$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/5b67306d-5138-3897-a51e-4392ac909402.roa File: 5b67306d-5138-3897-a51e-4392ac909402.roa (raw, json) Hash identifier: nDSIBN3QcrB3nYHYbWnetQqe2H3Z8my5GomA5iGWQ2Y= Subject key identifier: E5:A0:EC:7F:21:9E:AF:EF:D5:18:15:DA:76:7B:07:5F:0D:D9:63:8E Certificate issuer: /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04 Certificate serial: 010D0C9F4328584D59EA64A02591D162C3FE7E80 Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/5b67306d-5138-3897-a51e-4392ac909402.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 16509 IP address blocks: 208.70.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:64:a0:25:91:d1:62:c3:fe:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04 Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=960bf1ad-837b-48c3-a53c-4c47e59676da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:7b:7d:73:cd:f7:09:8f:6c:13:54:bf:0c:8b: 14:c4:70:b1:67:d0:9c:9c:48:fe:4a:fe:b6:b7:b3: a4:7b:78:6f:1d:83:d7:e5:2a:f7:71:2f:13:93:23: da:fd:31:06:a1:ee:c5:c7:c8:53:e5:50:78:a4:39: fe:a4:15:dd:c0:66:37:af:4e:ab:57:27:a1:43:b5: 72:ee:1a:3d:51:59:31:7a:1e:00:97:2b:28:01:74: df:3a:5c:67:56:47:a8:16:e0:4b:22:53:2c:a3:41: 55:85:5b:ad:28:4a:76:76:70:7c:9e:4d:ec:cc:77: 89:1e:35:49:cb:86:f9:7a:79:93:33:0b:03:a8:ab: 54:38:bf:b4:6f:aa:88:de:cf:3f:c0:08:81:13:ba: 31:90:0c:d1:cb:cf:dc:1c:9a:b4:ea:34:9c:c8:e1: ad:c1:dc:13:88:61:09:1d:9b:c4:d0:14:7d:8d:fb: a4:30:da:84:e7:07:e8:81:a8:60:8b:3a:9f:d1:de: b5:9b:77:ae:25:2b:b1:ed:53:84:f4:85:9f:13:c5: cd:9e:0b:a8:c6:33:c6:f8:ed:13:bd:e1:00:f2:b3: 5c:14:8b:89:86:11:16:29:bc:9c:94:d7:a2:d8:35: ec:44:65:b4:8e:f7:3c:80:eb:3e:f8:11:f0:b6:b5: c9:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:A0:EC:7F:21:9E:AF:EF:D5:18:15:DA:76:7B:07:5F:0D:D9:63:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/5b67306d-5138-3897-a51e-4392ac909402.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl X509v3 Authority Key Identifier: keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer sbgp-ipAddrBlock: critical IPv4: 208.70.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:87:81:28:31:44:b0:a8:d8:ac:15:39:34:97:d8:4c:06:ae: 20:01:89:90:d2:b6:11:da:54:cf:c2:62:e4:4a:d7:3d:4a:e5: 40:25:14:5e:2e:1f:85:c2:79:00:96:20:01:88:4f:3c:02:86: ac:ae:8b:f0:a6:b1:ae:ff:39:c5:ae:d7:75:96:01:27:95:16: 6d:40:13:d7:41:9b:67:e0:6c:14:b0:56:0f:c6:bb:d1:65:04: 60:c4:a6:1c:a2:50:c5:4f:93:7c:17:3e:c4:c9:a1:2e:59:3c: 59:7d:6b:ba:30:35:17:02:2c:21:3f:04:5e:9d:17:48:ba:06: b0:81:1d:a8:1f:73:e6:95:05:28:9b:01:f0:ee:db:13:77:cf: 13:b8:ab:5a:3d:b4:9e:e3:cf:e4:e0:44:78:2d:67:f1:23:62: e4:94:af:89:c7:d8:33:77:65:19:85:1f:72:ff:01:76:3a:f4: 6d:6c:17:d7:77:b8:d7:0c:4c:b6:bb:ec:a3:4d:55:f9:73:f9: 8c:a2:9c:9d:19:b4:e3:96:d0:34:da:ba:55:12:d1:ee:82:62: 8c:68:5e:e2:b9:9e:57:f6:66:9a:80:0f:4c:ae:1f:0e:5e:81: d7:be:7a:19:45:94:a4:11:0a:8d:5b:95:58:ac:60:ca:fb:6e: 3d:f9:a7:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Z6mSgJZHRYsP+foAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjBmYWNjYjQtNDBhOS00MTY4LWFhM2QtNTlkMTkwZWI1 YTA0MB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk OTYwYmYxYWQtODM3Yi00OGMzLWE1M2MtNGM0N2U1OTY3NmRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAint9c833CY9sE1S/DIsUxHCxZ9CcnEj+Sv62 t7Oke3hvHYPX5Sr3cS8TkyPa/TEGoe7Fx8hT5VB4pDn+pBXdwGY3r06rVyehQ7Vy 7ho9UVkxeh4AlysoAXTfOlxnVkeoFuBLIlMso0FVhVutKEp2dnB8nk3szHeJHjVJ y4b5enmTMwsDqKtUOL+0b6qI3s8/wAiBE7oxkAzRy8/cHJq06jScyOGtwdwTiGEJ HZvE0BR9jfukMNqE5wfogahgizqf0d61m3euJSux7VOE9IWfE8XNnguoxjPG+O0T veEA8rNcFIuJhhEWKbyclNei2DXsRGW0jvc8gOs++BHwtrXJeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOWg7H8hnq/v1RgV2nZ7B18N2WOOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZh Y2NiNC00MGE5LTQxNjgtYWEzZC01OWQxOTBlYjVhMDQvNWI2NzMwNmQtNTEzOC0z ODk3LWE1MWUtNDM5MmFjOTA5NDAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjBmYWNjYjQtNDBhOS00MTY4LWFh M2QtNTlkMTkwZWI1YTA0L2YwZmFjY2I0LTQwYTktNDE2OC1hYTNkLTU5ZDE5MGVi NWEwNC5jcmwwHwYDVR0jBBgwFoAUrZAUzWRWZcDhdzVyttqYfTlVJJYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZhY2NiNC00MGE5LTQxNjgtYWEzZC01OWQx OTBlYjVhMDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EbRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHKHgSgxRLCo2KwVOTSX2EwGriABiZDSthHaVM/CYuRK1z1K5UAlFF4u H4XCeQCWIAGITzwChqyui/Cmsa7/OcWu13WWASeVFm1AE9dBm2fgbBSwVg/Gu9Fl BGDEphyiUMVPk3wXPsTJoS5ZPFl9a7owNRcCLCE/BF6dF0i6BrCBHagfc+aVBSib AfDu2xN3zxO4q1o9tJ7jz+TgRHgtZ/EjYuSUr4nH2DN3ZRmFH3L/AXY69G1sF9d3 uNcMTLa77KNNVflz+YyinJ0ZtOOW0DTaulUS0e6CYoxoXuK5nlf2ZpqAD0yuHw5e gde+ehlFlKQRCo1blVisYMr7bj35p8I= -----END CERTIFICATE-----Generated at Fri Apr 17 21:33:49 2026 by rpki-client