$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/4a24f8d8-a508-3379-9a8b-f4caa34d1af5.roa File: 4a24f8d8-a508-3379-9a8b-f4caa34d1af5.roa (raw, json) Hash identifier: kFoiqD7b/agBtXZAL+0ogQPTnZE0LZDAQjcgejR7qX8= Subject key identifier: 39:23:DA:67:05:08:FF:A6:00:DF:B2:5F:B5:7C:B6:6F:58:AC:67:9B Certificate issuer: /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04 Certificate serial: 010D0C9F4328584944692C08B4B4E2AEDF181C80 Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/4a24f8d8-a508-3379-9a8b-f4caa34d1af5.roa Signing time: Sat 22 Mar 2025 01:00:40 +0000 ROA not before: Sat 22 Mar 2025 01:00:40 +0000 ROA not after: Fri 20 Jun 2025 01:00:40 +0000 asID: 16509 IP address blocks: 159.112.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:44:69:2c:08:b4:b4:e2:ae:df:18:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04 Validity Not Before: Mar 22 01:00:40 2025 GMT Not After : Jun 20 01:00:40 2025 GMT Subject: CN=cc3c6444-5896-4508-81cb-305c53791f0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:8f:6a:47:30:37:3d:f3:5e:c7:d4:a1:96:ac: a4:e6:10:b4:e4:36:0b:c1:79:24:26:7d:1c:bf:35: f7:00:f7:81:4a:4b:02:bd:6d:d2:d5:4d:19:77:3b: b5:d3:89:02:e3:e2:57:e1:59:e1:7a:85:80:d5:f2: b3:3e:fe:e4:2c:1a:74:40:db:16:3e:45:f1:a8:70: 21:4d:0d:3d:20:76:78:7f:56:4f:63:ad:24:6b:c0: dd:2e:65:83:4e:50:08:e4:09:bc:0e:a7:64:72:7e: f8:94:10:80:92:d9:03:28:7e:eb:d0:13:c1:72:a2: fb:34:ad:cd:ed:8b:bd:49:ba:c2:57:29:6b:cd:c4: 61:83:58:70:04:62:9b:ee:a3:76:1a:ef:c7:09:55: 53:93:99:89:7f:ea:d8:d6:fc:91:ab:6e:f8:e9:8b: 03:6a:57:6e:fc:5e:8e:92:74:f0:0e:4d:4a:2f:48: b1:57:ce:cc:30:d5:75:20:8f:b4:7d:ee:79:17:ac: cd:de:ff:d6:12:68:bf:27:2b:37:14:d8:b3:8b:8d: f4:8b:4c:57:49:29:19:79:c1:1a:e8:d8:10:16:db: 17:f8:82:af:93:7b:99:7d:b5:a1:ad:00:7b:4e:ec: 2d:5f:74:1f:68:bb:11:b5:73:2d:0b:03:ba:aa:79: ac:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:23:DA:67:05:08:FF:A6:00:DF:B2:5F:B5:7C:B6:6F:58:AC:67:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/4a24f8d8-a508-3379-9a8b-f4caa34d1af5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl X509v3 Authority Key Identifier: keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer sbgp-ipAddrBlock: critical IPv4: 159.112.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:94:ef:51:bc:ad:48:ac:75:1a:7c:97:ea:38:57:ab:22:fd: 2d:3d:8d:07:49:d4:de:77:5d:2d:34:e3:cb:60:c9:59:3e:ad: e1:cf:b5:53:a8:2e:f5:3c:5b:4a:33:81:ed:05:6f:81:b9:3b: 84:bd:c1:26:5c:96:d6:12:d8:88:1e:bb:5f:ae:7a:ab:c8:c0: 08:08:1e:45:07:32:e7:3c:c6:5d:0d:54:c1:0f:f9:1b:9a:e1: 69:10:5d:44:eb:51:fa:08:e5:e7:67:30:af:49:6d:e3:7d:52: 25:cc:37:03:5a:60:04:ad:0f:b3:c8:c5:fd:2b:0d:82:a0:ad: 48:50:c8:ad:c8:fc:c1:f9:eb:b9:9b:2e:1e:f6:07:86:49:97: fa:26:9e:8c:cf:d6:c4:66:8b:48:d5:0b:8f:f2:8e:2a:1a:87: 1a:4d:a0:80:66:26:62:b6:da:26:12:bf:8e:bc:3a:97:31:af: a8:82:49:c5:21:c3:a7:63:2a:a0:dd:cd:77:3c:77:da:ea:62: 56:56:c7:1b:0e:fc:f9:6f:b6:a9:34:0d:21:4f:d0:8d:eb:e6: 7b:cb:17:5a:d7:45:39:a4:3d:9e:7f:90:9f:5b:40:cb:35:20: 3b:6a:f7:9b:65:93:b1:6b:f1:7b:ba:70:3a:62:ef:48:9c:a5: b6:15:06:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElEaSwItLTirt8YHIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjBmYWNjYjQtNDBhOS00MTY4LWFhM2QtNTlkMTkwZWI1 YTA0MB4XDTI1MDMyMjAxMDA0MFoXDTI1MDYyMDAxMDA0MFowLzEtMCsGA1UEAxMk Y2MzYzY0NDQtNTg5Ni00NTA4LTgxY2ItMzA1YzUzNzkxZjBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlY9qRzA3PfNex9Shlqyk5hC05DYLwXkkJn0c vzX3APeBSksCvW3S1U0Zdzu104kC4+JX4VnheoWA1fKzPv7kLBp0QNsWPkXxqHAh TQ09IHZ4f1ZPY60ka8DdLmWDTlAI5Am8Dqdkcn74lBCAktkDKH7r0BPBcqL7NK3N 7Yu9SbrCVylrzcRhg1hwBGKb7qN2Gu/HCVVTk5mJf+rY1vyRq2746YsDaldu/F6O knTwDk1KL0ixV87MMNV1II+0fe55F6zN3v/WEmi/Jys3FNizi430i0xXSSkZecEa 6NgQFtsX+IKvk3uZfbWhrQB7TuwtX3QfaLsRtXMtCwO6qnmsKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDkj2mcFCP+mAN+yX7V8tm9YrGebMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZh Y2NiNC00MGE5LTQxNjgtYWEzZC01OWQxOTBlYjVhMDQvNGEyNGY4ZDgtYTUwOC0z Mzc5LTlhOGItZjRjYWEzNGQxYWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjBmYWNjYjQtNDBhOS00MTY4LWFh M2QtNTlkMTkwZWI1YTA0L2YwZmFjY2I0LTQwYTktNDE2OC1hYTNkLTU5ZDE5MGVi NWEwNC5jcmwwHwYDVR0jBBgwFoAUrZAUzWRWZcDhdzVyttqYfTlVJJYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZhY2NiNC00MGE5LTQxNjgtYWEzZC01OWQx OTBlYjVhMDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAn3DoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHKU71G8rUisdRp8l+o4V6si/S09jQdJ1N53XS0048tgyVk+reHPtVOo LvU8W0ozge0Fb4G5O4S9wSZcltYS2Igeu1+ueqvIwAgIHkUHMuc8xl0NVMEP+Rua 4WkQXUTrUfoI5ednMK9JbeN9UiXMNwNaYAStD7PIxf0rDYKgrUhQyK3I/MH567mb Lh72B4ZJl/omnozP1sRmi0jVC4/yjioahxpNoIBmJmK22iYSv468Opcxr6iCScUh w6djKqDdzXc8d9rqYlZWxxsO/Plvtqk0DSFP0I3r5nvLF1rXRTmkPZ5/kJ9bQMs1 IDtq95tlk7Fr8Xu6cDpi70icpbYVBgE= -----END CERTIFICATE-----Generated at Sat Apr 5 10:51:59 2025 by rpki-client