$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/518fb9f3-6845-3e45-af69-497c8740ed7a.roa File: 518fb9f3-6845-3e45-af69-497c8740ed7a.roa (raw, json) Hash identifier: 3gLB6tdYIXY5izSqjDmnN0NXv40UN/YEHwwDt7sh9Ds= Subject key identifier: A8:DF:6B:AB:37:13:BA:F4:F2:4B:2E:21:10:87:76:42:9C:C4:0A:79 Certificate issuer: /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04 Certificate serial: 010D0C9F4328584D59EA64C35D9CD88F5D03A120 Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/518fb9f3-6845-3e45-af69-497c8740ed7a.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 14618 IP address blocks: 208.70.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:64:c3:5d:9c:d8:8f:5d:03:a1:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04 Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=46fa2e1b-15ee-40c8-8681-610a67e6dcc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:da:01:0b:7a:fa:fa:6e:00:72:bf:e0:9c:90: 77:b6:22:9a:a6:1b:f2:59:65:93:67:18:57:cf:4b: 9d:75:08:04:39:85:42:57:51:e7:1e:f7:70:f7:e2: b9:53:23:1f:7e:9d:c3:d0:db:be:d5:ce:d4:8e:aa: 3c:5c:a7:b7:7e:3f:b0:42:f2:ff:3b:20:70:71:b0: 3e:00:ec:1f:60:f5:85:24:12:ad:4b:4e:12:14:72: 58:ef:28:33:d0:00:70:0b:6b:da:f2:ef:fd:66:f5: d7:fe:f9:97:2f:d6:ed:8a:39:cd:4d:3a:0b:40:c1: c9:50:39:c1:dd:fb:95:3c:52:78:9a:e9:2b:a8:c5: 02:2a:41:a9:97:f2:96:17:18:0d:66:e0:2c:2b:c6: 31:1d:74:ba:0a:ec:13:0d:55:4a:cb:bf:8f:52:cb: 37:2a:ae:b6:69:d7:52:14:de:3d:84:11:65:28:d0: e7:f5:de:ab:21:66:cd:58:6d:01:6f:0a:89:f3:05: 81:31:77:b7:82:df:55:ac:f9:b0:f7:ad:be:33:b4: 63:1e:43:dc:17:fd:c4:4f:5b:81:e5:69:20:1c:e8: a9:bc:f7:93:80:1e:31:54:8d:36:a3:8b:b7:a9:fa: aa:65:5a:94:97:5b:9a:58:5b:6a:07:90:01:09:6d: d9:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:DF:6B:AB:37:13:BA:F4:F2:4B:2E:21:10:87:76:42:9C:C4:0A:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/518fb9f3-6845-3e45-af69-497c8740ed7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl X509v3 Authority Key Identifier: keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer sbgp-ipAddrBlock: critical IPv4: 208.70.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:86:49:55:18:a8:ec:e4:73:ab:6f:f8:dd:02:e9:45:20:18: b9:57:b7:c3:b8:1c:b0:fa:e4:35:00:82:d6:4a:a3:e0:b2:44: d9:13:2d:3c:5a:72:f1:01:d0:fd:88:d9:7f:5d:16:58:ac:2c: 6f:cc:f1:dc:c7:ed:cf:78:a2:7d:a7:08:1b:b4:f8:12:d4:91: f5:59:65:dc:18:aa:1c:ef:2d:23:53:cd:df:aa:ce:fa:ea:5f: 0a:51:8a:98:df:cc:90:24:1d:1c:7c:28:1c:4d:8a:b2:7f:19: 77:dd:3a:11:c2:1f:20:0c:07:d8:5b:9e:2c:45:f2:17:5c:92: 81:dc:88:07:91:b7:6f:05:4d:f7:a2:c3:f6:37:4a:aa:04:b9: b4:40:6a:55:1a:d7:6e:7c:1d:82:45:88:3c:73:36:e4:cd:0b: 92:6c:e2:27:7a:80:2c:68:f5:01:75:32:77:b7:4c:41:18:8c: b8:6a:0f:07:57:ae:0b:2f:b8:dd:39:2f:1e:d3:9a:78:78:a2: b8:09:b9:12:c1:30:bd:08:dc:9b:a0:d7:ed:ce:13:0f:8d:6c: 13:93:c0:c9:d3:63:bc:f7:8f:25:0a:e0:b3:48:55:7f:5d:62: 9a:02:55:c3:f9:ac:89:72:33:65:1b:8a:2a:a6:1d:2c:c5:d3: 12:b1:74:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Z6mTDXZzYj10DoSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjBmYWNjYjQtNDBhOS00MTY4LWFhM2QtNTlkMTkwZWI1 YTA0MB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk NDZmYTJlMWItMTVlZS00MGM4LTg2ODEtNjEwYTY3ZTZkY2MxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNoBC3r6+m4Acr/gnJB3tiKaphvyWWWTZxhX z0uddQgEOYVCV1HnHvdw9+K5UyMffp3D0Nu+1c7Ujqo8XKe3fj+wQvL/OyBwcbA+ AOwfYPWFJBKtS04SFHJY7ygz0ABwC2va8u/9ZvXX/vmXL9btijnNTToLQMHJUDnB 3fuVPFJ4mukrqMUCKkGpl/KWFxgNZuAsK8YxHXS6CuwTDVVKy7+PUss3Kq62addS FN49hBFlKNDn9d6rIWbNWG0BbwqJ8wWBMXe3gt9VrPmw962+M7RjHkPcF/3ET1uB 5WkgHOipvPeTgB4xVI02o4u3qfqqZVqUl1uaWFtqB5ABCW3ZbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKjfa6s3E7r08ksuIRCHdkKcxAp5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZh Y2NiNC00MGE5LTQxNjgtYWEzZC01OWQxOTBlYjVhMDQvNTE4ZmI5ZjMtNjg0NS0z ZTQ1LWFmNjktNDk3Yzg3NDBlZDdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjBmYWNjYjQtNDBhOS00MTY4LWFh M2QtNTlkMTkwZWI1YTA0L2YwZmFjY2I0LTQwYTktNDE2OC1hYTNkLTU5ZDE5MGVi NWEwNC5jcmwwHwYDVR0jBBgwFoAUrZAUzWRWZcDhdzVyttqYfTlVJJYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZhY2NiNC00MGE5LTQxNjgtYWEzZC01OWQx OTBlYjVhMDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EbTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJWGSVUYqOzkc6tv+N0C6UUgGLlXt8O4HLD65DUAgtZKo+CyRNkTLTxa cvEB0P2I2X9dFlisLG/M8dzH7c94on2nCBu0+BLUkfVZZdwYqhzvLSNTzd+qzvrq XwpRipjfzJAkHRx8KBxNirJ/GXfdOhHCHyAMB9hbnixF8hdckoHciAeRt28FTfei w/Y3SqoEubRAalUa1258HYJFiDxzNuTNC5Js4id6gCxo9QF1Mne3TEEYjLhqDwdX rgsvuN05Lx7Tmnh4orgJuRLBML0I3Jug1+3OEw+NbBOTwMnTY7z3jyUK4LNIVX9d YpoCVcP5rIlyM2UbiiqmHSzF0xKxdEI= -----END CERTIFICATE-----Generated at Fri Apr 17 18:40:02 2026 by rpki-client