$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/4a24f8d8-a508-3379-9a8b-f4caa34d1af5.roa File: 4a24f8d8-a508-3379-9a8b-f4caa34d1af5.roa (raw, json) Hash identifier: a6X9q8a8f9Q29qhVUQoGIF8TuaTPyVWAOBy3GOcD2D0= Subject key identifier: F3:FC:5A:1D:9B:42:99:36:63:E3:2E:8E:C4:BF:A8:46:1C:3B:B8:4C Certificate issuer: /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04 Certificate serial: 010D0C9F4328584A23C0004666AAB3260A7E3700 Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/4a24f8d8-a508-3379-9a8b-f4caa34d1af5.roa Signing time: Tue 10 Jun 2025 01:00:50 +0000 ROA not before: Tue 10 Jun 2025 01:00:50 +0000 ROA not after: Mon 08 Sep 2025 01:00:50 +0000 asID: 16509 IP address blocks: 159.112.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:23:c0:00:46:66:aa:b3:26:0a:7e:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04 Validity Not Before: Jun 10 01:00:50 2025 GMT Not After : Sep 8 01:00:50 2025 GMT Subject: CN=d61b9566-af01-4d0a-8365-cec40d7c6391 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:78:53:b8:2a:cb:4f:49:66:36:e8:ac:71:63: cf:47:f0:e3:27:42:f0:58:7e:89:7c:88:86:be:c1: 52:00:93:94:f4:6a:c8:6f:30:00:83:64:fe:60:7d: db:fd:be:c3:f1:15:72:d6:e6:25:a8:ff:d3:ec:bf: cb:e4:ec:b6:34:80:c8:99:91:85:67:70:e9:c2:9a: 1b:52:02:02:8f:c3:8e:97:5b:10:fc:63:a4:0d:06: d9:43:f4:67:07:bc:39:23:29:bf:0e:78:42:f0:ce: ce:f7:be:9b:30:00:d6:26:f9:da:43:cd:44:97:eb: 0c:62:8b:d7:2b:b9:a8:20:84:dc:05:e1:5c:9f:83: c9:83:83:07:f4:38:44:4d:85:15:16:83:f0:42:2e: 18:45:ae:a3:48:44:82:bd:c4:52:d4:23:5e:40:b1: 24:c6:b6:73:52:b1:0b:4a:f5:58:c0:2d:b1:52:89: 4d:2c:0a:c5:15:f1:18:f0:32:d6:c1:51:40:35:55: dc:ef:1c:b1:25:38:d0:6a:f0:5b:05:2c:1e:fe:4d: 31:24:9a:19:8f:bd:6c:8b:99:ab:7a:6b:8c:01:79: db:1b:0b:90:35:f5:d7:30:85:47:99:94:e6:d3:42: 4a:8c:37:7c:f7:3f:76:41:36:4c:f1:be:68:35:16: b3:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:FC:5A:1D:9B:42:99:36:63:E3:2E:8E:C4:BF:A8:46:1C:3B:B8:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/4a24f8d8-a508-3379-9a8b-f4caa34d1af5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl X509v3 Authority Key Identifier: keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer sbgp-ipAddrBlock: critical IPv4: 159.112.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:5f:48:0a:54:53:38:f8:3b:c3:23:f3:3c:86:b9:64:b0:ea: 4b:3a:b9:a1:32:58:40:62:6e:60:22:72:74:c6:8e:d3:94:a4: 3f:06:71:ad:d5:b2:bf:41:bf:0e:aa:4a:62:4b:54:42:b2:d6: c4:94:03:84:88:38:f0:de:92:ae:dc:d1:69:19:95:30:1d:64: 33:7f:37:aa:0a:86:7f:34:9d:87:ed:69:4a:07:f8:f7:dd:4a: 7f:4a:d2:10:a7:25:71:35:10:06:9e:41:b2:49:5c:3f:e8:91: 5d:67:fc:a9:9d:03:66:bd:35:fe:18:82:48:d4:72:f8:a3:ee: 6f:7a:37:e0:24:b5:99:78:61:3a:52:6e:a6:c0:18:c4:49:1f: 98:79:d9:28:0d:47:27:96:ec:f6:6a:3f:db:41:47:57:44:d2: 3c:3e:77:e9:a0:bf:68:3b:d3:85:6f:62:c4:a1:c8:07:c9:21: 78:5b:9c:a4:98:43:8d:06:da:d2:4e:2b:b0:55:8b:df:46:f1: 38:10:b7:9f:fd:59:d0:a1:bd:80:71:7b:f9:94:dd:31:90:d9: 1a:03:46:df:51:ab:6e:25:d9:bb:36:8d:ec:54:2c:6d:c8:29: ec:aa:61:8a:e8:db:99:b2:de:5e:99:d2:f6:5d:0e:34:db:0c: ed:23:99:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEojwABGZqqzJgp+NwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjBmYWNjYjQtNDBhOS00MTY4LWFhM2QtNTlkMTkwZWI1 YTA0MB4XDTI1MDYxMDAxMDA1MFoXDTI1MDkwODAxMDA1MFowLzEtMCsGA1UEAxMk ZDYxYjk1NjYtYWYwMS00ZDBhLTgzNjUtY2VjNDBkN2M2MzkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnhTuCrLT0lmNuiscWPPR/DjJ0LwWH6JfIiG vsFSAJOU9GrIbzAAg2T+YH3b/b7D8RVy1uYlqP/T7L/L5Oy2NIDImZGFZ3Dpwpob UgICj8OOl1sQ/GOkDQbZQ/RnB7w5Iym/DnhC8M7O976bMADWJvnaQ81El+sMYovX K7moIITcBeFcn4PJg4MH9DhETYUVFoPwQi4YRa6jSESCvcRS1CNeQLEkxrZzUrEL SvVYwC2xUolNLArFFfEY8DLWwVFANVXc7xyxJTjQavBbBSwe/k0xJJoZj71si5mr emuMAXnbGwuQNfXXMIVHmZTm00JKjDd89z92QTZM8b5oNRazMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPP8Wh2bQpk2Y+MujsS/qEYcO7hMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZh Y2NiNC00MGE5LTQxNjgtYWEzZC01OWQxOTBlYjVhMDQvNGEyNGY4ZDgtYTUwOC0z Mzc5LTlhOGItZjRjYWEzNGQxYWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjBmYWNjYjQtNDBhOS00MTY4LWFh M2QtNTlkMTkwZWI1YTA0L2YwZmFjY2I0LTQwYTktNDE2OC1hYTNkLTU5ZDE5MGVi NWEwNC5jcmwwHwYDVR0jBBgwFoAUrZAUzWRWZcDhdzVyttqYfTlVJJYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZhY2NiNC00MGE5LTQxNjgtYWEzZC01OWQx OTBlYjVhMDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAn3DoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGhfSApUUzj4O8Mj8zyGuWSw6ks6uaEyWEBibmAicnTGjtOUpD8Gca3V sr9Bvw6qSmJLVEKy1sSUA4SIOPDekq7c0WkZlTAdZDN/N6oKhn80nYftaUoH+Pfd Sn9K0hCnJXE1EAaeQbJJXD/okV1n/KmdA2a9Nf4YgkjUcvij7m96N+AktZl4YTpS bqbAGMRJH5h52SgNRyeW7PZqP9tBR1dE0jw+d+mgv2g704VvYsShyAfJIXhbnKSY Q40G2tJOK7BVi99G8TgQt5/9WdChvYBxe/mU3TGQ2RoDRt9Rq24l2bs2jexULG3I KeyqYYro25my3l6Z0vZdDjTbDO0jmbM= -----END CERTIFICATE-----Generated at Sat Jun 14 06:02:18 2025 by rpki-client