$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/cab94f58-acfa-33ab-adac-aa1d5df30eb1.roa File: cab94f58-acfa-33ab-adac-aa1d5df30eb1.roa (raw, json) Hash identifier: hcD6ZjhjIPRN4xxW0sAU47R7cayvruTXaBJkyyFzdZs= Subject key identifier: B2:B6:27:77:E1:95:81:4D:0F:87:F3:DF:AD:3F:05:0D:3E:74:A9:27 Certificate issuer: /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04 Certificate serial: 010D0C9F4328584E3A2F363906ABAACC1F5B2780 Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/cab94f58-acfa-33ab-adac-aa1d5df30eb1.roa Signing time: Fri 19 Jun 2026 21:00:12 +0000 ROA not before: Fri 19 Jun 2026 21:00:12 +0000 ROA not after: Thu 17 Sep 2026 21:00:12 +0000 asID: 16509 IP address blocks: 208.70.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 25 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:3a:2f:36:39:06:ab:aa:cc:1f:5b:27:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04 Validity Not Before: Jun 19 21:00:12 2026 GMT Not After : Sep 17 21:00:12 2026 GMT Subject: CN=fed0991a-6ac7-408f-b5a6-2d68543c48d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2b:77:1a:b4:0d:72:b0:a3:82:0c:5d:6a:5c: cd:0b:1e:32:28:44:5a:9c:65:bc:ed:0e:b5:41:f9: 42:be:0e:a8:7d:23:cf:e8:d0:f3:f7:74:9c:ff:c6: 48:22:38:41:10:4a:4f:fb:cd:0d:d7:06:92:14:9d: c0:06:40:70:0f:a4:4e:db:0b:cc:c2:ed:44:d8:c0: 93:2b:15:43:e0:6b:29:88:f7:5d:bc:6e:f5:6b:03: 17:8b:ce:9e:ff:af:cf:06:8a:f3:6f:86:3c:ea:d9: f0:74:83:ce:25:db:b9:99:92:fd:e6:46:12:01:4f: 5e:58:ae:2f:6b:98:57:96:28:cc:f0:df:2a:cf:c9: 0e:7c:23:ff:be:48:e8:a6:35:f5:35:6e:d5:c0:f1: 58:55:2b:fc:fa:97:a7:3b:d3:94:06:2c:95:50:70: 68:f6:5a:56:95:31:dc:47:ca:4f:05:f3:2a:45:3a: f7:b8:90:32:a6:e8:48:a3:60:5d:21:17:1f:54:d2: 5a:5b:b3:c5:63:81:46:fb:4b:6f:16:36:fa:e9:4d: 6a:87:47:c9:21:90:b6:fd:89:e6:22:d7:84:8a:60: bf:6d:c9:04:af:bb:67:b1:13:06:92:a5:95:bd:66: 7d:c6:54:de:49:04:fb:b7:79:95:30:17:9a:f3:7a: 6f:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:B6:27:77:E1:95:81:4D:0F:87:F3:DF:AD:3F:05:0D:3E:74:A9:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/cab94f58-acfa-33ab-adac-aa1d5df30eb1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl X509v3 Authority Key Identifier: keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer sbgp-ipAddrBlock: critical IPv4: 208.70.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:46:e9:b8:b1:48:8a:48:dd:1a:47:6d:fb:e4:a0:48:e3:ea: 18:5c:67:44:60:fb:fc:9d:85:15:f0:7b:7c:22:ba:70:4d:42: b3:10:cc:4a:56:72:31:67:90:ff:17:ce:41:9a:b8:94:83:7f: 9a:22:7a:56:a7:2a:b9:36:8c:22:e0:3e:34:7f:93:2e:56:ed: 30:06:f0:4d:99:48:96:7b:70:d3:fb:51:eb:0e:83:7f:57:a9: 5f:a8:c8:77:16:92:80:92:3b:a8:1d:c0:60:44:07:8f:ef:e4: 18:d7:09:69:61:49:2c:52:33:5d:db:35:01:1f:f5:c8:95:16: a1:9d:4f:e9:4d:a4:fd:32:63:07:fd:3d:b0:80:11:52:15:d6: 2e:9a:f3:63:59:38:25:72:15:d8:86:2c:47:fc:31:85:57:fb: 8f:72:20:56:eb:5e:8e:0d:f1:03:b6:25:4a:8c:85:9e:e7:cb: 0d:55:a4:86:54:ab:5e:63:a8:34:58:81:f7:f4:82:f5:51:1a: 38:fe:4d:25:9e:fd:21:0d:ed:49:61:37:33:cb:f6:55:5e:09: 07:84:bf:0c:47:4e:b4:f2:b9:fb:2e:ba:d7:f9:4c:21:15:72: 85:f2:c2:3c:04:e2:f8:be:1a:6d:0b:78:67:29:7c:29:e8:2f: a2:d2:95:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE46LzY5BquqzB9bJ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjBmYWNjYjQtNDBhOS00MTY4LWFhM2QtNTlkMTkwZWI1 YTA0MB4XDTI2MDYxOTIxMDAxMloXDTI2MDkxNzIxMDAxMlowLzEtMCsGA1UEAxMk ZmVkMDk5MWEtNmFjNy00MDhmLWI1YTYtMmQ2ODU0M2M0OGQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyt3GrQNcrCjggxdalzNCx4yKERanGW87Q61 QflCvg6ofSPP6NDz93Sc/8ZIIjhBEEpP+80N1waSFJ3ABkBwD6RO2wvMwu1E2MCT KxVD4GspiPddvG71awMXi86e/6/PBorzb4Y86tnwdIPOJdu5mZL95kYSAU9eWK4v a5hXlijM8N8qz8kOfCP/vkjopjX1NW7VwPFYVSv8+penO9OUBiyVUHBo9lpWlTHc R8pPBfMqRTr3uJAypuhIo2BdIRcfVNJaW7PFY4FG+0tvFjb66U1qh0fJIZC2/Ynm IteEimC/bckEr7tnsRMGkqWVvWZ9xlTeSQT7t3mVMBea83pvZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLK2J3fhlYFND4fz360/BQ0+dKknMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZh Y2NiNC00MGE5LTQxNjgtYWEzZC01OWQxOTBlYjVhMDQvY2FiOTRmNTgtYWNmYS0z M2FiLWFkYWMtYWExZDVkZjMwZWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjBmYWNjYjQtNDBhOS00MTY4LWFh M2QtNTlkMTkwZWI1YTA0L2YwZmFjY2I0LTQwYTktNDE2OC1hYTNkLTU5ZDE5MGVi NWEwNC5jcmwwHwYDVR0jBBgwFoAUrZAUzWRWZcDhdzVyttqYfTlVJJYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZhY2NiNC00MGE5LTQxNjgtYWEzZC01OWQx OTBlYjVhMDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EbQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALJG6bixSIpI3RpHbfvkoEjj6hhcZ0Rg+/ydhRXwe3wiunBNQrMQzEpW cjFnkP8XzkGauJSDf5oielanKrk2jCLgPjR/ky5W7TAG8E2ZSJZ7cNP7UesOg39X qV+oyHcWkoCSO6gdwGBEB4/v5BjXCWlhSSxSM13bNQEf9ciVFqGdT+lNpP0yYwf9 PbCAEVIV1i6a82NZOCVyFdiGLEf8MYVX+49yIFbrXo4N8QO2JUqMhZ7nyw1VpIZU q15jqDRYgff0gvVRGjj+TSWe/SEN7UlhNzPL9lVeCQeEvwxHTrTyufsuutf5TCEV coXywjwE4vi+Gm0LeGcpfCnoL6LSla8= -----END CERTIFICATE-----Generated at Wed Jun 24 22:34:52 2026 by rpki-client