$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/45eb4551-7331-33dd-815f-95a7e670d0a9.roa File: 45eb4551-7331-33dd-815f-95a7e670d0a9.roa (raw, json) Hash identifier: 2k8hjjI1831qnSwmdDV3puBd4K1/+TsQd16llFd46Ls= Subject key identifier: CA:84:41:66:4D:04:5D:A2:A3:37:08:AC:99:2B:F3:67:30:85:47:0D Certificate issuer: /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04 Certificate serial: 010D0C9F43285849D85F91A8EE46548AB66FA340 Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/45eb4551-7331-33dd-815f-95a7e670d0a9.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 14618 IP address blocks: 208.70.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:91:a8:ee:46:54:8a:b6:6f:a3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04 Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=c0b9c449-1aa5-42ef-86ea-6e3c7e9f85b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:d4:63:e0:cf:bc:65:98:78:40:79:ba:26:43: 8e:4d:62:f9:8a:00:af:f2:1b:8f:c3:f3:07:0d:18: 2b:c7:82:d1:58:ed:1d:3b:82:a7:26:d1:7a:a0:c1: 0f:1c:df:1b:e8:20:63:e0:13:c3:86:ff:0d:c6:bd: 0f:ac:c4:5a:7b:6f:55:92:59:36:a1:bc:f7:dd:a1: f7:2c:40:4b:c1:f2:f0:32:5c:a5:f2:43:22:4a:f2: 95:53:fa:d7:65:66:5a:9c:bd:d9:13:db:e9:dc:f6: fe:5b:3c:63:43:c1:79:56:00:b4:e1:67:ca:bc:4e: 4a:3b:88:61:eb:fd:59:26:52:49:c4:31:bd:19:fd: a0:4d:20:c6:70:22:88:53:1d:cb:58:5c:32:e7:cd: 28:db:9a:ef:40:80:f2:eb:95:1d:c5:db:6a:24:48: 9a:8c:00:4d:d5:62:0a:95:aa:c9:24:a7:24:31:a2: 75:d5:e9:db:14:21:82:97:50:d3:b4:90:e8:94:6d: e7:9d:88:ef:cb:44:12:89:07:c2:91:2f:28:57:95: 62:eb:42:e9:24:d5:f2:46:5c:d7:df:df:01:fb:e6: a1:ad:22:e2:8b:f8:f0:c7:f4:f5:80:0b:65:48:51: 12:84:bc:50:19:50:a5:cf:46:c1:49:12:a2:99:c6: 46:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:84:41:66:4D:04:5D:A2:A3:37:08:AC:99:2B:F3:67:30:85:47:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/45eb4551-7331-33dd-815f-95a7e670d0a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl X509v3 Authority Key Identifier: keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer sbgp-ipAddrBlock: critical IPv4: 208.70.210.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:aa:8c:71:d9:15:b3:e9:47:9c:32:7b:be:7f:49:c1:4c:1e: b5:b9:36:93:92:3a:a9:ae:44:03:67:1c:12:6f:5e:00:46:64: 2d:e5:56:a9:da:d7:8f:b1:31:29:91:cd:6f:67:04:95:04:4d: 99:66:c4:6b:6b:3f:b0:d8:4b:9e:c7:55:a4:a6:55:e7:ed:0d: 82:b7:a9:58:64:22:a0:dc:0e:46:04:54:59:46:77:8f:7d:68: c5:e0:40:d9:96:8f:46:c9:8f:12:01:70:4b:32:69:9c:45:3b: ac:70:0e:3e:51:3f:df:e3:22:a0:31:a8:99:fb:2b:f6:65:7c: 94:b3:2d:b4:a1:fd:a0:e2:18:c2:be:09:d2:e5:41:77:17:95: 64:f8:6d:0c:4a:32:25:0c:12:94:33:10:d4:77:a4:70:06:a7: 4b:bd:13:c3:79:bc:13:30:06:51:8d:48:ad:f8:5f:17:f7:28: 53:c2:3c:6a:e4:52:1e:d6:01:52:c1:19:73:67:cb:8a:10:8e: 64:8d:0e:db:b5:58:83:2b:0e:57:c5:df:05:56:6e:4a:00:fa: 83:81:bb:ba:4b:ec:c6:40:d9:01:79:7e:6d:79:73:f8:62:2c: 16:cc:4b:1a:cc:0d:7a:f6:81:b9:d5:0a:4a:f8:1a:5b:21:25: 4e:52:72:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnYX5Go7kZUirZvo0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjBmYWNjYjQtNDBhOS00MTY4LWFhM2QtNTlkMTkwZWI1 YTA0MB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk YzBiOWM0NDktMWFhNS00MmVmLTg2ZWEtNmUzYzdlOWY4NWI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNRj4M+8ZZh4QHm6JkOOTWL5igCv8huPw/MH DRgrx4LRWO0dO4KnJtF6oMEPHN8b6CBj4BPDhv8Nxr0PrMRae29Vklk2obz33aH3 LEBLwfLwMlyl8kMiSvKVU/rXZWZanL3ZE9vp3Pb+WzxjQ8F5VgC04WfKvE5KO4hh 6/1ZJlJJxDG9Gf2gTSDGcCKIUx3LWFwy580o25rvQIDy65UdxdtqJEiajABN1WIK larJJKckMaJ11enbFCGCl1DTtJDolG3nnYjvy0QSiQfCkS8oV5Vi60LpJNXyRlzX 398B++ahrSLii/jwx/T1gAtlSFEShLxQGVClz0bBSRKimcZG1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMqEQWZNBF2iozcIrJkr82cwhUcNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZh Y2NiNC00MGE5LTQxNjgtYWEzZC01OWQxOTBlYjVhMDQvNDVlYjQ1NTEtNzMzMS0z M2RkLTgxNWYtOTVhN2U2NzBkMGE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjBmYWNjYjQtNDBhOS00MTY4LWFh M2QtNTlkMTkwZWI1YTA0L2YwZmFjY2I0LTQwYTktNDE2OC1hYTNkLTU5ZDE5MGVi NWEwNC5jcmwwHwYDVR0jBBgwFoAUrZAUzWRWZcDhdzVyttqYfTlVJJYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZhY2NiNC00MGE5LTQxNjgtYWEzZC01OWQx OTBlYjVhMDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EbSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADuqjHHZFbPpR5wye75/ScFMHrW5NpOSOqmuRANnHBJvXgBGZC3lVqna 14+xMSmRzW9nBJUETZlmxGtrP7DYS57HVaSmVeftDYK3qVhkIqDcDkYEVFlGd499 aMXgQNmWj0bJjxIBcEsyaZxFO6xwDj5RP9/jIqAxqJn7K/ZlfJSzLbSh/aDiGMK+ CdLlQXcXlWT4bQxKMiUMEpQzENR3pHAGp0u9E8N5vBMwBlGNSK34Xxf3KFPCPGrk Uh7WAVLBGXNny4oQjmSNDtu1WIMrDlfF3wVWbkoA+oOBu7pL7MZA2QF5fm15c/hi LBbMSxrMDXr2gbnVCkr4GlshJU5ScrA= -----END CERTIFICATE-----Generated at Sun Jun 15 09:10:17 2025 by rpki-client