$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213/86d09460-5741-3d94-9563-aa1b63fd4a6d.roa File: 86d09460-5741-3d94-9563-aa1b63fd4a6d.roa (raw, json) Hash identifier: BNqkczCrKAaSk5XNQG3vexQl/+4I5UvQLyEX6LZ5Tqs= Subject key identifier: 43:A0:56:2D:87:FA:EB:B1:3C:BF:B2:61:14:64:4D:4E:EF:64:F2:59 Certificate issuer: /CN=ff3f112b-a6d8-4720-982d-117f151ed213 Certificate serial: 010D0C9F4328584F4976FB200812AC892D5FF980 Authority key identifier: 0F:FF:FD:6A:A7:35:68:97:F3:B2:07:52:27:FD:EE:04:62:D4:96:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213/86d09460-5741-3d94-9563-aa1b63fd4a6d.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 401348 IP address blocks: 208.73.208.0/24 maxlen: 24 208.73.209.0/24 maxlen: 24 208.73.210.0/24 maxlen: 24 208.73.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213/ff3f112b-a6d8-4720-982d-117f151ed213.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213/ff3f112b-a6d8-4720-982d-117f151ed213.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:fb:20:08:12:ac:89:2d:5f:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff3f112b-a6d8-4720-982d-117f151ed213 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a46c658d-d76e-4114-854a-6d04b55a8614 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ce:16:b8:5d:a8:e4:5c:68:d7:76:1d:d9:4e: 42:da:91:46:2e:d1:bc:82:9c:57:25:0a:64:85:5c: ca:23:eb:76:f8:eb:50:dd:31:20:51:19:75:cf:59: 45:2a:35:84:20:f9:94:53:a8:82:89:47:69:45:15: 57:d1:19:5d:b1:dc:65:28:37:ea:2a:30:75:62:e4: a2:15:dd:ef:f5:0e:c8:8e:1c:de:7e:97:33:e5:3c: 1c:c6:d4:db:62:d9:1a:d2:e8:30:42:9a:47:31:f7: e4:61:37:2c:31:a6:02:2a:d9:77:00:c9:e1:c0:1b: 66:e6:99:6d:ac:ee:d1:3b:c0:a5:6d:bf:e6:95:83: fd:4f:36:f6:60:db:8c:4f:dd:42:db:62:f6:06:24: 31:d7:4b:7c:c9:a4:60:43:d9:6b:e7:b4:7c:ec:2d: dc:e5:3e:e2:1e:98:1a:bb:c1:8a:08:c8:8e:0f:1a: 09:b1:39:5b:6b:88:1e:d4:ba:3b:34:62:e2:92:38: de:e0:a7:61:84:72:72:54:45:75:25:79:33:02:ca: eb:2f:c0:6f:56:3e:ca:75:08:0b:e9:df:ed:93:39: b0:4a:c0:c3:23:8f:3c:dd:86:a3:de:41:bf:05:2c: 2d:52:c1:40:08:cf:bb:ae:4d:8d:67:d7:4d:f4:cc: 1f:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:A0:56:2D:87:FA:EB:B1:3C:BF:B2:61:14:64:4D:4E:EF:64:F2:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213/86d09460-5741-3d94-9563-aa1b63fd4a6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213/ff3f112b-a6d8-4720-982d-117f151ed213.crl X509v3 Authority Key Identifier: keyid:0F:FF:FD:6A:A7:35:68:97:F3:B2:07:52:27:FD:EE:04:62:D4:96:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213.cer sbgp-ipAddrBlock: critical IPv4: 208.73.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:c5:70:3b:e7:7a:b9:2a:be:b7:87:29:e5:7d:e5:4c:65:d0: cf:b2:f0:85:0c:e6:28:77:d9:17:37:4a:6c:13:72:d4:16:bd: 47:e0:85:80:15:a0:82:8f:58:16:fd:a2:f6:f8:91:ad:d4:a0: 48:2e:f9:5c:dc:6d:cf:b6:bd:de:bf:6a:78:20:52:c0:2b:a3: 27:2f:f6:15:96:74:aa:84:7e:52:79:bd:3b:c7:a5:ac:7f:ed: ca:c1:3c:c5:48:82:4a:57:81:ce:9e:13:fa:31:40:cf:e7:28: 83:4b:b5:ce:90:ac:55:55:b1:48:8b:37:28:fa:00:62:b3:6f: 14:50:bc:72:73:af:2a:c0:49:84:eb:1c:20:4a:a9:89:47:02: 28:4d:a0:b7:9a:b3:df:0d:e2:39:71:9b:af:65:6d:97:b3:21: 05:fa:9e:ea:61:9c:79:cb:6c:5a:14:21:d3:8f:ab:b3:63:79: 1b:04:88:b6:a6:a6:c2:94:20:e4:c4:1b:4d:3d:8c:4d:38:ad: d5:e5:3a:7c:4e:f8:a3:d9:69:1f:e1:62:2a:26:b0:ed:83:c8: 12:d3:09:83:ef:34:89:df:82:99:3f:4e:de:1d:8c:30:1d:f7: 5c:d2:b5:bf:59:e9:1c:af:72:1d:22:a8:39:6e:3d:42:ad:0c: 23:76:03:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdvsgCBKsiS1f+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmYzZjExMmItYTZkOC00NzIwLTk4MmQtMTE3ZjE1MWVk MjEzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YTQ2YzY1OGQtZDc2ZS00MTE0LTg1NGEtNmQwNGI1NWE4NjE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjs4WuF2o5Fxo13Yd2U5C2pFGLtG8gpxXJQpk hVzKI+t2+OtQ3TEgURl1z1lFKjWEIPmUU6iCiUdpRRVX0RldsdxlKDfqKjB1YuSi Fd3v9Q7Ijhzefpcz5TwcxtTbYtka0ugwQppHMffkYTcsMaYCKtl3AMnhwBtm5plt rO7RO8Clbb/mlYP9Tzb2YNuMT91C22L2BiQx10t8yaRgQ9lr57R87C3c5T7iHpga u8GKCMiODxoJsTlba4ge1Lo7NGLikjje4KdhhHJyVEV1JXkzAsrrL8BvVj7KdQgL 6d/tkzmwSsDDI4883Yaj3kG/BSwtUsFACM+7rk2NZ9dN9MwfpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEOgVi2H+uuxPL+yYRRkTU7vZPJZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjNm MTEyYi1hNmQ4LTQ3MjAtOTgyZC0xMTdmMTUxZWQyMTMvODZkMDk0NjAtNTc0MS0z ZDk0LTk1NjMtYWExYjYzZmQ0YTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmYzZjExMmItYTZkOC00NzIwLTk4 MmQtMTE3ZjE1MWVkMjEzL2ZmM2YxMTJiLWE2ZDgtNDcyMC05ODJkLTExN2YxNTFl ZDIxMy5jcmwwHwYDVR0jBBgwFoAUD//9aqc1aJfzsgdSJ/3uBGLUlgswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjNmMTEyYi1hNmQ4LTQ3MjAtOTgyZC0xMTdm MTUxZWQyMTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EnQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACLFcDvnerkqvreHKeV95Uxl0M+y8IUM5ih32Rc3SmwTctQWvUfghYAV oIKPWBb9ovb4ka3UoEgu+Vzcbc+2vd6/anggUsAroycv9hWWdKqEflJ5vTvHpax/ 7crBPMVIgkpXgc6eE/oxQM/nKINLtc6QrFVVsUiLNyj6AGKzbxRQvHJzryrASYTr HCBKqYlHAihNoLeas98N4jlxm69lbZezIQX6nuphnHnLbFoUIdOPq7NjeRsEiLam psKUIOTEG009jE04rdXlOnxO+KPZaR/hYiomsO2DyBLTCYPvNInfgpk/Tt4djDAd 91zStb9Z6Ryvch0iqDluPUKtDCN2A2k= -----END CERTIFICATE-----Generated at Sun Sep 27 06:04:45 2026 by rpki-client