$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/8331368f-7ef6-3299-ad28-2257abd36450.roa File: 8331368f-7ef6-3299-ad28-2257abd36450.roa (raw, json) Hash identifier: 1X3NSMGt660Xpr0SNww/6wpslqh75Gke33DbdXXm8e8= Subject key identifier: B2:6B:05:1C:28:5C:FF:47:6C:11:AB:A6:D4:68:C5:78:DC:B7:96:AC Certificate issuer: /CN=3bf2109e-61f7-446d-8833-c7bd1c35ea08 Certificate serial: 010D0C9F4328584D626E2C4B539E70FA307B6818 Authority key identifier: 7F:05:48:53:91:7D:90:BB:7C:0D:52:B3:50:23:42:8D:7D:70:E7:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/8331368f-7ef6-3299-ad28-2257abd36450.roa Signing time: Fri 03 Apr 2026 14:12:47 +0000 ROA not before: Fri 03 Apr 2026 14:12:47 +0000 ROA not after: Thu 02 Jul 2026 14:12:47 +0000 asID: 834 IP address blocks: 207.180.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:62:6e:2c:4b:53:9e:70:fa:30:7b:68:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bf2109e-61f7-446d-8833-c7bd1c35ea08 Validity Not Before: Apr 3 14:12:47 2026 GMT Not After : Jul 2 14:12:47 2026 GMT Subject: CN=07c3933a-7cce-4d7d-961a-4bc8c228ea18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:8b:24:47:9d:ed:43:c1:69:83:0f:37:cd:be: 61:c8:c5:c7:fc:e9:0a:fe:58:a0:4b:7e:0f:6d:41: f6:02:b0:bc:74:f0:f1:f6:2b:17:91:c4:54:07:be: c0:59:4c:b8:70:6e:7a:7e:e0:c4:6f:c5:52:0d:56: 04:d3:65:7d:00:13:47:fc:66:ec:83:2e:07:66:59: 45:8f:cd:3c:db:42:df:9a:2e:a3:a4:57:9d:8f:1e: fe:ed:58:93:77:ca:8e:41:89:fe:c2:f8:e4:30:7e: 60:26:d0:12:5b:43:d7:08:e7:36:bd:38:96:74:d9: bd:b4:a0:4a:c4:b4:b3:76:41:e1:25:34:37:ef:4e: cb:13:c4:7c:65:c9:fd:f3:b1:ea:0c:31:26:d8:89: b8:ed:fd:43:da:65:32:a9:b5:1b:7b:ed:d3:6a:73: 56:12:84:7f:52:5a:ab:85:07:b4:59:f7:71:8c:97: ec:67:69:12:b1:cd:48:96:83:90:ac:1c:b8:19:53: fb:98:25:b0:3d:4f:14:5d:dc:01:ed:34:9c:2b:0d: e5:29:e1:9d:12:f3:0a:d7:fc:58:6a:ba:97:27:5c: f7:22:61:6b:79:fb:70:5d:05:fe:04:34:42:dd:01: cd:a4:d9:ea:e6:60:e3:95:bc:54:c0:4a:8d:fd:f4: da:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:6B:05:1C:28:5C:FF:47:6C:11:AB:A6:D4:68:C5:78:DC:B7:96:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/8331368f-7ef6-3299-ad28-2257abd36450.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.crl X509v3 Authority Key Identifier: keyid:7F:05:48:53:91:7D:90:BB:7C:0D:52:B3:50:23:42:8D:7D:70:E7:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer sbgp-ipAddrBlock: critical IPv4: 207.180.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:cf:8b:63:b0:40:d3:0a:d8:04:70:b6:59:dc:c3:66:cb:58: 8b:52:c4:8f:ec:bf:0c:f2:46:5e:b8:24:55:19:b5:31:8c:20: dd:2b:02:aa:1a:df:29:81:69:44:a1:a4:3e:4d:7b:42:7b:2d: 2b:ab:79:ed:5c:55:db:26:7b:1e:7d:52:7e:b5:fa:71:f9:67: e6:18:45:d6:bc:4b:e3:db:30:d8:00:bc:73:2f:81:8a:1d:ae: 60:e5:ea:8c:93:39:a2:83:67:2f:48:8e:3d:6b:2a:1d:b4:aa: f2:1e:c7:d0:72:2a:5d:53:5f:b7:ca:93:8e:35:ed:d9:be:b2: 83:31:83:c1:97:c1:c7:41:5f:39:3c:e0:17:db:7e:7d:62:56: 51:ca:23:2f:a5:a9:9b:ab:e7:0b:66:f4:68:6a:56:29:a1:31: 36:87:db:d0:f4:4f:c8:e0:13:3b:ca:31:22:58:de:17:11:d7: fb:73:e8:8e:30:c7:0f:0d:9d:57:34:6c:0f:c3:62:b0:a8:8d: 04:e0:0b:61:e4:f0:4f:17:11:5a:e9:ad:92:8c:08:8b:87:5e: 2b:85:bc:6a:f2:01:e1:32:4e:3e:ac:b8:8c:a7:9f:f5:42:f1: d1:7c:00:3a:c2:76:50:2a:17:90:e4:c7:61:ca:6c:c8:cc:79: 76:f5:30:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1ibixLU55w+jB7aBgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2JmMjEwOWUtNjFmNy00NDZkLTg4MzMtYzdiZDFjMzVl YTA4MB4XDTI2MDQwMzE0MTI0N1oXDTI2MDcwMjE0MTI0N1owLzEtMCsGA1UEAxMk MDdjMzkzM2EtN2NjZS00ZDdkLTk2MWEtNGJjOGMyMjhlYTE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3IskR53tQ8Fpgw83zb5hyMXH/OkK/ligS34P bUH2ArC8dPDx9isXkcRUB77AWUy4cG56fuDEb8VSDVYE02V9ABNH/Gbsgy4HZllF j80820Lfmi6jpFedjx7+7ViTd8qOQYn+wvjkMH5gJtASW0PXCOc2vTiWdNm9tKBK xLSzdkHhJTQ3707LE8R8Zcn987HqDDEm2Im47f1D2mUyqbUbe+3TanNWEoR/Ulqr hQe0WfdxjJfsZ2kSsc1IloOQrBy4GVP7mCWwPU8UXdwB7TScKw3lKeGdEvMK1/xY arqXJ1z3ImFreftwXQX+BDRC3QHNpNnq5mDjlbxUwEqN/fTa8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLJrBRwoXP9HbBGrptRoxXjct5asMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zYmYy MTA5ZS02MWY3LTQ0NmQtODgzMy1jN2JkMWMzNWVhMDgvODMzMTM2OGYtN2VmNi0z Mjk5LWFkMjgtMjI1N2FiZDM2NDUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2JmMjEwOWUtNjFmNy00NDZkLTg4 MzMtYzdiZDFjMzVlYTA4LzNiZjIxMDllLTYxZjctNDQ2ZC04ODMzLWM3YmQxYzM1 ZWEwOC5jcmwwHwYDVR0jBBgwFoAUfwVIU5F9kLt8DVKzUCNCjX1w5+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zYmYyMTA5ZS02MWY3LTQ0NmQtODgzMy1jN2Jk MWMzNWVhMDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz7QNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHrPi2OwQNMK2ARwtlncw2bLWItSxI/svwzyRl64JFUZtTGMIN0rAqoa 3ymBaUShpD5Ne0J7LSuree1cVdsmex59Un61+nH5Z+YYRda8S+PbMNgAvHMvgYod rmDl6oyTOaKDZy9Ijj1rKh20qvIex9ByKl1TX7fKk4417dm+soMxg8GXwcdBXzk8 4Bfbfn1iVlHKIy+lqZur5wtm9GhqVimhMTaH29D0T8jgEzvKMSJY3hcR1/tz6I4w xw8NnVc0bA/DYrCojQTgC2Hk8E8XEVrprZKMCIuHXiuFvGryAeEyTj6suIynn/VC 8dF8ADrCdlAqF5Dkx2HKbMjMeXb1MFo= -----END CERTIFICATE-----Generated at Fri Apr 17 17:52:25 2026 by rpki-client