$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/ae850b8d-bf19-37be-976a-2cc95eb4b7a8.roa File: ae850b8d-bf19-37be-976a-2cc95eb4b7a8.roa (raw, json) Hash identifier: GsKnQ8e5lNJUvALBusoXUPpYFPJCR0kb3qoGrjp0lSE= Subject key identifier: 4A:64:EE:70:21:4E:0B:5D:9C:EC:98:8D:A0:77:21:1C:40:74:09:59 Certificate issuer: /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04 Certificate serial: 010D0C9F4328584AB91BA710481D385D2B99B300 Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/ae850b8d-bf19-37be-976a-2cc95eb4b7a8.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 14618 IP address blocks: 208.70.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:a7:10:48:1d:38:5d:2b:99:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04 Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=b2cc4e43-739d-4c5a-919d-6d7aa98aac90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:a3:d6:2e:c8:08:16:6b:ec:95:a0:74:b1:ac: a4:90:db:13:a9:6c:0f:3d:21:73:1c:e2:e5:81:e3: 9e:57:ff:ba:a6:e9:c7:c4:19:a8:6d:a4:4b:40:3c: ce:c2:5d:e2:7c:68:a7:e8:9d:16:f2:f9:ec:68:e8: a0:fb:5b:32:c4:86:c7:84:76:43:ff:f3:c6:25:24: cf:1b:92:2e:d0:c6:d3:cc:38:c5:89:5d:22:39:54: 35:6e:44:74:66:47:d5:0b:db:e9:b1:7e:85:01:60: fe:76:05:59:8a:07:11:55:72:f6:01:7a:c5:d4:93: 9b:57:a7:66:37:72:69:38:b2:72:01:2f:4a:77:4f: 40:7d:ac:37:10:fd:38:26:6d:9e:a4:72:23:b1:8b: 8f:38:46:50:b8:72:22:3b:f7:0c:f4:bb:3b:e9:6c: a4:ec:76:18:16:47:41:1e:f4:75:ae:a4:70:88:df: 54:9a:67:5c:37:71:3b:e9:17:d5:3e:4b:f5:d8:cb: 12:54:b3:57:ba:a6:bd:ee:ea:a4:d2:06:55:df:72: ca:77:ed:d2:69:c3:d3:2f:6f:4a:7e:1d:ff:61:62: 1e:06:83:64:10:15:60:68:a8:55:66:ff:f4:1e:9b: 08:2b:a4:32:5b:b0:8b:02:26:a3:dd:13:63:45:d3: 04:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:64:EE:70:21:4E:0B:5D:9C:EC:98:8D:A0:77:21:1C:40:74:09:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/ae850b8d-bf19-37be-976a-2cc95eb4b7a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl X509v3 Authority Key Identifier: keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer sbgp-ipAddrBlock: critical IPv4: 208.70.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:fb:98:9a:2d:66:55:79:cf:e6:38:89:47:1f:31:66:2b:64: d3:7b:b0:7c:c1:8c:35:1d:40:10:99:3e:2e:e7:08:90:b5:24: fc:08:fd:77:b8:7b:19:fa:5f:3d:0c:b0:b6:86:36:2a:54:a6: 21:0b:04:cd:cc:59:ef:b6:62:b3:0e:44:17:2d:45:08:cb:88: 6d:fe:47:b2:b4:88:4a:22:fe:e4:0f:c1:47:ac:0d:1d:37:36: 22:f5:55:ea:34:9c:95:e5:0a:c2:09:d2:63:31:49:63:6a:29: bc:db:19:be:39:99:91:9a:74:25:59:4f:31:88:8d:b5:d1:bd: 2d:f7:c0:b9:b2:81:89:78:97:a9:71:e1:0a:59:8f:2f:9b:bd: 25:a0:a1:18:9b:4c:db:4b:ef:89:2d:2c:6d:45:04:63:16:d8: d3:5b:94:01:1e:92:c4:c4:9f:3d:b8:c4:ba:b9:42:d8:7f:ff: f5:1d:0f:bc:7a:0a:ee:b6:98:e9:d8:45:ac:3c:c0:7a:95:31: e1:80:49:32:e4:2b:c2:71:50:80:42:5a:e1:88:13:aa:84:58: e3:66:c5:b6:f8:1e:bd:2a:c1:b6:0c:f7:27:a7:4a:d9:74:2c: be:8e:7c:4f:f2:85:99:36:62:48:56:6a:00:4f:d5:a9:ab:96: 4f:b1:b2:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq5G6cQSB04XSuZswAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjBmYWNjYjQtNDBhOS00MTY4LWFhM2QtNTlkMTkwZWI1 YTA0MB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk YjJjYzRlNDMtNzM5ZC00YzVhLTkxOWQtNmQ3YWE5OGFhYzkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhaPWLsgIFmvslaB0saykkNsTqWwPPSFzHOLl geOeV/+6punHxBmobaRLQDzOwl3ifGin6J0W8vnsaOig+1syxIbHhHZD//PGJSTP G5Iu0MbTzDjFiV0iOVQ1bkR0ZkfVC9vpsX6FAWD+dgVZigcRVXL2AXrF1JObV6dm N3JpOLJyAS9Kd09Afaw3EP04Jm2epHIjsYuPOEZQuHIiO/cM9Ls76Wyk7HYYFkdB HvR1rqRwiN9UmmdcN3E76RfVPkv12MsSVLNXuqa97uqk0gZV33LKd+3SacPTL29K fh3/YWIeBoNkEBVgaKhVZv/0HpsIK6QyW7CLAiaj3RNjRdMETwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEpk7nAhTgtdnOyYjaB3IRxAdAlZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZh Y2NiNC00MGE5LTQxNjgtYWEzZC01OWQxOTBlYjVhMDQvYWU4NTBiOGQtYmYxOS0z N2JlLTk3NmEtMmNjOTVlYjRiN2E4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjBmYWNjYjQtNDBhOS00MTY4LWFh M2QtNTlkMTkwZWI1YTA0L2YwZmFjY2I0LTQwYTktNDE2OC1hYTNkLTU5ZDE5MGVi NWEwNC5jcmwwHwYDVR0jBBgwFoAUrZAUzWRWZcDhdzVyttqYfTlVJJYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZhY2NiNC00MGE5LTQxNjgtYWEzZC01OWQx OTBlYjVhMDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EbQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAL7mJotZlV5z+Y4iUcfMWYrZNN7sHzBjDUdQBCZPi7nCJC1JPwI/Xe4 exn6Xz0MsLaGNipUpiELBM3MWe+2YrMORBctRQjLiG3+R7K0iEoi/uQPwUesDR03 NiL1Veo0nJXlCsIJ0mMxSWNqKbzbGb45mZGadCVZTzGIjbXRvS33wLmygYl4l6lx 4QpZjy+bvSWgoRibTNtL74ktLG1FBGMW2NNblAEeksTEnz24xLq5Qth///UdD7x6 Cu62mOnYRaw8wHqVMeGASTLkK8JxUIBCWuGIE6qEWONmxbb4Hr0qwbYM9yenStl0 LL6OfE/yhZk2YkhWagBP1amrlk+xsjU= -----END CERTIFICATE-----Generated at Mon Aug 4 14:52:36 2025 by rpki-client