$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/821a0569-8066-38ee-93e4-5886d8c8db35.roa File: 821a0569-8066-38ee-93e4-5886d8c8db35.roa (raw, json) Hash identifier: yEYG7+ajZIMXLcDcXH1FnTbMzk0VJ6DxBxDAGfWN7cA= Subject key identifier: 96:2F:E2:FD:E3:69:D6:FD:90:C1:9C:A6:AE:A7:38:62:E8:58:6D:B1 Certificate issuer: /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04 Certificate serial: 010D0C9F432858489BA0AD992844A50982EFD000 Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/821a0569-8066-38ee-93e4-5886d8c8db35.roa Signing time: Mon 20 Jan 2025 14:00:51 +0000 ROA not before: Mon 20 Jan 2025 14:00:51 +0000 ROA not after: Sun 20 Apr 2025 13:00:51 +0000 asID: 16509 IP address blocks: 94.140.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9b:a0:ad:99:28:44:a5:09:82:ef:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04 Validity Not Before: Jan 20 14:00:51 2025 GMT Not After : Apr 20 13:00:51 2025 GMT Subject: CN=d73ac782-141b-4df4-a18e-4c76bd343bb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:5f:6d:85:dc:f0:3d:2f:13:18:67:6a:66:db: 1d:7c:a0:c0:12:ea:e6:60:32:61:4a:00:e8:be:6d: 4e:bf:6f:91:fa:b2:f1:b0:de:f4:46:52:dd:de:0f: c1:62:5d:b3:7b:9a:88:7b:06:b6:c8:30:16:87:1c: 31:69:fa:67:0d:28:2b:fa:c3:9c:ac:4d:e8:51:4c: e3:8e:19:14:6f:84:eb:8d:3a:58:ed:dc:e7:dd:39: ef:39:37:95:76:64:0a:86:ec:c3:95:38:76:bc:65: 50:c3:ee:29:6f:ab:29:25:26:0f:81:66:38:b9:dd: 41:cd:17:a9:ae:86:de:e0:19:79:67:65:be:f2:ed: 05:36:9a:99:a6:3e:c0:81:08:a9:12:72:bb:d0:22: 33:a6:5d:a5:8d:09:bf:7d:ed:ec:28:d3:63:f8:28: 58:9f:5a:bf:4c:a1:c0:3c:7f:5b:ce:48:ae:93:a3: ef:04:ad:6f:31:d3:77:b6:54:f2:6f:c3:2e:b7:70: d4:db:bd:ca:46:69:99:03:a9:1f:40:71:d4:8b:a9: 1f:78:fe:fa:90:ed:9e:2b:a0:56:b7:08:21:c7:cb: 38:fc:21:72:4b:93:ab:69:33:bc:d6:38:c9:20:32: 0c:69:5f:d8:56:c2:d7:3d:f6:37:d1:91:da:4a:39: 5f:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:2F:E2:FD:E3:69:D6:FD:90:C1:9C:A6:AE:A7:38:62:E8:58:6D:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/821a0569-8066-38ee-93e4-5886d8c8db35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl X509v3 Authority Key Identifier: keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer sbgp-ipAddrBlock: critical IPv4: 94.140.18.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:e6:93:00:85:09:46:07:80:6e:81:dd:50:a9:76:3e:29:b8: 4b:3c:15:b3:a4:6f:da:b2:a3:66:d8:c0:1c:50:4d:5c:f7:c4: a2:1b:1f:43:d7:d6:e4:2b:71:39:72:76:91:ab:f5:94:f8:e3: 50:19:5d:83:78:6d:c2:75:c4:3a:7d:1b:7e:57:d6:20:ce:a7: 9a:36:cb:7d:3f:22:54:ed:df:02:76:0f:c6:46:b5:bb:18:36: 77:e1:f9:26:40:3d:e6:8b:ff:06:38:0b:fb:f2:c7:d7:ba:51: 84:fa:1b:5d:16:7c:f3:aa:04:e4:4a:0e:99:33:fe:bb:ff:2e: e0:c9:b3:a5:c6:e6:b4:81:91:ea:03:e1:e3:9d:4b:6f:4c:54: 08:af:57:4a:0a:41:01:d7:15:86:76:dd:9e:02:6d:e3:23:ca: 46:fc:6d:75:e7:23:09:d1:13:bf:4d:51:93:dc:3a:17:2e:d5: 93:7b:ea:0d:62:8e:f6:46:d1:4d:22:ac:e5:02:83:80:30:dd: df:96:bb:5a:b8:20:4e:92:64:fe:00:37:03:82:e2:78:89:50: 30:00:60:52:14:26:10:02:ae:19:7c:87:29:fa:13:ca:4f:79: 2f:2d:ac:33:b6:3d:d7:18:1c:a9:29:d3:97:33:d9:27:6c:03: 6f:09:24:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiboK2ZKESlCYLv0AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjBmYWNjYjQtNDBhOS00MTY4LWFhM2QtNTlkMTkwZWI1 YTA0MB4XDTI1MDEyMDE0MDA1MVoXDTI1MDQyMDEzMDA1MVowLzEtMCsGA1UEAxMk ZDczYWM3ODItMTQxYi00ZGY0LWExOGUtNGM3NmJkMzQzYmI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkF9thdzwPS8TGGdqZtsdfKDAEurmYDJhSgDo vm1Ov2+R+rLxsN70RlLd3g/BYl2ze5qIewa2yDAWhxwxafpnDSgr+sOcrE3oUUzj jhkUb4TrjTpY7dzn3TnvOTeVdmQKhuzDlTh2vGVQw+4pb6spJSYPgWY4ud1BzRep robe4Bl5Z2W+8u0FNpqZpj7AgQipEnK70CIzpl2ljQm/fe3sKNNj+ChYn1q/TKHA PH9bzkiuk6PvBK1vMdN3tlTyb8Mut3DU273KRmmZA6kfQHHUi6kfeP76kO2eK6BW twghx8s4/CFyS5OraTO81jjJIDIMaV/YVsLXPfY30ZHaSjlf7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJYv4v3jadb9kMGcpq6nOGLoWG2xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZh Y2NiNC00MGE5LTQxNjgtYWEzZC01OWQxOTBlYjVhMDQvODIxYTA1NjktODA2Ni0z OGVlLTkzZTQtNTg4NmQ4YzhkYjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjBmYWNjYjQtNDBhOS00MTY4LWFh M2QtNTlkMTkwZWI1YTA0L2YwZmFjY2I0LTQwYTktNDE2OC1hYTNkLTU5ZDE5MGVi NWEwNC5jcmwwHwYDVR0jBBgwFoAUrZAUzWRWZcDhdzVyttqYfTlVJJYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZhY2NiNC00MGE5LTQxNjgtYWEzZC01OWQx OTBlYjVhMDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXowSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHvmkwCFCUYHgG6B3VCpdj4puEs8FbOkb9qyo2bYwBxQTVz3xKIbH0PX 1uQrcTlydpGr9ZT441AZXYN4bcJ1xDp9G35X1iDOp5o2y30/IlTt3wJ2D8ZGtbsY Nnfh+SZAPeaL/wY4C/vyx9e6UYT6G10WfPOqBORKDpkz/rv/LuDJs6XG5rSBkeoD 4eOdS29MVAivV0oKQQHXFYZ23Z4CbeMjykb8bXXnIwnRE79NUZPcOhcu1ZN76g1i jvZG0U0irOUCg4Aw3d+Wu1q4IE6SZP4ANwOC4niJUDAAYFIUJhACrhl8hyn6E8pP eS8trDO2PdcYHKkp05cz2SdsA28JJFg= -----END CERTIFICATE-----Generated at Fri Mar 14 10:13:09 2025 by rpki-client