$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/cab94f58-acfa-33ab-adac-aa1d5df30eb1.roa File: cab94f58-acfa-33ab-adac-aa1d5df30eb1.roa (raw, json) Hash identifier: czJ61S+8gk4TMxqvxesWAqefFy+sSNhyB3xPkqcRIQI= Subject key identifier: 9B:BE:C7:C4:6A:51:62:8D:85:CE:7C:A9:74:87:7D:1E:00:D4:A2:13 Certificate issuer: /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04 Certificate serial: 010D0C9F4328584C794C46FC4E1020B2FB40BE30 Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/cab94f58-acfa-33ab-adac-aa1d5df30eb1.roa Signing time: Sat 10 Jan 2026 02:00:31 +0000 ROA not before: Sat 10 Jan 2026 02:00:31 +0000 ROA not after: Fri 10 Apr 2026 01:00:31 +0000 asID: 16509 IP address blocks: 208.70.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:79:4c:46:fc:4e:10:20:b2:fb:40:be:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04 Validity Not Before: Jan 10 02:00:31 2026 GMT Not After : Apr 10 01:00:31 2026 GMT Subject: CN=aa117094-6475-4bc1-b7db-02843f6d4910 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:2f:6a:cd:ae:73:9f:2c:75:89:64:5d:d1:81: a0:11:bc:fc:9b:62:9e:df:22:57:a7:55:56:0b:6a: 6d:6b:bb:da:77:4a:13:2f:b7:3f:f7:e9:ea:a6:cd: cf:53:06:d2:fe:fa:28:3e:28:c5:f8:2c:91:00:8c: 7d:b4:0c:c5:8b:28:a4:77:5b:8e:cc:68:a8:09:b3: 7f:44:e4:e2:46:78:fe:bb:b4:f0:a5:7b:82:2e:f2: 99:48:ce:82:3c:1d:be:73:e1:39:3d:b5:f6:a6:49: 2f:e2:b8:18:76:d6:a0:f5:32:44:d4:b5:f5:4d:73: 05:3b:96:1d:42:2c:5f:fd:bd:69:34:5d:6b:7d:4c: 04:d5:77:ec:da:4d:08:c4:02:a2:a9:1f:ba:d2:27: dd:e6:b6:f0:95:5c:a6:58:3b:5f:49:24:f9:68:a4: e7:6f:a1:b0:96:e1:28:fa:c9:d2:70:b5:10:8c:ca: 77:58:05:74:39:3f:81:2d:c0:a6:39:54:52:81:60: 6c:07:26:c0:31:d3:5d:15:28:bd:df:6c:4d:f8:88: 65:35:0d:07:6a:82:6c:12:48:42:9a:01:44:2b:63: 77:37:8b:3b:18:9a:5b:4e:95:9b:4b:8b:39:5c:57: 65:bc:29:76:6c:2c:c2:72:1d:0b:36:12:90:5b:8e: 0e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:BE:C7:C4:6A:51:62:8D:85:CE:7C:A9:74:87:7D:1E:00:D4:A2:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/cab94f58-acfa-33ab-adac-aa1d5df30eb1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl X509v3 Authority Key Identifier: keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer sbgp-ipAddrBlock: critical IPv4: 208.70.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:67:d4:c7:66:28:be:8e:31:d6:de:92:58:26:a6:ad:86:2c: f2:4f:19:ab:ae:10:ae:41:84:f1:c9:d7:e0:af:d2:fe:96:38: 0a:3a:7d:b7:4c:ea:91:fe:00:8d:91:1a:fd:a5:b7:ef:f0:7e: cb:87:56:e6:bb:a5:4d:0d:39:a1:95:f3:03:8b:55:25:64:21: 95:7f:9d:24:86:f1:47:ad:fe:81:96:7f:aa:1f:68:fc:e2:35: 0c:ce:67:d2:8f:ed:be:8d:7f:5d:38:1d:e3:c1:56:4b:e0:f5: a9:ed:ce:4d:53:6c:32:f6:00:ea:fe:f6:45:07:53:67:3d:6d: ae:2b:c0:56:f5:a8:f4:04:32:a3:fc:73:b2:35:30:08:52:ce: d6:ed:28:40:76:b4:78:47:33:53:e6:65:0d:b7:ab:3a:08:fa: 13:4c:79:64:15:4c:5b:d1:7c:b2:a5:a0:9d:f5:ac:40:23:f6: f9:be:8f:8a:cc:b8:dc:eb:73:54:01:b0:4f:41:2d:aa:d6:23: 1a:2f:c0:d8:9d:a6:3b:b2:34:fb:3e:47:0f:1c:77:8e:67:e3: c8:bc:7c:ab:be:ff:54:1d:12:97:62:63:0c:07:d2:c7:7f:6a: c6:30:3e:75:da:c7:d0:ff:6f:56:98:86:94:30:bc:c7:38:3b: 42:3e:ee:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEx5TEb8ThAgsvtAvjAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjBmYWNjYjQtNDBhOS00MTY4LWFhM2QtNTlkMTkwZWI1 YTA0MB4XDTI2MDExMDAyMDAzMVoXDTI2MDQxMDAxMDAzMVowLzEtMCsGA1UEAxMk YWExMTcwOTQtNjQ3NS00YmMxLWI3ZGItMDI4NDNmNmQ0OTEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmS9qza5znyx1iWRd0YGgEbz8m2Ke3yJXp1VW C2pta7vad0oTL7c/9+nqps3PUwbS/vooPijF+CyRAIx9tAzFiyikd1uOzGioCbN/ ROTiRnj+u7TwpXuCLvKZSM6CPB2+c+E5PbX2pkkv4rgYdtag9TJE1LX1TXMFO5Yd Qixf/b1pNF1rfUwE1Xfs2k0IxAKiqR+60ifd5rbwlVymWDtfSST5aKTnb6GwluEo +snScLUQjMp3WAV0OT+BLcCmOVRSgWBsBybAMdNdFSi932xN+IhlNQ0HaoJsEkhC mgFEK2N3N4s7GJpbTpWbS4s5XFdlvCl2bCzCch0LNhKQW44ONQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJu+x8RqUWKNhc58qXSHfR4A1KITMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZh Y2NiNC00MGE5LTQxNjgtYWEzZC01OWQxOTBlYjVhMDQvY2FiOTRmNTgtYWNmYS0z M2FiLWFkYWMtYWExZDVkZjMwZWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjBmYWNjYjQtNDBhOS00MTY4LWFh M2QtNTlkMTkwZWI1YTA0L2YwZmFjY2I0LTQwYTktNDE2OC1hYTNkLTU5ZDE5MGVi NWEwNC5jcmwwHwYDVR0jBBgwFoAUrZAUzWRWZcDhdzVyttqYfTlVJJYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZhY2NiNC00MGE5LTQxNjgtYWEzZC01OWQx OTBlYjVhMDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EbQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFNn1MdmKL6OMdbeklgmpq2GLPJPGauuEK5BhPHJ1+Cv0v6WOAo6fbdM 6pH+AI2RGv2lt+/wfsuHVua7pU0NOaGV8wOLVSVkIZV/nSSG8Uet/oGWf6ofaPzi NQzOZ9KP7b6Nf104HePBVkvg9antzk1TbDL2AOr+9kUHU2c9ba4rwFb1qPQEMqP8 c7I1MAhSztbtKEB2tHhHM1PmZQ23qzoI+hNMeWQVTFvRfLKloJ31rEAj9vm+j4rM uNzrc1QBsE9BLarWIxovwNidpjuyNPs+Rw8cd45n48i8fKu+/1QdEpdiYwwH0sd/ asYwPnXax9D/b1aYhpQwvMc4O0I+7q0= -----END CERTIFICATE-----Generated at Mon Mar 2 13:52:25 2026 by rpki-client