$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/45eb4551-7331-33dd-815f-95a7e670d0a9.roa File: 45eb4551-7331-33dd-815f-95a7e670d0a9.roa (raw, json) Hash identifier: ZlcgYGM8CbvFECeWgyNDqr0TsUv+7L47t5vHI9zKgVA= Subject key identifier: A9:3A:34:EE:C6:5B:64:EC:2F:95:D5:9A:2F:78:3E:67:63:03:34:2D Certificate issuer: /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04 Certificate serial: 010D0C9F4328584AB91B978B37A76162285F1B40 Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/45eb4551-7331-33dd-815f-95a7e670d0a9.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 14618 IP address blocks: 208.70.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:97:8b:37:a7:61:62:28:5f:1b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04 Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=5dcf3394-f886-46ca-89a5-32028b9fdfbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:4d:40:20:14:d2:33:b9:5c:11:be:20:6d:bb: 4b:d7:98:11:30:26:30:b5:76:91:64:a3:ef:3e:5b: 6c:81:d6:89:37:a1:55:dc:61:fa:b2:8b:c4:17:88: 7f:b7:a5:99:7d:17:4b:1a:36:fa:6c:48:79:b5:41: 43:f4:3b:b5:99:54:33:89:97:96:f8:52:f0:41:26: dd:50:59:f7:fe:fc:f7:95:57:04:e5:02:95:da:56: 03:18:c2:9e:5d:70:ec:1b:21:54:ea:b0:d6:aa:19: cf:da:44:7a:19:f4:61:e1:80:7f:9c:84:67:88:4b: 3e:39:41:f5:23:c8:91:e8:65:1c:ad:7d:e1:1d:53: f1:3a:1e:96:f9:9b:c8:24:2d:05:8b:84:04:4d:97: 93:2d:b6:f2:0d:e6:5f:88:78:e8:1f:22:95:5f:16: 42:42:a9:33:56:26:ba:3e:27:ed:c5:cf:14:2b:9a: fa:f5:63:c9:09:65:c3:34:cd:10:b2:47:a4:d8:2f: ae:e5:e8:ed:d4:f5:ae:c5:f5:e9:d3:00:74:e3:b8: 2c:d3:15:d2:2a:b4:4b:c9:0d:5c:26:9c:74:81:a3: 37:16:85:42:03:d9:01:84:c4:9b:6c:05:6b:a1:c1: f5:31:62:d3:e6:7e:99:ff:b4:37:99:37:19:04:61: b7:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:3A:34:EE:C6:5B:64:EC:2F:95:D5:9A:2F:78:3E:67:63:03:34:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/45eb4551-7331-33dd-815f-95a7e670d0a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl X509v3 Authority Key Identifier: keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer sbgp-ipAddrBlock: critical IPv4: 208.70.210.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:f4:b5:7f:1c:aa:d3:72:93:3e:06:ce:c6:5d:1f:18:d7:12: 0f:0c:9d:5d:ec:78:d2:7c:bb:3b:b5:bc:af:9e:82:eb:38:02: bd:ab:8a:a0:1e:71:bf:d1:b9:1f:80:f8:9d:28:25:fc:59:13: f8:de:ee:a0:08:43:cd:fd:2f:f1:e8:3a:c8:f5:19:55:bc:af: 93:5f:16:f4:5c:23:1c:71:ab:8e:c1:09:10:8d:c3:a7:f1:86: f4:92:84:6e:a5:2e:8c:06:68:51:69:fc:0c:41:13:27:89:a7: 5f:42:a8:c1:2a:12:a6:54:db:96:03:cf:b0:e2:e3:93:ed:dd: ad:9d:d2:21:dc:8e:dc:5e:18:2a:c1:99:61:8e:49:31:ac:47: b3:3e:30:06:46:ce:66:7c:de:a3:91:ec:74:c0:00:ba:8e:d5: 34:39:e1:f9:89:c6:a2:3a:90:c7:c8:25:2d:9d:d6:9a:3c:cf: 81:3c:64:49:52:e2:53:7d:32:b0:bd:9d:22:12:f7:53:54:f1: 88:d0:05:11:3d:d5:32:d5:14:d1:53:0e:af:35:bf:71:57:ad: 26:65:44:f1:6a:75:16:f5:29:38:cf:92:60:55:2c:bf:39:4c: 97:e6:35:42:93:f6:0e:7e:34:27:6c:5c:e4:49:bb:7c:56:48: 01:cd:d6:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq5G5eLN6dhYihfG0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjBmYWNjYjQtNDBhOS00MTY4LWFhM2QtNTlkMTkwZWI1 YTA0MB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk NWRjZjMzOTQtZjg4Ni00NmNhLTg5YTUtMzIwMjhiOWZkZmJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn01AIBTSM7lcEb4gbbtL15gRMCYwtXaRZKPv PltsgdaJN6FV3GH6sovEF4h/t6WZfRdLGjb6bEh5tUFD9Du1mVQziZeW+FLwQSbd UFn3/vz3lVcE5QKV2lYDGMKeXXDsGyFU6rDWqhnP2kR6GfRh4YB/nIRniEs+OUH1 I8iR6GUcrX3hHVPxOh6W+ZvIJC0Fi4QETZeTLbbyDeZfiHjoHyKVXxZCQqkzVia6 Piftxc8UK5r69WPJCWXDNM0Qskek2C+u5ejt1PWuxfXp0wB047gs0xXSKrRLyQ1c Jpx0gaM3FoVCA9kBhMSbbAVrocH1MWLT5n6Z/7Q3mTcZBGG3uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKk6NO7GW2TsL5XVmi94PmdjAzQtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZh Y2NiNC00MGE5LTQxNjgtYWEzZC01OWQxOTBlYjVhMDQvNDVlYjQ1NTEtNzMzMS0z M2RkLTgxNWYtOTVhN2U2NzBkMGE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjBmYWNjYjQtNDBhOS00MTY4LWFh M2QtNTlkMTkwZWI1YTA0L2YwZmFjY2I0LTQwYTktNDE2OC1hYTNkLTU5ZDE5MGVi NWEwNC5jcmwwHwYDVR0jBBgwFoAUrZAUzWRWZcDhdzVyttqYfTlVJJYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZhY2NiNC00MGE5LTQxNjgtYWEzZC01OWQx OTBlYjVhMDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EbSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF/0tX8cqtNykz4GzsZdHxjXEg8MnV3seNJ8uzu1vK+egus4Ar2riqAe cb/RuR+A+J0oJfxZE/je7qAIQ839L/HoOsj1GVW8r5NfFvRcIxxxq47BCRCNw6fx hvSShG6lLowGaFFp/AxBEyeJp19CqMEqEqZU25YDz7Di45Pt3a2d0iHcjtxeGCrB mWGOSTGsR7M+MAZGzmZ83qOR7HTAALqO1TQ54fmJxqI6kMfIJS2d1po8z4E8ZElS 4lN9MrC9nSIS91NU8YjQBRE91TLVFNFTDq81v3FXrSZlRPFqdRb1KTjPkmBVLL85 TJfmNUKT9g5+NCdsXORJu3xWSAHN1sI= -----END CERTIFICATE-----Generated at Mon Aug 4 22:28:30 2025 by rpki-client