$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/82e10d1e-ea45-3733-8bf7-5d26e3a7d954.roa File: 82e10d1e-ea45-3733-8bf7-5d26e3a7d954.roa (raw, json) Hash identifier: ioG0B2yJqASCK4mnTGe5gw25bTqGPqETb/6O0ICk1wU= Subject key identifier: C4:F2:64:E4:A4:97:FA:61:89:E6:66:55:B0:5C:ED:52:B5:20:3F:8B Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584E66DA16A5DF7A5440D114EF00 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/82e10d1e-ea45-3733-8bf7-5d26e3a7d954.roa Signing time: Sun 05 Jul 2026 21:00:11 +0000 ROA not before: Sun 05 Jul 2026 21:00:11 +0000 ROA not after: Sat 03 Oct 2026 21:00:11 +0000 asID: 13576 IP address blocks: 208.53.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:66:da:16:a5:df:7a:54:40:d1:14:ef:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Jul 5 21:00:11 2026 GMT Not After : Oct 3 21:00:11 2026 GMT Subject: CN=6234a253-4702-4657-9ea5-7eb2d2ac8499 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:9d:11:57:cc:8b:39:12:4c:90:fc:d9:23:f1: 5b:5b:21:1c:ea:c3:5b:58:97:86:63:dd:41:56:e5: 5a:51:0e:83:30:90:98:90:8b:e5:dd:15:c1:8d:f5: c6:6d:db:80:48:39:dc:0c:d0:b2:2a:be:bf:c7:77: ac:93:d8:90:0f:64:5e:88:fa:2f:2d:19:cc:55:49: 4c:90:38:23:22:01:2c:fa:d2:30:3e:92:63:9f:25: f1:c5:4f:a4:ea:7d:4c:7c:a9:e5:93:16:e9:08:d5: 11:3e:5d:72:09:98:38:1c:27:78:22:75:8b:9b:34: 0d:c5:9c:92:b8:b2:73:e7:cb:16:d5:3a:35:3a:dd: fb:8a:79:ff:1b:07:14:23:fe:3e:84:cd:d4:1b:35: 23:2e:3f:6c:7d:de:05:f5:25:9b:9d:44:25:71:bf: c3:1d:32:d3:7a:d1:54:25:44:34:29:2c:fd:4b:83: 0e:90:ae:0d:06:ee:5a:71:1c:5d:4a:34:ab:9d:83: ee:ec:c8:69:00:18:06:43:a1:e7:80:a8:8a:29:f5: 5a:74:29:f3:c3:54:95:13:31:d9:df:42:a6:f8:b4: fe:a1:96:ba:0e:4d:29:a4:c4:10:10:f7:0a:95:9d: 35:0a:e2:0d:8c:bb:83:d7:4c:6d:3e:26:51:7d:7c: fd:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:F2:64:E4:A4:97:FA:61:89:E6:66:55:B0:5C:ED:52:B5:20:3F:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/82e10d1e-ea45-3733-8bf7-5d26e3a7d954.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 208.53.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:bc:40:60:6b:ec:14:6d:23:e7:7c:fa:21:2f:8f:0a:4d:45: e8:76:7b:06:74:16:44:98:bb:9d:2c:6a:47:a9:6f:7d:76:62: 51:1c:31:e2:c2:19:cf:db:42:56:de:c1:b5:20:76:5b:c7:bf: c5:66:ae:88:89:24:bb:7f:5f:d7:ca:43:d3:f4:54:d6:7b:00: c6:2a:cf:35:cf:3d:dc:61:2a:07:18:50:16:a8:ae:45:e8:1f: 9c:82:56:4e:35:ec:b6:3c:60:55:5a:53:3c:b3:78:b4:aa:58: 61:36:36:c7:39:83:55:e3:b0:f3:12:4c:f7:a3:27:c6:e8:66: 35:42:ab:43:db:af:69:3f:e9:82:a6:23:69:90:ec:3c:d4:40: e9:5f:fa:57:d3:cc:91:32:5d:dd:93:7e:89:91:5d:d8:9e:aa: 66:7b:72:5b:52:0d:90:2c:54:da:a0:b1:e2:7d:58:73:f5:5d: 2d:6c:4b:f9:51:03:51:95:c3:db:6e:84:86:16:3e:e4:e3:e6: f2:1b:b6:ce:57:da:86:ac:49:82:fc:5c:54:56:91:88:64:f6: 9b:ee:ee:eb:69:a5:f3:bb:83:3f:ed:83:96:0d:52:76:7f:e7: 02:35:ce:f8:88:08:5f:42:0c:32:f3:0d:2e:1b:b4:2d:4c:35: 97:d1:ff:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5m2hal33pUQNEU7wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI2MDcwNTIxMDAxMVoXDTI2MTAwMzIxMDAxMVowLzEtMCsGA1UEAxMk NjIzNGEyNTMtNDcwMi00NjU3LTllYTUtN2ViMmQyYWM4NDk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArp0RV8yLORJMkPzZI/FbWyEc6sNbWJeGY91B VuVaUQ6DMJCYkIvl3RXBjfXGbduASDncDNCyKr6/x3esk9iQD2ReiPovLRnMVUlM kDgjIgEs+tIwPpJjnyXxxU+k6n1MfKnlkxbpCNURPl1yCZg4HCd4InWLmzQNxZyS uLJz58sW1To1Ot37inn/GwcUI/4+hM3UGzUjLj9sfd4F9SWbnUQlcb/DHTLTetFU JUQ0KSz9S4MOkK4NBu5acRxdSjSrnYPu7MhpABgGQ6HngKiKKfVadCnzw1SVEzHZ 30Km+LT+oZa6Dk0ppMQQEPcKlZ01CuINjLuD10xtPiZRfXz9ZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMTyZOSkl/phieZmVbBc7VK1ID+LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvODJlMTBkMWUtZWE0NS0z NzMzLThiZjctNWQyNmUzYTdkOTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0DX8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGa8QGBr7BRtI+d8+iEvjwpNReh2ewZ0FkSYu50sakepb312YlEcMeLC Gc/bQlbewbUgdlvHv8VmroiJJLt/X9fKQ9P0VNZ7AMYqzzXPPdxhKgcYUBaorkXo H5yCVk417LY8YFVaUzyzeLSqWGE2Nsc5g1XjsPMSTPejJ8boZjVCq0Pbr2k/6YKm I2mQ7DzUQOlf+lfTzJEyXd2TfomRXdieqmZ7cltSDZAsVNqgseJ9WHP1XS1sS/lR A1GVw9tuhIYWPuTj5vIbts5X2oasSYL8XFRWkYhk9pvu7utppfO7gz/tg5YNUnZ/ 5wI1zviICF9CDDLzDS4btC1MNZfR/7w= -----END CERTIFICATE-----Generated at Wed Jul 22 01:11:26 2026 by rpki-client