$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3ae7ecff-e3ab-472d-a4ec-0fcd3fe94aa7/08b21afd-c79d-35c4-91d3-323622a79ddc.roa File: 08b21afd-c79d-35c4-91d3-323622a79ddc.roa (raw, json) Hash identifier: KRuDgkbfRshkzGBqUN7Yh9Q1R5xaR9LnNxCi8WK9o2A= Subject key identifier: 4C:FA:0E:99:F4:CC:8B:BE:7B:C0:09:22:58:2F:6A:8B:41:87:DF:CA Certificate issuer: /CN=3ae7ecff-e3ab-472d-a4ec-0fcd3fe94aa7 Certificate serial: 010D0C9F4328584E5A4A05A6BD05D9806DAECC80 Authority key identifier: 3E:98:7B:0D:CE:66:B6:86:13:8A:2A:FB:21:30:82:87:5B:74:B0:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3ae7ecff-e3ab-472d-a4ec-0fcd3fe94aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3ae7ecff-e3ab-472d-a4ec-0fcd3fe94aa7/08b21afd-c79d-35c4-91d3-323622a79ddc.roa Signing time: Wed 01 Jul 2026 09:00:12 +0000 ROA not before: Wed 01 Jul 2026 09:00:12 +0000 ROA not after: Tue 29 Sep 2026 09:00:12 +0000 asID: 21930 IP address blocks: 207.207.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3ae7ecff-e3ab-472d-a4ec-0fcd3fe94aa7/3ae7ecff-e3ab-472d-a4ec-0fcd3fe94aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3ae7ecff-e3ab-472d-a4ec-0fcd3fe94aa7/3ae7ecff-e3ab-472d-a4ec-0fcd3fe94aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3ae7ecff-e3ab-472d-a4ec-0fcd3fe94aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5a:4a:05:a6:bd:05:d9:80:6d:ae:cc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ae7ecff-e3ab-472d-a4ec-0fcd3fe94aa7 Validity Not Before: Jul 1 09:00:12 2026 GMT Not After : Sep 29 09:00:12 2026 GMT Subject: CN=eeef6134-5bd5-4410-b045-f58b839887df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:be:49:de:92:4f:1e:9b:f3:0d:97:f6:5b:1b: aa:f9:e1:6e:0b:df:28:20:01:b5:23:90:35:b5:a3: c1:1d:0a:23:b0:e6:2b:31:09:06:25:f6:73:e9:19: 2e:bb:66:f6:38:68:ca:5f:37:65:2a:ec:f7:e3:f8: 2a:78:0d:76:65:ec:59:64:07:19:08:c0:4c:7a:1c: 61:d4:f5:79:71:21:43:b3:8c:6f:90:1d:0d:57:bd: 7f:01:df:12:f9:1e:f6:ff:d9:2d:02:de:43:43:18: 3f:2d:b2:aa:66:a0:52:0a:7e:5b:ba:4a:6b:f9:ce: 64:44:59:05:a5:c4:89:54:6c:31:34:e9:e4:b9:ed: e7:de:92:7b:d8:4e:b7:be:f3:cc:d8:23:58:c2:56: 20:aa:e3:3c:17:15:ef:80:21:c0:05:69:fb:73:72: e0:c2:1c:41:ef:62:a0:e5:ba:f9:23:8d:ef:97:3d: f7:fd:9a:97:f7:52:1b:0a:f8:a2:44:02:09:25:0b: aa:06:98:28:1e:47:c8:ab:32:8c:86:7f:a0:34:1d: a1:29:9b:a4:af:16:8c:13:64:7b:90:e9:25:7e:d6: b5:89:01:e8:c9:ff:99:dd:97:b3:23:73:0b:27:0e: 4e:3f:34:0c:72:3f:2e:37:44:cd:f2:30:99:13:a8: 78:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:FA:0E:99:F4:CC:8B:BE:7B:C0:09:22:58:2F:6A:8B:41:87:DF:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3ae7ecff-e3ab-472d-a4ec-0fcd3fe94aa7/08b21afd-c79d-35c4-91d3-323622a79ddc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3ae7ecff-e3ab-472d-a4ec-0fcd3fe94aa7/3ae7ecff-e3ab-472d-a4ec-0fcd3fe94aa7.crl X509v3 Authority Key Identifier: keyid:3E:98:7B:0D:CE:66:B6:86:13:8A:2A:FB:21:30:82:87:5B:74:B0:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3ae7ecff-e3ab-472d-a4ec-0fcd3fe94aa7.cer sbgp-ipAddrBlock: critical IPv4: 207.207.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:0b:d0:2d:47:ea:71:32:ed:39:5c:2b:58:84:55:58:d3:74: 2f:9d:98:30:01:3b:60:e2:64:e2:c8:d3:4e:c4:46:5c:75:f1: 0a:2b:bf:44:c5:76:1e:1a:c2:d2:77:7d:84:b2:e2:ff:b5:91: 77:14:b4:55:6f:89:97:2e:31:c9:4a:43:94:ea:37:4a:17:31: 54:f0:d8:41:ae:f4:5a:c8:bb:6a:a2:ee:00:df:eb:7a:cf:f6: 96:7d:87:77:fe:b7:e9:1f:6f:cd:77:90:7d:40:af:f4:e1:d5: f9:c7:2c:44:73:8f:62:ab:0e:88:01:83:54:83:75:fc:54:92: 89:0c:a3:20:dc:3c:89:29:26:77:c4:1a:da:e4:ca:ab:d6:2f: d5:9f:c6:5f:93:96:dd:7a:fc:94:88:99:1a:1a:9a:e2:15:f4: 77:22:c6:d2:71:cb:08:5d:c0:23:6d:d2:b4:95:dd:8e:6e:d2: 68:33:c8:17:41:99:6d:07:83:63:3b:3f:fb:c5:6d:1e:89:36: a6:89:dc:6d:82:12:06:a5:37:84:98:53:a9:5f:78:70:1a:67: 56:aa:ef:ae:66:32:d4:f9:b4:6c:d5:f1:5d:53:10:52:5e:20: f4:90:19:69:e9:4d:c4:02:d2:4b:7e:30:aa:26:5e:ca:a8:67: 82:83:b0:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5aSgWmvQXZgG2uzIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FlN2VjZmYtZTNhYi00NzJkLWE0ZWMtMGZjZDNmZTk0 YWE3MB4XDTI2MDcwMTA5MDAxMloXDTI2MDkyOTA5MDAxMlowLzEtMCsGA1UEAxMk ZWVlZjYxMzQtNWJkNS00NDEwLWIwNDUtZjU4YjgzOTg4N2RmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApL5J3pJPHpvzDZf2Wxuq+eFuC98oIAG1I5A1 taPBHQojsOYrMQkGJfZz6Rkuu2b2OGjKXzdlKuz34/gqeA12ZexZZAcZCMBMehxh 1PV5cSFDs4xvkB0NV71/Ad8S+R72/9ktAt5DQxg/LbKqZqBSCn5bukpr+c5kRFkF pcSJVGwxNOnkue3n3pJ72E63vvPM2CNYwlYgquM8FxXvgCHABWn7c3LgwhxB72Kg 5br5I43vlz33/ZqX91IbCviiRAIJJQuqBpgoHkfIqzKMhn+gNB2hKZukrxaME2R7 kOklfta1iQHoyf+Z3ZezI3MLJw5OPzQMcj8uN0TN8jCZE6h4tQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEz6Dpn0zIu+e8AJIlgvaotBh9/KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8zYWU3 ZWNmZi1lM2FiLTQ3MmQtYTRlYy0wZmNkM2ZlOTRhYTcvMDhiMjFhZmQtYzc5ZC0z NWM0LTkxZDMtMzIzNjIyYTc5ZGRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvM2FlN2VjZmYtZTNhYi00NzJkLWE0 ZWMtMGZjZDNmZTk0YWE3LzNhZTdlY2ZmLWUzYWItNDcyZC1hNGVjLTBmY2QzZmU5 NGFhNy5jcmwwHwYDVR0jBBgwFoAUPph7Dc5mtoYTiir7ITCCh1t0sEkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8zYWU3ZWNmZi1lM2FiLTQ3MmQtYTRlYy0wZmNk M2ZlOTRhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz88MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI4L0C1H6nEy7TlcK1iEVVjTdC+dmDABO2DiZOLI007ERlx18Qorv0TF dh4awtJ3fYSy4v+1kXcUtFVviZcuMclKQ5TqN0oXMVTw2EGu9FrIu2qi7gDf63rP 9pZ9h3f+t+kfb813kH1Ar/Th1fnHLERzj2KrDogBg1SDdfxUkokMoyDcPIkpJnfE GtrkyqvWL9Wfxl+Tlt16/JSImRoamuIV9HcixtJxywhdwCNt0rSV3Y5u0mgzyBdB mW0Hg2M7P/vFbR6JNqaJ3G2CEgalN4SYU6lfeHAaZ1aq765mMtT5tGzV8V1TEFJe IPSQGWnpTcQC0kt+MKomXsqoZ4KDsBo= -----END CERTIFICATE-----Generated at Fri Jul 24 03:07:32 2026 by rpki-client