$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/cab94f58-acfa-33ab-adac-aa1d5df30eb1.roa File: cab94f58-acfa-33ab-adac-aa1d5df30eb1.roa (raw, json) Hash identifier: w+JEcGGerLgn4UWZ101tHgvNjGdREjfAK2PXKYvVSyM= Subject key identifier: 2D:D2:0C:93:93:B8:3E:E1:70:39:47:84:AC:02:5B:74:BA:FB:E0:85 Certificate issuer: /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04 Certificate serial: 010D0C9F43285849D85FA062B559E60EFCB9C340 Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/cab94f58-acfa-33ab-adac-aa1d5df30eb1.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 16509 IP address blocks: 208.70.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:a0:62:b5:59:e6:0e:fc:b9:c3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04 Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=cbd77821-49eb-4238-9fcb-5774e6b3a701 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e3:8d:c9:5f:c2:29:ae:04:3d:8d:5a:f4:a1: ec:44:da:36:23:13:17:13:34:4b:44:c6:60:c6:a7: 80:54:17:1f:78:19:d5:c1:02:4e:69:58:80:a4:d2: 76:75:86:f8:81:70:60:c1:12:80:f5:68:65:09:93: b3:94:8f:a4:70:f4:09:66:f8:19:f5:11:c8:b7:a4: 5d:80:a9:4f:b5:d6:fe:07:38:92:1c:de:72:df:a7: 35:31:c5:ca:c1:69:ac:39:6a:ea:e6:aa:ff:7b:b6: 49:fd:57:c5:89:1f:3c:6c:b7:05:43:f8:4d:52:bb: ba:89:97:1d:03:60:91:21:63:4a:69:33:fd:aa:d6: c9:7d:0e:f0:9c:bd:5f:f2:47:b4:8f:cf:b9:12:65: 39:e6:f7:96:0f:c6:c9:6b:bc:52:95:8c:db:bf:06: 23:d3:20:e9:82:55:b0:fc:60:fb:79:8a:c6:d1:1d: f8:1a:ac:30:27:a4:cf:f6:b9:b5:be:11:e2:96:3f: 0e:0c:d9:02:49:4a:9f:eb:79:af:ef:ee:39:f9:0e: ca:fb:fe:95:af:03:0f:57:a8:e3:6d:62:d3:3e:ed: 2a:ea:30:30:78:87:c2:90:14:5e:0d:4a:cb:82:df: 18:bf:9e:76:07:f1:cd:b5:81:41:8a:32:a9:5c:57: 98:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:D2:0C:93:93:B8:3E:E1:70:39:47:84:AC:02:5B:74:BA:FB:E0:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/cab94f58-acfa-33ab-adac-aa1d5df30eb1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl X509v3 Authority Key Identifier: keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer sbgp-ipAddrBlock: critical IPv4: 208.70.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:5a:35:d8:85:4a:de:be:57:83:e1:8b:e7:fd:39:e9:8a:6f: 2c:d6:60:e3:e0:a8:2b:7f:4f:1f:5e:57:b6:22:70:f8:27:4d: 64:74:f0:d5:e5:dd:73:16:d6:cc:ac:43:66:d2:b6:2a:b6:33: 53:63:a0:45:ae:66:12:e9:96:86:db:4f:45:1f:c4:74:dd:33: d5:33:83:25:50:68:0c:6e:bd:65:a6:90:11:2c:c8:6c:b9:41: 30:07:89:a0:00:4c:13:7f:09:cb:30:ba:3b:1c:c3:0f:2e:d4: 4c:30:19:9b:4a:da:62:83:26:0a:d6:df:de:9f:c7:ad:7a:71: 97:39:bd:c1:0e:b1:4d:8a:23:00:cb:bf:98:57:cf:b9:68:11: 45:64:08:cb:42:59:93:15:0e:13:71:b5:52:22:21:b9:8d:09: 2a:61:aa:b8:60:5f:76:97:ca:b6:b2:a0:ca:01:62:88:0f:e9: 0a:48:0b:e0:43:f3:98:28:1a:e3:d6:b7:c6:da:52:19:54:10: b3:62:d2:49:b5:c2:45:14:fa:3f:94:14:a4:57:84:7b:35:82: 4c:4c:de:47:29:1f:13:55:cf:6d:67:b6:ca:4d:45:13:d2:e0: c6:e2:b8:de:cd:05:9c:90:e8:af:9f:2d:17:5e:71:46:09:53: a7:93:90:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnYX6BitVnmDvy5w0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjBmYWNjYjQtNDBhOS00MTY4LWFhM2QtNTlkMTkwZWI1 YTA0MB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk Y2JkNzc4MjEtNDllYi00MjM4LTlmY2ItNTc3NGU2YjNhNzAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyeONyV/CKa4EPY1a9KHsRNo2IxMXEzRLRMZg xqeAVBcfeBnVwQJOaViApNJ2dYb4gXBgwRKA9WhlCZOzlI+kcPQJZvgZ9RHIt6Rd gKlPtdb+BziSHN5y36c1McXKwWmsOWrq5qr/e7ZJ/VfFiR88bLcFQ/hNUru6iZcd A2CRIWNKaTP9qtbJfQ7wnL1f8ke0j8+5EmU55veWD8bJa7xSlYzbvwYj0yDpglWw /GD7eYrG0R34GqwwJ6TP9rm1vhHilj8ODNkCSUqf63mv7+45+Q7K+/6VrwMPV6jj bWLTPu0q6jAweIfCkBReDUrLgt8Yv552B/HNtYFBijKpXFeYaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC3SDJOTuD7hcDlHhKwCW3S6++CFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZh Y2NiNC00MGE5LTQxNjgtYWEzZC01OWQxOTBlYjVhMDQvY2FiOTRmNTgtYWNmYS0z M2FiLWFkYWMtYWExZDVkZjMwZWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjBmYWNjYjQtNDBhOS00MTY4LWFh M2QtNTlkMTkwZWI1YTA0L2YwZmFjY2I0LTQwYTktNDE2OC1hYTNkLTU5ZDE5MGVi NWEwNC5jcmwwHwYDVR0jBBgwFoAUrZAUzWRWZcDhdzVyttqYfTlVJJYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZhY2NiNC00MGE5LTQxNjgtYWEzZC01OWQx OTBlYjVhMDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EbQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK5aNdiFSt6+V4Phi+f9OemKbyzWYOPgqCt/Tx9eV7YicPgnTWR08NXl 3XMW1sysQ2bStiq2M1NjoEWuZhLplobbT0UfxHTdM9UzgyVQaAxuvWWmkBEsyGy5 QTAHiaAATBN/Ccswujscww8u1EwwGZtK2mKDJgrW396fx616cZc5vcEOsU2KIwDL v5hXz7loEUVkCMtCWZMVDhNxtVIiIbmNCSphqrhgX3aXyrayoMoBYogP6QpIC+BD 85goGuPWt8baUhlUELNi0km1wkUU+j+UFKRXhHs1gkxM3kcpHxNVz21ntspNRRPS 4MbiuN7NBZyQ6K+fLRdecUYJU6eTkIs= -----END CERTIFICATE-----Generated at Sat Jun 14 06:18:19 2025 by rpki-client