$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/596e8645-a8c5-3714-b0d5-32f9118818dc.roa File: 596e8645-a8c5-3714-b0d5-32f9118818dc.roa (raw, json) Hash identifier: qFneLMEDg03eXWZ+BI9blW+/nlYjZF4KAiZlZnuov2g= Subject key identifier: 7E:5F:8F:55:65:87:23:73:C4:F3:5F:EA:7E:AF:C7:13:1C:1E:68:C1 Certificate issuer: /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04 Certificate serial: 010D0C9F4328584B99D793977251CC1EF1B6DB80 Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/596e8645-a8c5-3714-b0d5-32f9118818dc.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 14618 IP address blocks: 208.70.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:93:97:72:51:cc:1e:f1:b6:db:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=afcd16c6-9ac4-442e-8849-b0b6c6469ae1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a3:17:50:1a:cf:8a:78:bd:fa:69:7b:7d:f0: 49:9e:e4:cd:4d:92:54:9a:ae:d5:04:aa:0d:c4:d8: 81:4a:1e:6e:a1:c5:33:5e:87:93:32:99:df:6b:d2: 1f:60:db:fa:71:da:87:e6:1e:ec:36:2f:a6:e4:b7: 30:f3:1c:89:03:f0:cc:35:05:e5:56:9b:d9:80:ae: d3:0f:66:0d:74:5e:3c:ef:7c:18:48:e6:fe:f3:74: f7:bb:77:94:15:ed:a2:1a:35:d5:f3:4b:d8:38:57: d8:9f:97:17:3c:91:b7:45:ef:8c:91:29:0f:ea:c0: 04:9f:9d:48:31:8d:8c:59:d8:e8:fb:65:a4:44:4d: b0:ad:5e:02:10:58:aa:2a:c6:57:61:29:13:3b:97: c9:c0:78:be:02:a6:2d:4a:f7:90:ed:00:fd:b8:b7: e5:8e:0f:e5:1d:0b:37:2e:4f:a9:ce:d5:f9:c6:2f: 18:07:80:67:db:6a:9b:a4:1a:f0:bf:94:57:b4:b0: ff:01:e9:83:a3:f2:36:9c:68:59:ab:f7:22:59:12: cc:19:bb:02:e1:a7:8d:69:8a:82:2f:93:c4:2c:ad: 00:07:ea:e4:2d:f4:a4:99:8a:bf:ed:29:45:12:cf: 7f:99:2e:d7:10:8e:43:5d:37:42:83:c8:10:21:42: b5:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:5F:8F:55:65:87:23:73:C4:F3:5F:EA:7E:AF:C7:13:1C:1E:68:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/596e8645-a8c5-3714-b0d5-32f9118818dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl X509v3 Authority Key Identifier: keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer sbgp-ipAddrBlock: critical IPv4: 208.70.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:12:1f:25:98:69:fb:64:26:dd:86:1b:77:2f:95:a6:8f:99: ab:0b:0b:db:9b:31:ad:fc:db:7f:2c:44:e6:4a:7a:5c:01:0f: 9d:2a:cc:79:a4:a9:a6:86:91:d9:c3:98:03:a7:4d:87:b4:1d: 1f:42:30:63:68:32:24:4b:46:fa:0f:7b:7a:99:3f:f7:b3:b9: 95:f3:77:c1:ce:76:e1:c1:31:17:69:a8:9f:62:11:99:e9:39: ed:42:9a:ee:fc:db:19:56:dd:3d:6a:78:d3:14:19:b5:ba:30: 00:26:eb:28:1f:5a:e0:98:aa:3c:e6:20:ab:b0:49:05:3b:a2: da:97:74:7e:e4:fa:d1:54:22:ea:1a:d7:2d:88:af:71:4b:ab: fb:26:e8:7a:b2:d7:e0:8f:7a:c2:ba:94:6e:79:35:fb:4f:81: bd:b4:a7:dc:5c:97:3d:23:e1:d2:da:8e:26:08:7f:1c:77:69: 2b:e8:a6:c6:03:f1:2a:f9:11:6d:f4:15:a0:ed:dc:29:0c:5c: 35:23:08:30:44:d0:ce:45:ed:34:c8:82:cc:a4:39:d4:9f:e9: 29:35:cc:cf:65:6b:d1:66:b2:a6:37:db:fd:50:c5:ca:64:28: e8:a1:22:0d:4f:b4:69:08:b6:ab:80:ae:67:50:7f:a0:3b:52: 82:65:3d:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ15OXclHMHvG224AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjBmYWNjYjQtNDBhOS00MTY4LWFhM2QtNTlkMTkwZWI1 YTA0MB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk YWZjZDE2YzYtOWFjNC00NDJlLTg4NDktYjBiNmM2NDY5YWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6MXUBrPini9+ml7ffBJnuTNTZJUmq7VBKoN xNiBSh5uocUzXoeTMpnfa9IfYNv6cdqH5h7sNi+m5Lcw8xyJA/DMNQXlVpvZgK7T D2YNdF4873wYSOb+83T3u3eUFe2iGjXV80vYOFfYn5cXPJG3Re+MkSkP6sAEn51I MY2MWdjo+2WkRE2wrV4CEFiqKsZXYSkTO5fJwHi+AqYtSveQ7QD9uLfljg/lHQs3 Lk+pztX5xi8YB4Bn22qbpBrwv5RXtLD/AemDo/I2nGhZq/ciWRLMGbsC4aeNaYqC L5PELK0AB+rkLfSkmYq/7SlFEs9/mS7XEI5DXTdCg8gQIUK1qQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH5fj1VlhyNzxPNf6n6vxxMcHmjBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZh Y2NiNC00MGE5LTQxNjgtYWEzZC01OWQxOTBlYjVhMDQvNTk2ZTg2NDUtYThjNS0z NzE0LWIwZDUtMzJmOTExODgxOGRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjBmYWNjYjQtNDBhOS00MTY4LWFh M2QtNTlkMTkwZWI1YTA0L2YwZmFjY2I0LTQwYTktNDE2OC1hYTNkLTU5ZDE5MGVi NWEwNC5jcmwwHwYDVR0jBBgwFoAUrZAUzWRWZcDhdzVyttqYfTlVJJYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZhY2NiNC00MGE5LTQxNjgtYWEzZC01OWQx OTBlYjVhMDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EbRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKUSHyWYaftkJt2GG3cvlaaPmasLC9ubMa38238sROZKelwBD50qzHmk qaaGkdnDmAOnTYe0HR9CMGNoMiRLRvoPe3qZP/ezuZXzd8HOduHBMRdpqJ9iEZnp Oe1Cmu782xlW3T1qeNMUGbW6MAAm6ygfWuCYqjzmIKuwSQU7otqXdH7k+tFUIuoa 1y2Ir3FLq/sm6Hqy1+CPesK6lG55NftPgb20p9xclz0j4dLajiYIfxx3aSvopsYD 8Sr5EW30FaDt3CkMXDUjCDBE0M5F7TTIgsykOdSf6Sk1zM9la9FmsqY32/1Qxcpk KOihIg1PtGkItquArmdQf6A7UoJlPVs= -----END CERTIFICATE-----Generated at Wed Nov 5 09:33:35 2025 by rpki-client