$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/12136690-6422-3af0-ac32-cc7e4323e3e2.roa File: 12136690-6422-3af0-ac32-cc7e4323e3e2.roa (raw, json) Hash identifier: Ep0RkUQpZpeKdbnmgj0P240R+YcCsRHi9VQm+CilN8I= Subject key identifier: 05:A1:9B:20:74:B3:44:A2:EE:81:98:AD:E0:A7:B3:31:A9:55:4F:2F Certificate issuer: /CN=3bf2109e-61f7-446d-8833-c7bd1c35ea08 Certificate serial: 010D0C9F4328584D39CF95E4C54471CE61D7FD00 Authority key identifier: 7F:05:48:53:91:7D:90:BB:7C:0D:52:B3:50:23:42:8D:7D:70:E7:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/12136690-6422-3af0-ac32-cc7e4323e3e2.roa Signing time: Fri 20 Mar 2026 01:00:32 +0000 ROA not before: Fri 20 Mar 2026 01:00:32 +0000 ROA not after: Thu 18 Jun 2026 01:00:32 +0000 asID: 397630 IP address blocks: 207.180.23.0/24 maxlen: 24 216.75.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:39:cf:95:e4:c5:44:71:ce:61:d7:fd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bf2109e-61f7-446d-8833-c7bd1c35ea08 Validity Not Before: Mar 20 01:00:32 2026 GMT Not After : Jun 18 01:00:32 2026 GMT Subject: CN=3ceb3795-561c-451f-858e-ebc9079b5be7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:69:20:29:21:70:6d:b5:ac:fd:35:3b:b7:28: a7:73:e5:03:fd:fc:e2:8c:bb:24:d4:0b:60:a8:e7: 60:2c:a0:74:52:d1:3b:19:b0:76:b8:ae:b4:34:77: 8e:5a:2f:b2:c8:e5:71:4f:78:9f:77:60:a2:3c:a7: a7:24:e1:44:28:f6:af:67:da:ba:2e:00:e9:4d:7c: 17:29:f5:e8:65:23:20:db:49:25:03:8b:06:e5:1c: fc:36:73:02:c5:72:5f:af:8a:50:88:0d:46:f5:9d: 46:ef:5a:7b:40:6d:82:ef:0c:29:ed:e4:e3:e2:a5: 19:f2:9b:14:48:a7:82:61:b6:ba:c8:61:eb:c8:29: 30:ae:2e:9e:e6:71:8b:2f:44:e6:3c:46:73:f7:72: 87:7f:04:33:4c:ca:d8:44:e4:32:36:07:4a:c0:e0: 94:68:0a:e3:e9:a8:d3:3c:03:72:e6:4f:11:1d:0e: 83:79:54:86:db:de:cd:b8:88:c0:84:30:47:8f:3e: 33:6e:d6:62:4b:79:f9:a8:da:6c:d9:e8:06:53:8f: 74:56:fb:14:0b:35:d8:c4:b7:73:79:c4:b1:5a:24: 16:4c:df:b0:64:02:af:80:a0:e3:60:f1:0c:e0:c4: b9:e3:61:21:41:b7:b1:9a:d3:bd:93:ff:3b:82:4c: 8d:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:A1:9B:20:74:B3:44:A2:EE:81:98:AD:E0:A7:B3:31:A9:55:4F:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/12136690-6422-3af0-ac32-cc7e4323e3e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.crl X509v3 Authority Key Identifier: keyid:7F:05:48:53:91:7D:90:BB:7C:0D:52:B3:50:23:42:8D:7D:70:E7:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer sbgp-ipAddrBlock: critical IPv4: 207.180.23.0/24 216.75.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:22:59:a7:02:0e:a6:10:81:f0:a0:5f:e6:d0:fb:6f:9c:07: 78:72:06:23:4e:d7:aa:99:ba:2f:48:5c:99:fc:0a:e6:d0:8d: 6d:6b:42:82:35:f4:ce:ed:30:72:17:2c:e7:3d:bd:d5:ac:bb: 1b:dc:d4:0c:bb:98:dc:c7:a6:bd:d5:d1:4f:e7:a2:21:49:e6: 0b:9c:36:3a:0d:5b:f5:b5:c0:fb:41:40:9b:f7:fc:79:b4:66: e9:ce:70:56:ad:a0:c0:27:44:d1:53:6d:5f:26:6d:99:aa:b4: 39:c5:12:48:8f:ff:82:88:86:85:41:3b:4f:0e:86:84:48:b8: bd:e9:3d:2f:44:a9:fe:ea:00:bc:c3:0a:35:dd:9d:71:46:b2: 79:56:6f:79:4b:7f:65:be:5a:7e:ab:22:b7:29:1d:cd:fe:a2: d4:db:81:25:4f:15:ee:1e:89:3f:2c:b3:ce:9a:ee:bd:c4:d4: 22:9f:08:44:21:80:48:9d:0f:50:ed:82:6c:7c:83:80:49:9a: 8a:af:a6:cb:4c:25:05:1e:d9:89:40:76:4e:db:78:5b:e0:e8: 25:e7:fe:15:36:22:89:6f:e1:35:79:c2:eb:c9:6e:ba:d4:94: f5:cf:85:57:53:d8:9b:21:4e:ad:ee:f5:42:72:0f:62:e7:05: e9:4e:6f:9e -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE05z5XkxURxzmHX/QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2JmMjEwOWUtNjFmNy00NDZkLTg4MzMtYzdiZDFjMzVl YTA4MB4XDTI2MDMyMDAxMDAzMloXDTI2MDYxODAxMDAzMlowLzEtMCsGA1UEAxMk M2NlYjM3OTUtNTYxYy00NTFmLTg1OGUtZWJjOTA3OWI1YmU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmkgKSFwbbWs/TU7tyinc+UD/fzijLsk1Atg qOdgLKB0UtE7GbB2uK60NHeOWi+yyOVxT3ifd2CiPKenJOFEKPavZ9q6LgDpTXwX KfXoZSMg20klA4sG5Rz8NnMCxXJfr4pQiA1G9Z1G71p7QG2C7wwp7eTj4qUZ8psU SKeCYba6yGHryCkwri6e5nGLL0TmPEZz93KHfwQzTMrYROQyNgdKwOCUaArj6ajT PANy5k8RHQ6DeVSG297NuIjAhDBHjz4zbtZiS3n5qNps2egGU490VvsUCzXYxLdz ecSxWiQWTN+wZAKvgKDjYPEM4MS542EhQbexmtO9k/87gkyN1wIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFAWhmyB0s0Si7oGYreCnszGpVU8vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zYmYy MTA5ZS02MWY3LTQ0NmQtODgzMy1jN2JkMWMzNWVhMDgvMTIxMzY2OTAtNjQyMi0z YWYwLWFjMzItY2M3ZTQzMjNlM2UyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2JmMjEwOWUtNjFmNy00NDZkLTg4 MzMtYzdiZDFjMzVlYTA4LzNiZjIxMDllLTYxZjctNDQ2ZC04ODMzLWM3YmQxYzM1 ZWEwOC5jcmwwHwYDVR0jBBgwFoAUfwVIU5F9kLt8DVKzUCNCjX1w5+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zYmYyMTA5ZS02MWY3LTQ0NmQtODgzMy1jN2Jk MWMzNWVhMDguY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAz7QXAwQA 2EucMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBADYiWacCDqYQgfCgX+bQ+2+cB3hyBiNO16qZui9IXJn8CubQ jW1rQoI19M7tMHIXLOc9vdWsuxvc1Ay7mNzHpr3V0U/noiFJ5gucNjoNW/W1wPtB QJv3/Hm0ZunOcFatoMAnRNFTbV8mbZmqtDnFEkiP/4KIhoVBO08OhoRIuL3pPS9E qf7qALzDCjXdnXFGsnlWb3lLf2W+Wn6rIrcpHc3+otTbgSVPFe4eiT8ss86a7r3E 1CKfCEQhgEidD1Dtgmx8g4BJmoqvpstMJQUe2YlAdk7beFvg6CXn/hU2Iolv4TV5 wuvJbrrUlPXPhVdT2JshTq3u9UJyD2LnBelOb54= -----END CERTIFICATE-----Generated at Thu Mar 26 20:05:24 2026 by rpki-client