$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/c081ebc4-6d1b-361f-b2cb-2e9b4ded8c8f.roa File: c081ebc4-6d1b-361f-b2cb-2e9b4ded8c8f.roa (raw, json) Hash identifier: VzCYefii70+zxkxwSdHtHcCzCPwoQf4sPC6vFWMDL94= Subject key identifier: AA:55:BC:31:C4:A0:3E:BC:F5:C8:2A:BF:CD:3F:7F:10:A5:5A:FB:B5 Certificate issuer: /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04 Certificate serial: 010D0C9F4328584B99D793CF442BB10E5F3A4FC0 Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/c081ebc4-6d1b-361f-b2cb-2e9b4ded8c8f.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 16509 IP address blocks: 208.70.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:93:cf:44:2b:b1:0e:5f:3a:4f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=47fbe34f-2fd9-42fa-9448-fb19e1c4d7be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:de:42:32:69:b6:ef:db:e3:17:ff:9b:51:37: 53:1d:da:a3:b9:78:36:78:38:84:7b:93:bb:60:56: 46:e4:db:fe:0a:47:05:d8:fd:d2:a0:e9:f6:eb:01: 88:29:e4:c2:48:6e:6c:b8:54:5e:27:74:e4:cd:1d: 46:54:a3:cd:bc:aa:42:0d:92:43:c2:4a:cd:4f:f7: d0:e7:ec:47:bc:eb:cc:84:8e:d1:76:d3:de:8c:d6: 89:25:d0:22:2f:13:27:20:a4:a1:aa:bc:49:4e:fc: f3:32:49:75:8a:50:c3:62:10:6f:be:7c:6d:85:94: b0:46:e9:64:08:c0:03:cc:d6:1f:f7:6e:00:d5:bb: 37:8d:32:2a:85:5d:61:d7:bd:d6:4d:64:57:fd:7e: 88:60:72:df:9f:b3:f3:11:35:a8:d7:7e:8f:81:05: 27:0f:86:66:75:db:d6:1a:d5:4a:9b:c1:04:8c:d4: dd:1f:41:4a:f9:23:b1:49:f9:7e:97:ea:a0:49:45: 38:d4:45:1e:c4:2b:72:db:d0:ff:36:37:da:24:26: 50:ee:03:52:77:83:1c:95:a0:15:c1:8c:8d:cf:af: c7:99:71:e0:29:5e:86:ac:33:86:1a:49:e0:94:92: 22:20:f7:96:e4:48:60:c7:03:32:0b:ba:86:1b:c4: 90:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:55:BC:31:C4:A0:3E:BC:F5:C8:2A:BF:CD:3F:7F:10:A5:5A:FB:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/c081ebc4-6d1b-361f-b2cb-2e9b4ded8c8f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl X509v3 Authority Key Identifier: keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer sbgp-ipAddrBlock: critical IPv4: 208.70.210.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:7f:c5:87:55:19:19:c8:46:46:02:11:3a:0c:51:33:c7:e2: 29:3b:20:63:35:24:ad:bf:cf:03:36:2c:99:05:02:4d:e3:1d: 17:e2:00:42:45:9c:a6:ca:91:9b:52:93:93:f0:11:04:bb:9a: e7:ae:19:7a:04:71:30:ed:67:a7:86:b7:42:f4:62:e1:4c:95: 81:5b:e8:bb:00:88:da:31:52:f8:ad:f7:67:24:56:e5:d6:7c: 44:ce:80:5a:7a:75:21:06:7a:69:19:4d:47:b4:69:f8:a2:ef: 16:89:6b:f2:ed:0e:df:b4:96:17:62:3b:04:87:5b:38:75:23: 55:e9:35:a6:35:d7:32:ac:b0:98:9e:34:e9:b7:ea:75:c8:7b: 98:7d:68:84:72:dd:56:07:b2:9a:a2:b7:f3:d5:3e:fb:ae:96: 11:00:a6:5a:1c:df:6e:6f:02:ac:6f:11:85:3e:5c:b1:16:44: 3d:1a:50:bc:52:a9:55:95:ef:30:30:5d:c9:7b:c0:eb:6d:bf: ff:ec:bc:87:ff:be:80:5e:ed:e6:15:a7:d0:0d:57:e0:f8:18: b4:4a:2c:4a:2d:fa:4f:ee:64:13:f2:be:66:04:19:71:fd:41: 01:fe:ae:e9:65:9d:f2:ee:0b:92:72:b8:c7:f9:33:6f:15:50: 0a:ab:b6:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ15PPRCuxDl86T8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjBmYWNjYjQtNDBhOS00MTY4LWFhM2QtNTlkMTkwZWI1 YTA0MB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk NDdmYmUzNGYtMmZkOS00MmZhLTk0NDgtZmIxOWUxYzRkN2JlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx95CMmm279vjF/+bUTdTHdqjuXg2eDiEe5O7 YFZG5Nv+CkcF2P3SoOn26wGIKeTCSG5suFReJ3TkzR1GVKPNvKpCDZJDwkrNT/fQ 5+xHvOvMhI7RdtPejNaJJdAiLxMnIKShqrxJTvzzMkl1ilDDYhBvvnxthZSwRulk CMADzNYf924A1bs3jTIqhV1h173WTWRX/X6IYHLfn7PzETWo136PgQUnD4ZmddvW GtVKm8EEjNTdH0FK+SOxSfl+l+qgSUU41EUexCty29D/NjfaJCZQ7gNSd4MclaAV wYyNz6/HmXHgKV6GrDOGGknglJIiIPeW5EhgxwMyC7qGG8SQBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKpVvDHEoD689cgqv80/fxClWvu1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZh Y2NiNC00MGE5LTQxNjgtYWEzZC01OWQxOTBlYjVhMDQvYzA4MWViYzQtNmQxYi0z NjFmLWIyY2ItMmU5YjRkZWQ4YzhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjBmYWNjYjQtNDBhOS00MTY4LWFh M2QtNTlkMTkwZWI1YTA0L2YwZmFjY2I0LTQwYTktNDE2OC1hYTNkLTU5ZDE5MGVi NWEwNC5jcmwwHwYDVR0jBBgwFoAUrZAUzWRWZcDhdzVyttqYfTlVJJYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZhY2NiNC00MGE5LTQxNjgtYWEzZC01OWQx OTBlYjVhMDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EbSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH9/xYdVGRnIRkYCEToMUTPH4ik7IGM1JK2/zwM2LJkFAk3jHRfiAEJF nKbKkZtSk5PwEQS7mueuGXoEcTDtZ6eGt0L0YuFMlYFb6LsAiNoxUvit92ckVuXW fETOgFp6dSEGemkZTUe0afii7xaJa/LtDt+0lhdiOwSHWzh1I1XpNaY11zKssJie NOm36nXIe5h9aIRy3VYHspqit/PVPvuulhEAploc325vAqxvEYU+XLEWRD0aULxS qVWV7zAwXcl7wOttv//svIf/voBe7eYVp9ANV+D4GLRKLEot+k/uZBPyvmYEGXH9 QQH+rullnfLuC5JyuMf5M28VUAqrtrU= -----END CERTIFICATE-----Generated at Wed Nov 5 14:06:00 2025 by rpki-client