$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/45eb4551-7331-33dd-815f-95a7e670d0a9.roa File: 45eb4551-7331-33dd-815f-95a7e670d0a9.roa (raw, json) Hash identifier: WD/qDQTYt0MtRDN6seWuRaoYZj4Us/YH1haibbYCRxs= Subject key identifier: 3A:5C:2C:A1:C6:5D:92:92:10:11:E9:87:F4:B5:14:7A:3D:91:9A:01 Certificate issuer: /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04 Certificate serial: 010D0C9F4328584B99D793BDF35062CBECF0DE00 Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/45eb4551-7331-33dd-815f-95a7e670d0a9.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 14618 IP address blocks: 208.70.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:93:bd:f3:50:62:cb:ec:f0:de:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=f39e653c-8335-454e-b804-c88f51fd4f78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c9:14:fb:e6:4f:83:45:c9:67:c2:6e:7b:a9: 21:2d:27:45:62:6c:76:2d:5b:05:5d:10:9b:ec:89: 47:5b:b3:ec:b5:0c:0e:56:24:cd:3a:7c:13:64:8d: fe:14:79:fe:55:f6:cb:55:73:69:cb:e3:62:5b:34: 7c:5d:e7:fb:cd:46:59:44:f1:97:60:ad:9d:5a:7a: bb:71:c1:bb:86:ae:e9:5f:30:af:81:91:66:d5:90: e0:08:3b:fe:c9:89:fe:f7:41:e8:07:5a:39:72:98: 7a:a8:8c:ec:a6:ae:a6:bd:c4:96:26:15:a2:50:d2: d6:87:16:c5:04:7b:69:a9:17:f6:db:82:2f:2b:9b: 8a:64:d8:85:b5:e0:cb:cb:5b:c8:7e:24:cf:34:e4: d1:56:56:c8:80:ac:0d:07:74:10:97:e7:4c:e2:c4: 43:3e:f8:3d:aa:08:fb:17:d6:ff:e3:e6:b8:fc:66: 22:26:63:d4:62:ff:59:94:b8:fa:88:16:e2:3d:ef: be:21:64:9f:a0:d6:cb:a8:65:b4:86:79:ca:c6:53: 79:19:de:87:af:de:9f:c6:7d:70:97:76:f8:3a:4c: 0e:1a:f3:23:1a:a5:0f:55:a6:87:35:ca:8e:c2:c2: b2:f6:72:cf:8e:f8:02:1f:3b:af:33:cb:7f:17:07: 25:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:5C:2C:A1:C6:5D:92:92:10:11:E9:87:F4:B5:14:7A:3D:91:9A:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/45eb4551-7331-33dd-815f-95a7e670d0a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl X509v3 Authority Key Identifier: keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer sbgp-ipAddrBlock: critical IPv4: 208.70.210.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:3b:d3:c5:c7:71:33:fe:e8:dd:39:13:55:24:d7:98:4a:2e: 2b:fa:7b:36:28:cf:47:9d:7a:6a:a6:05:d2:67:ba:eb:d0:21: 4b:49:ce:f7:00:d8:36:19:59:57:81:50:50:e4:cf:3e:c6:94: cd:8e:a6:ec:1a:14:a5:72:5b:2c:e1:0b:b9:cc:42:0e:9e:b9: 37:a3:9a:97:65:b3:5c:1b:1d:55:3b:a4:f5:4e:eb:42:b4:2a: 10:19:3d:52:7d:11:30:df:4d:ef:94:2f:ce:2b:1d:62:18:a1: 18:9d:8f:e4:9f:97:9a:68:68:f8:3d:cb:f4:50:5c:c4:06:b6: ba:8e:17:2d:31:c5:09:9e:c7:3c:12:1b:47:73:85:f7:99:94: d1:10:02:f9:6a:51:db:8f:b3:ab:90:f5:f6:0b:25:ad:f3:c1: 36:36:b4:aa:12:ae:29:97:d4:fe:13:8a:b7:10:49:20:04:d6: e7:72:5a:a5:a2:8a:a1:4b:7c:9e:f0:36:dc:66:16:7a:3e:9d: 1f:42:ae:58:bd:ea:a9:5d:82:b5:8e:5f:79:10:56:c0:86:b8: de:fc:ab:8b:98:e4:37:26:b2:f4:d1:d2:e5:2f:ab:f6:3b:27: eb:fb:e3:53:3e:3c:73:7b:33:c2:98:3c:b3:d4:09:43:46:87: 3d:9a:53:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ15O981Biy+zw3gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjBmYWNjYjQtNDBhOS00MTY4LWFhM2QtNTlkMTkwZWI1 YTA0MB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk ZjM5ZTY1M2MtODMzNS00NTRlLWI4MDQtYzg4ZjUxZmQ0Zjc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMkU++ZPg0XJZ8Jue6khLSdFYmx2LVsFXRCb 7IlHW7PstQwOViTNOnwTZI3+FHn+VfbLVXNpy+NiWzR8Xef7zUZZRPGXYK2dWnq7 ccG7hq7pXzCvgZFm1ZDgCDv+yYn+90HoB1o5cph6qIzspq6mvcSWJhWiUNLWhxbF BHtpqRf224IvK5uKZNiFteDLy1vIfiTPNOTRVlbIgKwNB3QQl+dM4sRDPvg9qgj7 F9b/4+a4/GYiJmPUYv9ZlLj6iBbiPe++IWSfoNbLqGW0hnnKxlN5Gd6Hr96fxn1w l3b4OkwOGvMjGqUPVaaHNcqOwsKy9nLPjvgCHzuvM8t/FwclTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDpcLKHGXZKSEBHph/S1FHo9kZoBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZh Y2NiNC00MGE5LTQxNjgtYWEzZC01OWQxOTBlYjVhMDQvNDVlYjQ1NTEtNzMzMS0z M2RkLTgxNWYtOTVhN2U2NzBkMGE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjBmYWNjYjQtNDBhOS00MTY4LWFh M2QtNTlkMTkwZWI1YTA0L2YwZmFjY2I0LTQwYTktNDE2OC1hYTNkLTU5ZDE5MGVi NWEwNC5jcmwwHwYDVR0jBBgwFoAUrZAUzWRWZcDhdzVyttqYfTlVJJYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZhY2NiNC00MGE5LTQxNjgtYWEzZC01OWQx OTBlYjVhMDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EbSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFE708XHcTP+6N05E1Uk15hKLiv6ezYoz0edemqmBdJnuuvQIUtJzvcA 2DYZWVeBUFDkzz7GlM2OpuwaFKVyWyzhC7nMQg6euTejmpdls1wbHVU7pPVO60K0 KhAZPVJ9ETDfTe+UL84rHWIYoRidj+Sfl5poaPg9y/RQXMQGtrqOFy0xxQmexzwS G0dzhfeZlNEQAvlqUduPs6uQ9fYLJa3zwTY2tKoSrimX1P4TircQSSAE1udyWqWi iqFLfJ7wNtxmFno+nR9Crli96qldgrWOX3kQVsCGuN78q4uY5DcmsvTR0uUvq/Y7 J+v741M+PHN7M8KYPLPUCUNGhz2aU3k= -----END CERTIFICATE-----Generated at Wed Nov 5 05:41:46 2025 by rpki-client