$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/ae850b8d-bf19-37be-976a-2cc95eb4b7a8.roa File: ae850b8d-bf19-37be-976a-2cc95eb4b7a8.roa (raw, json) Hash identifier: bes4EkIc+jyku6tdgYXzFyKjkUfvCfLgMwISAuOHXkg= Subject key identifier: C2:65:1E:AA:8C:42:C2:02:0B:F6:B4:5C:5B:B0:BD:EF:2F:33:89:A8 Certificate issuer: /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04 Certificate serial: 010D0C9F4328584B99D7A2A7F85C657A35A87480 Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/ae850b8d-bf19-37be-976a-2cc95eb4b7a8.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 14618 IP address blocks: 208.70.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:a2:a7:f8:5c:65:7a:35:a8:74:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=896ead92-49a5-4992-8a0a-a06104ec7390 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ae:27:01:16:cf:4e:b6:d9:b5:c0:95:f1:f3: fa:b0:ba:df:e8:5e:a9:82:41:a7:6b:5b:8b:80:9a: 23:54:9a:5d:8f:fe:75:74:ad:3b:a2:95:09:6c:42: 7a:83:e6:49:38:c8:d4:7d:f8:1f:ed:93:94:8e:84: 9c:fe:5b:35:cf:32:42:7e:68:4f:9e:e8:96:ce:8a: db:59:25:39:3f:1d:d0:e2:19:3a:48:bc:1e:44:e9: 80:df:36:25:a9:50:fb:d2:37:75:ba:5e:97:ea:bf: 09:88:05:a6:c1:b3:a1:d1:e8:df:b1:22:db:a5:5f: 3f:c7:bc:2d:08:88:d4:2e:fc:49:fc:cb:15:3a:e7: 6b:27:47:70:e4:18:2b:b1:c1:45:83:27:fb:18:87: 65:ab:6a:82:3a:1a:93:1f:49:70:71:a9:24:55:1f: 14:3c:85:0d:83:0b:7b:7c:74:c3:9b:81:df:14:00: 90:02:4d:bf:cf:61:b3:33:e4:bf:60:6c:6d:e3:43: 4a:9a:8d:5c:f3:3e:c4:88:c3:87:90:58:f2:b8:48: dd:80:49:d1:03:e4:58:4a:f9:42:b3:3f:38:21:0e: de:0e:cf:e8:cb:6f:b2:8f:e2:79:fc:c0:82:24:91: f7:b7:b5:a2:ef:89:0c:da:41:9e:53:73:66:b4:f7: f6:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:65:1E:AA:8C:42:C2:02:0B:F6:B4:5C:5B:B0:BD:EF:2F:33:89:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/ae850b8d-bf19-37be-976a-2cc95eb4b7a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl X509v3 Authority Key Identifier: keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer sbgp-ipAddrBlock: critical IPv4: 208.70.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:f4:3d:bd:dd:3e:0b:ef:df:b9:82:c0:ca:c9:44:0f:cf:9b: 16:d6:00:d1:a8:ba:bc:24:9d:04:85:a2:07:5a:c4:86:11:55: 0e:2f:bc:b7:01:72:6a:81:9d:dc:eb:83:a8:81:ce:02:c8:89: 0c:55:a5:bc:ac:68:32:6d:5e:04:77:16:16:59:12:72:0e:fa: 4d:05:ca:a3:6a:d8:5b:45:37:f3:af:5d:32:ea:3d:d1:61:6f: e6:ff:c5:de:b5:05:a9:40:f6:e8:48:87:31:e1:87:30:ed:4f: 69:9e:73:a0:cb:ab:3b:79:50:6d:e6:f9:f6:6e:da:81:e6:93: 2a:f7:69:96:55:d3:df:c7:c4:d7:15:b7:06:5f:46:81:ae:c8: 69:4e:02:32:70:b1:f9:11:52:50:fc:7f:11:7a:b6:61:fc:a4: 9e:8e:81:f8:02:61:21:01:be:e3:70:2f:ed:12:d2:a8:9c:b3: 89:d5:3c:82:2d:6d:c9:81:4a:3d:70:69:87:33:e5:15:d1:1c: 4a:d2:7e:72:4e:03:c5:34:4c:71:30:b8:60:8c:8b:6f:7d:04: 3b:c4:5f:08:7a:c6:39:43:d8:05:ff:3f:b5:dc:4a:eb:ef:c2: f6:14:01:ea:a0:df:14:26:d9:a3:8e:86:5f:e8:9b:80:ff:cd: 68:5e:6f:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ16Kn+FxlejWodIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjBmYWNjYjQtNDBhOS00MTY4LWFhM2QtNTlkMTkwZWI1 YTA0MB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk ODk2ZWFkOTItNDlhNS00OTkyLThhMGEtYTA2MTA0ZWM3MzkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqa4nARbPTrbZtcCV8fP6sLrf6F6pgkGna1uL gJojVJpdj/51dK07opUJbEJ6g+ZJOMjUffgf7ZOUjoSc/ls1zzJCfmhPnuiWzorb WSU5Px3Q4hk6SLweROmA3zYlqVD70jd1ul6X6r8JiAWmwbOh0ejfsSLbpV8/x7wt CIjULvxJ/MsVOudrJ0dw5BgrscFFgyf7GIdlq2qCOhqTH0lwcakkVR8UPIUNgwt7 fHTDm4HfFACQAk2/z2GzM+S/YGxt40NKmo1c8z7EiMOHkFjyuEjdgEnRA+RYSvlC sz84IQ7eDs/oy2+yj+J5/MCCJJH3t7Wi74kM2kGeU3NmtPf2TQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMJlHqqMQsICC/a0XFuwve8vM4moMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZh Y2NiNC00MGE5LTQxNjgtYWEzZC01OWQxOTBlYjVhMDQvYWU4NTBiOGQtYmYxOS0z N2JlLTk3NmEtMmNjOTVlYjRiN2E4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjBmYWNjYjQtNDBhOS00MTY4LWFh M2QtNTlkMTkwZWI1YTA0L2YwZmFjY2I0LTQwYTktNDE2OC1hYTNkLTU5ZDE5MGVi NWEwNC5jcmwwHwYDVR0jBBgwFoAUrZAUzWRWZcDhdzVyttqYfTlVJJYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZhY2NiNC00MGE5LTQxNjgtYWEzZC01OWQx OTBlYjVhMDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EbQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHf0Pb3dPgvv37mCwMrJRA/PmxbWANGourwknQSFogdaxIYRVQ4vvLcB cmqBndzrg6iBzgLIiQxVpbysaDJtXgR3FhZZEnIO+k0FyqNq2FtFN/OvXTLqPdFh b+b/xd61BalA9uhIhzHhhzDtT2mec6DLqzt5UG3m+fZu2oHmkyr3aZZV09/HxNcV twZfRoGuyGlOAjJwsfkRUlD8fxF6tmH8pJ6OgfgCYSEBvuNwL+0S0qics4nVPIIt bcmBSj1waYcz5RXRHErSfnJOA8U0THEwuGCMi299BDvEXwh6xjlD2AX/P7XcSuvv wvYUAeqg3xQm2aOOhl/om4D/zWheb9c= -----END CERTIFICATE-----Generated at Wed Nov 5 07:44:41 2025 by rpki-client