$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/45eb4551-7331-33dd-815f-95a7e670d0a9.roa File: 45eb4551-7331-33dd-815f-95a7e670d0a9.roa (raw, json) Hash identifier: M/vkFjbfpfdqjhSyVIDOJ6oTfjZRzimqeNSWkyGO858= Subject key identifier: F2:71:DD:4E:DD:83:E1:15:98:0D:13:CE:09:FC:7B:0A:4E:A8:E2:7F Certificate issuer: /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04 Certificate serial: 010D0C9F43285848F926A63DB92EAC66EEB3E440 Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/45eb4551-7331-33dd-815f-95a7e670d0a9.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 14618 IP address blocks: 208.70.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:a6:3d:b9:2e:ac:66:ee:b3:e4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04 Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=0346b70e-7564-4455-a7c8-9206453868f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:90:08:d1:74:e0:53:f3:be:df:d1:b5:e7:ab: de:e7:c9:87:4e:4f:48:0e:b4:e0:c3:98:93:87:c8: a9:b3:2a:5e:06:fe:c8:e8:15:9c:c5:44:c9:cb:72: fa:c9:5f:af:8f:b4:be:03:eb:67:6d:cc:a0:27:c1: 38:b7:eb:22:ae:9a:3a:4e:91:df:0d:38:7e:6a:5b: 1b:26:77:bf:ff:f7:35:04:4c:b7:a5:47:9f:92:b7: db:4c:90:2b:b2:90:dc:19:e9:79:80:04:b7:05:e4: 9c:d3:6b:c1:37:30:87:33:0c:81:e3:ff:f0:90:47: bb:89:df:6a:bd:ee:5d:f6:14:3f:ad:18:23:99:0a: a4:d2:a3:53:0d:41:91:b9:4c:d6:90:ee:cb:22:1d: 74:9a:54:f5:cf:a1:55:13:82:ae:e0:9a:50:82:76: b1:e1:66:df:f1:5d:d3:c6:a7:da:fc:bf:a5:ce:c6: 5f:22:a5:36:2d:24:f7:da:76:f9:89:5d:90:be:47: f4:83:02:04:ed:86:e9:13:f5:73:63:22:13:a3:24: 5b:e7:56:44:5b:13:9f:be:39:35:4f:ef:9b:a8:c1: aa:94:65:be:9a:95:93:9a:ea:68:ad:5f:a1:17:c4: b2:b4:1b:cb:3c:6a:ac:a5:0e:1c:12:8e:e0:85:71: 00:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:71:DD:4E:DD:83:E1:15:98:0D:13:CE:09:FC:7B:0A:4E:A8:E2:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/45eb4551-7331-33dd-815f-95a7e670d0a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl X509v3 Authority Key Identifier: keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer sbgp-ipAddrBlock: critical IPv4: 208.70.210.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:90:e5:8b:4e:f7:74:ad:b4:1a:f1:a5:b7:fe:f5:d1:6c:d0: 85:ce:1d:7f:34:a9:c8:44:e5:9a:80:cd:b8:f9:18:21:71:0c: cf:28:fe:bb:d8:4c:56:01:33:fb:58:85:4b:51:bf:3c:4a:bd: 91:f2:4b:e9:4c:92:f7:27:ea:70:21:4a:90:8d:98:a0:f9:08: c4:64:b9:a5:fa:df:ef:99:b3:db:41:bf:18:f7:2a:06:0a:a1: 16:74:0d:c7:cd:95:4c:db:63:45:85:2f:a2:92:58:44:2b:73: 51:05:e4:55:5a:a9:bd:e2:b5:d0:4c:b0:d3:f1:72:72:88:c8: 49:b9:fa:fe:0c:81:f5:37:a2:95:6c:9f:64:4e:4b:71:15:68: 4c:3e:6b:cb:53:84:87:12:36:56:d1:95:c6:81:9f:e8:b3:e3: e6:51:71:04:e8:28:7e:15:02:7a:f4:e9:59:4b:1f:de:c5:e7: 1a:52:68:94:02:9c:90:f2:f7:9b:4a:08:6e:06:bc:50:4b:61: cb:74:a2:63:e8:ef:d0:75:8a:42:f8:e3:ed:8d:45:d5:3a:cd: 2e:81:3f:f2:1a:3b:fd:72:38:9b:66:22:f6:5d:72:09:61:b1: a0:e9:82:05:4f:f0:02:ac:a0:be:a7:67:25:14:11:86:1e:9c: 72:89:35:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj5JqY9uS6sZu6z5EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjBmYWNjYjQtNDBhOS00MTY4LWFhM2QtNTlkMTkwZWI1 YTA0MB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk MDM0NmI3MGUtNzU2NC00NDU1LWE3YzgtOTIwNjQ1Mzg2OGYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJAI0XTgU/O+39G156ve58mHTk9IDrTgw5iT h8ipsypeBv7I6BWcxUTJy3L6yV+vj7S+A+tnbcygJ8E4t+sirpo6TpHfDTh+alsb Jne///c1BEy3pUefkrfbTJArspDcGel5gAS3BeSc02vBNzCHMwyB4//wkEe7id9q ve5d9hQ/rRgjmQqk0qNTDUGRuUzWkO7LIh10mlT1z6FVE4Ku4JpQgnax4Wbf8V3T xqfa/L+lzsZfIqU2LST32nb5iV2Qvkf0gwIE7YbpE/VzYyIToyRb51ZEWxOfvjk1 T++bqMGqlGW+mpWTmuporV+hF8SytBvLPGqspQ4cEo7ghXEA/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPJx3U7dg+EVmA0Tzgn8ewpOqOJ/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZh Y2NiNC00MGE5LTQxNjgtYWEzZC01OWQxOTBlYjVhMDQvNDVlYjQ1NTEtNzMzMS0z M2RkLTgxNWYtOTVhN2U2NzBkMGE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjBmYWNjYjQtNDBhOS00MTY4LWFh M2QtNTlkMTkwZWI1YTA0L2YwZmFjY2I0LTQwYTktNDE2OC1hYTNkLTU5ZDE5MGVi NWEwNC5jcmwwHwYDVR0jBBgwFoAUrZAUzWRWZcDhdzVyttqYfTlVJJYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZhY2NiNC00MGE5LTQxNjgtYWEzZC01OWQx OTBlYjVhMDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EbSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAASQ5YtO93SttBrxpbf+9dFs0IXOHX80qchE5ZqAzbj5GCFxDM8o/rvY TFYBM/tYhUtRvzxKvZHyS+lMkvcn6nAhSpCNmKD5CMRkuaX63++Zs9tBvxj3KgYK oRZ0DcfNlUzbY0WFL6KSWEQrc1EF5FVaqb3itdBMsNPxcnKIyEm5+v4MgfU3opVs n2ROS3EVaEw+a8tThIcSNlbRlcaBn+iz4+ZRcQToKH4VAnr06VlLH97F5xpSaJQC nJDy95tKCG4GvFBLYct0omPo79B1ikL44+2NRdU6zS6BP/IaO/1yOJtmIvZdcglh saDpggVP8AKsoL6nZyUUEYYenHKJNUc= -----END CERTIFICATE-----Generated at Fri Mar 14 10:07:25 2025 by rpki-client