$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/c3d8cbf4-c2a6-3469-9eda-e2116b238de3.roa File: c3d8cbf4-c2a6-3469-9eda-e2116b238de3.roa (raw, json) Hash identifier: afCt648kZxe2w/m8EqpcXBHUG4z2RhiQnlrZiRGGvwQ= Subject key identifier: C8:A9:FD:E4:FB:47:77:3A:02:F2:72:B4:66:FE:32:BF:FF:52:EE:7A Certificate issuer: /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04 Certificate serial: 010D0C9F4328584869606258AD12070BE0E4B718 Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/c3d8cbf4-c2a6-3469-9eda-e2116b238de3.roa Signing time: Thu 02 Jan 2025 14:00:52 +0000 ROA not before: Thu 02 Jan 2025 14:00:52 +0000 ROA not after: Wed 02 Apr 2025 13:00:52 +0000 asID: 14618 IP address blocks: 64.69.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:69:60:62:58:ad:12:07:0b:e0:e4:b7:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04 Validity Not Before: Jan 2 14:00:52 2025 GMT Not After : Apr 2 13:00:52 2025 GMT Subject: CN=595ae110-4866-4ebf-b144-afc34a0caaba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:dc:b4:18:95:e6:87:c8:3d:96:77:7b:3c:26: e1:f3:82:89:14:69:7a:90:7f:2a:3a:1e:e8:60:07: 53:94:20:38:11:3d:bb:7a:d9:41:27:06:7c:8d:52: 5d:b8:17:0f:b9:df:48:29:67:8d:29:7a:4f:60:e5: 8c:ce:65:79:7e:4f:ad:0f:dd:77:a3:86:6c:1d:d2: 4b:2c:12:63:a3:05:44:7c:ef:72:bb:ff:80:15:71: 03:d7:8b:e8:1b:54:e6:b1:7b:6f:9e:d5:86:da:aa: f0:1c:e1:25:88:7d:07:16:df:e6:94:ad:ee:10:e5: 4f:93:fc:82:4d:02:02:e2:96:5e:31:a6:97:75:44: b0:88:bf:fa:a2:ff:73:00:cc:da:73:30:67:87:cd: 87:74:29:bd:e4:a6:74:ac:cd:bf:e0:ce:c3:49:1c: d4:f0:03:18:8b:79:ee:65:0e:01:11:77:e7:77:f7: e9:79:fb:00:17:b6:57:f4:5d:3d:c7:82:97:6b:6c: 90:38:ae:16:3b:0f:36:75:bd:fc:7d:72:0f:d1:57: 0a:3e:5d:7a:cc:10:a4:dd:9f:fa:b4:86:73:ba:67: 8a:b4:21:53:0d:bd:8f:cb:f3:5f:0b:61:d3:f4:63: d0:72:e1:98:0b:fd:1c:e2:3a:eb:df:10:c8:d8:7a: 66:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:A9:FD:E4:FB:47:77:3A:02:F2:72:B4:66:FE:32:BF:FF:52:EE:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/c3d8cbf4-c2a6-3469-9eda-e2116b238de3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl X509v3 Authority Key Identifier: keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer sbgp-ipAddrBlock: critical IPv4: 64.69.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:1b:2a:c7:81:b0:36:85:4b:ce:3a:5f:fa:0b:bb:9b:7b:e3: f5:05:61:83:32:31:05:50:3f:16:85:fd:3b:0b:8a:37:b9:f8: cc:15:0a:9b:85:e8:01:cf:19:51:52:65:d7:33:d0:ad:55:29: 7a:e4:98:25:e6:73:ec:dc:5d:53:1c:7e:ea:37:b1:73:36:54: 2c:43:f1:27:01:d2:ae:2e:26:a7:5e:e9:e4:66:10:b5:a6:c9: d1:06:10:09:a4:de:73:ea:71:22:a4:c6:6c:5b:2d:2c:91:79: 1e:84:d1:73:4f:e6:c4:5a:6c:b2:4f:6b:a6:09:42:cb:98:64: 6d:68:bd:ed:24:24:44:ac:b4:ff:a7:86:78:95:66:69:5f:1f: ee:17:66:09:60:b8:bb:c3:08:fb:db:a7:8c:53:ea:e2:7f:9e: 8b:b2:cb:1c:93:3f:3f:6a:04:40:e8:6f:d1:b8:98:74:c5:31: ab:19:8d:e5:32:57:e7:49:8b:18:b7:e6:1f:e7:a7:89:9d:02: 4b:c9:96:8b:5f:23:b9:e0:b9:c3:a4:4b:52:f1:18:de:9c:ca: 69:2d:62:cd:93:b5:5b:29:39:f7:c4:24:08:17:cc:f4:e6:11: b4:8f:3a:ee:08:89:0e:b3:93:5e:e8:29:f7:93:16:4c:cc:37: 16:77:ba:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhpYGJYrRIHC+DktxgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjBmYWNjYjQtNDBhOS00MTY4LWFhM2QtNTlkMTkwZWI1 YTA0MB4XDTI1MDEwMjE0MDA1MloXDTI1MDQwMjEzMDA1MlowLzEtMCsGA1UEAxMk NTk1YWUxMTAtNDg2Ni00ZWJmLWIxNDQtYWZjMzRhMGNhYWJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9y0GJXmh8g9lnd7PCbh84KJFGl6kH8qOh7o YAdTlCA4ET27etlBJwZ8jVJduBcPud9IKWeNKXpPYOWMzmV5fk+tD913o4ZsHdJL LBJjowVEfO9yu/+AFXED14voG1TmsXtvntWG2qrwHOEliH0HFt/mlK3uEOVPk/yC TQIC4pZeMaaXdUSwiL/6ov9zAMzaczBnh82HdCm95KZ0rM2/4M7DSRzU8AMYi3nu ZQ4BEXfnd/fpefsAF7ZX9F09x4KXa2yQOK4WOw82db38fXIP0VcKPl16zBCk3Z/6 tIZzumeKtCFTDb2Py/NfC2HT9GPQcuGYC/0c4jrr3xDI2HpmCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMip/eT7R3c6AvJytGb+Mr//Uu56MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZh Y2NiNC00MGE5LTQxNjgtYWEzZC01OWQxOTBlYjVhMDQvYzNkOGNiZjQtYzJhNi0z NDY5LTllZGEtZTIxMTZiMjM4ZGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjBmYWNjYjQtNDBhOS00MTY4LWFh M2QtNTlkMTkwZWI1YTA0L2YwZmFjY2I0LTQwYTktNDE2OC1hYTNkLTU5ZDE5MGVi NWEwNC5jcmwwHwYDVR0jBBgwFoAUrZAUzWRWZcDhdzVyttqYfTlVJJYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZhY2NiNC00MGE5LTQxNjgtYWEzZC01OWQx OTBlYjVhMDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQEXfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF0bKseBsDaFS846X/oLu5t74/UFYYMyMQVQPxaF/TsLije5+MwVCpuF 6AHPGVFSZdcz0K1VKXrkmCXmc+zcXVMcfuo3sXM2VCxD8ScB0q4uJqde6eRmELWm ydEGEAmk3nPqcSKkxmxbLSyReR6E0XNP5sRabLJPa6YJQsuYZG1ove0kJESstP+n hniVZmlfH+4XZglguLvDCPvbp4xT6uJ/nouyyxyTPz9qBEDob9G4mHTFMasZjeUy V+dJixi35h/np4mdAkvJlotfI7ngucOkS1LxGN6cymktYs2TtVspOffEJAgXzPTm EbSPOu4IiQ6zk17oKfeTFkzMNxZ3ulk= -----END CERTIFICATE-----Generated at Sun Feb 16 15:37:56 2025 by rpki-client