$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/596e8645-a8c5-3714-b0d5-32f9118818dc.roa File: 596e8645-a8c5-3714-b0d5-32f9118818dc.roa (raw, json) Hash identifier: ciL4lb4RF84E+jlmMYNr4F0jHqhRrEUK7g6W/Y7uTfE= Subject key identifier: 88:65:80:19:E2:BB:55:F1:08:08:CF:8F:D6:01:FD:0B:6B:D3:15:69 Certificate issuer: /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04 Certificate serial: 010D0C9F4328584819CFD62EAE6615140154B4C0 Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/596e8645-a8c5-3714-b0d5-32f9118818dc.roa Signing time: Thu 05 Dec 2024 02:00:39 +0000 ROA not before: Thu 05 Dec 2024 02:00:39 +0000 ROA not after: Wed 05 Mar 2025 02:00:39 +0000 asID: 14618 IP address blocks: 208.70.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:19:cf:d6:2e:ae:66:15:14:01:54:b4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04 Validity Not Before: Dec 5 02:00:39 2024 GMT Not After : Mar 5 02:00:39 2025 GMT Subject: CN=f2cbd34c-906b-45a1-9a47-392b033b4a67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d1:24:0a:64:4b:58:eb:d0:12:80:6f:91:17: 2b:93:75:a5:e8:31:f2:40:a5:37:23:39:1d:29:61: 87:57:61:fc:ef:1b:a0:fc:01:1e:55:70:8e:9f:9b: 12:58:8d:ca:08:46:38:a8:7e:f5:84:1b:4e:6d:1e: e4:a5:7c:4f:62:1f:94:c8:75:64:34:ef:71:9d:bf: 0e:57:33:bc:f2:6d:38:3e:1d:c0:ee:3a:54:c3:8d: 88:28:df:f2:09:52:39:0e:5d:ae:a4:65:b1:89:a5: 8d:19:d7:7c:b5:db:8e:43:18:16:30:e5:8b:b6:e8: 6f:72:50:29:fe:08:da:3f:2d:6c:30:3e:ca:b0:82: 43:ac:00:dc:e1:f1:07:95:26:e5:2f:8e:34:dd:5d: f5:2d:80:81:78:5a:98:01:60:ba:48:c5:f5:cb:0b: 87:d8:25:16:0b:03:e5:f3:16:e3:46:57:2a:75:91: 9d:fd:6e:b6:a3:2a:f9:be:52:12:35:c0:7a:74:8e: ae:6a:06:94:aa:0f:d5:1a:c8:7c:e5:aa:95:5c:1e: 45:02:30:1c:c5:1f:0f:dc:c8:1b:0f:1f:6d:fd:7e: 93:9a:d5:26:59:c0:51:63:6a:57:66:bb:41:3c:87: d9:86:fe:4f:f8:1b:0e:66:9d:b7:0e:67:d7:b6:f7: 1c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:65:80:19:E2:BB:55:F1:08:08:CF:8F:D6:01:FD:0B:6B:D3:15:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/596e8645-a8c5-3714-b0d5-32f9118818dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl X509v3 Authority Key Identifier: keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer sbgp-ipAddrBlock: critical IPv4: 208.70.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:51:d6:41:8d:31:c1:a1:de:19:9c:41:fd:f2:a6:8c:42:e9: a5:0e:dc:dc:df:1d:02:27:cb:df:e8:2c:64:78:4f:99:f8:5d: 47:d9:e1:1b:35:7f:a9:e1:96:3e:c0:b8:ae:65:c6:f4:b8:d3: 72:05:06:fb:af:f9:54:ee:b8:6b:d2:d8:72:6a:d0:3a:58:0c: 48:6b:3d:bb:07:f5:d9:f1:01:99:0b:a9:33:af:b5:fa:4c:65: a8:76:c2:7c:ff:e8:34:23:2a:53:3a:4f:88:90:18:da:47:3e: b1:4f:c2:8a:c9:aa:c9:ec:83:0b:f9:66:fa:a4:9d:07:22:8f: f8:20:b0:c4:54:05:9c:df:7e:93:be:20:fc:63:ba:c7:d6:b3: c0:e8:b1:a2:25:14:bd:b7:2b:e8:e7:1f:e4:dd:cc:6e:df:fb: 62:56:f7:5b:fd:b7:44:c9:45:39:c3:a7:15:53:6a:f4:c3:0c: 7a:fe:9d:1f:55:45:07:d5:0c:eb:bf:00:4a:5f:f4:ed:b0:69: 87:a1:37:f0:bd:0f:63:53:da:d3:a9:68:db:ea:83:56:cc:5c: ec:72:b1:0c:d1:c4:64:d2:fb:61:f0:da:5d:c6:38:43:e4:48: b8:1f:78:9b:1c:dd:df:5a:25:43:f1:dc:fb:a0:b6:33:58:be: 9d:5b:b6:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgZz9YurmYVFAFUtMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjBmYWNjYjQtNDBhOS00MTY4LWFhM2QtNTlkMTkwZWI1 YTA0MB4XDTI0MTIwNTAyMDAzOVoXDTI1MDMwNTAyMDAzOVowLzEtMCsGA1UEAxMk ZjJjYmQzNGMtOTA2Yi00NWExLTlhNDctMzkyYjAzM2I0YTY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9EkCmRLWOvQEoBvkRcrk3Wl6DHyQKU3Izkd KWGHV2H87xug/AEeVXCOn5sSWI3KCEY4qH71hBtObR7kpXxPYh+UyHVkNO9xnb8O VzO88m04Ph3A7jpUw42IKN/yCVI5Dl2upGWxiaWNGdd8tduOQxgWMOWLtuhvclAp /gjaPy1sMD7KsIJDrADc4fEHlSblL4403V31LYCBeFqYAWC6SMX1ywuH2CUWCwPl 8xbjRlcqdZGd/W62oyr5vlISNcB6dI6uagaUqg/VGsh85aqVXB5FAjAcxR8P3Mgb Dx9t/X6TmtUmWcBRY2pXZrtBPIfZhv5P+BsOZp23DmfXtvccVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIhlgBniu1XxCAjPj9YB/Qtr0xVpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZh Y2NiNC00MGE5LTQxNjgtYWEzZC01OWQxOTBlYjVhMDQvNTk2ZTg2NDUtYThjNS0z NzE0LWIwZDUtMzJmOTExODgxOGRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjBmYWNjYjQtNDBhOS00MTY4LWFh M2QtNTlkMTkwZWI1YTA0L2YwZmFjY2I0LTQwYTktNDE2OC1hYTNkLTU5ZDE5MGVi NWEwNC5jcmwwHwYDVR0jBBgwFoAUrZAUzWRWZcDhdzVyttqYfTlVJJYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZhY2NiNC00MGE5LTQxNjgtYWEzZC01OWQx OTBlYjVhMDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EbRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB5R1kGNMcGh3hmcQf3ypoxC6aUO3NzfHQIny9/oLGR4T5n4XUfZ4Rs1 f6nhlj7AuK5lxvS403IFBvuv+VTuuGvS2HJq0DpYDEhrPbsH9dnxAZkLqTOvtfpM Zah2wnz/6DQjKlM6T4iQGNpHPrFPworJqsnsgwv5ZvqknQcij/ggsMRUBZzffpO+ IPxjusfWs8DosaIlFL23K+jnH+TdzG7f+2JW91v9t0TJRTnDpxVTavTDDHr+nR9V RQfVDOu/AEpf9O2waYehN/C9D2NT2tOpaNvqg1bMXOxysQzRxGTS+2Hw2l3GOEPk SLgfeJsc3d9aJUPx3PugtjNYvp1btiQ= -----END CERTIFICATE-----Generated at Sun Feb 16 15:16:23 2025 by rpki-client