$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/1fbbe8cd-8d5d-36a3-ba74-f7c2b60d1736.roa File: 1fbbe8cd-8d5d-36a3-ba74-f7c2b60d1736.roa (raw, json) Hash identifier: pP6OJ2I31GvmFssl0zUNG9zmp4lsPhSMjcP62X1bzyA= Subject key identifier: A2:E8:CE:EC:6C:EB:9D:55:FF:75:50:31:7A:83:81:21:FA:B4:82:ED Certificate issuer: /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04 Certificate serial: 010D0C9F4328584EDC91FCC92EA1F286E1565060 Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/1fbbe8cd-8d5d-36a3-ba74-f7c2b60d1736.roa Signing time: Mon 17 Aug 2026 01:00:12 +0000 ROA not before: Mon 17 Aug 2026 01:00:12 +0000 ROA not after: Sun 15 Nov 2026 02:00:12 +0000 asID: 16509 IP address blocks: 208.70.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:dc:91:fc:c9:2e:a1:f2:86:e1:56:50:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04 Validity Not Before: Aug 17 01:00:12 2026 GMT Not After : Nov 15 02:00:12 2026 GMT Subject: CN=3315e2bf-34d2-431e-9f53-63d6b097df25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:fa:88:e3:33:85:57:38:e0:9c:fd:1f:a9:23: 66:30:75:58:89:8b:45:52:18:c2:60:09:8f:51:fd: 81:64:3a:1e:2c:1c:19:2a:6f:df:48:07:00:4d:55: 1b:c6:53:e3:45:57:07:15:31:39:42:9b:d8:f8:21: 35:fe:5f:38:c9:b7:66:a0:f9:f6:d3:15:3e:f9:f6: e5:c4:00:4c:3d:d9:ad:4e:cb:b0:02:82:ac:74:46: 1f:33:34:7a:f8:f4:2d:a9:09:e7:d1:d4:42:5c:6d: 26:f2:4a:83:8b:69:33:50:86:34:bf:50:88:30:82: 0a:00:7f:ed:92:30:52:3b:06:ad:44:8a:22:2f:db: b5:f9:19:cb:5b:02:00:8b:3f:fa:7a:bb:34:2f:7c: 06:a7:f4:a7:4d:f9:be:61:5b:d2:41:28:df:01:99: d4:ec:04:ba:13:8e:4d:a4:06:70:5a:1c:04:24:90: 27:b1:1a:9f:80:85:d3:fe:70:e1:87:b5:19:47:30: d2:83:13:b0:ce:79:a2:86:a0:ff:f1:7f:8b:f7:3b: 80:ef:50:4f:7e:9f:d8:f3:0e:89:0e:0a:38:06:3c: c7:0f:fd:36:3b:40:81:a3:d6:68:c7:4c:5a:82:5e: 38:63:3b:e5:5e:5f:0c:2d:10:85:e9:c5:e4:a8:57: b6:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:E8:CE:EC:6C:EB:9D:55:FF:75:50:31:7A:83:81:21:FA:B4:82:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/1fbbe8cd-8d5d-36a3-ba74-f7c2b60d1736.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl X509v3 Authority Key Identifier: keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer sbgp-ipAddrBlock: critical IPv4: 208.70.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:7d:2a:9a:33:70:05:9d:12:e0:b2:53:26:b9:0a:b4:86:5e: 2b:39:21:0e:50:42:60:19:d6:4f:a0:fc:30:69:8a:8c:65:2f: e5:9a:a5:92:d1:e8:6e:2e:2b:16:d1:c7:c4:3d:a0:73:0c:d8: d9:8d:ed:40:3b:42:03:b8:cc:7f:d4:36:02:e2:a6:bc:a7:ec: a0:27:74:03:ef:05:46:77:12:74:ba:d5:e0:25:f8:f9:38:e5: bc:8a:02:15:0a:d7:e3:f0:e3:40:29:b1:f7:5d:0b:61:39:9f: ae:bf:bd:05:2b:d2:ad:ac:b1:cb:df:2a:be:2e:9b:ef:96:f7: 95:60:f1:62:62:28:10:e3:43:dd:b7:11:7b:14:c0:cf:9f:20: d7:71:9e:eb:40:72:3b:69:2e:78:73:1a:f4:22:c5:f3:6c:ee: 03:e1:04:4b:ad:2a:07:c2:c4:19:ee:bc:20:c4:ce:a3:57:8f: 5a:99:a1:e2:ee:70:1b:0e:8b:8e:18:01:2a:b6:5d:0a:b3:ae: 75:0a:3f:ca:da:0d:21:c9:ed:51:60:89:2a:90:3d:6d:20:8c: 31:e6:25:98:1e:5d:d1:22:31:f8:16:38:f1:e4:de:d1:26:e2: 21:fb:83:ca:c3:6a:ed:ff:f6:f8:14:ad:a6:c0:0a:9f:27:20: 1a:8a:dc:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7ckfzJLqHyhuFWUGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjBmYWNjYjQtNDBhOS00MTY4LWFhM2QtNTlkMTkwZWI1 YTA0MB4XDTI2MDgxNzAxMDAxMloXDTI2MTExNTAyMDAxMlowLzEtMCsGA1UEAxMk MzMxNWUyYmYtMzRkMi00MzFlLTlmNTMtNjNkNmIwOTdkZjI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfqI4zOFVzjgnP0fqSNmMHVYiYtFUhjCYAmP Uf2BZDoeLBwZKm/fSAcATVUbxlPjRVcHFTE5QpvY+CE1/l84ybdmoPn20xU++fbl xABMPdmtTsuwAoKsdEYfMzR6+PQtqQnn0dRCXG0m8kqDi2kzUIY0v1CIMIIKAH/t kjBSOwatRIoiL9u1+RnLWwIAiz/6ers0L3wGp/SnTfm+YVvSQSjfAZnU7AS6E45N pAZwWhwEJJAnsRqfgIXT/nDhh7UZRzDSgxOwznmihqD/8X+L9zuA71BPfp/Y8w6J Dgo4BjzHD/02O0CBo9Zox0xagl44YzvlXl8MLRCF6cXkqFe2HwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKLozuxs651V/3VQMXqDgSH6tILtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZh Y2NiNC00MGE5LTQxNjgtYWEzZC01OWQxOTBlYjVhMDQvMWZiYmU4Y2QtOGQ1ZC0z NmEzLWJhNzQtZjdjMmI2MGQxNzM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjBmYWNjYjQtNDBhOS00MTY4LWFh M2QtNTlkMTkwZWI1YTA0L2YwZmFjY2I0LTQwYTktNDE2OC1hYTNkLTU5ZDE5MGVi NWEwNC5jcmwwHwYDVR0jBBgwFoAUrZAUzWRWZcDhdzVyttqYfTlVJJYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZhY2NiNC00MGE5LTQxNjgtYWEzZC01OWQx OTBlYjVhMDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EbTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIZ9KpozcAWdEuCyUya5CrSGXis5IQ5QQmAZ1k+g/DBpioxlL+WapZLR 6G4uKxbRx8Q9oHMM2NmN7UA7QgO4zH/UNgLipryn7KAndAPvBUZ3EnS61eAl+Pk4 5byKAhUK1+Pw40ApsfddC2E5n66/vQUr0q2sscvfKr4um++W95Vg8WJiKBDjQ923 EXsUwM+fINdxnutAcjtpLnhzGvQixfNs7gPhBEutKgfCxBnuvCDEzqNXj1qZoeLu cBsOi44YASq2XQqzrnUKP8raDSHJ7VFgiSqQPW0gjDHmJZgeXdEiMfgWOPHk3tEm 4iH7g8rDau3/9vgUrabACp8nIBqK3Nk= -----END CERTIFICATE-----Generated at Tue Sep 29 02:33:55 2026 by rpki-client