$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cffdb071-c372-4fb8-ae3c-ab449c400178/0352d911-2e18-33fc-aaaf-abf4b4e22500.roa File: 0352d911-2e18-33fc-aaaf-abf4b4e22500.roa (raw, json) Hash identifier: XBE+Y150B7UqbXZrAYaKK3swCL15MSaFjNuamQzVnBw= Subject key identifier: A2:9D:98:BA:B7:5F:AE:49:FB:14:84:07:C5:D0:21:D0:85:65:05:E4 Certificate issuer: /CN=cffdb071-c372-4fb8-ae3c-ab449c400178 Certificate serial: 010D0C9F4328584B328C5EF681C739BC6772FB00 Authority key identifier: D0:6F:6B:A4:AA:B8:36:BB:87:9F:70:9F:26:54:41:88:92:FD:6D:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cffdb071-c372-4fb8-ae3c-ab449c400178.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cffdb071-c372-4fb8-ae3c-ab449c400178/0352d911-2e18-33fc-aaaf-abf4b4e22500.roa Signing time: Mon 15 Sep 2025 01:00:33 +0000 ROA not before: Mon 15 Sep 2025 01:00:33 +0000 ROA not after: Sun 14 Dec 2025 02:00:33 +0000 asID: 16509 IP address blocks: 207.34.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cffdb071-c372-4fb8-ae3c-ab449c400178/cffdb071-c372-4fb8-ae3c-ab449c400178.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cffdb071-c372-4fb8-ae3c-ab449c400178/cffdb071-c372-4fb8-ae3c-ab449c400178.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cffdb071-c372-4fb8-ae3c-ab449c400178.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:32:8c:5e:f6:81:c7:39:bc:67:72:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cffdb071-c372-4fb8-ae3c-ab449c400178 Validity Not Before: Sep 15 01:00:33 2025 GMT Not After : Dec 14 02:00:33 2025 GMT Subject: CN=22e774e3-be60-4164-9613-bf6767741512 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:38:66:34:8f:38:e7:52:5a:02:1d:af:28:4f: 82:2f:5c:59:a8:2e:9a:aa:50:db:35:ee:57:8a:e4: 6e:46:01:18:32:95:e6:7f:bd:af:79:02:e4:96:90: de:79:8f:37:ba:c6:bc:72:c7:53:3c:d9:39:b3:24: 18:70:1c:ca:90:b2:fc:08:3d:04:65:1e:a1:68:93: fd:80:87:e4:8f:a1:61:a2:73:cb:11:3e:7b:37:f1: 87:0e:e7:ea:82:c4:a9:8a:8e:ae:89:d1:6b:30:f3: e9:d5:21:db:15:71:03:8f:02:ab:d0:39:a4:2e:35: 40:09:41:ee:87:66:0e:3c:80:95:98:d9:a6:ca:d1: 57:74:2d:15:36:59:7d:02:c7:7b:39:7d:17:4f:3a: 8f:2e:3c:c0:76:be:99:95:cc:93:92:6d:ae:44:fc: af:b7:c9:02:e6:7e:db:ef:d0:8c:49:ff:56:de:27: 6e:c5:3c:9f:47:1b:2a:5d:44:9d:de:7d:30:b9:05: f3:92:4d:3e:91:ed:4e:97:f2:82:2d:52:dd:12:33: 09:db:a2:6d:54:89:d9:51:fb:df:a0:d1:06:d6:6b: 0f:bf:4c:bc:bf:3a:f5:df:c8:8f:ab:9e:ea:fa:8e: d6:85:89:73:63:e4:0d:3a:10:eb:80:83:09:0f:d5: b3:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:9D:98:BA:B7:5F:AE:49:FB:14:84:07:C5:D0:21:D0:85:65:05:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cffdb071-c372-4fb8-ae3c-ab449c400178/0352d911-2e18-33fc-aaaf-abf4b4e22500.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cffdb071-c372-4fb8-ae3c-ab449c400178/cffdb071-c372-4fb8-ae3c-ab449c400178.crl X509v3 Authority Key Identifier: keyid:D0:6F:6B:A4:AA:B8:36:BB:87:9F:70:9F:26:54:41:88:92:FD:6D:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cffdb071-c372-4fb8-ae3c-ab449c400178.cer sbgp-ipAddrBlock: critical IPv4: 207.34.10.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:67:40:4d:65:b0:ac:59:71:d5:cf:bc:3b:d7:9b:1c:f5:5c: 49:c2:c6:af:14:d3:59:32:a9:51:ae:f0:40:41:cc:bf:57:d6: 3d:25:71:46:82:e3:8b:5a:e0:0e:d0:ad:df:dd:e6:7a:5b:bd: 50:16:93:c1:f7:b8:de:3b:6e:a0:67:09:8e:24:7d:60:90:b0: 95:79:23:31:2f:72:f5:2c:a3:25:0c:be:e1:e0:d7:9f:87:6f: 31:0f:4e:2d:af:0c:33:a2:82:bb:2a:f0:ba:96:cb:90:14:18: 01:2d:75:fd:55:a3:a9:21:10:a3:17:df:2c:f5:b8:21:7b:47: 21:c1:f6:03:cc:02:9a:0b:d7:b5:8c:7f:ae:1d:12:c7:54:e4: f7:5f:e8:dc:7e:94:83:cb:c9:36:e2:85:09:d8:41:bc:0a:cc: ca:c5:e8:1e:b2:fb:53:da:6e:79:bc:51:06:b6:d5:85:fc:52: b5:57:0d:52:a3:05:14:9c:27:96:49:71:1a:96:1c:d3:d2:83: 5c:ec:6d:15:13:b7:cf:70:3c:47:6a:45:26:33:fd:11:5e:66: 89:b7:d5:e0:2c:4e:6e:dd:f4:1f:71:c2:bc:a2:1a:cc:b7:23: e8:76:2f:41:43:02:0b:c3:5c:13:a3:97:a5:f3:85:cc:54:de: 53:b9:a5:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsyjF72gcc5vGdy+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2ZmZGIwNzEtYzM3Mi00ZmI4LWFlM2MtYWI0NDljNDAw MTc4MB4XDTI1MDkxNTAxMDAzM1oXDTI1MTIxNDAyMDAzM1owLzEtMCsGA1UEAxMk MjJlNzc0ZTMtYmU2MC00MTY0LTk2MTMtYmY2NzY3NzQxNTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8jhmNI8451JaAh2vKE+CL1xZqC6aqlDbNe5X iuRuRgEYMpXmf72veQLklpDeeY83usa8csdTPNk5syQYcBzKkLL8CD0EZR6haJP9 gIfkj6FhonPLET57N/GHDufqgsSpio6uidFrMPPp1SHbFXEDjwKr0DmkLjVACUHu h2YOPICVmNmmytFXdC0VNll9Asd7OX0XTzqPLjzAdr6ZlcyTkm2uRPyvt8kC5n7b 79CMSf9W3iduxTyfRxsqXUSd3n0wuQXzkk0+ke1Ol/KCLVLdEjMJ26JtVInZUfvf oNEG1msPv0y8vzr138iPq57q+o7WhYlzY+QNOhDrgIMJD9WzGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKKdmLq3X65J+xSEB8XQIdCFZQXkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZmZk YjA3MS1jMzcyLTRmYjgtYWUzYy1hYjQ0OWM0MDAxNzgvMDM1MmQ5MTEtMmUxOC0z M2ZjLWFhYWYtYWJmNGI0ZTIyNTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2ZmZGIwNzEtYzM3Mi00ZmI4LWFl M2MtYWI0NDljNDAwMTc4L2NmZmRiMDcxLWMzNzItNGZiOC1hZTNjLWFiNDQ5YzQw MDE3OC5jcmwwHwYDVR0jBBgwFoAU0G9rpKq4NruHn3CfJlRBiJL9bcQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZmZkYjA3MS1jMzcyLTRmYjgtYWUzYy1hYjQ0 OWM0MDAxNzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzyIKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADdnQE1lsKxZcdXPvDvXmxz1XEnCxq8U01kyqVGu8EBBzL9X1j0lcUaC 44ta4A7Qrd/d5npbvVAWk8H3uN47bqBnCY4kfWCQsJV5IzEvcvUsoyUMvuHg15+H bzEPTi2vDDOigrsq8LqWy5AUGAEtdf1Vo6khEKMX3yz1uCF7RyHB9gPMApoL17WM f64dEsdU5Pdf6Nx+lIPLyTbihQnYQbwKzMrF6B6y+1Pabnm8UQa21YX8UrVXDVKj BRScJ5ZJcRqWHNPSg1zsbRUTt89wPEdqRSYz/RFeZom31eAsTm7d9B9xwryiGsy3 I+h2L0FDAgvDXBOjl6XzhcxU3lO5pfs= -----END CERTIFICATE-----Generated at Thu Oct 9 01:25:28 2025 by rpki-client