$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213/86d09460-5741-3d94-9563-aa1b63fd4a6d.roa File: 86d09460-5741-3d94-9563-aa1b63fd4a6d.roa (raw, json) Hash identifier: 29qHrFqKdCedrb48/qBbiOmrtT8AggvUj8/lAro/CfA= Subject key identifier: 46:80:69:C8:46:1D:11:AC:88:D6:F2:AE:57:2A:7B:9B:CA:0A:68:57 Certificate issuer: /CN=ff3f112b-a6d8-4720-982d-117f151ed213 Certificate serial: 010D0C9F4328584B25FC410C012EBA2C9B498E00 Authority key identifier: 0F:FF:FD:6A:A7:35:68:97:F3:B2:07:52:27:FD:EE:04:62:D4:96:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213/86d09460-5741-3d94-9563-aa1b63fd4a6d.roa Signing time: Wed 10 Sep 2025 13:00:41 +0000 ROA not before: Wed 10 Sep 2025 13:00:41 +0000 ROA not after: Tue 09 Dec 2025 14:00:41 +0000 asID: 401348 IP address blocks: 208.73.208.0/24 maxlen: 24 208.73.209.0/24 maxlen: 24 208.73.210.0/24 maxlen: 24 208.73.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213/ff3f112b-a6d8-4720-982d-117f151ed213.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213/ff3f112b-a6d8-4720-982d-117f151ed213.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:25:fc:41:0c:01:2e:ba:2c:9b:49:8e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff3f112b-a6d8-4720-982d-117f151ed213 Validity Not Before: Sep 10 13:00:41 2025 GMT Not After : Dec 9 14:00:41 2025 GMT Subject: CN=d83643f3-a009-4656-8c96-ad815d0a3b0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:85:7a:9b:ec:4e:af:f8:74:e8:b9:96:54:48: 84:fb:5a:93:41:46:b9:84:69:5e:ae:a9:ca:c8:7e: d0:67:e0:ee:79:be:66:dd:32:73:c0:b1:18:f4:8b: 88:5f:30:d2:f8:b8:72:34:57:bc:ca:31:9a:aa:04: e5:c3:79:90:ad:99:86:63:24:ac:c6:b7:03:a6:42: ac:f1:ba:dd:37:1d:02:59:7f:b6:13:e4:9a:a3:14: 8d:75:94:a5:a7:df:40:5d:94:ef:db:d4:27:4f:4c: 25:fd:e7:2e:55:ab:cd:ee:32:70:60:58:95:92:7c: a0:84:60:05:b1:71:e9:6f:c8:6d:c0:f4:14:f9:0c: 43:a0:6f:8e:4a:e5:70:71:31:8d:3f:62:42:c1:c7: 82:49:88:dc:83:67:0e:38:26:2a:29:ac:51:29:ab: b2:85:96:b4:55:e7:fc:61:c9:5c:ac:55:d0:17:fd: 69:7c:d2:16:5d:d8:72:7e:88:44:41:c3:b6:0c:d5: b9:e1:e1:36:54:c4:88:61:7a:d2:2f:74:4f:5d:b1: 6d:2a:98:47:8f:58:11:19:af:d1:0f:79:aa:8d:57: 4a:68:d5:02:b7:8d:c8:23:1b:41:b5:6f:ac:ff:e7: 5b:c8:bb:87:ef:08:24:a1:0c:3b:11:b9:d7:10:a9: f4:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:80:69:C8:46:1D:11:AC:88:D6:F2:AE:57:2A:7B:9B:CA:0A:68:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213/86d09460-5741-3d94-9563-aa1b63fd4a6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213/ff3f112b-a6d8-4720-982d-117f151ed213.crl X509v3 Authority Key Identifier: keyid:0F:FF:FD:6A:A7:35:68:97:F3:B2:07:52:27:FD:EE:04:62:D4:96:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213.cer sbgp-ipAddrBlock: critical IPv4: 208.73.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:54:db:5e:23:2e:48:db:73:9b:bf:26:ae:e1:dd:37:a0:68: 68:5c:4a:e1:aa:26:2c:dd:ca:7a:8b:74:ef:ab:90:da:57:d4: d0:6c:25:07:d0:0b:da:59:32:3b:da:a9:dd:57:83:49:a1:63: 14:ab:12:d1:e2:91:89:3a:4e:7f:8c:b4:66:d5:af:cf:54:e5: 6d:90:84:eb:e5:5b:d4:bc:22:02:c6:c7:75:71:b3:55:99:1a: 5f:33:e4:33:97:9a:de:bc:cf:01:c6:87:86:1f:31:86:26:fb: 29:9c:20:77:27:21:1a:e7:07:14:29:e5:5d:5d:80:1e:c3:5a: 62:68:77:85:45:f4:e5:f1:49:21:97:5e:59:3b:92:9a:05:a5: 7a:c8:03:32:e4:68:37:b3:6b:a5:26:96:55:6f:ce:57:3a:e4: 46:3d:95:4c:4b:b5:7d:c7:cc:49:f1:c0:36:71:f6:c5:8a:83: 6d:00:8c:80:40:de:3b:f7:05:64:13:0f:60:1a:d0:d3:55:d3: 8c:c7:c1:ba:96:1c:fc:47:f3:e3:53:4b:3c:e2:2e:76:9c:4d: 53:a9:fe:2c:1d:51:43:4b:fd:57:69:96:c5:a5:2b:f2:51:b5: 23:9b:49:73:48:b7:f7:c5:3a:92:a5:48:a5:08:59:3b:56:42: 96:02:1b:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsl/EEMAS66LJtJjgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmYzZjExMmItYTZkOC00NzIwLTk4MmQtMTE3ZjE1MWVk MjEzMB4XDTI1MDkxMDEzMDA0MVoXDTI1MTIwOTE0MDA0MVowLzEtMCsGA1UEAxMk ZDgzNjQzZjMtYTAwOS00NjU2LThjOTYtYWQ4MTVkMGEzYjBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIV6m+xOr/h06LmWVEiE+1qTQUa5hGlerqnK yH7QZ+Dueb5m3TJzwLEY9IuIXzDS+LhyNFe8yjGaqgTlw3mQrZmGYySsxrcDpkKs 8brdNx0CWX+2E+SaoxSNdZSlp99AXZTv29QnT0wl/ecuVavN7jJwYFiVknyghGAF sXHpb8htwPQU+QxDoG+OSuVwcTGNP2JCwceCSYjcg2cOOCYqKaxRKauyhZa0Vef8 YclcrFXQF/1pfNIWXdhyfohEQcO2DNW54eE2VMSIYXrSL3RPXbFtKphHj1gRGa/R D3mqjVdKaNUCt43IIxtBtW+s/+dbyLuH7wgkoQw7EbnXEKn00QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEaAachGHRGsiNbyrlcqe5vKCmhXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjNm MTEyYi1hNmQ4LTQ3MjAtOTgyZC0xMTdmMTUxZWQyMTMvODZkMDk0NjAtNTc0MS0z ZDk0LTk1NjMtYWExYjYzZmQ0YTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmYzZjExMmItYTZkOC00NzIwLTk4 MmQtMTE3ZjE1MWVkMjEzL2ZmM2YxMTJiLWE2ZDgtNDcyMC05ODJkLTExN2YxNTFl ZDIxMy5jcmwwHwYDVR0jBBgwFoAUD//9aqc1aJfzsgdSJ/3uBGLUlgswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjNmMTEyYi1hNmQ4LTQ3MjAtOTgyZC0xMTdm MTUxZWQyMTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EnQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALFU214jLkjbc5u/Jq7h3TegaGhcSuGqJizdynqLdO+rkNpX1NBsJQfQ C9pZMjvaqd1Xg0mhYxSrEtHikYk6Tn+MtGbVr89U5W2QhOvlW9S8IgLGx3Vxs1WZ Gl8z5DOXmt68zwHGh4YfMYYm+ymcIHcnIRrnBxQp5V1dgB7DWmJod4VF9OXxSSGX Xlk7kpoFpXrIAzLkaDeza6UmllVvzlc65EY9lUxLtX3HzEnxwDZx9sWKg20AjIBA 3jv3BWQTD2Aa0NNV04zHwbqWHPxH8+NTSzziLnacTVOp/iwdUUNL/VdplsWlK/JR tSObSXNIt/fFOpKlSKUIWTtWQpYCG0s= -----END CERTIFICATE-----Generated at Fri Oct 10 03:54:13 2025 by rpki-client