$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/518fb9f3-6845-3e45-af69-497c8740ed7a.roa File: 518fb9f3-6845-3e45-af69-497c8740ed7a.roa (raw, json) Hash identifier: qYQmarbeKHdnALGPpGuJXvqQx1IO8pk0+WdbdardI/Y= Subject key identifier: EF:C9:99:FB:91:A5:8D:7D:A9:53:B0:9E:24:1B:4C:84:99:E5:40:10 Certificate issuer: /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04 Certificate serial: 010D0C9F4328584AB91B97AE72A229D165D58100 Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/518fb9f3-6845-3e45-af69-497c8740ed7a.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 14618 IP address blocks: 208.70.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:97:ae:72:a2:29:d1:65:d5:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04 Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=81eca40c-ebce-4277-9d52-7f8152008583 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:8e:74:ad:43:0a:71:0f:83:b2:4c:bb:f0:f6: d6:38:d9:da:1f:17:37:26:4e:c6:f8:17:a9:3a:62: 8d:40:0c:cf:9f:b6:86:94:ad:fe:53:cf:e2:0d:76: cf:d7:d6:d0:b5:26:8c:a4:df:e1:64:11:0b:42:be: 97:97:e5:dc:fb:97:83:18:e3:c7:24:d6:61:b4:a4: 23:10:9e:d1:d2:f4:78:ce:3a:20:d2:f7:3b:fd:41: 53:80:b4:ea:bb:c2:75:cc:83:01:00:d1:21:8e:55: b4:17:f8:b1:7e:69:2e:af:4a:71:af:fc:f7:fe:52: 1e:49:da:b1:e1:12:2c:8e:68:61:bd:c1:0a:3d:57: bb:18:00:dc:fb:8d:11:8f:a2:15:cb:39:4c:44:42: 43:ae:58:f6:35:ad:7c:f2:a7:fe:4d:ff:65:9b:33: 1f:5c:52:d9:ff:aa:b1:5a:74:ec:ec:5f:3e:7e:9f: e1:fc:3f:a1:4d:8b:2c:8e:6e:29:b2:c5:84:63:2c: 90:cf:5c:4f:05:64:80:38:8b:50:92:18:96:ce:37: 5b:3f:2d:23:83:40:1e:4f:6b:54:b4:51:62:56:c7: e6:6a:01:b6:e6:c2:67:f1:79:cb:7f:d8:16:16:c0: 65:3e:24:d1:b2:30:01:76:fa:66:b7:8d:7c:24:f1: e7:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:C9:99:FB:91:A5:8D:7D:A9:53:B0:9E:24:1B:4C:84:99:E5:40:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/518fb9f3-6845-3e45-af69-497c8740ed7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl X509v3 Authority Key Identifier: keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer sbgp-ipAddrBlock: critical IPv4: 208.70.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:6c:e4:81:30:81:d0:e0:7a:a0:6a:2f:50:71:f2:dd:3d:71: c1:2e:86:82:21:74:81:d0:96:4c:58:e7:8a:4a:18:5a:f4:71: 9d:c2:b1:c4:d5:84:49:ad:25:40:56:0a:6c:f8:9e:4b:03:45: c9:fa:dd:ed:c2:ca:50:a6:e9:1c:ed:e6:d0:17:d0:65:cc:aa: 57:e4:c8:13:1e:54:3e:bc:92:cf:30:9a:e1:28:68:cc:ed:4a: 4e:94:0f:04:6f:45:c7:06:6e:8e:7a:b2:79:c6:2e:96:41:96: ae:cf:79:80:06:20:68:85:5f:75:95:75:30:ab:ee:0d:c1:b8: 4d:84:e2:bf:64:d5:bf:4e:ac:7c:4f:03:0d:10:c4:23:d8:9d: e7:be:9b:c7:ff:12:57:ca:56:02:3d:01:40:e9:cf:9a:7a:87: cf:bd:ee:a8:fe:6c:eb:b2:59:f7:25:f8:85:58:3d:7e:7d:2a: e1:bb:87:99:61:3e:fe:c0:03:4a:a2:84:9a:e3:1b:84:80:ff: e7:1b:45:04:bf:18:b2:19:27:a7:10:52:95:24:c5:cf:fa:66: 23:8a:64:db:1f:e2:67:82:3e:cf:09:be:34:5d:d0:73:81:26: a6:ee:04:7e:f3:8f:55:3b:b7:0e:3d:75:fc:3b:a9:1f:d1:ba: 99:f3:2a:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq5G5eucqIp0WXVgQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjBmYWNjYjQtNDBhOS00MTY4LWFhM2QtNTlkMTkwZWI1 YTA0MB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk ODFlY2E0MGMtZWJjZS00Mjc3LTlkNTItN2Y4MTUyMDA4NTgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp450rUMKcQ+Dsky78PbWONnaHxc3Jk7G+Bep OmKNQAzPn7aGlK3+U8/iDXbP19bQtSaMpN/hZBELQr6Xl+Xc+5eDGOPHJNZhtKQj EJ7R0vR4zjog0vc7/UFTgLTqu8J1zIMBANEhjlW0F/ixfmkur0pxr/z3/lIeSdqx 4RIsjmhhvcEKPVe7GADc+40Rj6IVyzlMREJDrlj2Na188qf+Tf9lmzMfXFLZ/6qx WnTs7F8+fp/h/D+hTYssjm4pssWEYyyQz1xPBWSAOItQkhiWzjdbPy0jg0AeT2tU tFFiVsfmagG25sJn8XnLf9gWFsBlPiTRsjABdvpmt418JPHnIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO/JmfuRpY19qVOwniQbTISZ5UAQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZh Y2NiNC00MGE5LTQxNjgtYWEzZC01OWQxOTBlYjVhMDQvNTE4ZmI5ZjMtNjg0NS0z ZTQ1LWFmNjktNDk3Yzg3NDBlZDdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjBmYWNjYjQtNDBhOS00MTY4LWFh M2QtNTlkMTkwZWI1YTA0L2YwZmFjY2I0LTQwYTktNDE2OC1hYTNkLTU5ZDE5MGVi NWEwNC5jcmwwHwYDVR0jBBgwFoAUrZAUzWRWZcDhdzVyttqYfTlVJJYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZhY2NiNC00MGE5LTQxNjgtYWEzZC01OWQx OTBlYjVhMDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EbTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALNs5IEwgdDgeqBqL1Bx8t09ccEuhoIhdIHQlkxY54pKGFr0cZ3CscTV hEmtJUBWCmz4nksDRcn63e3CylCm6Rzt5tAX0GXMqlfkyBMeVD68ks8wmuEoaMzt Sk6UDwRvRccGbo56snnGLpZBlq7PeYAGIGiFX3WVdTCr7g3BuE2E4r9k1b9OrHxP Aw0QxCPYnee+m8f/ElfKVgI9AUDpz5p6h8+97qj+bOuyWfcl+IVYPX59KuG7h5lh Pv7AA0qihJrjG4SA/+cbRQS/GLIZJ6cQUpUkxc/6ZiOKZNsf4meCPs8JvjRd0HOB JqbuBH7zj1U7tw49dfw7qR/RupnzKjA= -----END CERTIFICATE-----Generated at Mon Aug 4 15:29:05 2025 by rpki-client