$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/596e8645-a8c5-3714-b0d5-32f9118818dc.roa File: 596e8645-a8c5-3714-b0d5-32f9118818dc.roa (raw, json) Hash identifier: KAlnVcEJjlY9UA83qXgE9sXhaUC2rTgY5ncVpNPscRw= Subject key identifier: E9:9A:96:94:41:44:1D:86:44:72:BA:E8:71:67:3C:B3:0B:DE:2D:80 Certificate issuer: /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04 Certificate serial: 010D0C9F4328584E3A2F29DD4904028EA1D2F0C0 Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/596e8645-a8c5-3714-b0d5-32f9118818dc.roa Signing time: Fri 19 Jun 2026 21:00:12 +0000 ROA not before: Fri 19 Jun 2026 21:00:12 +0000 ROA not after: Thu 17 Sep 2026 21:00:12 +0000 asID: 14618 IP address blocks: 208.70.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:3a:2f:29:dd:49:04:02:8e:a1:d2:f0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04 Validity Not Before: Jun 19 21:00:12 2026 GMT Not After : Sep 17 21:00:12 2026 GMT Subject: CN=f8c251e7-3ad2-40c7-924f-e9a94961f67f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d8:62:ec:d1:e1:f5:10:d2:b2:c8:87:fc:e8: de:fb:fc:29:9f:fc:df:fa:19:39:54:53:b1:ac:b7: 6b:a8:63:6a:6e:92:8c:fc:4a:44:91:d6:e0:68:02: e1:18:e5:23:4f:f2:46:e7:f4:43:c5:38:12:4d:7b: 3b:57:a7:0a:01:13:47:3f:d9:b5:b0:a2:60:f2:20: 73:a0:b7:0f:36:f7:f2:fa:65:74:65:56:c6:e7:d2: 97:06:54:3c:ca:67:ef:3f:fd:93:55:be:ea:6f:e5: c9:05:4b:c8:31:31:ba:44:0a:04:15:ee:e3:9d:98: a3:5d:c6:60:65:b0:97:a7:63:8f:23:c9:ec:cf:3d: a4:73:48:3d:ed:8d:42:48:84:3e:8d:7a:2b:3b:41: 61:99:9f:ff:3f:a7:93:3c:5b:52:d7:99:e1:0e:0a: 3f:30:b0:5e:74:da:db:d0:03:cb:4d:38:b9:7e:54: 3c:7a:6f:f7:57:f8:4d:91:66:f4:56:66:02:dc:57: b9:3f:77:0a:08:01:c0:7c:e1:82:a0:27:fe:8c:f5: c3:a0:a8:4b:78:6c:e3:13:1d:8b:96:35:81:fa:67: ce:b4:79:b3:07:7e:ff:82:60:ec:bd:9d:69:94:f5: e1:e6:7b:69:4d:e8:c4:19:dd:b5:bb:5f:36:ff:de: 91:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:9A:96:94:41:44:1D:86:44:72:BA:E8:71:67:3C:B3:0B:DE:2D:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/596e8645-a8c5-3714-b0d5-32f9118818dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl X509v3 Authority Key Identifier: keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer sbgp-ipAddrBlock: critical IPv4: 208.70.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:dc:de:51:74:a1:7d:c7:79:82:4d:b5:ef:77:b5:99:d4:12: e5:d5:f3:5e:60:06:6b:c7:4e:6a:28:4e:52:82:4c:24:56:14: 51:77:b8:04:5b:16:e8:4a:21:cb:2f:ca:8e:fa:5e:db:6d:0f: a5:8b:5e:f9:43:33:16:d5:93:9f:1c:a2:92:50:d1:70:9a:62: 9b:6f:5c:d1:54:e2:54:12:05:57:19:33:7d:f9:74:5b:21:19: c3:15:ab:30:ea:b8:7f:fb:4a:af:5e:f0:82:39:75:70:7b:ec: 8f:d0:47:93:d0:d2:c1:24:72:ef:52:07:d5:52:88:a2:b3:35: c7:0d:a0:09:81:ab:cd:b8:df:fc:17:dc:2d:cb:a0:d3:d8:bf: 10:cf:ce:45:07:19:14:1e:4b:21:03:a4:95:db:dc:b8:5d:32: 89:7b:7e:14:4a:cd:7f:53:b1:e3:e6:0d:7c:19:17:20:d5:95: 38:6b:5d:25:13:15:d9:e0:7c:74:51:17:39:ee:5c:77:35:e0: 42:f5:46:3c:52:f9:8a:9c:67:0a:ef:09:ac:37:b1:a6:c7:36: e8:f2:12:11:6e:37:27:64:e4:b6:4a:b7:7f:47:5e:9b:8d:c9: df:39:dc:2b:74:21:c8:39:55:63:37:b4:76:2b:e2:d0:0c:f1: 52:87:7c:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE46LyndSQQCjqHS8MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjBmYWNjYjQtNDBhOS00MTY4LWFhM2QtNTlkMTkwZWI1 YTA0MB4XDTI2MDYxOTIxMDAxMloXDTI2MDkxNzIxMDAxMlowLzEtMCsGA1UEAxMk ZjhjMjUxZTctM2FkMi00MGM3LTkyNGYtZTlhOTQ5NjFmNjdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9hi7NHh9RDSssiH/Oje+/wpn/zf+hk5VFOx rLdrqGNqbpKM/EpEkdbgaALhGOUjT/JG5/RDxTgSTXs7V6cKARNHP9m1sKJg8iBz oLcPNvfy+mV0ZVbG59KXBlQ8ymfvP/2TVb7qb+XJBUvIMTG6RAoEFe7jnZijXcZg ZbCXp2OPI8nszz2kc0g97Y1CSIQ+jXorO0FhmZ//P6eTPFtS15nhDgo/MLBedNrb 0APLTTi5flQ8em/3V/hNkWb0VmYC3Fe5P3cKCAHAfOGCoCf+jPXDoKhLeGzjEx2L ljWB+mfOtHmzB37/gmDsvZ1plPXh5ntpTejEGd21u182/96RnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOmalpRBRB2GRHK66HFnPLML3i2AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZh Y2NiNC00MGE5LTQxNjgtYWEzZC01OWQxOTBlYjVhMDQvNTk2ZTg2NDUtYThjNS0z NzE0LWIwZDUtMzJmOTExODgxOGRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjBmYWNjYjQtNDBhOS00MTY4LWFh M2QtNTlkMTkwZWI1YTA0L2YwZmFjY2I0LTQwYTktNDE2OC1hYTNkLTU5ZDE5MGVi NWEwNC5jcmwwHwYDVR0jBBgwFoAUrZAUzWRWZcDhdzVyttqYfTlVJJYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZhY2NiNC00MGE5LTQxNjgtYWEzZC01OWQx OTBlYjVhMDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EbRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKjc3lF0oX3HeYJNte93tZnUEuXV815gBmvHTmooTlKCTCRWFFF3uARb FuhKIcsvyo76XtttD6WLXvlDMxbVk58copJQ0XCaYptvXNFU4lQSBVcZM335dFsh GcMVqzDquH/7Sq9e8II5dXB77I/QR5PQ0sEkcu9SB9VSiKKzNccNoAmBq8243/wX 3C3LoNPYvxDPzkUHGRQeSyEDpJXb3LhdMol7fhRKzX9TsePmDXwZFyDVlThrXSUT FdngfHRRFznuXHc14EL1RjxS+YqcZwrvCaw3sabHNujyEhFuNydk5LZKt39HXpuN yd853Ct0Icg5VWM3tHYr4tAM8VKHfLc= -----END CERTIFICATE-----Generated at Mon Jul 6 18:22:18 2026 by rpki-client