not before: Thu 08 May 2025 13:01:00 +0000 ROA not after: Wed 06 Aug 2025 13:01:00 +0000 asID: 14618 IP address blocks: 216.83.56.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c9:04:d3:bf:3b:75:f0:ec:ee:95:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: May 8 13:01:00 2025 GMT Not After : Aug 6 13:01:00 2025 GMT Subject: CN=b0dc27bf-e6cc-42ef-9d56-5025da1d66fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:53:2f:f7:ac:ab:60:8d:77:c7:1e:e4:cb:7c: e5:a0:c2:98:f8:87:36:da:26:6b:f2:2c:2f:33:09: 27:a7:be:39:74:f1:79:02:99:ca:56:89:a2:a8:9a: 8d:23:65:85:e5:bf:3f:e7:29:4d:35:3c:21:d0:11: 1f:b7:ec:05:26:88:ae:cd:17:c5:15:89:d9:60:7f: 0f:46:8b:e7:29:e0:29:d5:2e:b1:f5:0b:73:1d:19: d8:89:48:b8:5c:91:be:97:f0:b2:a0:d4:b2:10:5b: 8d:2b:46:ee:68:18:86:8a:73:ad:c4:28:93:c9:6d: ee:9b:bc:a5:96:ad:06:f7:7b:37:8a:ea:e5:bd:b3: 6f:9b:03:58:bc:69:6b:96:69:53:89:06:72:35:ad: b5:fe:ad:4a:8d:be:b4:d3:ba:d7:8a:99:87:dc:32: 66:29:20:3c:89:2f:be:e3:4b:b1:49:2f:81:17:bc: 0d:d0:9a:69:ad:f2:8a:51:82:28:95:17:a4:42:5c: d6:99:da:6e:47:4b:e7:16:89:fc:31:9d:aa:d2:29: b2:ae:f5:3f:2a:06:2b:07:ec:7c:58:a2:a3:45:6f: af:c8:69:1c:cf:20:78:64:2b:a2:f9:98:4a:00:0b: f9:1e:9b:d0:71:78:fa:01:db:33:30:ad:25:14:fb: dd:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:78:6A:0F:71:10:E8:BC:B2:7F:C6:4D:0B:F4:50:F7:F8:4C:88:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/b145b5a2-f186-3b8c-a9f2-9b76582dcea2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 216.83.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:22:9a:3d:dc:bb:e3:1d:6b:c6:69:e0:d3:91:88:8f:9b:78: f3:51:e5:4b:95:9f:43:eb:50:29:93:27:0c:bf:25:aa:9d:2e: d5:63:7c:3c:7a:8f:68:1f:fe:09:20:36:3d:5f:43:9d:b5:be: d8:b7:4e:ee:27:2a:eb:81:f4:fa:16:00:a1:c5:f5:b5:41:b9: 4d:9a:10:4b:39:13:7d:a5:8d:46:f7:84:fc:96:22:27:ab:bd: bf:4e:b7:05:b1:c1:f2:e0:a1:1a:8a:24:f7:98:0e:49:2d:ef: c1:e5:a3:f8:22:c2:61:10:08:c3:d8:db:b3:55:82:14:33:b6: 71:25:69:60:a5:20:26:14:f2:03:6a:93:a4:cc:74:5d:19:d6: f3:95:c1:50:ab:65:0f:b6:b1:83:74:6c:34:9a:74:87:aa:89: d2:b5:87:67:da:a4:71:51:2c:b8:8b:15:a0:b7:b6:1d:a9:26: 47:f8:b9:df:29:7d:b9:f7:05:e2:12:32:ac:ca:44:a1:98:68: 80:b9:84:17:1f:cf:d7:3b:c1:3a:1a:47:18:db:3a:6a:18:04: 14:d9:0a:8c:63:ec:bf:7c:d2:cf:c8:aa:1e:30:25:89:3b:57: 1f:81:7a:c2:35:2a:56:0a:b3:4a:58:c8:a3:c5:af:e7:56:90: 0b:23:ad:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnJBNO/O3Xw7O6VMoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI1MDUwODEzMDEwMFoXDTI1MDgwNjEzMDEwMFowLzEtMCsGA1UEAxMk YjBkYzI3YmYtZTZjYy00MmVmLTlkNTYtNTAyNWRhMWQ2NmZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVMv96yrYI13xx7ky3zloMKY+Ic22iZr8iwv Mwknp745dPF5ApnKVomiqJqNI2WF5b8/5ylNNTwh0BEft+wFJoiuzRfFFYnZYH8P RovnKeAp1S6x9QtzHRnYiUi4XJG+l/CyoNSyEFuNK0buaBiGinOtxCiTyW3um7yl lq0G93s3iurlvbNvmwNYvGlrlmlTiQZyNa21/q1Kjb6007rXipmH3DJmKSA8iS++ 40uxSS+BF7wN0JpprfKKUYIolRekQlzWmdpuR0vnFon8MZ2q0imyrvU/KgYrB+x8 WKKjRW+vyGkczyB4ZCui+ZhKAAv5HpvQcXj6AdszMK0lFPvd9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGV4ag9xEOi8sn/GTQv0UPf4TIhYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvYjE0NWI1YTItZjE4Ni0z YjhjLWE5ZjItOWI3NjU4MmRjZWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2FM4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACMimj3cu+Mda8Zp4NORiI+bePNR5UuVn0PrUCmTJwy/JaqdLtVjfDx6 j2gf/gkgNj1fQ521vti3Tu4nKuuB9PoWAKHF9bVBuU2aEEs5E32ljUb3hPyWIier vb9OtwWxwfLgoRqKJPeYDkkt78Hlo/giwmEQCMPY27NVghQztnElaWClICYU8gNq k6TMdF0Z1vOVwVCrZQ+2sYN0bDSadIeqidK1h2fapHFRLLiLFaC3th2pJkf4ud8p fbn3BeISMqzKRKGYaIC5hBcfz9c7wToaRxjbOmoYBBTZCoxj7L980s/Iqh4wJYk7 Vx+BesI1KlYKs0pYyKPFr+dWkAsjrYU= -----END CERTIFICATE-----Generated at Sat Jun 7 04:17:05 2025 by rpki-client