$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/5b67306d-5138-3897-a51e-4392ac909402.roa File: 5b67306d-5138-3897-a51e-4392ac909402.roa (raw, json) Hash identifier: K7L24pCr66dT2+WZ8+f4pbm6R0HU09mlIxUl4tUKK/A= Subject key identifier: 15:83:81:E5:A6:85:65:A3:DF:F1:A3:C9:46:E4:DD:08:2D:9C:B2:0F Certificate issuer: /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04 Certificate serial: 010D0C9F43285849D85F9198AAC7191113D14DC0 Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/5b67306d-5138-3897-a51e-4392ac909402.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 16509 IP address blocks: 208.70.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:91:98:aa:c7:19:11:13:d1:4d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04 Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=e897f662-9553-46dd-8755-6164b31d99ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:2f:8e:73:f0:eb:fc:22:a4:c6:3b:7f:e0:40: fa:cc:10:47:32:02:52:ac:78:0c:07:d1:14:a0:34: 97:35:0f:5f:1a:f8:06:73:c0:68:b1:9c:15:b6:f4: 74:30:27:01:93:eb:50:29:b1:fd:09:da:67:db:b7: 07:37:cd:bf:a9:84:a8:ba:6a:73:7e:e2:36:cf:33: 9a:21:b5:3a:5e:5b:ce:3c:96:81:10:d8:9c:0e:03: 1f:26:a3:91:0f:c0:6b:42:70:95:3d:03:ad:30:dc: c7:25:ce:da:c1:1c:d5:08:c7:45:d7:39:11:b4:0d: c7:a9:af:b9:ea:8a:c5:93:0d:b8:0a:3c:b3:15:dd: c6:5b:ef:84:68:77:cf:7a:02:eb:ca:90:09:63:56: 17:c8:cf:2f:26:26:88:c1:96:46:59:8d:29:54:74: cd:e6:ec:8e:81:24:90:1c:15:eb:bb:8f:e6:7f:a5: c5:8b:fa:14:34:69:b9:02:bf:df:60:cf:77:cb:72: ff:33:7e:4a:16:7e:84:86:f1:e4:27:99:09:ca:89: 56:25:2e:bf:04:41:8e:14:04:89:64:04:6b:f4:4d: 18:42:7a:ea:41:7a:79:09:b4:c7:8f:4c:0e:48:8a: 69:41:b8:e8:3b:e5:7b:ae:02:00:47:84:9a:15:f3: 50:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:83:81:E5:A6:85:65:A3:DF:F1:A3:C9:46:E4:DD:08:2D:9C:B2:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/5b67306d-5138-3897-a51e-4392ac909402.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl X509v3 Authority Key Identifier: keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer sbgp-ipAddrBlock: critical IPv4: 208.70.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:95:ab:0c:9f:f2:01:0f:24:77:38:b2:b0:80:5d:66:51:12: d8:b8:71:25:d5:1e:a5:9d:c0:92:2e:33:2a:77:13:96:ff:53: e7:24:c6:6d:83:12:f4:09:28:36:d6:cd:2b:bd:3a:a8:2c:a2: cc:70:79:d2:ac:e1:fd:81:10:2e:93:8c:68:02:0e:42:d7:97: 1b:08:d9:fe:8e:1e:9b:ae:f9:bf:03:2b:dc:28:fe:c9:bf:9c: be:ac:01:5b:1d:98:0c:fe:65:79:63:d8:3d:f9:84:55:54:51: d8:8c:61:c6:45:ab:a4:6f:91:0b:e4:e7:2d:c2:9b:02:c5:6f: 80:f0:87:74:f2:7d:54:8d:36:ed:8f:f5:da:fd:69:d7:d5:6b: ac:89:20:d3:3c:98:5c:fd:1f:4b:c9:79:cd:a3:43:96:3c:1d: f8:8d:e6:05:63:fd:59:3c:c0:08:44:f8:a1:b1:e7:98:c8:74: 06:93:6e:e8:b8:bf:cd:46:e0:75:1a:c8:78:c1:e4:5e:7a:dd: 06:d8:94:df:ee:77:f5:0e:2f:bf:43:3d:d3:56:1b:3f:2a:b4: fb:7b:96:a5:71:2c:ba:1f:d2:b2:3d:8a:eb:36:80:e0:0a:d9: af:93:f6:52:b4:f5:e6:6f:7e:10:40:d9:af:79:9c:9e:78:76: 06:3c:56:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnYX5GYqscZERPRTcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjBmYWNjYjQtNDBhOS00MTY4LWFhM2QtNTlkMTkwZWI1 YTA0MB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk ZTg5N2Y2NjItOTU1My00NmRkLTg3NTUtNjE2NGIzMWQ5OWNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzy+Oc/Dr/CKkxjt/4ED6zBBHMgJSrHgMB9EU oDSXNQ9fGvgGc8BosZwVtvR0MCcBk+tQKbH9Cdpn27cHN82/qYSoumpzfuI2zzOa IbU6XlvOPJaBENicDgMfJqORD8BrQnCVPQOtMNzHJc7awRzVCMdF1zkRtA3Hqa+5 6orFkw24CjyzFd3GW++EaHfPegLrypAJY1YXyM8vJiaIwZZGWY0pVHTN5uyOgSSQ HBXru4/mf6XFi/oUNGm5Ar/fYM93y3L/M35KFn6EhvHkJ5kJyolWJS6/BEGOFASJ ZARr9E0YQnrqQXp5CbTHj0wOSIppQbjoO+V7rgIAR4SaFfNQCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBWDgeWmhWWj3/GjyUbk3QgtnLIPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZh Y2NiNC00MGE5LTQxNjgtYWEzZC01OWQxOTBlYjVhMDQvNWI2NzMwNmQtNTEzOC0z ODk3LWE1MWUtNDM5MmFjOTA5NDAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjBmYWNjYjQtNDBhOS00MTY4LWFh M2QtNTlkMTkwZWI1YTA0L2YwZmFjY2I0LTQwYTktNDE2OC1hYTNkLTU5ZDE5MGVi NWEwNC5jcmwwHwYDVR0jBBgwFoAUrZAUzWRWZcDhdzVyttqYfTlVJJYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZhY2NiNC00MGE5LTQxNjgtYWEzZC01OWQx OTBlYjVhMDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EbRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGqVqwyf8gEPJHc4srCAXWZREti4cSXVHqWdwJIuMyp3E5b/U+ckxm2D EvQJKDbWzSu9OqgsosxwedKs4f2BEC6TjGgCDkLXlxsI2f6OHpuu+b8DK9wo/sm/ nL6sAVsdmAz+ZXlj2D35hFVUUdiMYcZFq6RvkQvk5y3CmwLFb4Dwh3TyfVSNNu2P 9dr9adfVa6yJINM8mFz9H0vJec2jQ5Y8HfiN5gVj/Vk8wAhE+KGx55jIdAaTbui4 v81G4HUayHjB5F563QbYlN/ud/UOL79DPdNWGz8qtPt7lqVxLLof0rI9ius2gOAK 2a+T9lK09eZvfhBA2a95nJ54dgY8VtM= -----END CERTIFICATE-----Generated at Tue Jul 1 00:25:30 2025 by rpki-client