$ rpki-client -vvf rpki-rps.arin.net/repository/78309c5aaa3e4168af2c9f7c2c042641/0/3230382e39312e3138382e302f32342d3234203d3e20323633373032.roa File: 3230382e39312e3138382e302f32342d3234203d3e20323633373032.roa (raw, json) Hash identifier: PDRbwH/lMw9Q/ty+j3Zp8b0TLcmKQIizREl1Tjnfv5U= Subject key identifier: B4:FB:1D:A0:D5:4D:FA:8F:6C:CD:F3:35:F7:50:63:F7:A8:A9:B9:7B Certificate issuer: /CN=2ddd7a8d05518a86d314330212b52ef7f1fdfab09b0f4824dd Certificate serial: 2B29FA8157CA248DD88D73F3405C82B6DF2F40D1 Authority key identifier: 27:67:9F:C2:3A:06:E4:5F:AF:BF:DC:18:B2:3B:97:98:91:1C:19:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/48f6121a-943c-4c0d-8b87-3fecbe71067d/2ddd7a8d05518a86d314330212b52ef7f1fdfab09b0f4824dd.cer Subject info access: rsync://rpki-rps.arin.net/repository/78309c5aaa3e4168af2c9f7c2c042641/0/3230382e39312e3138382e302f32342d3234203d3e20323633373032.roa Signing time: Tue 23 Jun 2026 12:14:24 +0000 ROA not before: Tue 23 Jun 2026 12:09:24 +0000 ROA not after: Tue 22 Jun 2027 12:14:24 +0000 asID: 263702 IP address blocks: 208.91.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/78309c5aaa3e4168af2c9f7c2c042641/0/27679FC23A06E45FAFBFDC18B23B9798911C19D7.crl rsync://rpki-rps.arin.net/repository/78309c5aaa3e4168af2c9f7c2c042641/0/27679FC23A06E45FAFBFDC18B23B9798911C19D7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/48f6121a-943c-4c0d-8b87-3fecbe71067d/2ddd7a8d05518a86d314330212b52ef7f1fdfab09b0f4824dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/48f6121a-943c-4c0d-8b87-3fecbe71067d/48f6121a-943c-4c0d-8b87-3fecbe71067d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/48f6121a-943c-4c0d-8b87-3fecbe71067d/48f6121a-943c-4c0d-8b87-3fecbe71067d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/48f6121a-943c-4c0d-8b87-3fecbe71067d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Jul 2026 20:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:29:fa:81:57:ca:24:8d:d8:8d:73:f3:40:5c:82:b6:df:2f:40:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ddd7a8d05518a86d314330212b52ef7f1fdfab09b0f4824dd Validity Not Before: Jun 23 12:09:24 2026 GMT Not After : Jun 22 12:14:24 2027 GMT Subject: CN=B4FB1DA0D54DFA8F6CCDF335F75063F7A8A9B97B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:18:b3:61:97:e9:9f:30:0b:74:5a:95:93:05: 1e:65:b7:bc:92:e9:62:6e:cc:c2:a5:5c:2a:53:3c: f5:51:04:b1:de:2c:0b:65:19:bc:00:3f:82:6d:bd: b2:2b:7c:0c:e9:1f:c4:16:b0:7b:5d:54:c4:7c:6c: fc:74:8f:7d:f5:dd:aa:7e:c6:fe:ad:46:64:0c:74: 07:57:28:4d:28:42:36:13:8b:8c:6a:6f:4a:85:ea: 31:ff:22:d4:d6:db:15:c3:ca:9a:ae:0e:28:ce:cf: 25:45:2d:b9:fc:4a:9c:08:66:7f:1b:26:76:85:14: c7:d3:06:fc:d9:ee:e7:fb:5b:e1:c8:26:10:2f:e4: 75:29:c0:fd:0f:7f:80:d4:d8:9b:ce:90:82:cb:a6: a7:62:ca:0c:1b:32:8e:27:6d:0c:4a:fe:25:40:79: b2:2b:fc:66:c2:db:59:0b:fc:83:bf:33:ac:d5:99: 6e:84:c6:92:85:7f:84:23:b6:cc:84:e1:75:8d:f9: f0:39:f9:45:8b:6b:89:d1:a2:20:ed:61:3b:a3:15: 43:6c:2d:2b:97:e1:67:32:ba:70:1f:46:57:1e:8d: c2:03:5a:f1:f8:1c:27:86:3e:ed:56:4b:3c:80:de: 9e:23:ce:56:88:1d:5c:65:5c:7a:8d:8e:22:ce:13: ba:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:FB:1D:A0:D5:4D:FA:8F:6C:CD:F3:35:F7:50:63:F7:A8:A9:B9:7B X509v3 Authority Key Identifier: keyid:27:67:9F:C2:3A:06:E4:5F:AF:BF:DC:18:B2:3B:97:98:91:1C:19:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/78309c5aaa3e4168af2c9f7c2c042641/0/27679FC23A06E45FAFBFDC18B23B9798911C19D7.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/48f6121a-943c-4c0d-8b87-3fecbe71067d/2ddd7a8d05518a86d314330212b52ef7f1fdfab09b0f4824dd.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/78309c5aaa3e4168af2c9f7c2c042641/0/3230382e39312e3138382e302f32342d3234203d3e20323633373032.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 208.91.188.0/24 Signature Algorithm: sha256WithRSAEncryption 10:84:93:61:aa:18:04:8e:a0:15:07:7c:dc:cf:d0:46:2d:66: 7d:08:87:66:38:00:7a:33:57:9a:3f:24:5c:ab:95:47:b0:4b: 41:1f:92:64:62:d1:a0:da:04:6e:4b:27:c3:2e:1f:e5:a1:75: 94:ae:dc:38:c8:b3:e8:8a:a0:06:44:59:b2:5a:fa:cf:94:40: d9:2a:ca:f9:81:ab:6c:5e:25:61:93:aa:fc:c5:f5:11:6a:03: 2d:1b:f0:bf:4a:dd:6b:f4:b7:c1:05:3a:1c:8b:50:5a:74:6e: 7d:ad:9d:3b:15:38:4c:76:60:6f:8d:18:7d:51:42:f3:74:8d: 1a:e9:e4:7b:51:31:b8:70:f0:a7:00:20:52:18:94:58:aa:92: 33:9b:74:2a:04:e0:3b:01:92:17:96:47:cd:b0:4e:2c:0b:43: 4b:e1:d0:11:0b:f7:92:03:30:0e:bb:2a:67:22:02:1a:20:e9: 63:f4:dc:b1:6c:56:9e:5c:d6:4a:78:ff:7e:42:87:67:e6:30: 66:7a:67:84:ff:23:02:b1:f6:56:ec:a6:2c:de:e8:c3:f0:f5: b6:29:e8:ce:fe:b2:27:46:8c:97:2a:19:d7:1b:37:8e:60:55: 0b:9a:cd:7a:e6:fe:49:6f:4a:37:a6:51:2d:13:cf:f8:8e:3f: 59:e4:9c:d0 -----BEGIN CERTIFICATE----- MIIFtDCCBJygAwIBAgIUKyn6gVfKJI3YjXPzQFyCtt8vQNEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMmRkZDdhOGQwNTUxOGE4NmQzMTQzMzAyMTJiNTJlZjdm MWZkZmFiMDliMGY0ODI0ZGQwHhcNMjYwNjIzMTIwOTI0WhcNMjcwNjIyMTIxNDI0 WjAzMTEwLwYDVQQDEyhCNEZCMURBMEQ1NERGQThGNkNDREYzMzVGNzUwNjNGN0E4 QTlCOTdCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhizYZfpnzAL dFqVkwUeZbe8kulibszCpVwqUzz1UQSx3iwLZRm8AD+Cbb2yK3wM6R/EFrB7XVTE fGz8dI999d2qfsb+rUZkDHQHVyhNKEI2E4uMam9Kheox/yLU1tsVw8qarg4ozs8l RS25/EqcCGZ/GyZ2hRTH0wb82e7n+1vhyCYQL+R1KcD9D3+A1NibzpCCy6anYsoM GzKOJ20MSv4lQHmyK/xmwttZC/yDvzOs1ZluhMaShX+EI7bMhOF1jfnwOflFi2uJ 0aIg7WE7oxVDbC0rl+FnMrpwH0ZXHo3CA1rx+Bwnhj7tVks8gN6eI85WiB1cZVx6 jY4izhO6yQIDAQABo4ICtDCCArAwHQYDVR0OBBYEFLT7HaDVTfqPbM3zNfdQY/eo qbl7MB8GA1UdIwQYMBaAFCdnn8I6BuRfr7/cGLI7l5iRHBnXMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5Lzc4MzA5YzVhYWEzZTQxNjhhZjJjOWY3YzJjMDQyNjQxLzAv Mjc2NzlGQzIzQTA2RTQ1RkFGQkZEQzE4QjIzQjk3OTg5MTFDMTlENy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNk OWMwYjYyLzQ4ZjYxMjFhLTk0M2MtNGMwZC04Yjg3LTNmZWNiZTcxMDY3ZC8yZGRk N2E4ZDA1NTE4YTg2ZDMxNDMzMDIxMmI1MmVmN2YxZmRmYWIwOWIwZjQ4MjRkZC5j ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS83ODMwOWM1YWFhM2U0MTY4YWYyYzlm N2MyYzA0MjY0MS8wLzMyMzAzODJlMzkzMTJlMzEzODM4MmUzMDJmMzIzNDJkMzIz NDIwM2QzZTIwMzIzNjMzMzczMDMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Fu8MA0GCSqGSIb3DQEB CwUAA4IBAQAQhJNhqhgEjqAVB3zcz9BGLWZ9CIdmOAB6M1eaPyRcq5VHsEtBH5Jk YtGg2gRuSyfDLh/loXWUrtw4yLPoiqAGRFmyWvrPlEDZKsr5gatsXiVhk6r8xfUR agMtG/C/St1r9LfBBToci1BadG59rZ07FThMdmBvjRh9UULzdI0a6eR7UTG4cPCn ACBSGJRYqpIzm3QqBOA7AZIXlkfNsE4sC0NL4dARC/eSAzAOuypnIgIaIOlj9Nyx bFaeXNZKeP9+Qodn5jBmemeE/yMCsfZW7KYs3ujD8PW2KejO/rInRoyXKhnXGzeO YFULms165v5Jb0o3plEtE8/4jj9Z5JzQ -----END CERTIFICATE-----Generated at Tue Jul 21 09:54:24 2026 by rpki-client