$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/9d8752ae-bacd-3320-9f88-b28969f28bc5.roa File: 9d8752ae-bacd-3320-9f88-b28969f28bc5.roa (raw, json) Hash identifier: W9lM0rWMrQmAVVlB7jS1EvQo1p5htE7RA0DCOOpeBzc= Subject key identifier: E0:34:5F:93:C5:CE:DF:A2:BA:94:81:39:2C:C1:CB:8F:35:77:A5:67 Certificate issuer: /CN=3bf2109e-61f7-446d-8833-c7bd1c35ea08 Certificate serial: 010D0C9F4328584D46C5E455D35E4BDD1DBA3000 Authority key identifier: 7F:05:48:53:91:7D:90:BB:7C:0D:52:B3:50:23:42:8D:7D:70:E7:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/9d8752ae-bacd-3320-9f88-b28969f28bc5.roa Signing time: Tue 24 Mar 2026 16:26:53 +0000 ROA not before: Tue 24 Mar 2026 16:26:53 +0000 ROA not after: Mon 22 Jun 2026 16:26:53 +0000 asID: 402203 IP address blocks: 207.180.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:46:c5:e4:55:d3:5e:4b:dd:1d:ba:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bf2109e-61f7-446d-8833-c7bd1c35ea08 Validity Not Before: Mar 24 16:26:53 2026 GMT Not After : Jun 22 16:26:53 2026 GMT Subject: CN=0cdefe92-cb58-42b1-95a6-1ef79e951d99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:8e:68:d1:99:61:d2:f8:69:f8:02:a0:09:01: ae:7b:c2:0f:9d:f1:d5:c1:4d:48:0f:64:17:64:05: 32:7a:15:ff:5d:76:79:ac:f4:f7:5d:4b:eb:ac:67: f1:50:d6:5c:5c:91:08:99:29:64:15:01:ad:51:82: c1:6f:e0:75:a4:ae:c9:99:1e:64:59:a0:3f:de:57: c3:9e:9c:60:ac:16:4d:26:55:45:52:6d:b8:ec:14: 1f:84:f9:f8:7d:17:af:5a:61:df:c0:95:6f:52:5a: c2:48:02:ce:6e:17:ac:15:24:0c:39:8e:e3:08:a6: 12:8e:b3:5a:1e:bb:a4:5b:ea:58:87:6e:f7:d5:34: 76:47:85:c5:8e:64:71:5c:b3:7c:f9:c7:1f:a8:df: 8e:56:35:c4:f6:55:6e:5e:c2:36:a8:05:47:9f:f0: 78:ed:9d:7c:08:5f:ae:e3:22:19:50:5b:39:fc:cb: 10:c3:13:e4:74:1e:24:21:ef:28:0d:b4:c6:33:06: 8d:9f:81:16:f3:b3:66:89:be:d4:d1:97:49:b1:9d: 71:85:36:b8:4d:dc:23:60:e6:10:3c:fa:32:06:e7: fd:76:ff:cb:16:66:1f:6b:93:0b:24:43:1a:7d:cd: 54:3f:5a:00:49:6d:33:22:ee:27:5b:0b:5f:6e:9f: a3:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:34:5F:93:C5:CE:DF:A2:BA:94:81:39:2C:C1:CB:8F:35:77:A5:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/9d8752ae-bacd-3320-9f88-b28969f28bc5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.crl X509v3 Authority Key Identifier: keyid:7F:05:48:53:91:7D:90:BB:7C:0D:52:B3:50:23:42:8D:7D:70:E7:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer sbgp-ipAddrBlock: critical IPv4: 207.180.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:d4:60:ff:73:99:f5:b1:52:59:08:3c:b8:d5:73:44:b1:70: c8:d8:c5:71:a4:22:19:dc:11:c7:d9:7d:b3:2b:5f:e9:d5:df: 77:66:db:3e:81:42:01:e8:c6:78:b7:31:6f:1b:5b:38:83:6b: 6b:c5:79:9c:f9:e8:99:e0:a8:19:e2:8b:ff:0c:6a:9e:cd:38: 04:f1:c8:c4:6a:d1:c3:bb:26:e1:c8:94:89:f7:63:0f:c6:ba: e2:33:55:6a:3e:60:89:a1:14:9d:56:61:06:b2:5a:2e:3a:de: 5d:28:24:84:dc:a8:17:16:91:d6:f8:84:3e:d1:68:ac:17:76: f5:ec:e2:43:15:8c:d7:29:05:dd:bd:f1:2f:df:04:05:bc:63: 16:ed:ab:33:ab:55:b6:bb:0f:db:b3:44:1c:5c:09:de:f9:e4: 65:34:c0:c5:7d:8b:d8:23:c8:17:aa:ff:31:09:07:05:99:ec: 96:82:47:07:26:76:0c:e5:b9:08:3f:d8:80:21:ae:f5:ee:e2: ed:e8:11:75:ac:24:97:c2:79:4c:05:3c:7e:bf:2f:44:02:ba: da:5c:ab:5f:1f:6d:cd:1d:aa:12:79:e6:12:94:a0:46:3c:ea: e4:57:a8:06:61:31:0a:12:8d:04:c8:d0:30:12:1b:c4:bb:52: ec:95:ec:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1GxeRV015L3R26MAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2JmMjEwOWUtNjFmNy00NDZkLTg4MzMtYzdiZDFjMzVl YTA4MB4XDTI2MDMyNDE2MjY1M1oXDTI2MDYyMjE2MjY1M1owLzEtMCsGA1UEAxMk MGNkZWZlOTItY2I1OC00MmIxLTk1YTYtMWVmNzllOTUxZDk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoY5o0Zlh0vhp+AKgCQGue8IPnfHVwU1ID2QX ZAUyehX/XXZ5rPT3XUvrrGfxUNZcXJEImSlkFQGtUYLBb+B1pK7JmR5kWaA/3lfD npxgrBZNJlVFUm247BQfhPn4fRevWmHfwJVvUlrCSALObhesFSQMOY7jCKYSjrNa HrukW+pYh2731TR2R4XFjmRxXLN8+ccfqN+OVjXE9lVuXsI2qAVHn/B47Z18CF+u 4yIZUFs5/MsQwxPkdB4kIe8oDbTGMwaNn4EW87Nmib7U0ZdJsZ1xhTa4TdwjYOYQ PPoyBuf9dv/LFmYfa5MLJEMafc1UP1oASW0zIu4nWwtfbp+jpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOA0X5PFzt+iupSBOSzBy481d6VnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zYmYy MTA5ZS02MWY3LTQ0NmQtODgzMy1jN2JkMWMzNWVhMDgvOWQ4NzUyYWUtYmFjZC0z MzIwLTlmODgtYjI4OTY5ZjI4YmM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2JmMjEwOWUtNjFmNy00NDZkLTg4 MzMtYzdiZDFjMzVlYTA4LzNiZjIxMDllLTYxZjctNDQ2ZC04ODMzLWM3YmQxYzM1 ZWEwOC5jcmwwHwYDVR0jBBgwFoAUfwVIU5F9kLt8DVKzUCNCjX1w5+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zYmYyMTA5ZS02MWY3LTQ0NmQtODgzMy1jN2Jk MWMzNWVhMDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz7QqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACHUYP9zmfWxUlkIPLjVc0SxcMjYxXGkIhncEcfZfbMrX+nV33dm2z6B QgHoxni3MW8bWziDa2vFeZz56JngqBnii/8Map7NOATxyMRq0cO7JuHIlIn3Yw/G uuIzVWo+YImhFJ1WYQayWi463l0oJITcqBcWkdb4hD7RaKwXdvXs4kMVjNcpBd29 8S/fBAW8YxbtqzOrVba7D9uzRBxcCd755GU0wMV9i9gjyBeq/zEJBwWZ7JaCRwcm dgzluQg/2IAhrvXu4u3oEXWsJJfCeUwFPH6/L0QCutpcq18fbc0dqhJ55hKUoEY8 6uRXqAZhMQoSjQTI0DASG8S7UuyV7Hc= -----END CERTIFICATE-----Generated at Thu Mar 26 04:39:00 2026 by rpki-client