$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/af9f9752-6d36-3aec-a5dd-2150ad136079.roa File: af9f9752-6d36-3aec-a5dd-2150ad136079.roa (raw, json) Hash identifier: JV2GuOk5kPe2QiOHIXJ3xhd+GE6slKD0h9a+Tclxqxo= Subject key identifier: 6F:7E:D2:0D:A8:F7:25:F6:74:E8:10:99:39:79:73:94:91:83:54:A6 Certificate issuer: /CN=3bf2109e-61f7-446d-8833-c7bd1c35ea08 Certificate serial: 010D0C9F4328584D63B240A9801579DE13D85180 Authority key identifier: 7F:05:48:53:91:7D:90:BB:7C:0D:52:B3:50:23:42:8D:7D:70:E7:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/af9f9752-6d36-3aec-a5dd-2150ad136079.roa Signing time: Sat 04 Apr 2026 01:05:45 +0000 ROA not before: Sat 04 Apr 2026 01:05:45 +0000 ROA not after: Fri 03 Jul 2026 01:05:45 +0000 asID: 834 IP address blocks: 207.180.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:63:b2:40:a9:80:15:79:de:13:d8:51:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bf2109e-61f7-446d-8833-c7bd1c35ea08 Validity Not Before: Apr 4 01:05:45 2026 GMT Not After : Jul 3 01:05:45 2026 GMT Subject: CN=40374758-d7ee-4456-b6d8-3decdfdfd359 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:6f:6e:58:6f:cd:52:c7:98:5e:af:d7:e6:5c: 84:05:6c:bc:77:57:3a:f1:3c:41:d4:0a:36:0c:32: 8d:25:d3:3f:28:52:83:70:3b:60:2c:2f:32:d0:1d: 37:df:57:6f:ad:de:4d:22:6e:ab:4b:44:da:c9:50: 4b:b6:df:e0:c3:3e:65:d2:ce:6a:4a:9c:13:ee:a4: 77:2c:e7:b8:2a:d3:87:4c:32:1f:33:96:da:bc:dd: 35:2f:4d:25:19:ba:b4:e1:9b:10:71:93:c7:e9:13: 05:77:4f:17:c7:8b:b4:06:9f:6b:db:14:c5:75:9b: 34:cc:76:64:30:a4:8c:e2:e6:01:8c:38:41:01:03: e9:ba:a4:d9:53:1f:ca:e1:ec:f7:d6:40:9c:db:15: 00:61:85:f8:75:fa:aa:1c:bf:f2:71:03:22:d8:83: 09:d6:d7:48:4f:bd:fd:65:c1:72:ed:4c:9a:fe:77: 38:76:4b:8e:02:dd:25:1e:13:2b:f6:3d:40:f2:95: 6d:af:95:27:e3:44:9d:0f:a1:25:d6:44:38:25:35: e7:31:15:a8:2e:5a:46:e4:aa:53:d1:7b:d9:d1:71: ac:49:2f:3a:9a:26:8e:a6:33:02:a4:03:d2:d0:4f: e3:ee:d3:5e:8e:6c:90:64:17:f0:1a:74:ae:91:bf: 2e:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:7E:D2:0D:A8:F7:25:F6:74:E8:10:99:39:79:73:94:91:83:54:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/af9f9752-6d36-3aec-a5dd-2150ad136079.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.crl X509v3 Authority Key Identifier: keyid:7F:05:48:53:91:7D:90:BB:7C:0D:52:B3:50:23:42:8D:7D:70:E7:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer sbgp-ipAddrBlock: critical IPv4: 207.180.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:36:8b:63:46:00:c5:46:d2:d6:d6:42:72:ee:df:f7:0c:5d: f1:96:77:7c:2f:c0:78:bc:01:60:5c:6a:fa:2d:13:38:ac:42: 8a:45:92:15:6f:41:44:75:81:82:78:c6:95:21:c5:e8:34:09: 30:27:3b:ea:f0:35:bd:20:61:f9:10:b7:be:b9:e1:8a:3c:d4: 8d:e9:6b:79:7a:39:aa:c7:e7:40:36:e1:32:76:07:cc:ed:16: 09:13:50:98:83:bf:a3:ad:e3:35:06:df:08:ff:71:74:62:c7: e4:22:74:f0:66:59:b0:52:d6:59:f6:29:ac:9a:ef:fb:2b:ea: 85:fd:02:36:1e:1e:d2:89:1f:97:fe:a5:c0:ef:ac:30:67:d9: 99:5a:1b:2d:ac:a7:fd:86:09:40:ec:17:54:9d:80:9e:bf:07: 69:65:07:3e:90:c4:a4:3b:cc:38:14:0b:d5:3c:9b:c3:5f:23: 5a:bd:98:aa:a2:32:df:2c:d7:a9:de:12:d3:f9:8c:a1:22:dd: 93:b7:6a:72:0b:79:09:58:a8:f8:79:d3:e4:6d:64:51:27:59: 1c:9f:12:87:f9:7d:a8:87:c8:d3:3d:fc:7d:7b:d4:2f:3e:bd: 49:76:bf:0f:a8:97:b8:a2:b3:1a:83:4d:5b:f5:0e:de:70:76: e9:c0:6f:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1jskCpgBV53hPYUYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2JmMjEwOWUtNjFmNy00NDZkLTg4MzMtYzdiZDFjMzVl YTA4MB4XDTI2MDQwNDAxMDU0NVoXDTI2MDcwMzAxMDU0NVowLzEtMCsGA1UEAxMk NDAzNzQ3NTgtZDdlZS00NDU2LWI2ZDgtM2RlY2RmZGZkMzU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqG9uWG/NUseYXq/X5lyEBWy8d1c68TxB1Ao2 DDKNJdM/KFKDcDtgLC8y0B0331dvrd5NIm6rS0TayVBLtt/gwz5l0s5qSpwT7qR3 LOe4KtOHTDIfM5bavN01L00lGbq04ZsQcZPH6RMFd08Xx4u0Bp9r2xTFdZs0zHZk MKSM4uYBjDhBAQPpuqTZUx/K4ez31kCc2xUAYYX4dfqqHL/ycQMi2IMJ1tdIT739 ZcFy7Uya/nc4dkuOAt0lHhMr9j1A8pVtr5Un40SdD6El1kQ4JTXnMRWoLlpG5KpT 0XvZ0XGsSS86miaOpjMCpAPS0E/j7tNejmyQZBfwGnSukb8uAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG9+0g2o9yX2dOgQmTl5c5SRg1SmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zYmYy MTA5ZS02MWY3LTQ0NmQtODgzMy1jN2JkMWMzNWVhMDgvYWY5Zjk3NTItNmQzNi0z YWVjLWE1ZGQtMjE1MGFkMTM2MDc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2JmMjEwOWUtNjFmNy00NDZkLTg4 MzMtYzdiZDFjMzVlYTA4LzNiZjIxMDllLTYxZjctNDQ2ZC04ODMzLWM3YmQxYzM1 ZWEwOC5jcmwwHwYDVR0jBBgwFoAUfwVIU5F9kLt8DVKzUCNCjX1w5+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zYmYyMTA5ZS02MWY3LTQ0NmQtODgzMy1jN2Jk MWMzNWVhMDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz7QWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABY2i2NGAMVG0tbWQnLu3/cMXfGWd3wvwHi8AWBcavotEzisQopFkhVv QUR1gYJ4xpUhxeg0CTAnO+rwNb0gYfkQt7654Yo81I3pa3l6OarH50A24TJ2B8zt FgkTUJiDv6Ot4zUG3wj/cXRix+QidPBmWbBS1ln2Kaya7/sr6oX9AjYeHtKJH5f+ pcDvrDBn2ZlaGy2sp/2GCUDsF1SdgJ6/B2llBz6QxKQ7zDgUC9U8m8NfI1q9mKqi Mt8s16neEtP5jKEi3ZO3anILeQlYqPh50+RtZFEnWRyfEof5faiHyNM9/H171C8+ vUl2vw+ol7iisxqDTVv1Dt5wdunAb1I= -----END CERTIFICATE-----Generated at Fri Apr 17 15:44:28 2026 by rpki-client