$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/596e8645-a8c5-3714-b0d5-32f9118818dc.roa File: 596e8645-a8c5-3714-b0d5-32f9118818dc.roa (raw, json) Hash identifier: IXXBCdCAChbVbUsAqgbJFUuU/JDtvr+/6jItE3MdWNE= Subject key identifier: 16:1C:AC:88:03:C3:55:91:7E:29:E4:65:AC:BF:7C:54:11:DB:0D:0D Certificate issuer: /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04 Certificate serial: 010D0C9F43285849D85F918750B754AD14F297C0 Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/596e8645-a8c5-3714-b0d5-32f9118818dc.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 14618 IP address blocks: 208.70.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:91:87:50:b7:54:ad:14:f2:97:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04 Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=68bc86fb-199b-4b89-91b1-fd142e95d0b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:60:8d:94:23:46:86:1d:ec:cf:46:9b:ef:17: c3:49:15:c0:12:88:3b:fd:a6:5f:e0:39:34:f7:c9: ad:ac:70:26:5a:c9:33:ae:ba:49:4c:89:35:3f:32: f5:bc:b3:e3:38:b4:ad:d9:f3:3a:a0:fe:f9:49:42: a0:bf:1c:09:86:a3:57:ec:25:4f:4c:97:bb:27:16: 2b:da:be:86:17:56:83:00:87:54:35:61:0c:d2:47: c7:cf:2c:8a:c9:9c:95:8c:87:87:b4:2a:8c:6a:32: 34:4b:b9:49:50:1f:f0:4b:95:5f:98:f8:0d:66:f5: 25:c2:bc:af:86:64:0e:7f:51:0e:2a:e0:fb:dd:be: c3:7a:74:f8:57:aa:c4:66:d7:05:56:a0:6a:3f:80: 5d:08:8e:be:d6:25:69:27:8e:be:93:bd:f0:c9:1c: 8d:b2:69:85:6f:cd:d9:e9:72:c7:1a:3b:58:25:87: 9e:23:9d:82:86:17:64:58:09:45:32:ab:e9:69:84: cd:1c:aa:26:29:db:3a:0c:16:8f:ab:74:cd:72:f3: 6b:0f:ec:db:77:13:4e:dd:d8:1e:3f:2d:1a:1c:e7: 42:ce:4e:be:8f:b6:73:aa:b3:a4:79:81:10:b9:30: 03:c2:78:fb:57:4b:bb:3b:42:32:c7:ca:57:1d:6e: 41:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:1C:AC:88:03:C3:55:91:7E:29:E4:65:AC:BF:7C:54:11:DB:0D:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/596e8645-a8c5-3714-b0d5-32f9118818dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl X509v3 Authority Key Identifier: keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer sbgp-ipAddrBlock: critical IPv4: 208.70.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:3b:2a:c8:e5:a3:72:16:01:a0:32:e6:62:d3:9b:69:15:9b: 28:4f:70:fa:70:84:34:c5:e5:d7:fe:11:6a:72:66:f6:5b:45: 37:df:15:20:da:cc:61:39:91:7a:20:26:8e:75:a0:bf:ed:65: e7:95:f0:5e:20:9e:7f:7e:d6:9e:5a:fc:a1:f0:76:99:d2:ee: 1c:9e:aa:9b:5e:47:7b:c9:07:34:24:97:d6:a9:58:2f:4c:54: 0b:cd:7d:e5:51:5c:8d:25:6e:cb:bf:15:80:d0:57:1a:99:e0: 49:22:21:8b:38:c8:ba:f0:af:d1:4e:05:4c:43:a5:4e:28:d8: 56:54:51:51:45:ce:5b:8c:f2:2b:13:20:b1:1d:b2:24:dd:2b: 8d:af:a1:df:4f:dd:e1:27:35:8e:f6:7e:61:4e:d9:fc:d1:19: 0f:ce:ae:57:8c:cc:41:f3:80:9a:0a:dd:71:d9:50:58:b8:8a: fb:ff:12:d0:55:e8:f3:b5:38:6a:7a:3a:b8:56:21:bc:20:0b: 0f:55:24:c7:12:08:0a:b5:3c:0d:2d:82:94:60:2a:8a:5c:6a: 1b:63:19:da:9f:73:e2:15:52:77:11:43:60:07:ba:15:ee:89: 28:87:bb:d9:4a:d4:62:b5:47:a6:24:62:dd:a1:75:77:8c:28: 91:48:01:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnYX5GHULdUrRTyl8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjBmYWNjYjQtNDBhOS00MTY4LWFhM2QtNTlkMTkwZWI1 YTA0MB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk NjhiYzg2ZmItMTk5Yi00Yjg5LTkxYjEtZmQxNDJlOTVkMGI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGCNlCNGhh3sz0ab7xfDSRXAEog7/aZf4Dk0 98mtrHAmWskzrrpJTIk1PzL1vLPjOLSt2fM6oP75SUKgvxwJhqNX7CVPTJe7JxYr 2r6GF1aDAIdUNWEM0kfHzyyKyZyVjIeHtCqMajI0S7lJUB/wS5VfmPgNZvUlwryv hmQOf1EOKuD73b7DenT4V6rEZtcFVqBqP4BdCI6+1iVpJ46+k73wyRyNsmmFb83Z 6XLHGjtYJYeeI52ChhdkWAlFMqvpaYTNHKomKds6DBaPq3TNcvNrD+zbdxNO3dge Py0aHOdCzk6+j7ZzqrOkeYEQuTADwnj7V0u7O0Iyx8pXHW5BBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBYcrIgDw1WRfinkZay/fFQR2w0NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZh Y2NiNC00MGE5LTQxNjgtYWEzZC01OWQxOTBlYjVhMDQvNTk2ZTg2NDUtYThjNS0z NzE0LWIwZDUtMzJmOTExODgxOGRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjBmYWNjYjQtNDBhOS00MTY4LWFh M2QtNTlkMTkwZWI1YTA0L2YwZmFjY2I0LTQwYTktNDE2OC1hYTNkLTU5ZDE5MGVi NWEwNC5jcmwwHwYDVR0jBBgwFoAUrZAUzWRWZcDhdzVyttqYfTlVJJYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZhY2NiNC00MGE5LTQxNjgtYWEzZC01OWQx OTBlYjVhMDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EbRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEM7Ksjlo3IWAaAy5mLTm2kVmyhPcPpwhDTF5df+EWpyZvZbRTffFSDa zGE5kXogJo51oL/tZeeV8F4gnn9+1p5a/KHwdpnS7hyeqpteR3vJBzQkl9apWC9M VAvNfeVRXI0lbsu/FYDQVxqZ4EkiIYs4yLrwr9FOBUxDpU4o2FZUUVFFzluM8isT ILEdsiTdK42vod9P3eEnNY72fmFO2fzRGQ/OrleMzEHzgJoK3XHZUFi4ivv/EtBV 6PO1OGp6OrhWIbwgCw9VJMcSCAq1PA0tgpRgKopcahtjGdqfc+IVUncRQ2AHuhXu iSiHu9lK1GK1R6YkYt2hdXeMKJFIASU= -----END CERTIFICATE-----Generated at Sun Jun 15 18:56:17 2025 by rpki-client