$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/518fb9f3-6845-3e45-af69-497c8740ed7a.roa File: 518fb9f3-6845-3e45-af69-497c8740ed7a.roa (raw, json) Hash identifier: 0HCpwk3RDD51KuS8VYvpmOEIQcDCaMfzRfxxLIlI9DE= Subject key identifier: FE:0A:23:7C:26:D9:F6:22:90:CC:1E:D8:21:D0:A7:69:50:D3:C6:EB Certificate issuer: /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04 Certificate serial: 010D0C9F43285848F926A6561D09B1D0A43FBD00 Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/518fb9f3-6845-3e45-af69-497c8740ed7a.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 14618 IP address blocks: 208.70.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:a6:56:1d:09:b1:d0:a4:3f:bd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04 Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=6fb23ca8-2470-4902-874d-220769a7f59c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ee:01:16:5b:3f:73:1b:da:a1:34:35:57:e4: fe:19:63:83:18:60:dd:b7:85:b3:8b:34:cd:fe:9a: 52:1f:bd:73:54:12:74:7f:ba:78:cf:80:fc:db:f9: eb:8f:af:9d:6a:8c:f9:85:3a:c7:d0:45:b5:0d:0e: a3:41:30:8b:db:3a:a6:6a:f3:36:76:80:b3:1a:c8: d2:bf:1c:16:a9:24:ec:57:8a:86:9a:bd:40:38:93: 19:d9:a8:f4:a4:91:81:68:d2:f7:c7:55:f7:c0:7c: cb:fd:ec:e5:aa:d6:5d:ff:24:b5:3a:52:74:9e:70: 83:4c:aa:cd:c6:e1:22:00:17:4d:4d:74:c3:10:28: a8:29:93:31:9f:72:e8:67:59:a7:22:27:02:9d:4e: c5:3e:50:fb:1a:bc:0c:82:0d:eb:45:7a:5f:85:27: 95:ae:6c:61:f7:09:fa:dd:84:67:31:e7:06:32:0e: cc:35:b6:af:8a:bd:c2:b8:f2:7f:8d:ad:fa:0a:8f: 67:24:b5:a0:f2:fa:52:a1:00:b3:9a:fa:67:cb:e3: 71:09:c3:8f:ca:14:07:39:bb:14:a2:47:be:4f:7b: 1e:de:d7:47:d8:08:33:39:c6:55:48:c1:66:52:47: bd:ad:ab:57:a6:52:36:fb:bb:67:95:c3:5a:c8:d1: a9:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:0A:23:7C:26:D9:F6:22:90:CC:1E:D8:21:D0:A7:69:50:D3:C6:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/518fb9f3-6845-3e45-af69-497c8740ed7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl X509v3 Authority Key Identifier: keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer sbgp-ipAddrBlock: critical IPv4: 208.70.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:1c:cd:99:92:d9:3e:c2:00:e6:78:ce:2b:f4:af:70:7c:ba: 8d:b0:4f:df:56:b6:1d:43:67:b3:d8:3c:77:95:13:4f:ea:7e: 81:3b:66:b7:4a:ce:d8:55:0b:d3:f2:ad:f9:6e:84:c4:08:0a: ce:9b:ee:98:ef:23:93:e4:14:c5:87:18:0b:f6:6b:af:26:8f: f5:e9:c1:db:22:b8:ce:7c:78:b3:a3:43:6a:22:5b:94:16:6d: 67:dc:61:48:5e:eb:d2:80:62:51:aa:b0:ab:3e:c1:e1:d5:80: d2:3b:71:8e:03:f2:d4:12:64:71:c3:9f:f6:52:4a:55:9b:d4: 17:7c:78:12:4f:f1:b6:65:61:17:40:b2:35:30:fc:1e:c7:51: 5a:29:0b:21:94:56:0a:ce:69:b5:4d:df:78:c2:51:8f:53:ca: 74:aa:a2:0d:6b:21:44:74:93:73:50:fe:23:84:57:0e:54:c0: 84:70:00:c1:de:dc:95:c0:4b:86:44:2f:7c:12:31:db:04:6c: 47:18:f9:8b:0c:08:00:ba:f2:63:5d:73:44:d3:7c:59:1f:a9: 4e:31:4d:1c:99:52:d7:6a:6b:b6:48:82:24:f2:a4:3c:d1:55: 11:83:6b:bf:59:bc:e8:48:95:ce:f7:0e:9d:4a:a4:b4:26:16: 02:6e:92:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj5JqZWHQmx0KQ/vQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjBmYWNjYjQtNDBhOS00MTY4LWFhM2QtNTlkMTkwZWI1 YTA0MB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk NmZiMjNjYTgtMjQ3MC00OTAyLTg3NGQtMjIwNzY5YTdmNTljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAye4BFls/cxvaoTQ1V+T+GWODGGDdt4WzizTN /ppSH71zVBJ0f7p4z4D82/nrj6+daoz5hTrH0EW1DQ6jQTCL2zqmavM2doCzGsjS vxwWqSTsV4qGmr1AOJMZ2aj0pJGBaNL3x1X3wHzL/ezlqtZd/yS1OlJ0nnCDTKrN xuEiABdNTXTDECioKZMxn3LoZ1mnIicCnU7FPlD7GrwMgg3rRXpfhSeVrmxh9wn6 3YRnMecGMg7MNbavir3CuPJ/ja36Co9nJLWg8vpSoQCzmvpny+NxCcOPyhQHObsU oke+T3se3tdH2AgzOcZVSMFmUke9ratXplI2+7tnlcNayNGppQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP4KI3wm2fYikMwe2CHQp2lQ08brMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZh Y2NiNC00MGE5LTQxNjgtYWEzZC01OWQxOTBlYjVhMDQvNTE4ZmI5ZjMtNjg0NS0z ZTQ1LWFmNjktNDk3Yzg3NDBlZDdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjBmYWNjYjQtNDBhOS00MTY4LWFh M2QtNTlkMTkwZWI1YTA0L2YwZmFjY2I0LTQwYTktNDE2OC1hYTNkLTU5ZDE5MGVi NWEwNC5jcmwwHwYDVR0jBBgwFoAUrZAUzWRWZcDhdzVyttqYfTlVJJYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZhY2NiNC00MGE5LTQxNjgtYWEzZC01OWQx OTBlYjVhMDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EbTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIoczZmS2T7CAOZ4ziv0r3B8uo2wT99Wth1DZ7PYPHeVE0/qfoE7ZrdK zthVC9PyrfluhMQICs6b7pjvI5PkFMWHGAv2a68mj/XpwdsiuM58eLOjQ2oiW5QW bWfcYUhe69KAYlGqsKs+weHVgNI7cY4D8tQSZHHDn/ZSSlWb1Bd8eBJP8bZlYRdA sjUw/B7HUVopCyGUVgrOabVN33jCUY9TynSqog1rIUR0k3NQ/iOEVw5UwIRwAMHe 3JXAS4ZEL3wSMdsEbEcY+YsMCAC68mNdc0TTfFkfqU4xTRyZUtdqa7ZIgiTypDzR VRGDa79ZvOhIlc73Dp1KpLQmFgJukts= -----END CERTIFICATE-----Generated at Sat Apr 26 13:17:53 2025 by rpki-client