$ rpki-client -vvvf rpki-rps.arin.net/repository/78309c5aaa3e4168af2c9f7c2c042641/0/3230382e39312e3138382e302f32322d3234203d3e20333935383431.roa File: 3230382e39312e3138382e302f32322d3234203d3e20333935383431.roa (raw, json) Hash identifier: DL9DJmMUNRpdf9udbwzeXLG+v102HVq5qGJ0b/4rE9s= Subject key identifier: 28:EB:90:B6:6A:3B:F2:29:1E:89:23:E8:89:40:B7:F3:FC:8C:E6:DC Certificate issuer: /CN=2ddd7a8d05518a86d314330212b52ef7f1fdfab09b0f4824dd Certificate serial: 0B4EB14800FCC9F2C48DDF77956B4D6FD82F403F Authority key identifier: 27:67:9F:C2:3A:06:E4:5F:AF:BF:DC:18:B2:3B:97:98:91:1C:19:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/48f6121a-943c-4c0d-8b87-3fecbe71067d/2ddd7a8d05518a86d314330212b52ef7f1fdfab09b0f4824dd.cer Subject info access: rsync://rpki-rps.arin.net/repository/78309c5aaa3e4168af2c9f7c2c042641/0/3230382e39312e3138382e302f32322d3234203d3e20333935383431.roa Signing time: Wed 26 Aug 2026 07:11:10 +0000 ROA not before: Wed 26 Aug 2026 07:06:10 +0000 ROA not after: Wed 25 Aug 2027 07:11:10 +0000 asID: 395841 IP address blocks: 208.91.188.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/78309c5aaa3e4168af2c9f7c2c042641/0/27679FC23A06E45FAFBFDC18B23B9798911C19D7.crl rsync://rpki-rps.arin.net/repository/78309c5aaa3e4168af2c9f7c2c042641/0/27679FC23A06E45FAFBFDC18B23B9798911C19D7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/48f6121a-943c-4c0d-8b87-3fecbe71067d/2ddd7a8d05518a86d314330212b52ef7f1fdfab09b0f4824dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/48f6121a-943c-4c0d-8b87-3fecbe71067d/48f6121a-943c-4c0d-8b87-3fecbe71067d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/48f6121a-943c-4c0d-8b87-3fecbe71067d/48f6121a-943c-4c0d-8b87-3fecbe71067d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/48f6121a-943c-4c0d-8b87-3fecbe71067d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Sep 2026 08:33:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:4e:b1:48:00:fc:c9:f2:c4:8d:df:77:95:6b:4d:6f:d8:2f:40:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ddd7a8d05518a86d314330212b52ef7f1fdfab09b0f4824dd Validity Not Before: Aug 26 07:06:10 2026 GMT Not After : Aug 25 07:11:10 2027 GMT Subject: CN=28EB90B66A3BF2291E8923E88940B7F3FC8CE6DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:78:e2:e6:96:3b:7c:7b:6e:27:36:81:1d:66: 94:2c:9b:7e:e1:63:2e:61:7f:84:b8:39:42:70:3d: f8:8e:1a:48:a2:4c:79:4c:e3:bc:cb:75:11:82:d5: d4:af:4b:00:cc:4a:7a:c5:29:ec:3a:b7:3b:e1:24: e8:21:d3:c7:d0:88:10:a0:8a:04:25:5c:e5:f0:25: 1c:30:ae:bf:03:30:10:cc:63:9c:25:15:ab:62:a2: 82:7c:84:1e:81:7f:ee:75:ae:bd:a7:b7:a3:19:ac: 8d:55:bf:55:18:58:b0:0f:3f:cd:14:03:22:2c:6a: e5:f1:f9:8e:1e:77:00:f3:0a:a6:d0:6c:68:b1:ed: 5c:81:67:2b:fc:9f:ff:c0:27:c0:e2:27:85:74:d6: e2:ed:44:7e:91:3e:c6:29:bc:56:27:58:6e:10:24: ab:0a:50:75:a0:e6:47:bc:c2:07:13:54:04:ef:95: bc:7e:e4:fe:b6:fc:41:fb:75:08:3b:7f:52:ea:9f: 16:20:7c:96:c3:64:2b:d0:66:77:ec:15:23:73:52: 66:b0:1d:ab:81:46:87:66:9c:1e:55:ad:44:67:82: 8d:bf:ea:db:1b:d8:54:08:62:4b:9b:77:1e:21:e2: f2:07:98:bc:e1:3c:a6:b6:8e:50:5c:97:64:00:e7: 71:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:EB:90:B6:6A:3B:F2:29:1E:89:23:E8:89:40:B7:F3:FC:8C:E6:DC X509v3 Authority Key Identifier: keyid:27:67:9F:C2:3A:06:E4:5F:AF:BF:DC:18:B2:3B:97:98:91:1C:19:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/78309c5aaa3e4168af2c9f7c2c042641/0/27679FC23A06E45FAFBFDC18B23B9798911C19D7.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/48f6121a-943c-4c0d-8b87-3fecbe71067d/2ddd7a8d05518a86d314330212b52ef7f1fdfab09b0f4824dd.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/78309c5aaa3e4168af2c9f7c2c042641/0/3230382e39312e3138382e302f32322d3234203d3e20333935383431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 208.91.188.0/22 Signature Algorithm: sha256WithRSAEncryption 57:15:1d:7c:4a:f5:33:16:b1:2d:46:3e:77:34:58:32:25:f1: fa:d5:55:e8:3a:46:a5:aa:fc:1e:3b:9b:62:2b:a3:d2:2b:9e: f1:27:3f:cc:54:83:7a:77:2e:d3:ae:b6:cd:18:a1:f3:19:66: 4f:28:d9:a8:40:a9:49:a9:7e:a1:3b:bf:e5:f0:b3:21:06:ea: b5:5e:70:dc:8c:72:be:3a:fb:50:90:fc:b3:70:82:01:a5:d0: e5:9e:bd:7e:03:36:bd:dc:df:d1:88:da:f2:0c:51:1c:d3:7b: e0:c2:10:02:16:ee:7a:65:44:52:58:c8:24:ae:2e:bb:8f:f4: 8d:2c:18:f6:37:27:33:7b:0b:1e:2f:96:dc:7a:5c:d7:75:4f: bf:42:1a:77:57:0f:20:a3:dd:50:37:2c:af:0a:c5:a9:45:65: 64:8c:36:37:68:4b:9f:6f:a2:56:ea:7b:db:fd:cc:45:79:1a: e3:42:59:42:68:ed:ff:d2:7a:1a:28:19:5d:01:78:2b:ba:a2: a6:b7:00:dd:82:ec:3a:5d:91:d3:f5:04:a7:e7:e7:7c:12:97: a9:c2:0b:4f:b4:41:8c:bc:84:b6:e9:ec:08:af:74:fd:c5:84: 28:2b:5a:12:71:4a:44:5f:31:ba:f6:2a:7b:69:fb:4a:c4:5a: 48:7b:86:8c -----BEGIN CERTIFICATE----- MIIFtDCCBJygAwIBAgIUC06xSAD8yfLEjd93lWtNb9gvQD8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMmRkZDdhOGQwNTUxOGE4NmQzMTQzMzAyMTJiNTJlZjdm MWZkZmFiMDliMGY0ODI0ZGQwHhcNMjYwODI2MDcwNjEwWhcNMjcwODI1MDcxMTEw WjAzMTEwLwYDVQQDEygyOEVCOTBCNjZBM0JGMjI5MUU4OTIzRTg4OTQwQjdGM0ZD OENFNkRDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3ji5pY7fHtu JzaBHWaULJt+4WMuYX+EuDlCcD34jhpIokx5TOO8y3URgtXUr0sAzEp6xSnsOrc7 4SToIdPH0IgQoIoEJVzl8CUcMK6/AzAQzGOcJRWrYqKCfIQegX/uda69p7ejGayN Vb9VGFiwDz/NFAMiLGrl8fmOHncA8wqm0Gxose1cgWcr/J//wCfA4ieFdNbi7UR+ kT7GKbxWJ1huECSrClB1oOZHvMIHE1QE75W8fuT+tvxB+3UIO39S6p8WIHyWw2Qr 0GZ37BUjc1JmsB2rgUaHZpweVa1EZ4KNv+rbG9hUCGJLm3ceIeLyB5i84Tymto5Q XJdkAOdxWQIDAQABo4ICtDCCArAwHQYDVR0OBBYEFCjrkLZqO/IpHokj6IlAt/P8 jObcMB8GA1UdIwQYMBaAFCdnn8I6BuRfr7/cGLI7l5iRHBnXMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5Lzc4MzA5YzVhYWEzZTQxNjhhZjJjOWY3YzJjMDQyNjQxLzAv Mjc2NzlGQzIzQTA2RTQ1RkFGQkZEQzE4QjIzQjk3OTg5MTFDMTlENy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNk OWMwYjYyLzQ4ZjYxMjFhLTk0M2MtNGMwZC04Yjg3LTNmZWNiZTcxMDY3ZC8yZGRk N2E4ZDA1NTE4YTg2ZDMxNDMzMDIxMmI1MmVmN2YxZmRmYWIwOWIwZjQ4MjRkZC5j ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS83ODMwOWM1YWFhM2U0MTY4YWYyYzlm N2MyYzA0MjY0MS8wLzMyMzAzODJlMzkzMTJlMzEzODM4MmUzMDJmMzIzMjJkMzIz NDIwM2QzZTIwMzMzOTM1MzgzNDMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0Fu8MA0GCSqGSIb3DQEB CwUAA4IBAQBXFR18SvUzFrEtRj53NFgyJfH61VXoOkalqvweO5tiK6PSK57xJz/M VIN6dy7TrrbNGKHzGWZPKNmoQKlJqX6hO7/l8LMhBuq1XnDcjHK+OvtQkPyzcIIB pdDlnr1+Aza93N/RiNryDFEc03vgwhACFu56ZURSWMgkri67j/SNLBj2Nyczewse L5bcelzXdU+/Qhp3Vw8go91QNyyvCsWpRWVkjDY3aEufb6JW6nvb/cxFeRrjQllC aO3/0noaKBldAXgruqKmtwDdguw6XZHT9QSn5+d8EpepwgtPtEGMvIS26ewIr3T9 xYQoK1oScUpEXzG69ip7aftKxFpIe4aM -----END CERTIFICATE-----Generated at Fri Sep 4 23:43:58 2026 by rpki-client