$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/cab94f58-acfa-33ab-adac-aa1d5df30eb1.roa File: cab94f58-acfa-33ab-adac-aa1d5df30eb1.roa (raw, json) Hash identifier: ArabEczi1EkRGiR6DUj3jWXV/4pOejiZ/jKacfh4yFI= Subject key identifier: A9:B1:3D:2B:11:41:37:CE:4B:31:95:CC:4B:BE:59:C3:08:FA:5C:5A Certificate issuer: /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04 Certificate serial: 010D0C9F4328584B99D7A2BA59D0304EC3405FA0 Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/cab94f58-acfa-33ab-adac-aa1d5df30eb1.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 16509 IP address blocks: 208.70.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:a2:ba:59:d0:30:4e:c3:40:5f:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=f65b030d-1218-4324-91db-a15b15141fa4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:d5:40:f0:d8:63:ae:12:ea:9c:cf:59:c7:fe: 91:ad:51:03:81:bf:c3:ad:73:c6:1e:80:37:4e:b7: 21:4c:ab:33:ed:fd:67:57:be:e9:28:00:68:8c:a5: ae:83:0e:68:6e:f7:19:a8:3d:58:ab:61:c2:a9:9b: 52:c8:12:53:6f:ad:69:a1:22:b7:2c:6f:91:4c:f8: 2d:ea:94:65:9e:ba:4b:ef:44:94:93:44:49:aa:f0: 39:ac:90:77:8d:7a:72:27:f0:e7:1a:31:0f:0b:a3: 7a:d6:d6:bb:cc:e1:6f:63:30:bb:26:01:ea:12:58: 70:75:78:a6:d4:27:4f:af:a3:ff:d6:b8:c2:cd:63: 66:95:bf:82:9a:56:96:fc:19:5c:ef:17:fb:b5:53: a9:91:64:73:0d:4c:66:49:ab:be:d1:86:49:dc:6f: ce:a9:af:b2:79:71:4f:eb:ca:0c:11:de:ec:9e:c3: 63:9c:f7:6d:ba:bf:b5:25:df:e6:3a:2f:6e:d9:96: 52:fa:57:1c:60:06:0e:bf:47:ba:25:81:4e:a6:6a: 22:b7:58:09:43:d6:7f:70:76:4d:77:a3:66:6a:d0: 66:03:37:09:84:64:04:a5:5e:95:b4:63:57:0f:f3: cb:e7:1b:d8:d9:b6:39:e6:e6:a2:b1:2f:44:9b:45: 3b:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:B1:3D:2B:11:41:37:CE:4B:31:95:CC:4B:BE:59:C3:08:FA:5C:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/cab94f58-acfa-33ab-adac-aa1d5df30eb1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl X509v3 Authority Key Identifier: keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer sbgp-ipAddrBlock: critical IPv4: 208.70.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:68:0e:9d:38:cc:01:da:a7:55:f2:35:b9:48:eb:f3:67:fd: be:e2:57:0a:cf:d4:63:1d:92:61:b0:be:84:be:4c:16:bc:18: 11:8d:f7:69:55:50:56:e9:2f:0b:67:40:65:6e:5c:11:2c:fa: 27:a7:1f:27:62:56:ab:88:55:2d:4c:19:ad:9c:49:a0:9c:de: aa:91:d6:b5:a2:50:ba:43:ee:11:97:26:82:21:ba:de:00:9b: fc:37:a9:cb:75:d0:b4:f3:bf:ed:7a:f5:fe:3a:17:d6:3e:07: ab:20:82:0a:46:4d:e0:7d:a4:67:d8:e1:bb:9e:c2:8e:58:22: e2:4e:2e:bc:ab:58:32:43:a5:b4:1c:6a:92:cf:b2:bb:4f:bb: ec:f5:87:65:3b:e0:7d:9f:a5:48:3c:4c:4f:75:69:f1:27:ba: 3f:46:fe:54:f0:89:c1:4d:ae:89:b8:b3:4b:54:4a:2b:27:d8: 7b:e8:61:72:ed:1a:62:6c:0a:6d:c4:f5:62:7f:4e:0b:2f:4a: f4:de:3d:1c:cd:f9:17:82:f1:e6:fb:0b:84:36:9b:f7:81:95: e5:c1:85:60:c7:82:fc:34:40:23:b6:68:39:06:79:48:a8:b0: 60:81:b5:d6:0a:99:5c:87:1a:a0:4f:09:0d:57:2c:38:9f:60: 88:68:3a:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ16K6WdAwTsNAX6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjBmYWNjYjQtNDBhOS00MTY4LWFhM2QtNTlkMTkwZWI1 YTA0MB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk ZjY1YjAzMGQtMTIxOC00MzI0LTkxZGItYTE1YjE1MTQxZmE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA29VA8NhjrhLqnM9Zx/6RrVEDgb/DrXPGHoA3 TrchTKsz7f1nV77pKABojKWugw5obvcZqD1Yq2HCqZtSyBJTb61poSK3LG+RTPgt 6pRlnrpL70SUk0RJqvA5rJB3jXpyJ/DnGjEPC6N61ta7zOFvYzC7JgHqElhwdXim 1CdPr6P/1rjCzWNmlb+CmlaW/Blc7xf7tVOpkWRzDUxmSau+0YZJ3G/Oqa+yeXFP 68oMEd7snsNjnPdtur+1Jd/mOi9u2ZZS+lccYAYOv0e6JYFOpmoit1gJQ9Z/cHZN d6NmatBmAzcJhGQEpV6VtGNXD/PL5xvY2bY55uaisS9Em0U7lQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKmxPSsRQTfOSzGVzEu+WcMI+lxaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZh Y2NiNC00MGE5LTQxNjgtYWEzZC01OWQxOTBlYjVhMDQvY2FiOTRmNTgtYWNmYS0z M2FiLWFkYWMtYWExZDVkZjMwZWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjBmYWNjYjQtNDBhOS00MTY4LWFh M2QtNTlkMTkwZWI1YTA0L2YwZmFjY2I0LTQwYTktNDE2OC1hYTNkLTU5ZDE5MGVi NWEwNC5jcmwwHwYDVR0jBBgwFoAUrZAUzWRWZcDhdzVyttqYfTlVJJYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZhY2NiNC00MGE5LTQxNjgtYWEzZC01OWQx OTBlYjVhMDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EbQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADNoDp04zAHap1XyNblI6/Nn/b7iVwrP1GMdkmGwvoS+TBa8GBGN92lV UFbpLwtnQGVuXBEs+ienHydiVquIVS1MGa2cSaCc3qqR1rWiULpD7hGXJoIhut4A m/w3qct10LTzv+169f46F9Y+B6sgggpGTeB9pGfY4buewo5YIuJOLryrWDJDpbQc apLPsrtPu+z1h2U74H2fpUg8TE91afEnuj9G/lTwicFNrom4s0tUSisn2HvoYXLt GmJsCm3E9WJ/TgsvSvTePRzN+ReC8eb7C4Q2m/eBleXBhWDHgvw0QCO2aDkGeUio sGCBtdYKmVyHGqBPCQ1XLDifYIhoOs8= -----END CERTIFICATE-----Generated at Wed Nov 5 09:33:47 2025 by rpki-client