$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/1fbbe8cd-8d5d-36a3-ba74-f7c2b60d1736.roa File: 1fbbe8cd-8d5d-36a3-ba74-f7c2b60d1736.roa (raw, json) Hash identifier: VCpu7prt78U92qpaR/M5lee+JMHSEwt296TJNRn1jDk= Subject key identifier: 05:22:94:49:06:01:DC:C8:03:98:DC:CF:D7:2C:F5:BC:47:C8:B0:2A Certificate issuer: /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04 Certificate serial: 010D0C9F43285849D85F91D8AB1CC2FB9B581480 Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/1fbbe8cd-8d5d-36a3-ba74-f7c2b60d1736.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 16509 IP address blocks: 208.70.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:91:d8:ab:1c:c2:fb:9b:58:14:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04 Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=4bdeb051-4713-4fcf-80c8-0ed55a76db0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c0:de:3f:a0:ed:43:92:72:1c:67:be:fe:de: 30:2b:f9:eb:16:cc:90:45:13:c2:b7:59:ab:9b:87: 8d:5b:d0:53:5d:c8:8d:bb:dd:63:db:0a:ea:f7:97: 1b:cd:a3:1a:e8:40:8e:b2:4d:d6:03:a8:fa:34:dc: c4:87:c8:cb:90:e9:be:0a:5c:9d:53:d8:e3:c6:11: 78:12:d0:b6:84:12:b6:43:29:5b:c5:14:56:0d:d6: ef:53:8c:c3:f4:9d:4f:d3:78:33:a4:63:d3:a1:d0: ed:50:5b:91:de:1f:8e:07:3e:93:cf:f6:4b:f8:9c: 32:92:86:d1:b8:61:c2:34:00:01:07:ac:e8:81:3b: 9e:cb:b8:e4:94:2d:c7:8a:33:cc:6e:3b:44:a5:7e: b2:3f:5a:af:38:ee:54:7e:6a:a7:3a:84:31:64:dc: ea:06:3d:a5:bb:67:7c:b1:ba:0a:c6:e1:9f:d7:63: 39:ab:ff:25:2a:3f:fc:6f:97:14:67:84:a0:cc:c9: ca:51:88:d0:1e:fa:85:5e:8d:d6:e3:54:e1:3a:d1: 68:33:fa:3b:54:8d:7b:34:14:e9:46:50:19:4a:73: e8:6f:fe:2b:fd:c1:b2:03:1e:72:63:84:1c:64:8c: a4:e0:21:8d:67:b1:8d:8e:7b:3c:7f:40:cf:37:40: 95:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:22:94:49:06:01:DC:C8:03:98:DC:CF:D7:2C:F5:BC:47:C8:B0:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/1fbbe8cd-8d5d-36a3-ba74-f7c2b60d1736.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl X509v3 Authority Key Identifier: keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer sbgp-ipAddrBlock: critical IPv4: 208.70.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:cd:97:92:cd:45:a7:71:d0:c6:a7:f4:82:f0:a3:ca:d4:f4: d1:c9:90:2f:31:ac:cd:72:bf:a9:41:71:76:e8:62:4b:bb:58: 76:84:d9:32:a9:76:f6:af:d9:17:84:69:84:a2:ac:56:2d:0a: ba:ed:f2:a5:2f:5d:32:21:2f:bc:8d:6d:38:df:82:7a:c7:1e: 24:59:a9:99:1a:94:61:ae:aa:f4:26:3e:ef:03:c6:c5:99:1a: 97:a0:53:88:25:92:b5:6c:ac:cd:0f:3e:3b:54:0e:78:ae:6d: 73:8b:f1:08:9d:e5:16:55:b9:44:fc:29:e1:75:8a:fc:eb:29: 63:35:38:49:20:e6:0e:f0:47:00:16:79:90:eb:89:5c:7b:49: 29:2c:11:e6:d1:6a:5d:1c:17:fd:d2:d3:a4:b4:01:bc:70:0e: 8f:5a:bc:30:4b:6f:ae:3a:41:63:3d:03:f5:08:fc:10:25:5e: 86:4c:4e:60:12:7f:8e:d8:28:b7:da:8a:33:bc:e9:ca:a5:31: 73:3f:8c:3a:cf:2d:f1:38:22:54:62:bc:99:77:85:e9:9d:bd: b1:5e:3c:9d:77:86:93:51:d4:f2:1d:ab:1b:12:7e:79:a5:20: 6b:2f:6e:4a:fa:b3:24:af:0f:28:64:2a:ee:d4:6c:f5:e2:09: 71:4b:18:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnYX5HYqxzC+5tYFIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjBmYWNjYjQtNDBhOS00MTY4LWFhM2QtNTlkMTkwZWI1 YTA0MB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk NGJkZWIwNTEtNDcxMy00ZmNmLTgwYzgtMGVkNTVhNzZkYjBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcDeP6DtQ5JyHGe+/t4wK/nrFsyQRRPCt1mr m4eNW9BTXciNu91j2wrq95cbzaMa6ECOsk3WA6j6NNzEh8jLkOm+ClydU9jjxhF4 EtC2hBK2QylbxRRWDdbvU4zD9J1P03gzpGPTodDtUFuR3h+OBz6Tz/ZL+JwykobR uGHCNAABB6zogTuey7jklC3HijPMbjtEpX6yP1qvOO5UfmqnOoQxZNzqBj2lu2d8 sboKxuGf12M5q/8lKj/8b5cUZ4SgzMnKUYjQHvqFXo3W41ThOtFoM/o7VI17NBTp RlAZSnPob/4r/cGyAx5yY4QcZIyk4CGNZ7GNjns8f0DPN0CVeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAUilEkGAdzIA5jcz9cs9bxHyLAqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZh Y2NiNC00MGE5LTQxNjgtYWEzZC01OWQxOTBlYjVhMDQvMWZiYmU4Y2QtOGQ1ZC0z NmEzLWJhNzQtZjdjMmI2MGQxNzM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjBmYWNjYjQtNDBhOS00MTY4LWFh M2QtNTlkMTkwZWI1YTA0L2YwZmFjY2I0LTQwYTktNDE2OC1hYTNkLTU5ZDE5MGVi NWEwNC5jcmwwHwYDVR0jBBgwFoAUrZAUzWRWZcDhdzVyttqYfTlVJJYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZhY2NiNC00MGE5LTQxNjgtYWEzZC01OWQx OTBlYjVhMDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EbTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE3Nl5LNRadx0Man9ILwo8rU9NHJkC8xrM1yv6lBcXboYku7WHaE2TKp dvav2ReEaYSirFYtCrrt8qUvXTIhL7yNbTjfgnrHHiRZqZkalGGuqvQmPu8DxsWZ GpegU4glkrVsrM0PPjtUDniubXOL8Qid5RZVuUT8KeF1ivzrKWM1OEkg5g7wRwAW eZDriVx7SSksEebRal0cF/3S06S0AbxwDo9avDBLb646QWM9A/UI/BAlXoZMTmAS f47YKLfaijO86cqlMXM/jDrPLfE4IlRivJl3hemdvbFePJ13hpNR1PIdqxsSfnml IGsvbkr6sySvDyhkKu7UbPXiCXFLGFs= -----END CERTIFICATE-----Generated at Sat Jun 14 06:46:28 2025 by rpki-client