$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213/1ce92d36-6714-3d18-bdef-e1251dfdce8d.roa File: 1ce92d36-6714-3d18-bdef-e1251dfdce8d.roa (raw, json) Hash identifier: cCzfUE0FjKWgS41teP3wcajPfGvPtWCIgdRjhfYk3GE= Subject key identifier: DE:56:BB:FF:B4:3C:EB:CB:1F:9D:1F:43:B5:B5:4D:34:3B:44:E7:AF Certificate issuer: /CN=ff3f112b-a6d8-4720-982d-117f151ed213 Certificate serial: 010D0C9F4328584EF717794B29AE34322869FB80 Authority key identifier: 0F:FF:FD:6A:A7:35:68:97:F3:B2:07:52:27:FD:EE:04:62:D4:96:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213/1ce92d36-6714-3d18-bdef-e1251dfdce8d.roa Signing time: Wed 26 Aug 2026 13:00:12 +0000 ROA not before: Wed 26 Aug 2026 13:00:12 +0000 ROA not after: Tue 24 Nov 2026 14:00:12 +0000 asID: 401348 IP address blocks: 72.46.24.0/22 maxlen: 22 208.73.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213/ff3f112b-a6d8-4720-982d-117f151ed213.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213/ff3f112b-a6d8-4720-982d-117f151ed213.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f7:17:79:4b:29:ae:34:32:28:69:fb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff3f112b-a6d8-4720-982d-117f151ed213 Validity Not Before: Aug 26 13:00:12 2026 GMT Not After : Nov 24 14:00:12 2026 GMT Subject: CN=ac17b007-da4b-4315-9a96-c786362c3bd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:10:23:1e:a4:23:b8:b6:dd:bb:fe:65:30:84: f3:63:4f:36:c7:02:d6:aa:86:5c:9c:ad:0c:95:a4: c6:46:f7:45:37:49:f1:dd:6a:20:2e:14:6a:64:84: 1b:da:3d:a1:ca:55:f2:43:85:26:f5:fd:1f:0d:e8: 5e:24:1a:44:17:36:c3:3e:e4:24:47:09:ef:75:ad: b3:df:76:a2:d7:a7:b4:78:3a:90:fc:81:1d:8f:0f: 21:06:a7:df:a2:8c:53:8b:b8:f5:db:55:db:83:15: ad:7b:7b:d6:b7:53:bc:7d:bf:79:5d:4f:3e:7c:fc: d2:c8:a7:bd:ed:54:6f:76:76:f5:ed:8b:27:66:61: a5:57:a3:e9:08:14:85:52:bf:f4:e5:c6:05:04:7f: e0:8f:aa:dc:b5:fa:af:47:3c:bc:20:0d:c2:d6:40: 2c:55:13:a2:2c:97:ed:54:17:1e:dd:3f:4b:58:67: db:25:1c:f1:16:a4:42:ea:fa:06:8f:5b:e4:e9:94: 11:a6:ac:09:a8:e7:e5:bd:bc:cc:26:a6:e4:35:3b: fd:c3:62:6c:91:ed:97:49:0b:0f:c7:ba:16:20:47: a6:d2:04:dd:80:4f:81:ac:e8:db:16:4e:6e:cb:c7: 86:99:1b:4a:e4:87:78:ae:03:69:82:23:2b:b1:3d: 89:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:56:BB:FF:B4:3C:EB:CB:1F:9D:1F:43:B5:B5:4D:34:3B:44:E7:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213/1ce92d36-6714-3d18-bdef-e1251dfdce8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213/ff3f112b-a6d8-4720-982d-117f151ed213.crl X509v3 Authority Key Identifier: keyid:0F:FF:FD:6A:A7:35:68:97:F3:B2:07:52:27:FD:EE:04:62:D4:96:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213.cer sbgp-ipAddrBlock: critical IPv4: 72.46.24.0/22 208.73.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:ce:28:cc:7d:b5:d2:e0:82:9a:73:5c:72:a1:ef:00:7a:bc: 68:17:89:a2:b5:24:32:5a:08:1e:be:81:a6:b2:e7:2b:81:89: 88:0f:49:5f:9d:6d:db:7d:85:da:0f:5f:a8:4b:1e:31:c2:3a: 30:7d:29:e9:7e:ef:13:e0:09:d4:9a:9d:97:a9:8e:d7:5f:61: 60:06:4d:c4:04:ad:96:b0:a8:dd:6c:70:78:00:62:0f:7d:03: 97:f6:f9:bb:f0:97:cb:b6:46:cb:73:ea:45:e3:23:1b:c5:8b: ef:7e:d7:ca:a9:69:70:f3:89:13:d4:3c:2a:b6:cb:31:4b:a2: 60:0f:d1:80:96:9b:a4:e7:a6:d2:58:5f:9e:7d:ed:5d:0d:93: 91:65:b5:a1:ec:55:97:f5:0f:6a:3b:2d:93:91:45:27:cf:36: a7:43:ff:c0:61:67:73:5c:70:ac:ae:8b:b8:57:c8:4c:5c:19: 7a:c9:23:c1:45:bb:89:a6:c9:2d:fe:e5:2b:72:e5:48:ef:c9: 66:a3:a5:99:38:98:d9:9c:24:70:ef:bd:44:f0:94:23:4c:73: 0e:ec:21:24:94:78:4b:12:3a:87:e5:71:29:41:fd:fc:86:7d: 1e:43:25:b6:c6:b3:f0:72:ad:b8:f9:e6:03:f5:4a:9b:8e:c6: 47:00:e3:49 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE73F3lLKa40Mihp+4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmYzZjExMmItYTZkOC00NzIwLTk4MmQtMTE3ZjE1MWVk MjEzMB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk YWMxN2IwMDctZGE0Yi00MzE1LTlhOTYtYzc4NjM2MmMzYmQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxAjHqQjuLbdu/5lMITzY082xwLWqoZcnK0M laTGRvdFN0nx3WogLhRqZIQb2j2hylXyQ4Um9f0fDeheJBpEFzbDPuQkRwnvda2z 33ai16e0eDqQ/IEdjw8hBqffooxTi7j121XbgxWte3vWt1O8fb95XU8+fPzSyKe9 7VRvdnb17YsnZmGlV6PpCBSFUr/05cYFBH/gj6rctfqvRzy8IA3C1kAsVROiLJft VBce3T9LWGfbJRzxFqRC6voGj1vk6ZQRpqwJqOflvbzMJqbkNTv9w2Jske2XSQsP x7oWIEem0gTdgE+BrOjbFk5uy8eGmRtK5Id4rgNpgiMrsT2JdwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFN5Wu/+0POvLH50fQ7W1TTQ7ROevMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjNm MTEyYi1hNmQ4LTQ3MjAtOTgyZC0xMTdmMTUxZWQyMTMvMWNlOTJkMzYtNjcxNC0z ZDE4LWJkZWYtZTEyNTFkZmRjZThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmYzZjExMmItYTZkOC00NzIwLTk4 MmQtMTE3ZjE1MWVkMjEzL2ZmM2YxMTJiLWE2ZDgtNDcyMC05ODJkLTExN2YxNTFl ZDIxMy5jcmwwHwYDVR0jBBgwFoAUD//9aqc1aJfzsgdSJ/3uBGLUlgswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjNmMTEyYi1hNmQ4LTQ3MjAtOTgyZC0xMTdm MTUxZWQyMTMuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCSC4YAwQC 0EnQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAFjOKMx9tdLggppzXHKh7wB6vGgXiaK1JDJaCB6+gaay5yuB iYgPSV+dbdt9hdoPX6hLHjHCOjB9Kel+7xPgCdSanZepjtdfYWAGTcQErZawqN1s cHgAYg99A5f2+bvwl8u2Rstz6kXjIxvFi+9+18qpaXDziRPUPCq2yzFLomAP0YCW m6TnptJYX5597V0Nk5FltaHsVZf1D2o7LZORRSfPNqdD/8BhZ3NccKyui7hXyExc GXrJI8FFu4mmyS3+5Sty5UjvyWajpZk4mNmcJHDvvUTwlCNMcw7sISSUeEsSOofl cSlB/fyGfR5DJbbGs/Byrbj55gP1SpuOxkcA40k= -----END CERTIFICATE-----Generated at Wed Sep 23 13:29:29 2026 by rpki-client