$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/45eb4551-7331-33dd-815f-95a7e670d0a9.roa File: 45eb4551-7331-33dd-815f-95a7e670d0a9.roa (raw, json) Hash identifier: 015CcqqkEFcS5kC+VzcZWvTqyQqdiQVWVxDktKElZXE= Subject key identifier: 6A:9D:42:E3:0D:D5:94:E6:2D:93:31:BA:6A:D4:FB:21:3F:0A:15:DC Certificate issuer: /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04 Certificate serial: 010D0C9F4328584D59EA64AC16313F8337F29200 Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/45eb4551-7331-33dd-815f-95a7e670d0a9.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 14618 IP address blocks: 208.70.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:64:ac:16:31:3f:83:37:f2:92:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04 Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=25f5ec25-6839-400d-b8c6-42167f0f0fa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:1b:a5:5c:65:a8:b5:e9:ed:6e:02:3c:60:17: 32:8a:94:92:70:8e:be:e1:94:85:74:be:ab:02:45: f5:ec:0b:e4:ea:2b:a1:49:1b:55:a1:23:72:ff:5d: cf:93:8e:e0:92:48:13:18:b0:10:2f:ce:5a:30:07: 1f:cd:7e:b3:c7:ea:17:cf:84:07:87:c5:b3:d8:d1: 1c:f7:47:0b:70:f0:c4:15:ed:c1:50:6f:4d:5d:a4: 30:69:57:c8:c4:b2:16:68:66:50:fa:bb:c6:eb:b6: 47:09:68:f3:b7:da:5a:78:11:42:e5:89:e1:bc:f6: 95:ba:36:09:d4:01:f7:2c:84:20:ab:b9:e0:36:e5: 79:82:c2:00:be:64:e4:a3:1d:23:9d:ac:66:08:e2: ba:9a:78:e3:ff:89:13:c7:65:46:1b:61:61:48:ce: 23:fe:8d:67:5c:7f:2d:58:27:35:2a:fa:58:d0:be: 0e:4b:da:57:75:de:a8:da:78:09:92:01:1a:38:48: 4d:c0:b7:2c:5d:89:f2:63:5f:e7:ac:b8:cc:1c:d5: 59:b8:d0:6a:5c:c6:19:79:e3:6c:69:65:f1:09:fe: 3a:85:ac:b9:7f:67:d4:55:5e:7d:09:ae:57:41:f0: a7:d9:75:7d:53:3b:3f:bb:3c:6f:5d:9f:3a:59:d5: 7d:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:9D:42:E3:0D:D5:94:E6:2D:93:31:BA:6A:D4:FB:21:3F:0A:15:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/45eb4551-7331-33dd-815f-95a7e670d0a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl X509v3 Authority Key Identifier: keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer sbgp-ipAddrBlock: critical IPv4: 208.70.210.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:42:11:d1:07:96:2f:19:59:b3:fa:ee:95:4b:a3:26:dc:4c: ac:77:a1:01:94:1c:95:8d:67:17:ef:14:35:c2:e0:8e:6d:34: 9f:16:d5:22:e7:19:c6:1f:bc:ee:8e:b9:c9:fb:a4:35:41:73: 67:6d:72:89:c5:01:95:94:8c:e9:b6:79:01:0f:13:d6:30:77: 50:62:28:9e:b7:64:46:e2:cc:26:16:7f:7b:ce:d0:b7:d5:67: 4e:f3:0f:42:ad:20:6c:80:59:fe:f1:84:63:d7:ae:96:67:af: f7:fc:6f:c0:cf:5e:bd:ce:8b:d8:da:57:d5:1b:8e:10:96:fe: 52:c1:b1:d4:0d:f2:34:9e:bf:6c:a1:9f:1e:a4:3c:e5:4f:7b: fa:0f:eb:1f:5c:d8:d9:79:3a:78:6b:d8:57:fd:1c:0b:0b:56: 5a:11:a6:d5:c3:eb:46:6b:ff:bc:7b:cb:d9:3c:aa:c3:b2:c0: 4e:88:b3:17:ed:f2:52:76:77:e6:27:15:bb:dc:5e:7c:13:b1: 8f:60:0e:1a:73:27:72:c6:06:ab:e8:e1:0d:1f:e4:6e:4f:50: 17:93:02:8b:bd:f4:7c:c3:3d:ed:63:ef:34:8b:39:79:fd:e8: 02:49:88:07:4c:a9:54:5a:b0:cd:01:22:26:03:c9:eb:11:c5: a0:84:58:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Z6mSsFjE/gzfykgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjBmYWNjYjQtNDBhOS00MTY4LWFhM2QtNTlkMTkwZWI1 YTA0MB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk MjVmNWVjMjUtNjgzOS00MDBkLWI4YzYtNDIxNjdmMGYwZmE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hulXGWotentbgI8YBcyipSScI6+4ZSFdL6r AkX17Avk6iuhSRtVoSNy/13Pk47gkkgTGLAQL85aMAcfzX6zx+oXz4QHh8Wz2NEc 90cLcPDEFe3BUG9NXaQwaVfIxLIWaGZQ+rvG67ZHCWjzt9paeBFC5YnhvPaVujYJ 1AH3LIQgq7ngNuV5gsIAvmTkox0jnaxmCOK6mnjj/4kTx2VGG2FhSM4j/o1nXH8t WCc1KvpY0L4OS9pXdd6o2ngJkgEaOEhNwLcsXYnyY1/nrLjMHNVZuNBqXMYZeeNs aWXxCf46hay5f2fUVV59Ca5XQfCn2XV9Uzs/uzxvXZ86WdV9JwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGqdQuMN1ZTmLZMxumrU+yE/ChXcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZh Y2NiNC00MGE5LTQxNjgtYWEzZC01OWQxOTBlYjVhMDQvNDVlYjQ1NTEtNzMzMS0z M2RkLTgxNWYtOTVhN2U2NzBkMGE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjBmYWNjYjQtNDBhOS00MTY4LWFh M2QtNTlkMTkwZWI1YTA0L2YwZmFjY2I0LTQwYTktNDE2OC1hYTNkLTU5ZDE5MGVi NWEwNC5jcmwwHwYDVR0jBBgwFoAUrZAUzWRWZcDhdzVyttqYfTlVJJYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZhY2NiNC00MGE5LTQxNjgtYWEzZC01OWQx OTBlYjVhMDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EbSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKdCEdEHli8ZWbP67pVLoybcTKx3oQGUHJWNZxfvFDXC4I5tNJ8W1SLn GcYfvO6Oucn7pDVBc2dtconFAZWUjOm2eQEPE9Ywd1BiKJ63ZEbizCYWf3vO0LfV Z07zD0KtIGyAWf7xhGPXrpZnr/f8b8DPXr3Oi9jaV9UbjhCW/lLBsdQN8jSev2yh nx6kPOVPe/oP6x9c2Nl5Onhr2Ff9HAsLVloRptXD60Zr/7x7y9k8qsOywE6Isxft 8lJ2d+YnFbvcXnwTsY9gDhpzJ3LGBqvo4Q0f5G5PUBeTAou99HzDPe1j7zSLOXn9 6AJJiAdMqVRasM0BIiYDyesRxaCEWGY= -----END CERTIFICATE-----Generated at Fri Apr 17 15:05:37 2026 by rpki-client