$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213/86d09460-5741-3d94-9563-aa1b63fd4a6d.roa File: 86d09460-5741-3d94-9563-aa1b63fd4a6d.roa (raw, json) Hash identifier: ITYHVCCKiPtmkb9ex9pDEmla1Ie+AdOpEN8wZOT6TBo= Subject key identifier: 2A:B4:3D:62:74:AF:AC:56:E7:2E:B3:62:FF:95:95:E9:6E:CA:FC:74 Certificate issuer: /CN=ff3f112b-a6d8-4720-982d-117f151ed213 Certificate serial: 010D0C9F4328584EA786EEC435B195E3EE669200 Authority key identifier: 0F:FF:FD:6A:A7:35:68:97:F3:B2:07:52:27:FD:EE:04:62:D4:96:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213/86d09460-5741-3d94-9563-aa1b63fd4a6d.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 401348 IP address blocks: 208.73.208.0/24 maxlen: 24 208.73.209.0/24 maxlen: 24 208.73.210.0/24 maxlen: 24 208.73.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213/ff3f112b-a6d8-4720-982d-117f151ed213.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213/ff3f112b-a6d8-4720-982d-117f151ed213.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:86:ee:c4:35:b1:95:e3:ee:66:92:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff3f112b-a6d8-4720-982d-117f151ed213 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=d69223bb-5cb6-4d28-812b-b689efc4ae0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e0:a6:ca:ef:c0:b8:cc:1c:b5:04:55:2a:f4: 77:4c:99:01:37:b1:94:f7:68:36:54:2b:51:35:8f: 20:90:66:44:8e:16:52:4c:aa:27:6d:a5:97:78:93: 0b:0e:0f:9a:02:f8:3e:8f:d2:86:8c:00:6f:05:38: e3:68:c1:9a:b2:30:ff:27:a7:84:2b:42:3d:a5:c7: 29:57:11:a7:08:62:74:fe:3b:a6:b2:a4:85:1e:75: df:4c:70:1b:a9:7a:6c:2c:76:d7:22:90:1d:13:6e: fa:30:30:ea:6b:13:63:e0:7e:0b:8f:3c:7c:63:e8: 0a:6f:25:e6:5f:db:89:66:0e:dc:30:4f:a3:20:a4: c1:82:56:50:bf:a9:09:f4:c5:a1:22:d9:ce:f2:fe: 80:7b:f4:5b:df:a8:b5:2a:ac:67:da:05:45:eb:0b: 2b:ee:fc:f6:0b:79:7a:bf:45:25:e2:98:37:e3:90: 53:c2:15:cc:10:c0:6e:14:c0:f6:a8:89:4a:f7:9b: 08:b8:90:e3:60:9d:e1:4f:b2:b9:76:c9:39:ae:7b: 9d:14:bd:c0:3a:4a:82:f6:94:2d:5d:50:71:81:d7: d9:67:58:23:e5:46:c1:9e:3c:3e:fe:66:1e:97:0a: cf:37:f2:59:18:dc:df:08:8b:d0:27:45:c6:a1:c7: 4c:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:B4:3D:62:74:AF:AC:56:E7:2E:B3:62:FF:95:95:E9:6E:CA:FC:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213/86d09460-5741-3d94-9563-aa1b63fd4a6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213/ff3f112b-a6d8-4720-982d-117f151ed213.crl X509v3 Authority Key Identifier: keyid:0F:FF:FD:6A:A7:35:68:97:F3:B2:07:52:27:FD:EE:04:62:D4:96:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213.cer sbgp-ipAddrBlock: critical IPv4: 208.73.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:a4:97:9b:da:df:8c:94:06:f5:6c:12:e0:b8:3e:d0:31:92: 3a:ab:b4:86:47:f2:e9:ee:a4:0e:56:d5:ef:87:69:6e:81:b7: a8:d4:87:3e:68:9d:ab:7f:77:08:cf:72:67:f5:cf:b5:34:fe: fb:4a:b6:8e:96:29:61:06:33:61:63:68:e4:7e:0c:a3:bd:10: 4d:44:e4:2b:87:0e:09:0b:f7:6b:f6:ba:5a:3e:de:56:49:3e: 5f:7a:37:d6:d9:2c:69:83:a9:83:89:38:5e:ea:cd:16:76:36: 87:73:3e:e0:5f:1c:49:20:80:c9:4a:5e:2f:9a:2a:a4:e1:06: da:a1:86:7c:87:11:3e:4e:be:e4:47:cb:5f:e6:76:3e:9b:0d: 3a:87:64:bd:7d:cc:0d:7b:9a:b6:78:bb:21:a5:c9:24:8d:4b: f2:c7:c0:b2:b0:38:27:f7:10:5f:d6:f4:e3:f6:2a:72:c5:33: cc:96:23:10:bd:9e:f7:e5:29:16:23:9b:8f:f0:5f:89:70:be: 59:bb:f7:a1:89:fd:3a:bb:44:f0:c1:f4:5d:2f:a1:08:c1:3d: 09:ed:60:ea:21:dc:69:c4:31:22:a3:f1:42:cc:68:bd:9f:f6: bb:07:ce:a1:b9:36:7c:ef:2e:8f:8a:1e:91:41:79:35:db:5a: bf:56:34:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nhu7ENbGV4+5mkgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmYzZjExMmItYTZkOC00NzIwLTk4MmQtMTE3ZjE1MWVk MjEzMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZDY5MjIzYmItNWNiNi00ZDI4LTgxMmItYjY4OWVmYzRhZTBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOCmyu/AuMwctQRVKvR3TJkBN7GU92g2VCtR NY8gkGZEjhZSTKonbaWXeJMLDg+aAvg+j9KGjABvBTjjaMGasjD/J6eEK0I9pccp VxGnCGJ0/jumsqSFHnXfTHAbqXpsLHbXIpAdE276MDDqaxNj4H4Ljzx8Y+gKbyXm X9uJZg7cME+jIKTBglZQv6kJ9MWhItnO8v6Ae/Rb36i1Kqxn2gVF6wsr7vz2C3l6 v0Ul4pg345BTwhXMEMBuFMD2qIlK95sIuJDjYJ3hT7K5dsk5rnudFL3AOkqC9pQt XVBxgdfZZ1gj5UbBnjw+/mYelwrPN/JZGNzfCIvQJ0XGocdM2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCq0PWJ0r6xW5y6zYv+Vleluyvx0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjNm MTEyYi1hNmQ4LTQ3MjAtOTgyZC0xMTdmMTUxZWQyMTMvODZkMDk0NjAtNTc0MS0z ZDk0LTk1NjMtYWExYjYzZmQ0YTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmYzZjExMmItYTZkOC00NzIwLTk4 MmQtMTE3ZjE1MWVkMjEzL2ZmM2YxMTJiLWE2ZDgtNDcyMC05ODJkLTExN2YxNTFl ZDIxMy5jcmwwHwYDVR0jBBgwFoAUD//9aqc1aJfzsgdSJ/3uBGLUlgswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjNmMTEyYi1hNmQ4LTQ3MjAtOTgyZC0xMTdm MTUxZWQyMTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EnQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADSkl5va34yUBvVsEuC4PtAxkjqrtIZH8unupA5W1e+HaW6Bt6jUhz5o nat/dwjPcmf1z7U0/vtKto6WKWEGM2FjaOR+DKO9EE1E5CuHDgkL92v2ulo+3lZJ Pl96N9bZLGmDqYOJOF7qzRZ2NodzPuBfHEkggMlKXi+aKqThBtqhhnyHET5OvuRH y1/mdj6bDTqHZL19zA17mrZ4uyGlySSNS/LHwLKwOCf3EF/W9OP2KnLFM8yWIxC9 nvflKRYjm4/wX4lwvlm796GJ/Tq7RPDB9F0voQjBPQntYOoh3GnEMSKj8ULMaL2f 9rsHzqG5NnzvLo+KHpFBeTXbWr9WNGY= -----END CERTIFICATE-----Generated at Wed Jul 29 13:38:08 2026 by rpki-client