$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/596e8645-a8c5-3714-b0d5-32f9118818dc.roa File: 596e8645-a8c5-3714-b0d5-32f9118818dc.roa (raw, json) Hash identifier: bbGvXOEGYn6oVZodldNAKAsfHMA6+rCBIQXFughqYAM= Subject key identifier: A4:61:9B:B8:31:37:6D:D4:E3:8E:E0:9F:3C:16:84:05:2C:DC:17:EC Certificate issuer: /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04 Certificate serial: 010D0C9F43285848F926A6255A9933D8F8974680 Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/596e8645-a8c5-3714-b0d5-32f9118818dc.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 14618 IP address blocks: 208.70.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:a6:25:5a:99:33:d8:f8:97:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04 Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=cb58f581-2c1a-40fd-80f9-d683e03af2fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:bd:16:7d:60:22:af:5f:c3:0a:f2:47:69:b9: 71:89:f3:8f:7a:4c:59:21:e1:8c:eb:32:8a:c4:3d: 61:26:ca:e1:b5:8a:8b:08:c7:9e:0b:9a:8a:44:38: 35:34:b9:33:e7:96:04:e5:f5:97:10:16:2c:4c:62: 8e:c7:27:7a:3a:68:ba:ce:cc:62:29:33:93:24:ef: 42:88:cf:fb:63:30:7c:16:26:74:99:04:55:ae:f2: 99:fa:50:5e:00:ba:a7:b6:32:f8:e5:de:08:e2:d3: fa:3f:ec:ef:c8:36:59:c9:f8:f8:48:c1:26:12:c2: 0a:c9:c0:ec:61:f2:a9:bf:16:9f:5e:b8:38:14:8b: 13:37:69:e3:ea:90:04:32:e8:5a:ab:b7:86:42:e7: bd:bb:a8:52:ef:f8:ee:17:1a:29:8f:fc:bf:cd:39: 0f:c7:ac:f7:ab:f9:e0:25:c4:ec:93:f7:ac:ad:87: 7a:3d:7f:98:a9:d0:48:91:aa:76:fd:a3:02:c9:eb: 1a:fe:77:ea:dd:c9:d1:03:af:ba:70:75:d4:48:e7: 8d:5b:80:ed:c7:e3:fe:5e:93:23:9c:9a:e4:9f:96: 8e:3e:aa:98:17:1a:c9:e8:f1:88:db:45:42:3c:98: 85:6c:10:66:72:dc:76:26:b8:0e:46:3c:6d:97:bf: 73:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:61:9B:B8:31:37:6D:D4:E3:8E:E0:9F:3C:16:84:05:2C:DC:17:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/596e8645-a8c5-3714-b0d5-32f9118818dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl X509v3 Authority Key Identifier: keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer sbgp-ipAddrBlock: critical IPv4: 208.70.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:bf:db:04:5a:a6:85:8f:8c:e7:e3:bc:0d:2d:99:bb:b5:c0: a0:87:a5:6f:60:87:23:8a:47:7c:49:ad:2d:7e:52:2e:90:13: d2:f4:5a:37:02:15:36:e3:0a:bd:2c:da:04:1f:9a:08:0e:34: 07:98:be:67:29:d1:ed:f6:5d:24:29:41:e1:be:0f:62:25:e2: be:d4:c9:26:b6:71:d1:56:7f:83:78:13:72:a7:a6:11:f1:fc: bd:25:76:ad:fd:d5:99:e7:82:ba:b4:de:90:ca:bc:2f:5f:39: f1:94:fd:89:b6:1b:fc:8a:ba:73:99:c5:20:0e:7d:47:9e:29: 39:5a:05:c3:8c:4d:b5:13:cb:88:d3:45:17:a3:59:78:be:a7: 9e:9a:ba:50:2a:b4:32:04:7a:ae:5b:1d:db:5b:96:2b:4a:2c: 8c:ea:d1:28:9f:b0:bf:4f:a4:67:e1:73:36:21:9a:7e:fc:b4: ab:67:fb:a5:c6:4d:46:c3:ed:fc:6e:7b:76:4f:31:36:bb:66: 12:03:04:cc:0e:49:53:ba:7a:f0:97:e6:e1:df:a9:52:27:95: a1:83:d1:ae:de:56:c2:87:88:5e:16:11:02:26:3c:fa:1a:2f: 1c:72:ec:94:8a:14:b5:be:cf:ee:9a:89:29:0a:98:2d:d3:77: 1d:c5:48:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj5JqYlWpkz2PiXRoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjBmYWNjYjQtNDBhOS00MTY4LWFhM2QtNTlkMTkwZWI1 YTA0MB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk Y2I1OGY1ODEtMmMxYS00MGZkLTgwZjktZDY4M2UwM2FmMmZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA170WfWAir1/DCvJHablxifOPekxZIeGM6zKK xD1hJsrhtYqLCMeeC5qKRDg1NLkz55YE5fWXEBYsTGKOxyd6Omi6zsxiKTOTJO9C iM/7YzB8FiZ0mQRVrvKZ+lBeALqntjL45d4I4tP6P+zvyDZZyfj4SMEmEsIKycDs YfKpvxafXrg4FIsTN2nj6pAEMuhaq7eGQue9u6hS7/juFxopj/y/zTkPx6z3q/ng JcTsk/esrYd6PX+YqdBIkap2/aMCyesa/nfq3cnRA6+6cHXUSOeNW4Dtx+P+XpMj nJrkn5aOPqqYFxrJ6PGI20VCPJiFbBBmctx2JrgORjxtl79z3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKRhm7gxN23U447gnzwWhAUs3BfsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZh Y2NiNC00MGE5LTQxNjgtYWEzZC01OWQxOTBlYjVhMDQvNTk2ZTg2NDUtYThjNS0z NzE0LWIwZDUtMzJmOTExODgxOGRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjBmYWNjYjQtNDBhOS00MTY4LWFh M2QtNTlkMTkwZWI1YTA0L2YwZmFjY2I0LTQwYTktNDE2OC1hYTNkLTU5ZDE5MGVi NWEwNC5jcmwwHwYDVR0jBBgwFoAUrZAUzWRWZcDhdzVyttqYfTlVJJYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZhY2NiNC00MGE5LTQxNjgtYWEzZC01OWQx OTBlYjVhMDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EbRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA2/2wRapoWPjOfjvA0tmbu1wKCHpW9ghyOKR3xJrS1+Ui6QE9L0WjcC FTbjCr0s2gQfmggONAeYvmcp0e32XSQpQeG+D2Il4r7UySa2cdFWf4N4E3KnphHx /L0ldq391Znngrq03pDKvC9fOfGU/Ym2G/yKunOZxSAOfUeeKTlaBcOMTbUTy4jT RRejWXi+p56aulAqtDIEeq5bHdtblitKLIzq0SifsL9PpGfhczYhmn78tKtn+6XG TUbD7fxue3ZPMTa7ZhIDBMwOSVO6evCX5uHfqVInlaGD0a7eVsKHiF4WEQImPPoa Lxxy7JSKFLW+z+6aiSkKmC3Tdx3FSNc= -----END CERTIFICATE-----Generated at Fri Mar 14 10:35:35 2025 by rpki-client