$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/1fbbe8cd-8d5d-36a3-ba74-f7c2b60d1736.roa File: 1fbbe8cd-8d5d-36a3-ba74-f7c2b60d1736.roa (raw, json) Hash identifier: ARcmO+yMtmwYGEQXyT2uFywNkylJXkIEx3Knp0G4uAU= Subject key identifier: D8:0D:92:7C:5D:51:8D:B1:6D:47:05:AE:DA:C8:99:9B:7A:C6:20:A3 Certificate issuer: /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04 Certificate serial: 010D0C9F43285848F926A6620C7DC94725666A00 Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/1fbbe8cd-8d5d-36a3-ba74-f7c2b60d1736.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 16509 IP address blocks: 208.70.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:a6:62:0c:7d:c9:47:25:66:6a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04 Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=e87ca2a1-1de4-4090-b6a6-a58fbb90e39e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:f6:ba:0d:6c:dc:4d:db:65:69:5a:2c:76:c1: bb:57:30:e9:17:67:3d:e2:b2:bb:1b:f7:be:6a:21: 04:5f:6e:25:b3:d3:5d:56:bd:7a:30:98:8c:79:f4: 07:62:c3:bf:a4:31:fc:97:e8:82:5c:9c:58:6e:f5: 26:82:90:95:56:92:35:4d:6e:57:e9:49:0f:6b:2f: f7:a4:a1:1a:94:df:4a:61:91:08:44:ef:dd:cf:48: 4f:a2:a2:3f:28:5d:6e:f9:9f:df:d1:9e:51:03:f9: 65:1b:31:5e:af:df:20:8e:73:99:dd:eb:b8:59:92: b8:73:40:92:8c:d0:52:4a:be:ff:6c:d9:90:6b:33: 66:1f:e7:20:a7:64:5b:ac:69:03:34:6f:fb:c7:7f: ce:0b:ff:8c:78:d6:c5:aa:17:b0:62:c1:c6:cb:b8: 47:51:d0:ba:20:73:f9:3b:75:3c:75:99:53:24:23: 53:f2:9e:2e:c5:68:c3:fb:01:34:d5:1b:43:0d:f6: 5a:03:2d:24:4f:d3:2c:92:22:9a:12:b2:e1:16:cd: 8b:95:76:ba:4b:6b:78:03:14:13:5c:29:4f:98:7e: 8d:ac:11:20:4b:da:fb:4c:0e:2e:65:6c:36:32:7c: e5:a8:b3:7e:bb:a4:fb:6c:20:7e:bd:cc:bf:4c:82: de:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:0D:92:7C:5D:51:8D:B1:6D:47:05:AE:DA:C8:99:9B:7A:C6:20:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/1fbbe8cd-8d5d-36a3-ba74-f7c2b60d1736.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl X509v3 Authority Key Identifier: keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer sbgp-ipAddrBlock: critical IPv4: 208.70.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:80:0d:14:17:69:b1:6f:cb:3a:bb:84:12:f5:d2:a7:26:c6: 2f:45:03:60:96:d3:63:42:e2:23:d6:4c:3c:b1:9b:42:e8:ea: f0:00:d6:72:6a:3b:16:6e:fd:2e:a3:f9:c9:d6:ed:83:52:8c: d7:c5:c6:8f:28:69:a9:63:0a:04:b3:2e:0d:4a:b0:2d:79:e7: cd:3e:13:04:87:73:b7:f2:60:6b:8b:51:6b:95:87:9c:de:30: 76:59:96:9e:15:0c:13:52:0c:59:9d:92:5c:74:d0:b5:de:63: ef:e7:21:ee:c5:5a:19:42:a1:7c:71:b5:bb:17:af:7a:9f:3c: 9b:7a:a1:9a:83:1f:52:18:ee:ea:c3:6d:f0:d5:cb:19:f8:15: d2:6e:da:57:84:ed:c5:8d:6b:5e:91:c8:85:d0:65:30:6b:f4: 32:75:e7:5d:c9:7a:01:59:d9:ef:3d:81:b1:7c:ba:cd:e5:87: 65:4a:e8:3a:1d:24:af:ee:ce:f9:71:4e:26:48:fa:9e:cc:4f: dc:ce:5e:df:69:fd:fa:60:2b:68:4d:59:7f:94:f9:55:ed:9f: 36:dd:62:80:a0:33:c1:7c:87:3c:19:71:28:e1:82:ed:da:94: 70:9c:e7:16:ac:3c:73:1a:2b:fe:62:eb:32:45:90:df:b9:82: c8:bc:65:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj5JqZiDH3JRyVmagAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjBmYWNjYjQtNDBhOS00MTY4LWFhM2QtNTlkMTkwZWI1 YTA0MB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk ZTg3Y2EyYTEtMWRlNC00MDkwLWI2YTYtYTU4ZmJiOTBlMzllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/a6DWzcTdtlaVosdsG7VzDpF2c94rK7G/e+ aiEEX24ls9NdVr16MJiMefQHYsO/pDH8l+iCXJxYbvUmgpCVVpI1TW5X6UkPay/3 pKEalN9KYZEIRO/dz0hPoqI/KF1u+Z/f0Z5RA/llGzFer98gjnOZ3eu4WZK4c0CS jNBSSr7/bNmQazNmH+cgp2RbrGkDNG/7x3/OC/+MeNbFqhewYsHGy7hHUdC6IHP5 O3U8dZlTJCNT8p4uxWjD+wE01RtDDfZaAy0kT9MskiKaErLhFs2LlXa6S2t4AxQT XClPmH6NrBEgS9r7TA4uZWw2MnzlqLN+u6T7bCB+vcy/TILepQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNgNknxdUY2xbUcFrtrImZt6xiCjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZh Y2NiNC00MGE5LTQxNjgtYWEzZC01OWQxOTBlYjVhMDQvMWZiYmU4Y2QtOGQ1ZC0z NmEzLWJhNzQtZjdjMmI2MGQxNzM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjBmYWNjYjQtNDBhOS00MTY4LWFh M2QtNTlkMTkwZWI1YTA0L2YwZmFjY2I0LTQwYTktNDE2OC1hYTNkLTU5ZDE5MGVi NWEwNC5jcmwwHwYDVR0jBBgwFoAUrZAUzWRWZcDhdzVyttqYfTlVJJYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZhY2NiNC00MGE5LTQxNjgtYWEzZC01OWQx OTBlYjVhMDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EbTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADCADRQXabFvyzq7hBL10qcmxi9FA2CW02NC4iPWTDyxm0Lo6vAA1nJq OxZu/S6j+cnW7YNSjNfFxo8oaaljCgSzLg1KsC15580+EwSHc7fyYGuLUWuVh5ze MHZZlp4VDBNSDFmdklx00LXeY+/nIe7FWhlCoXxxtbsXr3qfPJt6oZqDH1IY7urD bfDVyxn4FdJu2leE7cWNa16RyIXQZTBr9DJ1513JegFZ2e89gbF8us3lh2VK6Dod JK/uzvlxTiZI+p7MT9zOXt9p/fpgK2hNWX+U+VXtnzbdYoCgM8F8hzwZcSjhgu3a lHCc5xasPHMaK/5i6zJFkN+5gsi8ZX4= -----END CERTIFICATE-----Generated at Fri Mar 14 09:31:20 2025 by rpki-client