$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213/86d09460-5741-3d94-9563-aa1b63fd4a6d.roa File: 86d09460-5741-3d94-9563-aa1b63fd4a6d.roa (raw, json) Hash identifier: wuZomtM70Ps/bh0+evr7ySXUJgTLdFDeBADKuSwcasU= Subject key identifier: 2A:71:6C:76:44:94:F5:A3:C6:47:36:7E:BC:36:3E:FB:B5:CB:1D:90 Certificate issuer: /CN=ff3f112b-a6d8-4720-982d-117f151ed213 Certificate serial: 010D0C9F4328584DC6CB0B8DC3022E79AA813500 Authority key identifier: 0F:FF:FD:6A:A7:35:68:97:F3:B2:07:52:27:FD:EE:04:62:D4:96:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213/86d09460-5741-3d94-9563-aa1b63fd4a6d.roa Signing time: Sat 09 May 2026 13:00:31 +0000 ROA not before: Sat 09 May 2026 13:00:31 +0000 ROA not after: Fri 07 Aug 2026 13:00:31 +0000 asID: 401348 IP address blocks: 208.73.208.0/24 maxlen: 24 208.73.209.0/24 maxlen: 24 208.73.210.0/24 maxlen: 24 208.73.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213/ff3f112b-a6d8-4720-982d-117f151ed213.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213/ff3f112b-a6d8-4720-982d-117f151ed213.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c6:cb:0b:8d:c3:02:2e:79:aa:81:35:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff3f112b-a6d8-4720-982d-117f151ed213 Validity Not Before: May 9 13:00:31 2026 GMT Not After : Aug 7 13:00:31 2026 GMT Subject: CN=fc609e54-7658-44f4-8187-ed64fd34e047 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a5:34:0d:ba:40:a9:e2:b5:52:97:6f:8a:b2: da:70:2d:f9:df:40:3f:bc:e1:b9:a9:19:43:e4:52: 0c:4f:6f:b2:a6:45:8f:15:28:09:2a:6d:34:fa:48: b7:b4:75:20:55:55:68:67:f2:d7:18:5a:a9:32:57: 8e:7d:ab:ed:fd:16:13:c2:3c:22:65:31:c1:c2:6f: 2d:09:bf:ce:60:6b:a4:eb:d4:b4:3f:b0:be:75:f1: b8:bf:4a:b8:7b:3a:b3:ee:2f:40:05:51:bf:3f:d8: b5:80:54:ff:f9:cf:53:b1:55:2c:96:b0:39:e1:c1: fd:0e:d7:34:03:6b:49:b9:a4:23:27:19:f6:58:7b: c2:c5:ed:3f:5c:15:b8:7e:ef:a6:f2:f1:59:45:d6: 68:17:56:ec:64:b1:22:d2:2e:05:f9:bc:8c:59:d6: b9:de:92:64:86:3f:bb:37:5f:6f:de:cc:35:05:c0: 12:58:c7:cf:ab:ac:c0:fa:57:0a:e7:47:25:b8:11: 5d:9e:c1:e1:2c:98:e3:05:c4:84:79:d2:f3:d5:9b: 13:18:31:fe:8e:a5:dc:a0:19:14:bd:95:3f:3b:b0: 40:fe:9f:fe:af:6b:5e:dc:54:d3:0e:23:65:84:1e: 6c:3b:49:f9:50:d9:78:76:c2:bc:ce:00:bf:19:a7: 37:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:71:6C:76:44:94:F5:A3:C6:47:36:7E:BC:36:3E:FB:B5:CB:1D:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213/86d09460-5741-3d94-9563-aa1b63fd4a6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213/ff3f112b-a6d8-4720-982d-117f151ed213.crl X509v3 Authority Key Identifier: keyid:0F:FF:FD:6A:A7:35:68:97:F3:B2:07:52:27:FD:EE:04:62:D4:96:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213.cer sbgp-ipAddrBlock: critical IPv4: 208.73.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:e9:6e:9f:30:ee:56:8c:5d:96:fe:30:60:d0:25:b3:12:76: 47:2c:e1:5e:cf:36:13:be:d7:45:43:b1:6e:44:4a:fa:2a:1e: 76:f9:29:19:30:b0:ca:b9:df:5f:04:1f:b7:89:57:f6:55:9f: 49:f1:f8:ed:53:d9:b3:1b:b4:9a:62:34:06:eb:b2:40:a1:fa: 2d:cd:4c:2d:44:24:a7:e2:b5:ae:46:19:ae:2b:92:ab:12:7e: 82:37:fc:be:ea:21:5e:b5:6d:1c:96:f3:a0:0e:dc:70:d6:d5: 61:44:72:af:19:d5:9c:ce:d8:71:ae:42:4c:bd:0d:42:86:8c: 04:1c:66:35:98:f9:08:5c:83:85:e0:e1:92:71:9a:fb:19:c1: c7:db:56:73:13:88:bc:3f:d2:23:7d:b8:d1:06:c6:3c:fc:9f: b0:e6:0c:3e:9b:9f:f2:30:7e:84:67:d9:6b:7d:00:c9:f9:2e: 3d:9d:c8:17:3c:ea:73:7f:c5:7b:d0:06:45:cc:78:41:27:8b: be:4b:dc:b4:2b:3d:e5:b9:3f:cd:f5:a8:c1:2a:64:c5:f0:30: 19:49:db:0b:9d:2b:5e:b2:17:37:5e:4e:e4:e7:d2:5f:74:f8: 50:a6:a4:25:d6:ff:f9:2c:89:ff:81:b5:13:6c:4a:91:46:9a: 27:f1:a1:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3GywuNwwIueaqBNQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmYzZjExMmItYTZkOC00NzIwLTk4MmQtMTE3ZjE1MWVk MjEzMB4XDTI2MDUwOTEzMDAzMVoXDTI2MDgwNzEzMDAzMVowLzEtMCsGA1UEAxMk ZmM2MDllNTQtNzY1OC00NGY0LTgxODctZWQ2NGZkMzRlMDQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKU0DbpAqeK1UpdvirLacC3530A/vOG5qRlD 5FIMT2+ypkWPFSgJKm00+ki3tHUgVVVoZ/LXGFqpMleOfavt/RYTwjwiZTHBwm8t Cb/OYGuk69S0P7C+dfG4v0q4ezqz7i9ABVG/P9i1gFT/+c9TsVUslrA54cH9Dtc0 A2tJuaQjJxn2WHvCxe0/XBW4fu+m8vFZRdZoF1bsZLEi0i4F+byMWda53pJkhj+7 N19v3sw1BcASWMfPq6zA+lcK50cluBFdnsHhLJjjBcSEedLz1ZsTGDH+jqXcoBkU vZU/O7BA/p/+r2te3FTTDiNlhB5sO0n5UNl4dsK8zgC/Gac3+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCpxbHZElPWjxkc2frw2Pvu1yx2QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjNm MTEyYi1hNmQ4LTQ3MjAtOTgyZC0xMTdmMTUxZWQyMTMvODZkMDk0NjAtNTc0MS0z ZDk0LTk1NjMtYWExYjYzZmQ0YTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmYzZjExMmItYTZkOC00NzIwLTk4 MmQtMTE3ZjE1MWVkMjEzL2ZmM2YxMTJiLWE2ZDgtNDcyMC05ODJkLTExN2YxNTFl ZDIxMy5jcmwwHwYDVR0jBBgwFoAUD//9aqc1aJfzsgdSJ/3uBGLUlgswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjNmMTEyYi1hNmQ4LTQ3MjAtOTgyZC0xMTdm MTUxZWQyMTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EnQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD/pbp8w7laMXZb+MGDQJbMSdkcs4V7PNhO+10VDsW5ESvoqHnb5KRkw sMq5318EH7eJV/ZVn0nx+O1T2bMbtJpiNAbrskCh+i3NTC1EJKfita5GGa4rkqsS foI3/L7qIV61bRyW86AO3HDW1WFEcq8Z1ZzO2HGuQky9DUKGjAQcZjWY+Qhcg4Xg 4ZJxmvsZwcfbVnMTiLw/0iN9uNEGxjz8n7DmDD6bn/IwfoRn2Wt9AMn5Lj2dyBc8 6nN/xXvQBkXMeEEni75L3LQrPeW5P831qMEqZMXwMBlJ2wudK16yFzdeTuTn0l90 +FCmpCXW//ksif+BtRNsSpFGmifxoaw= -----END CERTIFICATE-----Generated at Wed May 13 11:31:43 2026 by rpki-client