$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/fdf3fae6-0252-3bda-a826-286a240b5e91.roa File: fdf3fae6-0252-3bda-a826-286a240b5e91.roa (raw, json) Hash identifier: dGFwrsyMrOKiRg/ywCkRxKXxUj/aV1BJxHMWVWPfStY= Subject key identifier: 8A:52:2E:5B:CB:CD:15:11:9C:41:C5:14:9B:35:84:A1:85:50:3C:07 Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Certificate serial: 010D0C9F4328584E2AD4699720F637ED0A425B00 Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/fdf3fae6-0252-3bda-a826-286a240b5e91.roa Signing time: Sun 14 Jun 2026 09:00:11 +0000 ROA not before: Sun 14 Jun 2026 09:00:11 +0000 ROA not after: Sat 12 Sep 2026 09:00:11 +0000 asID: 33059 IP address blocks: 209.42.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Jul 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:2a:d4:69:97:20:f6:37:ed:0a:42:5b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Validity Not Before: Jun 14 09:00:11 2026 GMT Not After : Sep 12 09:00:11 2026 GMT Subject: CN=a33a33a2-6c90-4f81-b9f5-15d8e85de66f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c1:a0:34:ec:e4:3b:22:87:98:fc:29:8a:d8: 5f:f7:8b:2f:88:ee:0d:88:94:28:c5:b4:2b:68:e1: 8b:9e:05:7a:3d:9d:96:47:8f:ff:b2:61:6d:79:1c: bb:2c:ad:ce:8c:d3:8a:23:91:be:9d:98:b4:10:5c: 09:de:0b:79:82:44:48:bd:53:d9:cb:f5:f1:2d:be: f1:75:e8:77:56:29:92:84:d2:ba:32:5b:80:2c:cb: dd:50:1e:f2:ac:85:5c:de:1f:16:da:28:c3:15:bf: da:fe:ce:52:34:34:23:fc:f8:9c:5d:87:1e:8d:03: 93:d1:1a:ab:b0:f4:bb:c0:bf:85:b3:2c:ae:5e:c0: 44:34:41:ed:e3:ed:1b:5e:54:f2:14:93:7e:1d:f8: 16:f8:d1:ee:bc:ea:b3:40:ff:f6:eb:4d:9e:71:c3: 8f:4d:cb:a6:da:17:de:9d:19:71:c3:76:d1:4b:1d: 88:14:6c:08:25:c2:a3:79:79:51:b9:30:06:04:3b: 41:66:be:b5:73:81:3b:e8:51:50:3a:b1:b4:80:96: 86:76:e5:cb:c4:9d:4d:b2:2e:a9:5e:7e:84:a3:78: 68:7d:c5:16:61:1c:3a:1a:82:13:df:b8:dd:8b:ee: 9b:85:75:f1:5c:02:d0:27:04:3c:d3:6b:20:64:e5: e2:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:52:2E:5B:CB:CD:15:11:9C:41:C5:14:9B:35:84:A1:85:50:3C:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/fdf3fae6-0252-3bda-a826-286a240b5e91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl X509v3 Authority Key Identifier: keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer sbgp-ipAddrBlock: critical IPv4: 209.42.167.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:b9:82:4d:dc:07:06:ef:39:33:49:8e:f1:b1:b4:da:1a:65: de:f3:94:aa:3a:96:2f:57:02:e6:72:e8:12:62:bf:5c:5c:8f: 33:f2:ad:66:32:69:4e:ff:ca:03:36:c1:d4:08:b4:c2:c5:89: 32:c5:af:ba:76:11:cb:8b:c1:71:74:39:5e:86:86:ff:3b:41: c9:fe:0a:f6:bb:f9:73:ab:ef:b1:7c:b3:8e:58:e6:cb:3c:55: d0:8c:31:a2:a4:ea:29:69:a5:97:cf:02:c6:0f:fb:40:fc:1b: 40:bb:e8:77:31:d9:71:a6:81:94:ef:4c:79:e3:c5:34:2d:4a: 31:a2:33:c6:78:a9:b0:ee:2b:cb:33:09:1f:9a:96:9c:0a:5f: 83:fd:a2:1b:2f:bf:62:31:6b:2f:bf:f5:4d:7d:13:6b:ab:24: 98:db:bc:51:e5:e1:66:a4:1d:d0:72:ce:47:bd:fa:d9:3a:8b: e8:5e:bf:4c:bb:33:db:ee:db:6d:bd:35:ae:a2:2b:81:3e:22: b2:50:89:38:de:41:c3:fe:27:83:5b:ed:bd:ed:5a:27:5b:b1: b4:57:5a:e8:e5:44:e7:3d:f6:b7:4b:e7:71:6a:0d:3a:c0:10: 49:77:6f:df:e7:ac:d9:da:f7:00:18:c8:6e:70:82:75:a2:78: 41:29:69:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4q1GmXIPY37QpCWwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4 MzcwMB4XDTI2MDYxNDA5MDAxMVoXDTI2MDkxMjA5MDAxMVowLzEtMCsGA1UEAxMk YTMzYTMzYTItNmM5MC00ZjgxLWI5ZjUtMTVkOGU4NWRlNjZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcGgNOzkOyKHmPwpithf94sviO4NiJQoxbQr aOGLngV6PZ2WR4//smFteRy7LK3OjNOKI5G+nZi0EFwJ3gt5gkRIvVPZy/XxLb7x deh3VimShNK6MluALMvdUB7yrIVc3h8W2ijDFb/a/s5SNDQj/PicXYcejQOT0Rqr sPS7wL+FsyyuXsBENEHt4+0bXlTyFJN+HfgW+NHuvOqzQP/2602eccOPTcum2hfe nRlxw3bRSx2IFGwIJcKjeXlRuTAGBDtBZr61c4E76FFQOrG0gJaGduXLxJ1Nsi6p Xn6Eo3hofcUWYRw6GoIT37jdi+6bhXXxXALQJwQ802sgZOXiRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIpSLlvLzRURnEHFFJs1hKGFUDwHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvZmRmM2ZhZTYtMDI1Mi0z YmRhLWE4MjYtMjg2YTI0MGI1ZTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2 ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx YjZjNjgzNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0SqnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA65gk3cBwbvOTNJjvGxtNoaZd7zlKo6li9XAuZy6BJiv1xcjzPyrWYy aU7/ygM2wdQItMLFiTLFr7p2EcuLwXF0OV6Ghv87Qcn+Cva7+XOr77F8s45Y5ss8 VdCMMaKk6ilppZfPAsYP+0D8G0C76Hcx2XGmgZTvTHnjxTQtSjGiM8Z4qbDuK8sz CR+alpwKX4P9ohsvv2Ixay+/9U19E2urJJjbvFHl4WakHdByzke9+tk6i+hev0y7 M9vu2229Na6iK4E+IrJQiTjeQcP+J4Nb7b3tWidbsbRXWujlROc99rdL53FqDTrA EEl3b9/nrNna9wAYyG5wgnWieEEpaXM= -----END CERTIFICATE-----Generated at Thu Jul 16 07:40:48 2026 by rpki-client