$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/ca0e795f-409c-3995-9f6d-b873a4aec2e6.roa File: ca0e795f-409c-3995-9f6d-b873a4aec2e6.roa (raw, json) Hash identifier: d3OCjxjYNodute9jqUzCRvI/tfztU0R8JgpAHt+gEHQ= Subject key identifier: E7:B1:FC:CF:E0:EC:57:E2:50:CF:C0:12:23:F7:18:45:BB:BA:A4:FA Certificate issuer: /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04 Certificate serial: 010D0C9F4328584D8EF5584BCA41C4D041A9BFC0 Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/ca0e795f-409c-3995-9f6d-b873a4aec2e6.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 16509 IP address blocks: 85.113.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 04 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:58:4b:ca:41:c4:d0:41:a9:bf:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=30d99ca1-5127-4bff-bb58-8d47964ad3da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c7:f6:ae:12:ab:25:b7:6d:b3:24:d6:35:97: 35:11:c8:3d:c6:8b:8c:93:67:58:90:36:f8:bd:75: 44:72:a8:60:f2:37:ac:14:ca:06:64:da:ea:8a:b6: 1a:6a:2c:3f:89:eb:6c:81:41:69:09:24:40:01:4d: 82:4f:32:71:83:ec:a6:9c:a1:9c:e4:47:26:d7:59: 53:0f:d2:b9:e3:84:84:b4:f6:b6:a9:7d:62:b2:23: e7:fc:8f:5a:51:b6:8f:7c:75:ae:67:90:bb:2a:f2: f7:d6:be:50:cf:06:b8:6c:27:ce:7f:14:f1:e1:9e: 43:83:53:c0:6e:86:55:50:47:2d:31:0c:1e:65:a5: e1:24:fb:01:09:72:42:af:77:7a:5e:8f:64:ef:1c: b0:f5:7d:0a:82:a1:9e:d7:14:61:5c:cd:c9:13:93: 57:5e:a8:b5:d9:72:d6:e3:e3:09:b6:37:d4:9f:fa: 41:7e:7a:cb:f8:22:24:12:21:3a:7b:98:7a:b0:ed: a1:b8:3c:18:36:4f:86:75:db:c9:d1:8d:3a:62:a0: e6:f9:6f:cc:02:8a:9a:d3:b8:fc:0d:0f:ba:0a:39: 7a:b9:dc:38:60:b7:1a:ca:3d:77:06:95:e0:88:98: c6:44:ae:5e:23:c8:bf:22:00:e8:5c:dd:e5:e9:02: 8c:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:B1:FC:CF:E0:EC:57:E2:50:CF:C0:12:23:F7:18:45:BB:BA:A4:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/ca0e795f-409c-3995-9f6d-b873a4aec2e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl X509v3 Authority Key Identifier: keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer sbgp-ipAddrBlock: critical IPv4: 85.113.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:59:8e:2d:ac:13:7f:70:a8:af:86:5a:c6:8c:fd:5f:43:de: 28:e3:fd:c6:0a:e2:2a:ac:6f:c9:32:1e:22:df:63:c9:94:32: 4b:25:49:73:7e:3f:1e:6d:b6:eb:7a:24:ee:13:58:e1:8f:11: 6f:36:5b:7c:8c:e7:ec:4d:f1:0b:c3:c4:79:c9:ab:4b:a1:ef: b2:db:8e:d5:c1:7f:86:da:86:9e:29:66:c7:d9:5a:70:80:88: f2:be:b2:2b:d3:7d:f7:7b:8a:09:1c:94:d1:8b:2b:0e:67:4b: a0:23:3b:5c:1e:14:2f:79:fb:9c:b2:d3:ad:ba:a6:43:57:d5: f0:e9:25:89:62:cd:1a:9f:aa:13:70:66:0f:9f:f8:1d:6b:ee: c5:1c:73:6e:d7:5f:dd:54:d9:05:2f:f9:76:09:f9:0d:57:d8: 52:e0:7b:0b:32:c5:f3:6e:61:39:3d:b0:09:98:6b:90:0a:3d: 01:9a:97:0b:4e:14:cd:f3:c2:9f:c6:3b:cc:2e:61:0c:7a:b9: 57:a7:71:38:a9:af:e0:c1:aa:16:a1:0c:7d:cb:17:39:1b:67: 12:45:ff:d0:c9:e4:51:9e:2f:9e:7c:03:39:6f:d3:8f:d5:70: 90:2a:0e:ec:bb:1b:f0:8f:ca:cf:4f:d5:4c:9e:bf:cb:da:d0: ac:0d:85:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9VhLykHE0EGpv8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjBmYWNjYjQtNDBhOS00MTY4LWFhM2QtNTlkMTkwZWI1 YTA0MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk MzBkOTljYTEtNTEyNy00YmZmLWJiNTgtOGQ0Nzk2NGFkM2RhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMf2rhKrJbdtsyTWNZc1Ecg9xouMk2dYkDb4 vXVEcqhg8jesFMoGZNrqirYaaiw/ietsgUFpCSRAAU2CTzJxg+ymnKGc5Ecm11lT D9K544SEtPa2qX1isiPn/I9aUbaPfHWuZ5C7KvL31r5Qzwa4bCfOfxTx4Z5Dg1PA boZVUEctMQweZaXhJPsBCXJCr3d6Xo9k7xyw9X0KgqGe1xRhXM3JE5NXXqi12XLW 4+MJtjfUn/pBfnrL+CIkEiE6e5h6sO2huDwYNk+GddvJ0Y06YqDm+W/MAoqa07j8 DQ+6Cjl6udw4YLcayj13BpXgiJjGRK5eI8i/IgDoXN3l6QKMFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOex/M/g7FfiUM/AEiP3GEW7uqT6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZh Y2NiNC00MGE5LTQxNjgtYWEzZC01OWQxOTBlYjVhMDQvY2EwZTc5NWYtNDA5Yy0z OTk1LTlmNmQtYjg3M2E0YWVjMmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjBmYWNjYjQtNDBhOS00MTY4LWFh M2QtNTlkMTkwZWI1YTA0L2YwZmFjY2I0LTQwYTktNDE2OC1hYTNkLTU5ZDE5MGVi NWEwNC5jcmwwHwYDVR0jBBgwFoAUrZAUzWRWZcDhdzVyttqYfTlVJJYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZhY2NiNC00MGE5LTQxNjgtYWEzZC01OWQx OTBlYjVhMDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVXFYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGpZji2sE39wqK+GWsaM/V9D3ijj/cYK4iqsb8kyHiLfY8mUMkslSXN+ Px5ttut6JO4TWOGPEW82W3yM5+xN8QvDxHnJq0uh77LbjtXBf4bahp4pZsfZWnCA iPK+sivTffd7igkclNGLKw5nS6AjO1weFC95+5yy0626pkNX1fDpJYlizRqfqhNw Zg+f+B1r7sUcc27XX91U2QUv+XYJ+Q1X2FLgewsyxfNuYTk9sAmYa5AKPQGalwtO FM3zwp/GO8wuYQx6uVencTipr+DBqhahDH3LFzkbZxJF/9DJ5FGeL558Azlv04/V cJAqDuy7G/CPys9P1Uyev8va0KwNhWc= -----END CERTIFICATE-----Generated at Sun May 3 15:32:29 2026 by rpki-client