$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/ae850b8d-bf19-37be-976a-2cc95eb4b7a8.roa File: ae850b8d-bf19-37be-976a-2cc95eb4b7a8.roa (raw, json) Hash identifier: iVkg6EZWMcZS8H1+JtRRVkPc89mfnMzA0w/k583TsM8= Subject key identifier: 9F:3E:9D:9A:08:D4:BB:3F:0C:4B:EA:BB:EC:84:A0:F2:80:86:B0:A9 Certificate issuer: /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04 Certificate serial: 010D0C9F43285849D85FA0515EAD8C33A77AC200 Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/ae850b8d-bf19-37be-976a-2cc95eb4b7a8.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 14618 IP address blocks: 208.70.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:a0:51:5e:ad:8c:33:a7:7a:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04 Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=6c92f7c4-f30a-4a07-9946-a7c776c80dd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:8a:be:e5:21:b7:0c:0b:d0:f9:76:3f:31:36: d8:98:92:4b:db:0f:a0:98:9b:c8:7a:66:d2:34:7f: b5:6f:e8:bf:71:1e:b8:b6:0a:3e:32:bd:51:b5:29: 30:b5:82:16:c9:b4:48:48:5b:5d:67:78:4a:4c:d2: 7f:5c:da:32:99:9f:c2:42:af:84:89:3c:37:52:ca: 16:43:8e:23:db:78:ed:2c:03:22:de:6c:81:ae:3d: 9f:55:0b:62:cb:8a:d4:12:e7:8c:df:ac:c6:07:a7: 42:9b:fc:8a:bd:31:a7:40:21:55:c7:3e:03:a2:44: 1a:6f:f4:00:0b:18:d4:ef:e7:b1:77:73:d4:43:e4: 2c:b2:bc:a5:29:98:57:5e:b5:26:3b:e2:08:43:e6: 9d:f2:72:dd:a1:0b:8d:6f:8c:35:16:5a:31:ae:7d: 9d:76:14:17:f0:5a:d7:e4:a2:09:b6:a3:0a:62:9d: 3e:3a:44:fc:92:21:37:58:05:a1:17:86:2c:ac:21: c9:3d:c9:e9:3e:6d:5a:6c:0c:8c:81:e6:7f:ee:a2: 96:22:a8:cf:8c:ff:12:fe:68:4f:36:bd:c2:83:9b: b1:0c:a5:84:ad:77:f4:d6:8f:c4:49:fc:27:5b:1b: 13:cf:f6:e9:93:6b:21:e7:20:f8:ed:2d:dd:a4:64: 0d:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:3E:9D:9A:08:D4:BB:3F:0C:4B:EA:BB:EC:84:A0:F2:80:86:B0:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/ae850b8d-bf19-37be-976a-2cc95eb4b7a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl X509v3 Authority Key Identifier: keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer sbgp-ipAddrBlock: critical IPv4: 208.70.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:fe:fd:7f:58:6f:ca:cd:ef:c3:be:7e:cd:72:24:8e:0b:91: 6f:d8:bf:56:75:2e:3b:4a:eb:5f:d6:67:6a:9f:1f:d6:27:ff: a7:13:3a:86:99:8b:2d:cf:8c:d0:d2:0d:f1:c8:19:bb:cd:3f: 87:4a:df:b8:dc:80:eb:ab:77:68:e4:6a:80:db:d4:bc:66:12: dd:f6:06:c9:66:9f:ac:1f:24:91:10:3f:ba:a2:e4:47:a3:bf: 0f:9e:f7:7d:94:9d:bd:71:8b:65:53:0d:b6:e0:86:27:38:87: 25:dd:39:37:76:8d:39:da:c5:96:9a:7f:e0:e3:30:15:9d:ac: 56:7d:6f:7d:17:18:38:64:11:fe:cd:ec:26:79:7c:c4:7e:14: 61:68:f7:2c:b2:b2:98:90:27:66:7e:46:07:80:08:29:3d:c1: 17:75:ef:e4:7d:32:d4:c9:68:36:4f:4e:f5:fc:4b:33:6e:92: 35:a8:01:e8:43:87:0e:a7:b4:47:46:4c:82:d5:a5:6f:94:5b: d6:32:79:7b:28:63:d1:d3:af:f0:2f:d0:14:60:43:c8:22:3b: d0:2a:d9:db:e5:bd:3a:f9:ca:5a:73:47:17:fd:a1:38:b3:c0: 0e:81:e8:0a:bd:c9:f9:a4:2d:29:fb:11:c2:f8:11:c1:17:95: 5a:32:6e:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnYX6BRXq2MM6d6wgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjBmYWNjYjQtNDBhOS00MTY4LWFhM2QtNTlkMTkwZWI1 YTA0MB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk NmM5MmY3YzQtZjMwYS00YTA3LTk5NDYtYTdjNzc2YzgwZGQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIq+5SG3DAvQ+XY/MTbYmJJL2w+gmJvIembS NH+1b+i/cR64tgo+Mr1RtSkwtYIWybRISFtdZ3hKTNJ/XNoymZ/CQq+EiTw3UsoW Q44j23jtLAMi3myBrj2fVQtiy4rUEueM36zGB6dCm/yKvTGnQCFVxz4DokQab/QA CxjU7+exd3PUQ+QssrylKZhXXrUmO+IIQ+ad8nLdoQuNb4w1Floxrn2ddhQX8FrX 5KIJtqMKYp0+OkT8kiE3WAWhF4YsrCHJPcnpPm1abAyMgeZ/7qKWIqjPjP8S/mhP Nr3Cg5uxDKWErXf01o/ESfwnWxsTz/bpk2sh5yD47S3dpGQNowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ8+nZoI1Ls/DEvqu+yEoPKAhrCpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZh Y2NiNC00MGE5LTQxNjgtYWEzZC01OWQxOTBlYjVhMDQvYWU4NTBiOGQtYmYxOS0z N2JlLTk3NmEtMmNjOTVlYjRiN2E4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjBmYWNjYjQtNDBhOS00MTY4LWFh M2QtNTlkMTkwZWI1YTA0L2YwZmFjY2I0LTQwYTktNDE2OC1hYTNkLTU5ZDE5MGVi NWEwNC5jcmwwHwYDVR0jBBgwFoAUrZAUzWRWZcDhdzVyttqYfTlVJJYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZhY2NiNC00MGE5LTQxNjgtYWEzZC01OWQx OTBlYjVhMDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EbQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAn+/X9Yb8rN78O+fs1yJI4LkW/Yv1Z1LjtK61/WZ2qfH9Yn/6cTOoaZ iy3PjNDSDfHIGbvNP4dK37jcgOurd2jkaoDb1LxmEt32Bslmn6wfJJEQP7qi5Eej vw+e932Unb1xi2VTDbbghic4hyXdOTd2jTnaxZaaf+DjMBWdrFZ9b30XGDhkEf7N 7CZ5fMR+FGFo9yyyspiQJ2Z+RgeACCk9wRd17+R9MtTJaDZPTvX8SzNukjWoAehD hw6ntEdGTILVpW+UW9YyeXsoY9HTr/Av0BRgQ8giO9Aq2dvlvTr5ylpzRxf9oTiz wA6B6Aq9yfmkLSn7EcL4EcEXlVoybgI= -----END CERTIFICATE-----Generated at Sun Jun 15 00:01:50 2025 by rpki-client