$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/1fbbe8cd-8d5d-36a3-ba74-f7c2b60d1736.roa File: 1fbbe8cd-8d5d-36a3-ba74-f7c2b60d1736.roa (raw, json) Hash identifier: 4g8vifb4yr9/Snw9VTupV41VnPuLzHYeNQgQXR6ijP8= Subject key identifier: 7F:2D:B5:F7:6A:F0:31:94:4D:53:9E:25:5A:A2:6B:EC:4B:C0:12:A0 Certificate issuer: /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04 Certificate serial: 010D0C9F4328584D59EA64CF49DF5558AAB0BA00 Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/1fbbe8cd-8d5d-36a3-ba74-f7c2b60d1736.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 16509 IP address blocks: 208.70.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:64:cf:49:df:55:58:aa:b0:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04 Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=b71c48c5-9407-4ba6-b3e9-9daa6d0f2aba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:3a:49:6f:8c:64:68:69:c5:cb:bd:db:44:9b: 6e:eb:6c:19:c2:b5:17:2a:bb:60:b6:0a:79:f3:ed: 4d:b0:11:4a:ad:b4:c6:72:94:1e:1f:86:fc:af:68: f2:61:59:3f:53:7e:d0:40:bb:02:72:3b:8e:87:ab: 9b:43:c5:ec:57:4e:cb:d7:eb:80:53:54:eb:f9:07: 15:82:65:6e:77:0c:70:a3:6a:3a:69:b7:ae:52:6d: 4b:76:eb:ed:00:7d:7c:2a:cf:8c:52:a1:7b:59:12: 3d:0d:b8:01:58:a0:8d:f5:18:bb:85:f9:ab:7d:ab: 20:e2:23:bd:b1:d7:e6:54:99:a8:30:90:95:65:4d: 84:84:24:02:8e:4a:5c:ea:4a:e6:9b:3b:81:24:ce: a5:86:da:40:1f:02:9a:85:20:94:93:86:d3:9e:14: 92:1b:e1:2e:93:67:f8:e7:1e:bf:04:93:5f:0b:f5: 4c:f5:58:f6:a9:91:18:0d:7c:6f:27:4d:da:a6:4f: be:78:ad:91:c5:dc:3d:fc:9f:33:09:17:aa:71:6b: 46:a7:48:0e:5b:06:81:25:22:97:4d:90:07:f3:57: a8:a3:98:ed:4a:5b:84:68:8e:79:5b:0d:fe:1a:e3: 8c:6f:5f:d8:42:fb:26:9d:70:f0:ca:3b:39:ba:d2: e7:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:2D:B5:F7:6A:F0:31:94:4D:53:9E:25:5A:A2:6B:EC:4B:C0:12:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/1fbbe8cd-8d5d-36a3-ba74-f7c2b60d1736.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl X509v3 Authority Key Identifier: keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer sbgp-ipAddrBlock: critical IPv4: 208.70.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:0b:6b:8a:56:ec:23:1e:a3:dd:77:dc:fe:c1:0c:28:e4:c9: e1:72:c2:c3:75:2f:08:db:37:78:d8:b9:36:31:a1:c9:42:47: 19:dd:fe:66:1e:bf:b9:6f:a4:23:cf:76:62:81:e3:b7:57:42: 52:15:8e:37:0c:ee:30:77:8b:25:48:d7:fd:18:ba:54:f0:8f: fa:7e:62:93:e7:2c:bf:1b:7a:5e:5c:18:b6:54:05:21:0b:76: 79:9e:82:4a:19:16:4c:9a:fd:93:cc:8c:e5:ea:66:cc:a5:a7: 83:74:df:07:c0:64:f9:90:98:01:ab:eb:5d:9a:4e:11:48:4b: 7c:4c:bb:df:34:68:1d:db:09:51:f2:ba:e6:03:43:0b:65:de: ac:c2:17:0f:da:19:b7:2b:72:79:12:37:d3:e2:e8:21:e9:e7: f7:27:97:06:b8:0d:56:26:75:35:c3:61:a3:b7:b8:d7:cd:e3: 42:0d:21:5d:53:81:f6:5a:d2:9d:a7:a6:14:1d:71:c4:96:05: 5f:f2:0a:81:18:bc:67:67:1f:12:d7:86:91:94:b4:a6:30:b7: eb:57:2f:c9:3e:31:b5:26:9d:7f:d6:f9:46:61:34:98:e5:79: ef:22:eb:35:e3:2b:3e:81:3e:ac:07:b4:c0:7d:9f:88:16:cf: 1f:5d:a5:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Z6mTPSd9VWKqwugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjBmYWNjYjQtNDBhOS00MTY4LWFhM2QtNTlkMTkwZWI1 YTA0MB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk YjcxYzQ4YzUtOTQwNy00YmE2LWIzZTktOWRhYTZkMGYyYWJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjpJb4xkaGnFy73bRJtu62wZwrUXKrtgtgp5 8+1NsBFKrbTGcpQeH4b8r2jyYVk/U37QQLsCcjuOh6ubQ8XsV07L1+uAU1Tr+QcV gmVudwxwo2o6abeuUm1LduvtAH18Ks+MUqF7WRI9DbgBWKCN9Ri7hfmrfasg4iO9 sdfmVJmoMJCVZU2EhCQCjkpc6krmmzuBJM6lhtpAHwKahSCUk4bTnhSSG+Euk2f4 5x6/BJNfC/VM9Vj2qZEYDXxvJ03apk++eK2Rxdw9/J8zCReqcWtGp0gOWwaBJSKX TZAH81eoo5jtSluEaI55Ww3+GuOMb1/YQvsmnXDwyjs5utLn8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH8ttfdq8DGUTVOeJVqia+xLwBKgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZh Y2NiNC00MGE5LTQxNjgtYWEzZC01OWQxOTBlYjVhMDQvMWZiYmU4Y2QtOGQ1ZC0z NmEzLWJhNzQtZjdjMmI2MGQxNzM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjBmYWNjYjQtNDBhOS00MTY4LWFh M2QtNTlkMTkwZWI1YTA0L2YwZmFjY2I0LTQwYTktNDE2OC1hYTNkLTU5ZDE5MGVi NWEwNC5jcmwwHwYDVR0jBBgwFoAUrZAUzWRWZcDhdzVyttqYfTlVJJYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZhY2NiNC00MGE5LTQxNjgtYWEzZC01OWQx OTBlYjVhMDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EbTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFYLa4pW7CMeo9133P7BDCjkyeFywsN1LwjbN3jYuTYxoclCRxnd/mYe v7lvpCPPdmKB47dXQlIVjjcM7jB3iyVI1/0YulTwj/p+YpPnLL8bel5cGLZUBSEL dnmegkoZFkya/ZPMjOXqZsylp4N03wfAZPmQmAGr612aThFIS3xMu980aB3bCVHy uuYDQwtl3qzCFw/aGbcrcnkSN9Pi6CHp5/cnlwa4DVYmdTXDYaO3uNfN40INIV1T gfZa0p2nphQdccSWBV/yCoEYvGdnHxLXhpGUtKYwt+tXL8k+MbUmnX/W+UZhNJjl ee8i6zXjKz6BPqwHtMB9n4gWzx9dpQw= -----END CERTIFICATE-----Generated at Fri Apr 17 12:21:57 2026 by rpki-client