$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/596e8645-a8c5-3714-b0d5-32f9118818dc.roa File: 596e8645-a8c5-3714-b0d5-32f9118818dc.roa (raw, json) Hash identifier: Chx3eq+4PO8420uXmL+bZ/DD14+lVtkGyPZt0y6ORlc= Subject key identifier: 40:0A:5C:E2:8C:E1:61:D3:11:40:04:07:19:A2:27:4A:02:76:F2:E1 Certificate issuer: /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04 Certificate serial: 010D0C9F4328584D59EA64943C536E256DD66A00 Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/596e8645-a8c5-3714-b0d5-32f9118818dc.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 14618 IP address blocks: 208.70.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:64:94:3c:53:6e:25:6d:d6:6a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04 Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=5872e520-2161-4b21-a92e-5fadec0a49f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:5f:89:d2:61:6f:6d:04:19:af:4b:61:36:e1: 06:db:aa:dc:ed:a2:33:bd:bb:b9:ba:6f:d0:b2:32: 39:f3:37:15:44:91:19:ba:47:8e:a5:5d:06:23:3c: 0d:8c:fc:5b:30:77:ec:b7:e8:48:57:31:2d:69:e5: b7:ea:dd:de:77:3e:73:82:ff:77:6e:2b:05:5d:60: da:e0:70:b1:07:f9:d7:a3:cc:23:44:6c:d9:69:c7: e2:82:a0:bc:c4:db:e4:f4:fd:a2:02:09:23:c6:fa: a6:17:7b:55:7b:21:3d:65:99:99:48:3c:24:55:65: 29:a4:72:63:39:ea:80:8e:11:3a:bc:51:53:43:d7: d9:fc:f8:18:9c:80:5a:8e:e1:d0:9e:c5:84:8f:28: 84:ba:da:74:1c:7f:d2:41:9e:fe:8e:98:ea:97:a6: c4:e5:f0:e5:86:5e:3c:78:8c:19:f5:4d:6f:aa:89: b3:e0:aa:6e:cb:bf:e4:9a:a5:c1:28:91:89:27:82: 02:7d:42:c8:0e:9f:99:7d:06:cc:8d:cb:e1:4a:61: 9e:40:de:cb:4e:83:e4:f5:b3:26:85:53:d4:f9:59: f7:bc:bd:6b:13:13:24:2e:52:aa:bc:6f:ad:f2:44: 25:22:94:4b:e1:44:f9:b7:4a:23:64:6c:f7:48:d1: 3b:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:0A:5C:E2:8C:E1:61:D3:11:40:04:07:19:A2:27:4A:02:76:F2:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/596e8645-a8c5-3714-b0d5-32f9118818dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl X509v3 Authority Key Identifier: keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer sbgp-ipAddrBlock: critical IPv4: 208.70.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:ca:99:7e:ad:04:19:b9:68:cb:a5:dc:1f:27:12:4b:1a:5b: 2f:c6:66:f4:ab:9a:d8:b4:4e:43:c9:01:36:d7:e9:f2:4c:32: 72:64:03:a3:8c:53:30:0c:37:22:50:6d:a2:82:ea:6e:7a:90: 5a:f8:f8:17:a6:c8:e7:f7:34:cb:48:af:ef:4b:5b:d8:16:4f: 2c:70:b3:0b:01:bf:9f:78:60:49:be:ff:74:91:95:2c:e0:38: f0:a5:81:00:1a:d8:80:35:72:08:ed:f5:6e:9c:11:5a:7d:cb: 4a:b1:d5:98:3c:9d:64:4f:94:26:3c:f4:b2:09:31:93:43:91: 08:a9:62:29:77:50:c6:a4:e5:9b:a9:fe:a1:45:1c:9e:60:9f: b8:a6:83:79:da:c6:f5:fe:40:25:c8:4a:e7:d0:dd:3f:e3:a4: e6:64:90:27:3c:aa:be:fa:02:78:6c:9f:74:91:3d:68:4d:85: 33:2f:e7:7c:37:2a:ec:76:65:bf:cd:82:c3:05:70:64:0d:0e: 00:21:e6:2e:02:ae:28:53:8c:e7:91:68:44:ab:f4:9b:cc:a4: 81:a9:21:e2:23:21:60:32:24:f1:08:5e:ef:53:32:b6:0a:d1: 56:67:a1:2e:76:b6:f3:3b:8e:12:4d:27:91:ec:74:75:6a:53: 3f:26:49:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Z6mSUPFNuJW3WagAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjBmYWNjYjQtNDBhOS00MTY4LWFhM2QtNTlkMTkwZWI1 YTA0MB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk NTg3MmU1MjAtMjE2MS00YjIxLWE5MmUtNWZhZGVjMGE0OWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnl+J0mFvbQQZr0thNuEG26rc7aIzvbu5um/Q sjI58zcVRJEZukeOpV0GIzwNjPxbMHfst+hIVzEtaeW36t3edz5zgv93bisFXWDa 4HCxB/nXo8wjRGzZacfigqC8xNvk9P2iAgkjxvqmF3tVeyE9ZZmZSDwkVWUppHJj OeqAjhE6vFFTQ9fZ/PgYnIBajuHQnsWEjyiEutp0HH/SQZ7+jpjql6bE5fDlhl48 eIwZ9U1vqomz4Kpuy7/kmqXBKJGJJ4ICfULIDp+ZfQbMjcvhSmGeQN7LToPk9bMm hVPU+Vn3vL1rExMkLlKqvG+t8kQlIpRL4UT5t0ojZGz3SNE76QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEAKXOKM4WHTEUAEBxmiJ0oCdvLhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZh Y2NiNC00MGE5LTQxNjgtYWEzZC01OWQxOTBlYjVhMDQvNTk2ZTg2NDUtYThjNS0z NzE0LWIwZDUtMzJmOTExODgxOGRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjBmYWNjYjQtNDBhOS00MTY4LWFh M2QtNTlkMTkwZWI1YTA0L2YwZmFjY2I0LTQwYTktNDE2OC1hYTNkLTU5ZDE5MGVi NWEwNC5jcmwwHwYDVR0jBBgwFoAUrZAUzWRWZcDhdzVyttqYfTlVJJYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZhY2NiNC00MGE5LTQxNjgtYWEzZC01OWQx OTBlYjVhMDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EbRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGDKmX6tBBm5aMul3B8nEksaWy/GZvSrmti0TkPJATbX6fJMMnJkA6OM UzAMNyJQbaKC6m56kFr4+BemyOf3NMtIr+9LW9gWTyxwswsBv594YEm+/3SRlSzg OPClgQAa2IA1cgjt9W6cEVp9y0qx1Zg8nWRPlCY89LIJMZNDkQipYil3UMak5Zup /qFFHJ5gn7img3naxvX+QCXISufQ3T/jpOZkkCc8qr76Anhsn3SRPWhNhTMv53w3 Kux2Zb/NgsMFcGQNDgAh5i4CrihTjOeRaESr9JvMpIGpIeIjIWAyJPEIXu9TMrYK 0VZnoS52tvM7jhJNJ5HsdHVqUz8mSQQ= -----END CERTIFICATE-----Generated at Fri Apr 17 22:48:26 2026 by rpki-client