$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/de8066f5-806f-3f18-8368-1e6aac14091b.roa File: de8066f5-806f-3f18-8368-1e6aac14091b.roa (raw, json) Hash identifier: azLbgjiaYUm5rBRzzGY8ILyR5lirkvFMx8NkvNtDqV8= Subject key identifier: 79:05:5C:D6:B8:25:FB:77:8A:13:82:07:B9:A2:C3:8F:1C:83:A0:93 Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F432858494D24966AF1F1651DE33A4800 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/de8066f5-806f-3f18-8368-1e6aac14091b.roa Signing time: Tue 25 Mar 2025 04:04:47 +0000 ROA not before: Tue 25 Mar 2025 04:04:47 +0000 ROA not after: Mon 23 Jun 2025 04:04:47 +0000 asID: 16276 IP address blocks: 216.224.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4d:24:96:6a:f1:f1:65:1d:e3:3a:48:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Mar 25 04:04:47 2025 GMT Not After : Jun 23 04:04:47 2025 GMT Subject: CN=346f9718-41f5-4024-abf4-9a4bf1371117 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:86:df:94:61:e4:f7:ec:e1:cd:e6:62:f2:6b: 3b:69:bb:ef:13:99:44:48:f4:ce:0e:93:7d:7b:4b: f2:32:83:dd:f1:6d:b1:e1:7d:7a:83:2c:81:12:3a: 47:b6:c5:77:31:8a:23:a3:95:19:9e:8e:05:0b:df: d1:71:73:b2:36:4b:56:4c:28:71:47:44:15:8f:55: c3:db:f9:d8:31:dc:23:a6:a1:ed:07:9f:7d:7f:23: c2:fa:92:ff:0d:ac:83:f1:90:20:85:81:9d:d2:cf: 70:55:b1:df:00:bc:7d:8f:9f:31:6b:70:0d:98:e6: ad:c8:cf:b8:19:a5:80:21:72:c9:7d:b9:ef:96:ac: b4:e1:bf:a8:ae:7b:e6:a2:b4:ed:32:87:6c:f4:f2: 1b:21:c6:67:6b:19:7c:1e:1a:c7:a9:5c:fc:91:b8: df:b9:10:ee:42:61:e3:1f:9c:27:27:16:ec:d0:ce: 80:f1:19:df:74:4e:f8:fa:f5:3a:61:db:77:be:41: 64:70:27:a2:a3:94:cd:4d:11:3f:f7:08:4e:3d:78: 59:8b:0f:55:32:b3:e7:5a:27:eb:99:c4:0a:b6:c0: b5:1f:bd:42:b1:dd:3d:98:db:30:6a:22:20:92:9e: ed:9f:cf:45:14:2b:77:2d:45:2a:b0:94:2c:a6:e9: b4:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:05:5C:D6:B8:25:FB:77:8A:13:82:07:B9:A2:C3:8F:1C:83:A0:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/de8066f5-806f-3f18-8368-1e6aac14091b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 216.224.115.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:6c:5d:ce:bb:db:c2:61:2f:d4:10:c9:7a:b2:6b:21:2c:39: ec:90:e7:46:fe:df:86:62:70:01:2c:66:cf:3b:ec:df:27:ea: 74:ed:cd:f0:0a:8f:08:b4:31:7d:3f:c0:61:fd:51:10:8f:b9: da:8b:38:8b:8c:26:24:17:83:70:a2:1e:42:d5:46:2d:c2:ea: b9:56:1b:2d:5b:14:40:46:cd:d6:6d:14:31:84:d1:30:d8:eb: 3e:c0:d9:c3:58:3e:ab:6f:94:9f:87:80:89:fd:98:76:eb:33: 32:f9:a8:4a:7e:12:09:37:32:3d:41:3f:e2:3c:e1:24:8b:88: 18:df:99:1b:d6:9e:5e:4b:9c:90:34:f7:2a:a7:08:92:f6:80: 13:e0:77:7d:53:4e:06:5f:be:8a:69:46:aa:56:e2:59:7a:32: e0:65:9e:0b:1f:33:6e:95:8b:d4:4c:b3:fe:86:c2:9d:c6:9e: e1:e0:fd:f3:dd:4f:1f:1e:98:3d:43:0d:97:6c:96:b4:51:6c: fa:d2:cb:1a:80:4a:39:1d:04:af:c0:4b:7c:a3:63:28:43:0f: dc:97:b3:0b:19:ca:0a:5a:21:e0:a3:2a:bc:81:61:fe:a3:37: 80:01:7f:94:a0:18:3b:95:be:4a:02:f0:d9:29:bb:b9:56:12: 3b:1f:1e:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElNJJZq8fFlHeM6SAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI1MDMyNTA0MDQ0N1oXDTI1MDYyMzA0MDQ0N1owLzEtMCsGA1UEAxMk MzQ2Zjk3MTgtNDFmNS00MDI0LWFiZjQtOWE0YmYxMzcxMTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnobflGHk9+zhzeZi8ms7abvvE5lESPTODpN9 e0vyMoPd8W2x4X16gyyBEjpHtsV3MYojo5UZno4FC9/RcXOyNktWTChxR0QVj1XD 2/nYMdwjpqHtB599fyPC+pL/DayD8ZAghYGd0s9wVbHfALx9j58xa3ANmOatyM+4 GaWAIXLJfbnvlqy04b+ornvmorTtMods9PIbIcZnaxl8HhrHqVz8kbjfuRDuQmHj H5wnJxbs0M6A8RnfdE74+vU6Ydt3vkFkcCeio5TNTRE/9whOPXhZiw9VMrPnWifr mcQKtsC1H71Csd09mNswaiIgkp7tn89FFCt3LUUqsJQspum0hwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHkFXNa4Jft3ihOCB7miw48cg6CTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvZGU4MDY2ZjUtODA2Zi0z ZjE4LTgzNjgtMWU2YWFjMTQwOTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OBzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAElsXc6728JhL9QQyXqyayEsOeyQ50b+34ZicAEsZs877N8n6nTtzfAK jwi0MX0/wGH9URCPudqLOIuMJiQXg3CiHkLVRi3C6rlWGy1bFEBGzdZtFDGE0TDY 6z7A2cNYPqtvlJ+HgIn9mHbrMzL5qEp+Egk3Mj1BP+I84SSLiBjfmRvWnl5LnJA0 9yqnCJL2gBPgd31TTgZfvoppRqpW4ll6MuBlngsfM26Vi9RMs/6Gwp3GnuHg/fPd Tx8emD1DDZdslrRRbPrSyxqASjkdBK/AS3yjYyhDD9yXswsZygpaIeCjKryBYf6j N4ABf5SgGDuVvkoC8Nkpu7lWEjsfHno= -----END CERTIFICATE-----Generated at Sat Apr 5 10:08:00 2025 by rpki-client