$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213/86d09460-5741-3d94-9563-aa1b63fd4a6d.roa File: 86d09460-5741-3d94-9563-aa1b63fd4a6d.roa (raw, json) Hash identifier: Lqr67PAl2DfohXbSMIxyeQSCSfdQhWTittw0a7ZhGXY= Subject key identifier: 9E:60:66:70:A3:CE:2D:7A:9C:8C:6F:89:8C:47:EC:B5:21:F4:B3:75 Certificate issuer: /CN=ff3f112b-a6d8-4720-982d-117f151ed213 Certificate serial: 010D0C9F4328584A454043740F87101342614A00 Authority key identifier: 0F:FF:FD:6A:A7:35:68:97:F3:B2:07:52:27:FD:EE:04:62:D4:96:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213/86d09460-5741-3d94-9563-aa1b63fd4a6d.roa Signing time: Sun 22 Jun 2025 01:00:50 +0000 ROA not before: Sun 22 Jun 2025 01:00:50 +0000 ROA not after: Sat 20 Sep 2025 01:00:50 +0000 asID: 401348 IP address blocks: 208.73.208.0/24 maxlen: 24 208.73.209.0/24 maxlen: 24 208.73.210.0/24 maxlen: 24 208.73.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213/ff3f112b-a6d8-4720-982d-117f151ed213.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213/ff3f112b-a6d8-4720-982d-117f151ed213.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:45:40:43:74:0f:87:10:13:42:61:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff3f112b-a6d8-4720-982d-117f151ed213 Validity Not Before: Jun 22 01:00:50 2025 GMT Not After : Sep 20 01:00:50 2025 GMT Subject: CN=5451c3b7-a8b0-4594-a19b-e01f585b1246 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:96:c3:88:d7:be:25:5f:ec:7a:dd:fd:5a:e1: 6a:b2:50:1c:9f:20:39:cb:4a:a2:6c:27:af:63:f4: 40:8b:17:d9:4f:7d:06:2a:a1:71:df:12:92:08:ee: a4:c2:97:47:a7:54:cc:b5:9c:27:c4:52:3b:c4:e1: 0d:76:a4:e0:45:31:d5:03:5f:98:2c:84:af:31:3a: e5:71:40:4a:a4:86:16:49:23:cf:31:36:e2:f4:0d: 76:c1:63:d6:f2:cc:78:ef:cc:46:be:f5:24:e3:27: bc:40:cb:c2:ce:c8:8e:92:82:15:60:d2:ec:c9:c5: 4c:11:62:a1:be:17:9a:54:f6:68:87:99:10:e1:09: 5a:1f:9f:76:42:bb:94:0c:5c:51:8f:fe:b0:42:1f: 3f:6d:c0:b1:6f:4a:08:e4:c5:6e:8b:c3:11:74:4b: 27:21:8b:64:76:83:cd:c1:7d:4b:e6:e4:24:39:45: 51:14:2c:12:62:1f:08:fb:cb:5b:1a:b4:e0:0c:f8: 29:78:eb:75:ee:35:2e:53:14:64:60:56:03:dc:da: 65:cc:84:eb:3b:8c:0d:3a:ca:f2:37:72:92:88:2b: 26:07:0f:25:e6:f8:42:53:a9:15:b8:0c:02:b5:ae: 55:a5:b6:01:7b:88:aa:d8:5e:e3:05:17:b2:64:0d: 65:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:60:66:70:A3:CE:2D:7A:9C:8C:6F:89:8C:47:EC:B5:21:F4:B3:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213/86d09460-5741-3d94-9563-aa1b63fd4a6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213/ff3f112b-a6d8-4720-982d-117f151ed213.crl X509v3 Authority Key Identifier: keyid:0F:FF:FD:6A:A7:35:68:97:F3:B2:07:52:27:FD:EE:04:62:D4:96:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213.cer sbgp-ipAddrBlock: critical IPv4: 208.73.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:71:90:77:7d:c1:20:2c:ce:fc:d0:66:ba:cb:2c:b4:6f:02: 06:64:a1:ca:25:d2:11:c0:69:e5:54:11:37:87:e3:e2:36:85: d5:2b:2f:d0:c5:d3:a5:85:84:f8:f5:bd:eb:5a:b7:46:f7:50: 86:f7:4c:a3:5e:db:8b:6a:ac:8c:b1:29:fc:b8:90:6c:eb:90: 0e:ad:d4:36:4c:ce:42:53:49:3e:78:76:f6:8d:30:2a:71:9e: 1d:0a:e7:20:75:71:68:d8:cc:7c:4c:6e:8f:00:22:76:46:f3: 0d:56:99:0b:4a:45:0a:28:15:6c:9b:dd:ea:42:f0:46:c3:6c: f4:5b:cf:d9:46:1e:89:25:cc:3f:c0:e6:5e:72:75:c5:c8:d4: 7e:40:b8:c2:4c:11:fa:98:ce:55:d2:4f:df:85:9c:27:15:62: ac:ef:05:88:3f:58:4b:23:d0:48:77:58:69:fa:3b:ef:cb:fc: f1:b2:c3:61:7d:6a:49:50:b1:06:9f:8b:64:28:3c:8d:cf:7b: 69:90:46:3f:bb:6f:11:ba:32:80:71:05:98:41:cc:90:2b:04: 2b:de:c1:e0:39:ed:b8:b6:b0:3b:ef:38:dc:b5:7b:69:04:12: c6:36:61:44:56:4e:6a:9d:0e:c0:8c:13:5a:2b:7f:65:3c:9f: 58:6b:11:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpFQEN0D4cQE0JhSgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmYzZjExMmItYTZkOC00NzIwLTk4MmQtMTE3ZjE1MWVk MjEzMB4XDTI1MDYyMjAxMDA1MFoXDTI1MDkyMDAxMDA1MFowLzEtMCsGA1UEAxMk NTQ1MWMzYjctYThiMC00NTk0LWExOWItZTAxZjU4NWIxMjQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZbDiNe+JV/set39WuFqslAcnyA5y0qibCev Y/RAixfZT30GKqFx3xKSCO6kwpdHp1TMtZwnxFI7xOENdqTgRTHVA1+YLISvMTrl cUBKpIYWSSPPMTbi9A12wWPW8sx478xGvvUk4ye8QMvCzsiOkoIVYNLsycVMEWKh vheaVPZoh5kQ4QlaH592QruUDFxRj/6wQh8/bcCxb0oI5MVui8MRdEsnIYtkdoPN wX1L5uQkOUVRFCwSYh8I+8tbGrTgDPgpeOt17jUuUxRkYFYD3NplzITrO4wNOsry N3KSiCsmBw8l5vhCU6kVuAwCta5VpbYBe4iq2F7jBReyZA1lAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ5gZnCjzi16nIxviYxH7LUh9LN1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjNm MTEyYi1hNmQ4LTQ3MjAtOTgyZC0xMTdmMTUxZWQyMTMvODZkMDk0NjAtNTc0MS0z ZDk0LTk1NjMtYWExYjYzZmQ0YTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmYzZjExMmItYTZkOC00NzIwLTk4 MmQtMTE3ZjE1MWVkMjEzL2ZmM2YxMTJiLWE2ZDgtNDcyMC05ODJkLTExN2YxNTFl ZDIxMy5jcmwwHwYDVR0jBBgwFoAUD//9aqc1aJfzsgdSJ/3uBGLUlgswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjNmMTEyYi1hNmQ4LTQ3MjAtOTgyZC0xMTdm MTUxZWQyMTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EnQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAdxkHd9wSAszvzQZrrLLLRvAgZkocol0hHAaeVUETeH4+I2hdUrL9DF 06WFhPj1vetat0b3UIb3TKNe24tqrIyxKfy4kGzrkA6t1DZMzkJTST54dvaNMCpx nh0K5yB1cWjYzHxMbo8AInZG8w1WmQtKRQooFWyb3epC8EbDbPRbz9lGHoklzD/A 5l5ydcXI1H5AuMJMEfqYzlXST9+FnCcVYqzvBYg/WEsj0Eh3WGn6O+/L/PGyw2F9 aklQsQafi2QoPI3Pe2mQRj+7bxG6MoBxBZhBzJArBCveweA57bi2sDvvONy1e2kE EsY2YURWTmqdDsCME1orf2U8n1hrEcA= -----END CERTIFICATE-----Generated at Sun Jul 27 17:46:51 2025 by rpki-client