$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/5b67306d-5138-3897-a51e-4392ac909402.roa File: 5b67306d-5138-3897-a51e-4392ac909402.roa (raw, json) Hash identifier: 2gOMpZ9VkAP6gaLNk2k7BdRxcMCEpVqsMYQHKR/0ZOE= Subject key identifier: F5:69:5A:43:AA:68:96:B1:E5:8C:86:73:6F:9F:37:D1:CD:0A:B8:60 Certificate issuer: /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04 Certificate serial: 010D0C9F43285848F926A631C90D527E889CB140 Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/5b67306d-5138-3897-a51e-4392ac909402.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 16509 IP address blocks: 208.70.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:a6:31:c9:0d:52:7e:88:9c:b1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04 Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=921a41e3-dc59-45bc-891b-565b6af6b00a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:19:6d:4d:f6:26:e7:8a:fc:45:ad:11:de:24: b1:be:e5:61:ea:15:da:eb:0d:b8:48:75:ad:78:31: ea:0c:62:37:4c:c7:c6:88:59:17:eb:06:01:f7:b2: 3d:3f:65:17:8b:0b:dc:60:37:b0:ee:e2:4a:83:2e: 56:46:af:2a:43:c3:15:4d:e2:db:eb:86:66:0c:d9: fb:fc:36:29:f0:e5:55:c0:0d:fc:1b:13:94:3a:bf: bc:0d:a9:bc:c5:e3:a3:6b:f4:c8:20:6a:06:22:14: aa:2d:f6:8a:87:a5:cc:02:c2:e1:14:2b:51:75:ac: 50:2f:7c:03:ba:0f:7f:62:b0:9f:ca:35:80:61:a0: 5e:04:8e:9b:84:d4:24:f6:42:9f:14:26:04:69:69: 3a:5b:2d:6c:d7:96:ad:cf:03:fd:19:b5:fd:8f:ad: 28:ff:22:9a:dc:a5:73:11:28:9c:6a:b4:76:40:95: 6b:85:b7:46:5d:ca:a7:81:56:0a:e7:fe:dc:18:f3: 4d:bf:4f:4b:2f:a3:6e:b3:66:b6:34:0c:3d:f8:61: 96:11:19:2a:f6:59:39:74:3a:62:d8:75:21:9c:5d: 02:53:2e:49:30:1d:e0:ca:ae:a2:6f:f8:01:4d:2c: 60:61:0f:5b:77:7a:13:e8:3a:5a:52:26:54:f7:22: 86:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:69:5A:43:AA:68:96:B1:E5:8C:86:73:6F:9F:37:D1:CD:0A:B8:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/5b67306d-5138-3897-a51e-4392ac909402.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl X509v3 Authority Key Identifier: keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer sbgp-ipAddrBlock: critical IPv4: 208.70.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:a4:06:0f:96:3c:e1:f4:06:69:ce:32:57:eb:32:01:d9:b8: cd:ce:2a:d2:cc:c2:ce:00:56:dc:ad:d3:2d:7b:66:10:64:c0: fa:86:4c:1e:8f:ca:da:e0:41:a3:35:f2:e0:bc:dc:2e:37:13: 38:68:79:eb:2a:e8:e5:23:3f:50:e7:3f:81:29:1c:b1:b5:1d: 36:b2:8d:da:67:e2:46:f6:5b:b5:05:eb:df:8f:24:a4:61:62: c9:14:a5:56:b3:d4:4f:82:03:23:4a:8c:97:bf:33:1d:a9:b6: a4:64:00:e1:7f:b9:00:15:82:75:cf:5d:3c:1b:06:d7:81:35: ae:82:16:d7:77:f6:47:45:b1:3f:f0:91:d0:e3:30:f4:f5:3c: 9c:0c:29:6c:f1:65:2e:32:b2:a6:94:2a:b0:2d:cb:9e:c7:65: de:82:63:35:71:7f:aa:ef:db:7d:bc:61:5a:48:3a:ef:1d:91: 39:0d:f5:42:0c:d1:db:66:5a:93:15:b3:11:c6:c9:31:50:1b: ad:91:91:87:8f:86:2a:28:38:11:0a:d4:a3:31:a9:a9:49:ff: 8d:a9:54:f1:39:68:89:c3:00:77:cc:cb:e0:c8:f7:72:22:8d: 2c:8b:0b:64:9a:15:df:98:ed:df:9a:b0:ab:6c:85:59:be:ff: f0:fe:e5:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj5JqYxyQ1SfoicsUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjBmYWNjYjQtNDBhOS00MTY4LWFhM2QtNTlkMTkwZWI1 YTA0MB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk OTIxYTQxZTMtZGM1OS00NWJjLTg5MWItNTY1YjZhZjZiMDBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxltTfYm54r8Ra0R3iSxvuVh6hXa6w24SHWt eDHqDGI3TMfGiFkX6wYB97I9P2UXiwvcYDew7uJKgy5WRq8qQ8MVTeLb64ZmDNn7 /DYp8OVVwA38GxOUOr+8Dam8xeOja/TIIGoGIhSqLfaKh6XMAsLhFCtRdaxQL3wD ug9/YrCfyjWAYaBeBI6bhNQk9kKfFCYEaWk6Wy1s15atzwP9GbX9j60o/yKa3KVz ESicarR2QJVrhbdGXcqngVYK5/7cGPNNv09LL6Nus2a2NAw9+GGWERkq9lk5dDpi 2HUhnF0CUy5JMB3gyq6ib/gBTSxgYQ9bd3oT6DpaUiZU9yKG0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPVpWkOqaJax5YyGc2+fN9HNCrhgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZh Y2NiNC00MGE5LTQxNjgtYWEzZC01OWQxOTBlYjVhMDQvNWI2NzMwNmQtNTEzOC0z ODk3LWE1MWUtNDM5MmFjOTA5NDAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjBmYWNjYjQtNDBhOS00MTY4LWFh M2QtNTlkMTkwZWI1YTA0L2YwZmFjY2I0LTQwYTktNDE2OC1hYTNkLTU5ZDE5MGVi NWEwNC5jcmwwHwYDVR0jBBgwFoAUrZAUzWRWZcDhdzVyttqYfTlVJJYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZhY2NiNC00MGE5LTQxNjgtYWEzZC01OWQx OTBlYjVhMDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EbRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE+kBg+WPOH0BmnOMlfrMgHZuM3OKtLMws4AVtyt0y17ZhBkwPqGTB6P ytrgQaM18uC83C43Ezhoeesq6OUjP1DnP4EpHLG1HTayjdpn4kb2W7UF69+PJKRh YskUpVaz1E+CAyNKjJe/Mx2ptqRkAOF/uQAVgnXPXTwbBteBNa6CFtd39kdFsT/w kdDjMPT1PJwMKWzxZS4ysqaUKrAty57HZd6CYzVxf6rv2328YVpIOu8dkTkN9UIM 0dtmWpMVsxHGyTFQG62RkYePhiooOBEK1KMxqalJ/42pVPE5aInDAHfMy+DI93Ii jSyLC2SaFd+Y7d+asKtshVm+//D+5fs= -----END CERTIFICATE-----Generated at Sat Apr 5 11:17:53 2025 by rpki-client