$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/1fbbe8cd-8d5d-36a3-ba74-f7c2b60d1736.roa File: 1fbbe8cd-8d5d-36a3-ba74-f7c2b60d1736.roa (raw, json) Hash identifier: oBHeltUQxvLN8Hxo+rKPJYiMWNgiDSjNOTZbTCB4gFQ= Subject key identifier: 2D:00:D1:EF:04:5A:1C:22:25:48:ED:4D:9F:EE:82:B8:29:7F:B6:39 Certificate issuer: /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04 Certificate serial: 010D0C9F4328584AB91B97BFCDE56226C93EE000 Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/1fbbe8cd-8d5d-36a3-ba74-f7c2b60d1736.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 16509 IP address blocks: 208.70.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:97:bf:cd:e5:62:26:c9:3e:e0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04 Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=0baffdfc-6ee7-482d-b266-27a6a2e144af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:3d:b1:65:38:d9:dc:63:19:14:be:e4:4f:b4: 6d:02:e4:3c:a2:1c:37:5d:f5:8c:52:f3:01:5d:3b: 3e:61:52:31:86:b9:7d:36:e9:ba:f3:89:94:21:20: de:67:bc:ef:80:1d:32:4f:d4:bd:72:96:4f:e4:45: ae:b0:17:e9:e7:17:e8:30:7c:b9:11:fc:1b:63:17: 2f:32:50:3f:14:b2:88:4d:de:ed:b1:9e:df:74:be: 3f:25:a2:79:4a:21:c8:da:0c:07:10:96:f0:0d:bc: c2:a8:9f:8a:1b:f7:92:eb:62:c3:1f:8e:bc:4d:ad: 80:80:e0:9a:88:90:0e:b2:73:41:d5:71:fb:fb:4a: b3:a2:74:a4:90:d7:ab:21:5c:c7:bf:c8:76:92:84: 1c:97:fa:9b:0a:58:d8:31:26:a3:c0:27:6c:32:06: 2b:92:74:7f:6e:a2:66:71:62:2e:8b:18:be:07:1b: c1:04:ba:15:b0:40:4e:30:28:81:16:66:bf:48:48: d5:ff:5a:3c:c0:fa:a6:2b:fe:b6:72:58:4d:f5:c7: ab:a1:c7:db:30:b8:cb:5d:57:ff:ec:4c:c4:35:11: d8:73:25:32:63:ab:ae:f5:c9:57:9f:0e:a7:87:cb: 77:3a:d6:17:9a:ee:f3:01:5c:7d:4e:b6:d2:83:6e: 5b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:00:D1:EF:04:5A:1C:22:25:48:ED:4D:9F:EE:82:B8:29:7F:B6:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/1fbbe8cd-8d5d-36a3-ba74-f7c2b60d1736.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl X509v3 Authority Key Identifier: keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer sbgp-ipAddrBlock: critical IPv4: 208.70.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:0f:73:af:38:36:50:46:d1:25:3a:04:0c:0c:72:b6:64:90: c4:d3:94:22:41:6d:39:63:dc:3c:51:34:f0:51:77:ba:65:87: ec:55:4a:c1:89:05:3d:72:32:ca:78:76:7d:9f:fe:ed:e6:c1: af:5f:64:0b:39:4d:4c:41:74:b4:69:99:96:f3:b8:fa:f0:50: ad:25:e2:56:87:a0:dd:fd:ee:e7:e5:42:ed:09:03:93:53:dd: d9:58:04:8d:52:7c:8b:f4:d0:8a:1e:b2:46:5a:45:de:66:2a: c9:e6:55:b3:9b:e2:d5:c4:f9:17:1c:b9:88:8c:8b:8c:e6:83: 6a:01:6b:95:3c:7d:5f:43:c8:29:23:22:2e:41:db:de:b8:b2: 1b:d5:28:dd:3e:14:17:d0:b6:66:06:a3:92:16:1f:1e:81:b5: b8:4c:23:eb:d2:f9:f9:e6:00:a5:1d:49:91:1b:a8:68:24:95: ed:32:4c:6f:e2:c4:64:ed:65:75:81:e3:69:26:7c:50:65:d5: c0:c1:e0:d3:12:8b:e0:e2:c2:6b:cb:0c:7d:96:83:64:20:a1: e2:88:bb:da:fb:e9:25:24:d3:69:48:19:7a:0d:3d:15:29:24: 3d:3e:84:97:59:12:d5:91:0a:7d:73:c0:94:f2:01:b0:b6:bf: 13:48:19:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq5G5e/zeViJsk+4AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjBmYWNjYjQtNDBhOS00MTY4LWFhM2QtNTlkMTkwZWI1 YTA0MB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk MGJhZmZkZmMtNmVlNy00ODJkLWIyNjYtMjdhNmEyZTE0NGFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqz2xZTjZ3GMZFL7kT7RtAuQ8ohw3XfWMUvMB XTs+YVIxhrl9Num684mUISDeZ7zvgB0yT9S9cpZP5EWusBfp5xfoMHy5EfwbYxcv MlA/FLKITd7tsZ7fdL4/JaJ5SiHI2gwHEJbwDbzCqJ+KG/eS62LDH468Ta2AgOCa iJAOsnNB1XH7+0qzonSkkNerIVzHv8h2koQcl/qbCljYMSajwCdsMgYrknR/bqJm cWIuixi+BxvBBLoVsEBOMCiBFma/SEjV/1o8wPqmK/62clhN9cerocfbMLjLXVf/ 7EzENRHYcyUyY6uu9clXnw6nh8t3OtYXmu7zAVx9TrbSg25bxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC0A0e8EWhwiJUjtTZ/ugrgpf7Y5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZh Y2NiNC00MGE5LTQxNjgtYWEzZC01OWQxOTBlYjVhMDQvMWZiYmU4Y2QtOGQ1ZC0z NmEzLWJhNzQtZjdjMmI2MGQxNzM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjBmYWNjYjQtNDBhOS00MTY4LWFh M2QtNTlkMTkwZWI1YTA0L2YwZmFjY2I0LTQwYTktNDE2OC1hYTNkLTU5ZDE5MGVi NWEwNC5jcmwwHwYDVR0jBBgwFoAUrZAUzWRWZcDhdzVyttqYfTlVJJYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZhY2NiNC00MGE5LTQxNjgtYWEzZC01OWQx OTBlYjVhMDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EbTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADoPc684NlBG0SU6BAwMcrZkkMTTlCJBbTlj3DxRNPBRd7plh+xVSsGJ BT1yMsp4dn2f/u3mwa9fZAs5TUxBdLRpmZbzuPrwUK0l4laHoN397uflQu0JA5NT 3dlYBI1SfIv00IoeskZaRd5mKsnmVbOb4tXE+RccuYiMi4zmg2oBa5U8fV9DyCkj Ii5B2964shvVKN0+FBfQtmYGo5IWHx6BtbhMI+vS+fnmAKUdSZEbqGgkle0yTG/i xGTtZXWB42kmfFBl1cDB4NMSi+DiwmvLDH2Wg2QgoeKIu9r76SUk02lIGXoNPRUp JD0+hJdZEtWRCn1zwJTyAbC2vxNIGS0= -----END CERTIFICATE-----Generated at Wed Aug 6 10:09:31 2025 by rpki-client