$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/1fbbe8cd-8d5d-36a3-ba74-f7c2b60d1736.roa File: 1fbbe8cd-8d5d-36a3-ba74-f7c2b60d1736.roa (raw, json) Hash identifier: z8oZ0oX9JEcjgF+aNhnlg3x28QCEdjaRaN0fEER10A0= Subject key identifier: 25:D3:49:C5:3C:A2:E6:DE:73:BA:2B:83:F8:C3:4B:4D:50:46:51:50 Certificate issuer: /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04 Certificate serial: 010D0C9F4328584E3A2F2A18ED90D2808B3B4800 Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/1fbbe8cd-8d5d-36a3-ba74-f7c2b60d1736.roa Signing time: Fri 19 Jun 2026 21:00:12 +0000 ROA not before: Fri 19 Jun 2026 21:00:12 +0000 ROA not after: Thu 17 Sep 2026 21:00:12 +0000 asID: 16509 IP address blocks: 208.70.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 25 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:3a:2f:2a:18:ed:90:d2:80:8b:3b:48:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04 Validity Not Before: Jun 19 21:00:12 2026 GMT Not After : Sep 17 21:00:12 2026 GMT Subject: CN=883c6c62-7712-4830-ba61-f1dbaf34bd08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:6c:48:1b:55:5f:b0:8c:21:3f:1c:49:60:ba: fc:be:cb:7c:ab:25:01:dd:fd:17:67:fe:cc:73:b4: 44:f5:36:e2:2e:61:23:ef:c9:4c:73:3e:54:c1:9a: 37:99:43:14:83:94:9e:fe:7a:55:1a:1a:f0:84:ad: 35:f0:9a:11:af:24:42:d8:66:5e:29:2f:93:da:46: 1a:42:c6:f7:49:e3:68:77:75:e1:19:a3:16:56:d9: 16:14:35:a0:8c:ac:7c:2b:54:0c:5b:8a:bb:35:07: 2a:49:e5:c2:21:af:5c:8e:94:4a:32:3e:63:13:88: e5:21:f5:06:05:fe:43:88:44:3b:ce:00:b4:fc:78: 37:c2:2f:7d:d3:7e:a1:bc:36:a1:1d:07:87:17:8c: c1:74:10:06:72:09:99:b0:6d:d8:cc:da:aa:70:21: 1c:a6:1f:f0:2a:8c:a8:96:07:25:13:fd:36:f9:c6: 0b:2e:52:6e:20:43:54:33:81:3a:13:eb:55:3c:66: 6d:8f:d7:b3:4f:96:96:7a:fa:56:7e:a4:20:5b:10: 1a:1c:6a:5e:c4:88:4e:d3:08:42:b7:99:15:1b:4f: 6b:87:d7:ed:b8:7d:43:c1:fa:19:48:9f:5b:da:3c: 64:e1:c1:1f:95:4b:23:99:e7:95:d7:e5:98:ec:5f: ca:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:D3:49:C5:3C:A2:E6:DE:73:BA:2B:83:F8:C3:4B:4D:50:46:51:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/1fbbe8cd-8d5d-36a3-ba74-f7c2b60d1736.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl X509v3 Authority Key Identifier: keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer sbgp-ipAddrBlock: critical IPv4: 208.70.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:ba:dd:ac:53:dc:2d:d5:64:f6:83:22:9c:2c:bc:ac:01:ee: dd:f8:7b:e0:00:7b:2a:ae:05:ae:e6:2f:62:a2:fd:74:45:0f: ce:d7:4b:e2:ed:d4:12:d2:1f:56:dd:8e:28:4d:11:12:5b:9d: 76:1c:9f:32:39:8b:d7:65:da:11:e2:1e:1f:06:c6:0c:46:17: ba:24:cd:5d:6f:92:b2:23:ca:5a:bc:53:3f:49:79:3f:6b:02: 80:ab:74:ad:19:32:d4:43:c6:31:80:74:f8:d6:e8:fe:86:30: dc:be:8a:34:7e:0c:bb:07:7e:56:8a:14:93:cd:3b:52:5f:5a: 4a:cd:b9:02:82:e0:e7:77:99:21:3f:a2:3d:10:98:eb:23:a2: 03:b1:3b:0b:32:2a:e9:e7:0f:f8:07:01:cd:de:ba:89:54:10: 29:79:17:86:7e:d6:57:ec:2a:8d:ab:f9:4a:e3:22:18:d6:a0: 4d:61:b3:0d:71:59:4f:79:45:87:43:29:a2:fc:f6:e6:6a:ad: 90:bd:c9:58:04:3e:1b:f9:85:dc:b8:4c:9e:b9:e4:eb:fa:ee: cb:1e:df:13:7e:a0:11:b3:f7:d3:54:5a:16:1b:15:52:36:c5: f2:b4:b4:06:ae:a5:71:aa:19:14:70:31:47:0c:ca:90:8a:ce: f5:ad:6f:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE46LyoY7ZDSgIs7SAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjBmYWNjYjQtNDBhOS00MTY4LWFhM2QtNTlkMTkwZWI1 YTA0MB4XDTI2MDYxOTIxMDAxMloXDTI2MDkxNzIxMDAxMlowLzEtMCsGA1UEAxMk ODgzYzZjNjItNzcxMi00ODMwLWJhNjEtZjFkYmFmMzRiZDA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymxIG1VfsIwhPxxJYLr8vst8qyUB3f0XZ/7M c7RE9TbiLmEj78lMcz5UwZo3mUMUg5Se/npVGhrwhK018JoRryRC2GZeKS+T2kYa Qsb3SeNod3XhGaMWVtkWFDWgjKx8K1QMW4q7NQcqSeXCIa9cjpRKMj5jE4jlIfUG Bf5DiEQ7zgC0/Hg3wi99036hvDahHQeHF4zBdBAGcgmZsG3YzNqqcCEcph/wKoyo lgclE/02+cYLLlJuIENUM4E6E+tVPGZtj9ezT5aWevpWfqQgWxAaHGpexIhO0whC t5kVG09rh9ftuH1DwfoZSJ9b2jxk4cEflUsjmeeV1+WY7F/KHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCXTScU8oubec7org/jDS01QRlFQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZh Y2NiNC00MGE5LTQxNjgtYWEzZC01OWQxOTBlYjVhMDQvMWZiYmU4Y2QtOGQ1ZC0z NmEzLWJhNzQtZjdjMmI2MGQxNzM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjBmYWNjYjQtNDBhOS00MTY4LWFh M2QtNTlkMTkwZWI1YTA0L2YwZmFjY2I0LTQwYTktNDE2OC1hYTNkLTU5ZDE5MGVi NWEwNC5jcmwwHwYDVR0jBBgwFoAUrZAUzWRWZcDhdzVyttqYfTlVJJYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZhY2NiNC00MGE5LTQxNjgtYWEzZC01OWQx OTBlYjVhMDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EbTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD663axT3C3VZPaDIpwsvKwB7t34e+AAeyquBa7mL2Ki/XRFD87XS+Lt 1BLSH1bdjihNERJbnXYcnzI5i9dl2hHiHh8GxgxGF7okzV1vkrIjylq8Uz9JeT9r AoCrdK0ZMtRDxjGAdPjW6P6GMNy+ijR+DLsHflaKFJPNO1JfWkrNuQKC4Od3mSE/ oj0QmOsjogOxOwsyKunnD/gHAc3euolUECl5F4Z+1lfsKo2r+UrjIhjWoE1hsw1x WU95RYdDKaL89uZqrZC9yVgEPhv5hdy4TJ655Ov67sse3xN+oBGz99NUWhYbFVI2 xfK0tAaupXGqGRRwMUcMypCKzvWtb7g= -----END CERTIFICATE-----Generated at Wed Jun 24 23:23:56 2026 by rpki-client