$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/518fb9f3-6845-3e45-af69-497c8740ed7a.roa File: 518fb9f3-6845-3e45-af69-497c8740ed7a.roa (raw, json) Hash identifier: iWl56DfKMs1v5p0iBqhtZj52BWfwnrD4XA2Ae0ExJPI= Subject key identifier: F7:30:1E:C8:74:F8:24:AB:9F:FE:6E:85:32:7A:03:3B:23:6C:51:3D Certificate issuer: /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04 Certificate serial: 010D0C9F43285849D85F91C8E882827E3C351BE0 Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/518fb9f3-6845-3e45-af69-497c8740ed7a.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 14618 IP address blocks: 208.70.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:91:c8:e8:82:82:7e:3c:35:1b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04 Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=ad321128-4b21-43b8-be32-aeb120fbd45f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:9e:46:17:dd:6d:dc:ac:f6:11:ea:16:82:8d: 32:46:27:0d:18:fc:40:8f:3f:8f:a3:c4:18:ec:93: 67:2c:15:9e:69:7c:38:44:ef:82:d7:5b:a1:47:74: 12:70:1a:c2:f5:61:e3:ca:03:06:2d:1c:4a:43:87: d1:c8:0b:60:62:02:17:74:e2:28:9a:4b:f5:c0:78: d5:23:d1:c0:47:40:19:d5:51:e4:0f:e8:1c:f9:70: 40:4e:eb:01:d2:26:cf:b2:ab:18:35:d2:8d:84:f6: 53:04:34:57:2c:5f:07:8b:2e:a4:c8:08:cf:14:ef: 8e:b3:c1:63:1e:2b:bd:45:44:a1:28:8a:da:a1:b8: b1:cd:10:80:c6:05:29:75:4c:8a:f0:5c:11:d0:ab: a9:45:86:27:9b:fc:ef:af:56:06:57:aa:2e:ba:b7: 5a:ab:f9:ac:4a:6a:bf:fb:b2:c1:71:be:37:e4:cd: 16:de:ab:53:8e:ba:02:ab:db:83:1b:91:11:c5:64: 71:c1:4f:7d:61:6e:d3:fe:38:2e:2e:04:0d:64:1e: b4:8f:5a:91:05:41:37:89:f0:d0:26:c3:1f:bf:5a: 4e:53:c5:8d:8f:65:2e:84:aa:dd:f7:4d:fb:4a:f6: 54:44:ca:82:62:6b:55:23:87:94:1b:b3:e1:de:44: db:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:30:1E:C8:74:F8:24:AB:9F:FE:6E:85:32:7A:03:3B:23:6C:51:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/518fb9f3-6845-3e45-af69-497c8740ed7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl X509v3 Authority Key Identifier: keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer sbgp-ipAddrBlock: critical IPv4: 208.70.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:b5:7d:88:c5:92:bf:ce:06:de:41:09:37:a2:c3:4f:ee:7d: 5d:ae:66:f3:f6:68:c7:bf:bc:39:35:07:e4:3e:2a:41:19:61: 3f:2b:5f:77:f5:72:b4:99:e4:76:0b:42:da:16:00:b1:fa:0b: 80:5e:e3:65:fd:00:71:39:70:2b:21:07:84:8c:24:42:56:e5: 05:8f:5b:bb:ff:39:80:13:1c:d0:5f:d1:3c:49:d3:b2:c0:42: b6:af:9e:cb:a5:e8:fa:08:23:7f:70:59:3e:eb:ed:de:58:36: a4:56:54:6c:4a:dd:1b:01:b3:81:d1:27:85:19:bc:18:bf:02: 8b:de:35:53:81:1b:86:9f:75:27:d3:a0:93:02:b5:95:f6:80: 9a:b0:52:a8:4c:d2:ac:f5:e4:0a:19:e8:b7:34:7f:1d:7d:3d: 69:6d:b4:56:48:19:69:75:e9:cc:00:de:07:25:37:a8:9e:f4: 25:39:31:36:ae:7e:9d:49:3d:5c:76:8a:7d:3d:7a:99:d9:17: 54:6c:ac:14:5a:cb:12:8d:ff:cf:ed:d1:24:18:1c:39:4d:af: 6d:85:8f:1b:8d:68:40:b6:33:8e:76:2a:aa:24:24:73:4b:6a: a4:d4:2a:73:c9:0a:c1:90:bf:b8:8a:c4:e7:80:4f:a2:93:20: 28:fd:fc:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnYX5HI6IKCfjw1G+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjBmYWNjYjQtNDBhOS00MTY4LWFhM2QtNTlkMTkwZWI1 YTA0MB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk YWQzMjExMjgtNGIyMS00M2I4LWJlMzItYWViMTIwZmJkNDVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJ5GF91t3Kz2EeoWgo0yRicNGPxAjz+Po8QY 7JNnLBWeaXw4RO+C11uhR3QScBrC9WHjygMGLRxKQ4fRyAtgYgIXdOIomkv1wHjV I9HAR0AZ1VHkD+gc+XBATusB0ibPsqsYNdKNhPZTBDRXLF8Hiy6kyAjPFO+Os8Fj Hiu9RUShKIraobixzRCAxgUpdUyK8FwR0KupRYYnm/zvr1YGV6ouurdaq/msSmq/ +7LBcb435M0W3qtTjroCq9uDG5ERxWRxwU99YW7T/jguLgQNZB60j1qRBUE3ifDQ JsMfv1pOU8WNj2UuhKrd9037SvZURMqCYmtVI4eUG7Ph3kTbsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPcwHsh0+CSrn/5uhTJ6AzsjbFE9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZh Y2NiNC00MGE5LTQxNjgtYWEzZC01OWQxOTBlYjVhMDQvNTE4ZmI5ZjMtNjg0NS0z ZTQ1LWFmNjktNDk3Yzg3NDBlZDdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjBmYWNjYjQtNDBhOS00MTY4LWFh M2QtNTlkMTkwZWI1YTA0L2YwZmFjY2I0LTQwYTktNDE2OC1hYTNkLTU5ZDE5MGVi NWEwNC5jcmwwHwYDVR0jBBgwFoAUrZAUzWRWZcDhdzVyttqYfTlVJJYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZhY2NiNC00MGE5LTQxNjgtYWEzZC01OWQx OTBlYjVhMDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EbTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKe1fYjFkr/OBt5BCTeiw0/ufV2uZvP2aMe/vDk1B+Q+KkEZYT8rX3f1 crSZ5HYLQtoWALH6C4Be42X9AHE5cCshB4SMJEJW5QWPW7v/OYATHNBf0TxJ07LA Qravnsul6PoII39wWT7r7d5YNqRWVGxK3RsBs4HRJ4UZvBi/AoveNVOBG4afdSfT oJMCtZX2gJqwUqhM0qz15AoZ6Lc0fx19PWlttFZIGWl16cwA3gclN6ie9CU5MTau fp1JPVx2in09epnZF1RsrBRayxKN/8/t0SQYHDlNr22FjxuNaEC2M452KqokJHNL aqTUKnPJCsGQv7iKxOeAT6KTICj9/OQ= -----END CERTIFICATE-----Generated at Sun Jun 15 09:05:08 2025 by rpki-client