$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3f0f0ebe-3a21-316f-abe3-2992d9277fc2.roa File: 3f0f0ebe-3a21-316f-abe3-2992d9277fc2.roa (raw, json) Hash identifier: T7VxF8OQRhNYLhj/L2dCz5hOtGTi1baoUh7HFgy7KK8= Subject key identifier: 89:00:C1:FA:60:D5:7D:FC:8E:10:BA:F0:C3:95:58:AA:53:BE:88:EB Certificate issuer: /CN=3bf2109e-61f7-446d-8833-c7bd1c35ea08 Certificate serial: 010D0C9F4328584B477DB3C6C43D703B191FBC40 Authority key identifier: 7F:05:48:53:91:7D:90:BB:7C:0D:52:B3:50:23:42:8D:7D:70:E7:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3f0f0ebe-3a21-316f-abe3-2992d9277fc2.roa Signing time: Mon 22 Sep 2025 13:03:22 +0000 ROA not before: Mon 22 Sep 2025 13:03:22 +0000 ROA not after: Sun 21 Dec 2025 14:03:22 +0000 asID: 137517 IP address blocks: 207.180.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:7d:b3:c6:c4:3d:70:3b:19:1f:bc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bf2109e-61f7-446d-8833-c7bd1c35ea08 Validity Not Before: Sep 22 13:03:22 2025 GMT Not After : Dec 21 14:03:22 2025 GMT Subject: CN=7ec6558a-cd48-4496-b3d8-8ad630c5f251 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:6a:e7:da:79:9a:d8:c4:ff:b3:02:92:5e:96: ba:95:e0:71:30:98:c8:22:a9:0a:7c:7a:9d:8f:2b: b5:2f:e5:ed:5e:3b:03:a2:bd:6d:0d:3d:db:b6:06: b4:cf:33:96:74:51:9f:31:48:b6:94:95:18:23:f6: bc:17:b7:e2:14:13:26:4c:f3:6f:e3:33:f5:51:69: 19:a3:96:2d:f7:fa:3b:04:33:70:1e:4b:b5:09:28: bd:6a:ea:78:3c:88:db:9f:25:98:7b:c1:1c:27:cd: aa:82:1d:d4:63:a9:1d:1e:af:18:b8:c3:10:28:42: e4:fc:c3:3a:66:d0:ff:a4:8c:05:50:66:cd:15:f9: eb:f7:3b:e9:29:d2:20:a3:76:a1:91:8e:02:3e:28: d3:80:c6:0c:2c:18:31:9c:14:a2:ab:f6:87:6c:ae: 75:34:61:bb:31:50:4a:9b:b4:0f:b8:82:1d:a2:14: 0f:e1:ef:fb:49:14:dd:a4:7c:2a:65:f7:19:ee:42: 5c:04:5e:a6:82:bd:11:d1:a1:7c:df:fd:b2:7d:5e: 6d:73:af:37:61:c9:cc:65:ec:09:a0:8f:a7:65:bc: 59:f4:7c:15:00:26:a0:34:eb:21:7a:1a:76:c9:58: c2:3e:1d:a4:c4:9f:5c:e9:61:24:24:1f:a4:95:52: 1a:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:00:C1:FA:60:D5:7D:FC:8E:10:BA:F0:C3:95:58:AA:53:BE:88:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3f0f0ebe-3a21-316f-abe3-2992d9277fc2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.crl X509v3 Authority Key Identifier: keyid:7F:05:48:53:91:7D:90:BB:7C:0D:52:B3:50:23:42:8D:7D:70:E7:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer sbgp-ipAddrBlock: critical IPv4: 207.180.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:9a:05:3f:2b:3d:49:17:ac:48:d4:5f:1a:d1:fc:b7:83:b2: e3:9d:76:f5:8a:43:a9:20:b6:26:86:4a:81:df:a9:71:75:e1: 80:e9:92:0a:3a:bd:92:93:00:f7:ca:c7:b5:32:91:fc:6f:13: 80:ec:08:3c:9c:9b:be:cb:f1:99:31:c9:9d:b8:20:21:79:0e: bb:d3:40:a3:72:d2:78:a9:a4:50:f5:4c:58:de:0e:86:83:a6: 1a:67:10:b9:af:8c:c5:c5:fc:54:a0:64:0d:f9:58:59:bc:bf: 51:95:4e:b1:7e:48:de:7b:f7:7d:56:da:6b:ae:c1:ec:48:c3: df:9d:20:e1:e9:78:a7:56:1b:b6:b6:38:4e:5b:c2:0d:ad:f4: be:ba:1e:e3:27:1c:61:4e:4c:ab:bd:f6:9f:e5:e3:af:89:bc: ed:21:b3:97:a4:cf:2d:c2:2d:0f:37:48:45:57:20:96:8d:a8: da:88:fe:40:8e:b6:3e:bc:8c:4c:49:ab:ed:28:06:cb:5c:dc: 50:d8:0c:6d:07:c3:8d:f6:fb:be:fe:36:27:94:36:85:83:5f: a0:ab:6f:76:e4:43:79:c7:1f:a2:25:55:fa:b1:a5:e6:b3:d1: 71:60:a7:fe:fe:e5:1f:55:a4:e2:6c:19:af:8f:82:82:17:75: 8d:f8:ec:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtHfbPGxD1wOxkfvEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2JmMjEwOWUtNjFmNy00NDZkLTg4MzMtYzdiZDFjMzVl YTA4MB4XDTI1MDkyMjEzMDMyMloXDTI1MTIyMTE0MDMyMlowLzEtMCsGA1UEAxMk N2VjNjU1OGEtY2Q0OC00NDk2LWIzZDgtOGFkNjMwYzVmMjUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWrn2nma2MT/swKSXpa6leBxMJjIIqkKfHqd jyu1L+XtXjsDor1tDT3btga0zzOWdFGfMUi2lJUYI/a8F7fiFBMmTPNv4zP1UWkZ o5Yt9/o7BDNwHku1CSi9aup4PIjbnyWYe8EcJ82qgh3UY6kdHq8YuMMQKELk/MM6 ZtD/pIwFUGbNFfnr9zvpKdIgo3ahkY4CPijTgMYMLBgxnBSiq/aHbK51NGG7MVBK m7QPuIIdohQP4e/7SRTdpHwqZfcZ7kJcBF6mgr0R0aF83/2yfV5tc683YcnMZewJ oI+nZbxZ9HwVACagNOshehp2yVjCPh2kxJ9c6WEkJB+klVIavwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIkAwfpg1X38jhC68MOVWKpTvojrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zYmYy MTA5ZS02MWY3LTQ0NmQtODgzMy1jN2JkMWMzNWVhMDgvM2YwZjBlYmUtM2EyMS0z MTZmLWFiZTMtMjk5MmQ5Mjc3ZmMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2JmMjEwOWUtNjFmNy00NDZkLTg4 MzMtYzdiZDFjMzVlYTA4LzNiZjIxMDllLTYxZjctNDQ2ZC04ODMzLWM3YmQxYzM1 ZWEwOC5jcmwwHwYDVR0jBBgwFoAUfwVIU5F9kLt8DVKzUCNCjX1w5+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zYmYyMTA5ZS02MWY3LTQ0NmQtODgzMy1jN2Jk MWMzNWVhMDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz7QLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHeaBT8rPUkXrEjUXxrR/LeDsuOddvWKQ6kgtiaGSoHfqXF14YDpkgo6 vZKTAPfKx7UykfxvE4DsCDycm77L8ZkxyZ24ICF5DrvTQKNy0nippFD1TFjeDoaD phpnELmvjMXF/FSgZA35WFm8v1GVTrF+SN57931W2muuwexIw9+dIOHpeKdWG7a2 OE5bwg2t9L66HuMnHGFOTKu99p/l46+JvO0hs5ekzy3CLQ83SEVXIJaNqNqI/kCO tj68jExJq+0oBstc3FDYDG0Hw432+77+NieUNoWDX6Crb3bkQ3nHH6IlVfqxpeaz 0XFgp/7+5R9VpOJsGa+PgoIXdY347B0= -----END CERTIFICATE-----Generated at Sun Oct 19 22:46:45 2025 by rpki-client