$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/2bedd9b6-f4f8-3a86-a7da-f5ffa61f5c05.roa File: 2bedd9b6-f4f8-3a86-a7da-f5ffa61f5c05.roa (raw, json) Hash identifier: JxSX0XVlHk6tJpWQWVRI7YYRiOMswkLdZnmW5CdpWus= Subject key identifier: 43:6F:AD:6C:B1:9D:B7:67:8E:1B:9B:82:A8:5F:56:62:31:FC:EA:1D Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Certificate serial: 010D0C9F4328584E8B24F67D00330C2FBCE94300 Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/2bedd9b6-f4f8-3a86-a7da-f5ffa61f5c05.roa Signing time: Sat 18 Jul 2026 21:00:11 +0000 ROA not before: Sat 18 Jul 2026 21:00:11 +0000 ROA not after: Fri 16 Oct 2026 21:00:11 +0000 asID: 398202 IP address blocks: 209.178.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8b:24:f6:7d:00:33:0c:2f:bc:e9:43:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Validity Not Before: Jul 18 21:00:11 2026 GMT Not After : Oct 16 21:00:11 2026 GMT Subject: CN=1824116b-02a5-47a1-a335-8cf9fb2690ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:6e:40:ce:e4:96:8b:82:c3:38:57:e5:b1:d9: c3:08:25:08:0b:47:3a:6f:0b:62:d2:68:a1:fb:b0: 25:34:1b:fc:80:f2:35:65:5e:0f:0d:4d:20:da:87: bd:b6:1f:bd:90:8e:85:91:36:b2:c2:6d:9d:04:8f: df:82:c8:6e:9b:66:6a:1e:95:85:fd:c1:97:d4:56: 8b:37:5f:d0:f9:4b:4d:96:4a:e3:36:6f:92:5d:ec: 93:81:69:b1:5c:53:4c:3e:3a:0d:47:e1:39:49:f3: 3d:7e:fb:ee:0a:7a:ac:07:11:16:07:d7:cf:eb:76: da:ad:d3:e1:26:cf:86:67:e5:b5:9b:e3:0a:01:89: 04:66:eb:99:d7:e0:be:03:42:f4:b2:2a:f5:e0:2f: f3:8e:81:2a:99:ed:ac:70:17:1e:ec:c2:1c:5c:79: 01:7c:44:af:a2:d0:26:f6:61:e2:7d:a3:a0:e9:17: 02:14:14:6f:aa:36:4b:72:dd:24:c2:9f:9d:b9:76: 94:ef:55:2f:3d:fb:76:1a:25:89:3a:6d:14:01:19: cf:20:b9:35:d7:69:2c:fd:1b:e0:78:01:aa:c6:6e: 05:eb:9b:ea:7a:60:08:ec:61:20:33:df:c6:37:c9: 9d:32:ce:f7:fe:8a:67:79:bc:c3:4a:cd:cf:5a:1d: 74:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:6F:AD:6C:B1:9D:B7:67:8E:1B:9B:82:A8:5F:56:62:31:FC:EA:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/2bedd9b6-f4f8-3a86-a7da-f5ffa61f5c05.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl X509v3 Authority Key Identifier: keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer sbgp-ipAddrBlock: critical IPv4: 209.178.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:ca:b9:e2:22:ac:71:e9:3f:8e:c0:89:b5:67:13:4e:27:2f: 9e:b3:75:7d:68:1d:75:3e:92:a2:c1:98:f2:9b:37:93:f1:ef: 11:00:e4:f2:dc:70:e6:d3:b1:07:d6:50:6d:f9:04:31:0c:49: 80:36:c5:fe:b4:7f:95:03:71:79:68:19:53:d7:c3:ca:da:c5: f4:37:fa:4f:0b:0b:f2:ed:93:91:ba:32:81:1d:44:0a:f9:cc: d2:21:0f:10:5b:cd:3c:a1:2f:f0:57:98:2b:b2:0b:22:99:f0: 8a:a2:4d:1b:2e:1b:09:4d:11:90:2f:93:3e:1c:d3:6e:7e:a6: 63:07:e7:63:5c:4d:a6:15:c4:50:84:75:7d:a2:ac:63:52:33: 0e:6e:96:da:92:44:bf:bd:d3:00:9f:1d:8a:5a:0a:e0:ea:6b: df:80:80:eb:21:aa:5d:cf:b4:3f:d0:a2:e6:44:f7:b1:1a:dc: 3f:41:5d:32:b9:4e:f7:9e:7c:5c:c3:f1:39:c6:44:db:82:13: a9:6e:17:f1:14:5d:28:7e:79:c3:f9:d3:ec:21:7e:4f:38:dc: 0f:2d:f5:d7:d9:eb:05:df:d7:c7:22:11:1a:67:35:e5:6c:b4: fb:41:98:c3:d0:07:b4:0b:ac:e4:97:b5:71:ca:fb:fa:1a:9f: 10:c4:13:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6LJPZ9ADMML7zpQwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4 MzcwMB4XDTI2MDcxODIxMDAxMVoXDTI2MTAxNjIxMDAxMVowLzEtMCsGA1UEAxMk MTgyNDExNmItMDJhNS00N2ExLWEzMzUtOGNmOWZiMjY5MGZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6m5AzuSWi4LDOFflsdnDCCUIC0c6bwti0mih +7AlNBv8gPI1ZV4PDU0g2oe9th+9kI6FkTaywm2dBI/fgshum2ZqHpWF/cGX1FaL N1/Q+UtNlkrjNm+SXeyTgWmxXFNMPjoNR+E5SfM9fvvuCnqsBxEWB9fP63bardPh Js+GZ+W1m+MKAYkEZuuZ1+C+A0L0sir14C/zjoEqme2scBce7MIcXHkBfESvotAm 9mHifaOg6RcCFBRvqjZLct0kwp+duXaU71UvPft2GiWJOm0UARnPILk112ks/Rvg eAGqxm4F65vqemAI7GEgM9/GN8mdMs73/opnebzDSs3PWh10pwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFENvrWyxnbdnjhubgqhfVmIx/OodMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvMmJlZGQ5YjYtZjRmOC0z YTg2LWE3ZGEtZjVmZmE2MWY1YzA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2 ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx YjZjNjgzNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0bL8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEXKueIirHHpP47AibVnE04nL56zdX1oHXU+kqLBmPKbN5Px7xEA5PLc cObTsQfWUG35BDEMSYA2xf60f5UDcXloGVPXw8raxfQ3+k8LC/Ltk5G6MoEdRAr5 zNIhDxBbzTyhL/BXmCuyCyKZ8IqiTRsuGwlNEZAvkz4c025+pmMH52NcTaYVxFCE dX2irGNSMw5ultqSRL+90wCfHYpaCuDqa9+AgOshql3PtD/QouZE97Ea3D9BXTK5 TveefFzD8TnGRNuCE6luF/EUXSh+ecP50+whfk843A8t9dfZ6wXf18ciERpnNeVs tPtBmMPQB7QLrOSXtXHK+/oanxDEE8k= -----END CERTIFICATE-----Generated at Fri Jul 24 16:28:36 2026 by rpki-client