$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/601a09a6-3981-3482-b9d5-4a1a7bfe14c9.roa File: 601a09a6-3981-3482-b9d5-4a1a7bfe14c9.roa (raw, json) Hash identifier: G572TTaRj7x0UYuh1e1XYmgYUg7SuTRJU5rdvEo4Kaw= Subject key identifier: 10:C0:E6:53:9F:49:18:B9:8E:B6:16:69:24:AA:89:CA:96:13:0F:81 Certificate issuer: /CN=3bf2109e-61f7-446d-8833-c7bd1c35ea08 Certificate serial: 010D0C9F4328584D143D568A54FD2611CFA48C00 Authority key identifier: 7F:05:48:53:91:7D:90:BB:7C:0D:52:B3:50:23:42:8D:7D:70:E7:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/601a09a6-3981-3482-b9d5-4a1a7bfe14c9.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 29802 IP address blocks: 207.180.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 10 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:56:8a:54:fd:26:11:cf:a4:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bf2109e-61f7-446d-8833-c7bd1c35ea08 Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=995b21ed-74d0-4098-8aec-d4881f9df0b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a0:10:42:90:77:41:59:ea:96:b4:67:46:45: 98:f1:51:12:9f:48:f0:31:71:ce:41:42:aa:5f:a0: f6:be:f1:d7:d6:28:00:b0:32:97:0a:b3:7f:f3:62: 5e:2f:60:1f:f9:2d:4d:9b:c6:5c:6f:42:94:53:07: e2:06:c3:4f:38:9e:d4:c4:70:65:3b:e3:3e:c2:84: f4:05:a1:d9:89:4d:9e:8e:62:59:30:08:e9:ea:2a: dc:23:ac:94:d4:06:0d:ca:16:e3:01:4a:80:b6:db: c9:5f:19:b3:23:38:b6:a6:e3:3d:30:16:87:ce:ec: 99:97:57:6d:17:dc:79:51:ec:ce:93:37:cd:f1:f4: 36:ba:09:d1:05:3d:b1:c3:66:1a:59:5b:53:3b:a2: 9c:0e:ab:4d:2b:07:04:85:11:ff:d2:06:ca:5f:3c: 70:41:8b:e1:a0:89:3b:d9:bf:7b:42:b3:47:aa:dd: d0:1f:41:a0:83:2d:ec:1a:20:e7:3d:1f:8f:95:6a: b6:a5:02:73:97:1c:75:2a:10:e4:48:38:09:81:ec: 0b:c8:e9:f8:dd:99:cb:3c:f5:6d:a0:0b:14:6b:1c: 64:14:75:4c:2f:e7:b3:fc:e1:13:11:bf:3f:82:88: 13:19:2f:f3:40:4d:84:78:eb:01:ea:77:93:2f:f9: 7e:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:C0:E6:53:9F:49:18:B9:8E:B6:16:69:24:AA:89:CA:96:13:0F:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/601a09a6-3981-3482-b9d5-4a1a7bfe14c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.crl X509v3 Authority Key Identifier: keyid:7F:05:48:53:91:7D:90:BB:7C:0D:52:B3:50:23:42:8D:7D:70:E7:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer sbgp-ipAddrBlock: critical IPv4: 207.180.49.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:b2:e5:22:ba:19:43:2e:77:9d:cc:a0:02:a3:a8:c6:3a:c8: d1:7f:d1:50:19:e6:88:91:46:1e:68:6c:9c:99:6a:6c:3d:07: 52:d4:55:62:1c:60:ad:59:33:01:1a:c6:b3:1b:21:46:ba:62: 4c:d5:fb:ba:29:24:53:56:94:97:52:9c:b1:7e:b7:41:51:2a: de:49:4b:53:be:c0:03:d0:8e:86:42:21:68:de:dc:0a:99:b3: e7:f1:43:59:49:88:ba:be:66:4d:d0:97:56:64:ac:90:e7:72: cf:f6:1b:95:bf:55:b0:a2:c9:ea:07:b7:c7:3f:d9:a1:5b:71: e3:24:67:4f:68:dd:93:72:c6:fe:15:2b:a5:3e:46:8a:46:5a: a5:29:62:33:60:e8:5b:04:31:0d:41:0d:a7:76:ee:cb:b5:1a: 56:1a:65:d2:65:04:a7:e9:83:51:85:11:e1:59:f4:aa:51:bd: 9b:8a:e6:60:87:da:b8:fb:40:30:63:95:16:a3:f0:76:0f:52: 3a:0b:19:11:86:94:48:39:b0:97:f0:a4:26:cd:9f:50:b8:8b: c5:d1:50:74:4d:60:20:76:7e:50:42:8b:d8:cc:ad:f4:75:ca: 12:ec:93:38:ae:9f:ba:a4:0c:c4:b5:3e:45:ba:97:f2:29:2c: 3e:3e:be:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPVaKVP0mEc+kjAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2JmMjEwOWUtNjFmNy00NDZkLTg4MzMtYzdiZDFjMzVl YTA4MB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk OTk1YjIxZWQtNzRkMC00MDk4LThhZWMtZDQ4ODFmOWRmMGIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaAQQpB3QVnqlrRnRkWY8VESn0jwMXHOQUKq X6D2vvHX1igAsDKXCrN/82JeL2Af+S1Nm8Zcb0KUUwfiBsNPOJ7UxHBlO+M+woT0 BaHZiU2ejmJZMAjp6ircI6yU1AYNyhbjAUqAttvJXxmzIzi2puM9MBaHzuyZl1dt F9x5UezOkzfN8fQ2ugnRBT2xw2YaWVtTO6KcDqtNKwcEhRH/0gbKXzxwQYvhoIk7 2b97QrNHqt3QH0Gggy3sGiDnPR+PlWq2pQJzlxx1KhDkSDgJgewLyOn43ZnLPPVt oAsUaxxkFHVML+ez/OETEb8/gogTGS/zQE2EeOsB6neTL/l+rwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBDA5lOfSRi5jrYWaSSqicqWEw+BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zYmYy MTA5ZS02MWY3LTQ0NmQtODgzMy1jN2JkMWMzNWVhMDgvNjAxYTA5YTYtMzk4MS0z NDgyLWI5ZDUtNGExYTdiZmUxNGM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2JmMjEwOWUtNjFmNy00NDZkLTg4 MzMtYzdiZDFjMzVlYTA4LzNiZjIxMDllLTYxZjctNDQ2ZC04ODMzLWM3YmQxYzM1 ZWEwOC5jcmwwHwYDVR0jBBgwFoAUfwVIU5F9kLt8DVKzUCNCjX1w5+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zYmYyMTA5ZS02MWY3LTQ0NmQtODgzMy1jN2Jk MWMzNWVhMDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz7QxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACiy5SK6GUMud53MoAKjqMY6yNF/0VAZ5oiRRh5obJyZamw9B1LUVWIc YK1ZMwEaxrMbIUa6YkzV+7opJFNWlJdSnLF+t0FRKt5JS1O+wAPQjoZCIWje3AqZ s+fxQ1lJiLq+Zk3Ql1ZkrJDncs/2G5W/VbCiyeoHt8c/2aFbceMkZ09o3ZNyxv4V K6U+RopGWqUpYjNg6FsEMQ1BDad27su1GlYaZdJlBKfpg1GFEeFZ9KpRvZuK5mCH 2rj7QDBjlRaj8HYPUjoLGRGGlEg5sJfwpCbNn1C4i8XRUHRNYCB2flBCi9jMrfR1 yhLskziun7qkDMS1PkW6l/IpLD4+vmA= -----END CERTIFICATE-----Generated at Sat Mar 7 20:51:42 2026 by rpki-client