$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/47ea2d17-33fd-35e6-b0d8-b6603b21510d.roa File: 47ea2d17-33fd-35e6-b0d8-b6603b21510d.roa (raw, json) Hash identifier: wGwKaQjRkdDMQp2jFip36Z0uGu4QmFaPm2R0OB+nTk0= Subject key identifier: 18:7D:D1:28:8B:0C:01:D8:87:B1:1D:35:89:87:D0:DE:D8:0C:41:CC Certificate issuer: /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04 Certificate serial: 010D0C9F4328584A23C0058FFF35273CB20E0C60 Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/47ea2d17-33fd-35e6-b0d8-b6603b21510d.roa Signing time: Tue 10 Jun 2025 01:00:50 +0000 ROA not before: Tue 10 Jun 2025 01:00:50 +0000 ROA not after: Mon 08 Sep 2025 01:00:50 +0000 asID: 14618 IP address blocks: 159.112.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:23:c0:05:8f:ff:35:27:3c:b2:0e:0c:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04 Validity Not Before: Jun 10 01:00:50 2025 GMT Not After : Sep 8 01:00:50 2025 GMT Subject: CN=f007a703-38e4-429d-9b80-79eed73f5de7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:8a:96:78:ac:99:5e:e4:b3:41:8e:40:55:f1: 9f:8f:03:d3:d8:e0:21:51:80:ed:1c:62:dc:86:78: 11:c5:d6:a1:aa:82:bc:31:11:f7:f4:9a:85:bb:a0: bb:30:a0:16:ca:77:0c:b8:a7:f4:59:99:13:40:98: 23:3d:c4:73:7f:1d:0b:05:03:c1:b0:44:ae:e8:6e: d7:35:c6:24:25:fe:12:f9:7c:9b:cf:7d:ea:7d:3c: a5:1e:85:00:be:ef:a6:d9:90:c3:da:22:06:19:68: 54:44:c1:be:be:53:8b:d8:45:07:9a:a2:cb:39:05: 51:16:9d:06:8a:43:ba:b3:94:cd:6d:a4:f2:49:10: b6:8a:41:6a:ea:65:fe:78:e0:47:68:3a:55:eb:03: 9f:3c:d7:00:51:99:65:80:88:9e:86:fb:67:66:0d: 51:d8:53:2f:0b:3c:3c:2f:71:77:af:20:fc:9b:69: 7a:7b:44:66:a7:c1:45:03:59:bc:de:72:b7:04:6b: 86:53:d6:ba:ba:db:35:30:a1:fb:be:56:39:2f:bf: 54:c2:7c:ae:81:6c:0d:74:95:43:bb:e3:48:a9:49: 11:4b:c2:5e:3a:b5:28:73:95:fd:fc:31:9c:f3:ef: bd:3a:1f:d9:77:b6:df:17:0e:46:b4:b7:cd:a6:55: 80:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:7D:D1:28:8B:0C:01:D8:87:B1:1D:35:89:87:D0:DE:D8:0C:41:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/47ea2d17-33fd-35e6-b0d8-b6603b21510d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl X509v3 Authority Key Identifier: keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer sbgp-ipAddrBlock: critical IPv4: 159.112.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:5a:31:76:0d:2e:31:d8:ee:47:47:28:d1:4f:d9:90:d9:7a: 3f:9e:6c:02:33:43:e0:1d:ec:f2:ba:2a:e7:1a:34:0b:b8:83: c2:fb:b3:f6:5e:fb:d1:87:ba:ae:ee:2f:77:58:2f:10:e5:0f: 66:1f:54:af:ad:b0:3d:37:80:9b:4d:f7:be:9f:33:84:a8:78: ba:b2:34:cb:ad:54:c7:a9:ab:bf:5b:a6:b9:26:8e:9f:38:cb: 0f:07:5f:dc:39:74:0f:bb:f4:5b:bf:72:9b:22:16:1f:68:08: 6e:fc:07:13:96:08:65:79:6f:0d:2a:f9:ec:ad:0b:08:1b:81: b5:09:93:9f:7f:d1:7e:7b:35:ee:6b:a2:5c:c6:d5:50:57:42: e5:fb:74:cb:db:01:2d:c5:e1:d2:ce:b2:f0:0f:8f:05:8f:d8: 6c:d7:5a:15:80:1e:78:aa:f6:21:51:23:f7:21:bd:3a:58:cf: e7:34:57:22:33:44:e0:42:d0:1f:85:3d:49:9f:a5:06:dc:bf: aa:99:07:db:54:2b:23:6c:bc:57:82:1d:93:b6:bd:93:e6:58: 85:fb:55:a9:71:eb:bf:58:3b:bb:37:2d:e8:f5:93:45:f0:09: ae:4b:a5:da:43:0a:14:88:ea:af:d8:33:78:60:82:71:7f:3a: 22:50:03:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEojwAWP/zUnPLIODGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjBmYWNjYjQtNDBhOS00MTY4LWFhM2QtNTlkMTkwZWI1 YTA0MB4XDTI1MDYxMDAxMDA1MFoXDTI1MDkwODAxMDA1MFowLzEtMCsGA1UEAxMk ZjAwN2E3MDMtMzhlNC00MjlkLTliODAtNzllZWQ3M2Y1ZGU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzoqWeKyZXuSzQY5AVfGfjwPT2OAhUYDtHGLc hngRxdahqoK8MRH39JqFu6C7MKAWyncMuKf0WZkTQJgjPcRzfx0LBQPBsESu6G7X NcYkJf4S+Xybz33qfTylHoUAvu+m2ZDD2iIGGWhURMG+vlOL2EUHmqLLOQVRFp0G ikO6s5TNbaTySRC2ikFq6mX+eOBHaDpV6wOfPNcAUZllgIiehvtnZg1R2FMvCzw8 L3F3ryD8m2l6e0Rmp8FFA1m83nK3BGuGU9a6uts1MKH7vlY5L79UwnyugWwNdJVD u+NIqUkRS8JeOrUoc5X9/DGc8++9Oh/Zd7bfFw5GtLfNplWAIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBh90SiLDAHYh7EdNYmH0N7YDEHMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZh Y2NiNC00MGE5LTQxNjgtYWEzZC01OWQxOTBlYjVhMDQvNDdlYTJkMTctMzNmZC0z NWU2LWIwZDgtYjY2MDNiMjE1MTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjBmYWNjYjQtNDBhOS00MTY4LWFh M2QtNTlkMTkwZWI1YTA0L2YwZmFjY2I0LTQwYTktNDE2OC1hYTNkLTU5ZDE5MGVi NWEwNC5jcmwwHwYDVR0jBBgwFoAUrZAUzWRWZcDhdzVyttqYfTlVJJYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZhY2NiNC00MGE5LTQxNjgtYWEzZC01OWQx OTBlYjVhMDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAn3DoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE5aMXYNLjHY7kdHKNFP2ZDZej+ebAIzQ+Ad7PK6KucaNAu4g8L7s/Ze +9GHuq7uL3dYLxDlD2YfVK+tsD03gJtN976fM4SoeLqyNMutVMepq79bprkmjp84 yw8HX9w5dA+79Fu/cpsiFh9oCG78BxOWCGV5bw0q+eytCwgbgbUJk59/0X57Ne5r olzG1VBXQuX7dMvbAS3F4dLOsvAPjwWP2GzXWhWAHniq9iFRI/chvTpYz+c0VyIz ROBC0B+FPUmfpQbcv6qZB9tUKyNsvFeCHZO2vZPmWIX7Valx679YO7s3Lej1k0Xw Ca5LpdpDChSI6q/YM3hggnF/OiJQA0Q= -----END CERTIFICATE-----Generated at Sun Jun 29 01:26:34 2025 by rpki-client