$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cffdb071-c372-4fb8-ae3c-ab449c400178/372527a6-bb91-3566-8da6-f837ff4a29fb.roa File: 372527a6-bb91-3566-8da6-f837ff4a29fb.roa (raw, json) Hash identifier: 5pm1UcwZiwPO5iuO5ZnzJ+RJPrKGskaBJKsuy5tAOJk= Subject key identifier: AA:1D:B8:91:3C:C5:74:2A:E2:32:97:56:6C:26:C4:9E:17:AD:E0:C7 Certificate issuer: /CN=cffdb071-c372-4fb8-ae3c-ab449c400178 Certificate serial: 010D0C9F4328584B328C5EE2FCD2BCA64EB02C80 Authority key identifier: D0:6F:6B:A4:AA:B8:36:BB:87:9F:70:9F:26:54:41:88:92:FD:6D:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cffdb071-c372-4fb8-ae3c-ab449c400178.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cffdb071-c372-4fb8-ae3c-ab449c400178/372527a6-bb91-3566-8da6-f837ff4a29fb.roa Signing time: Mon 15 Sep 2025 01:00:33 +0000 ROA not before: Mon 15 Sep 2025 01:00:33 +0000 ROA not after: Sun 14 Dec 2025 02:00:33 +0000 asID: 14618 IP address blocks: 207.34.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cffdb071-c372-4fb8-ae3c-ab449c400178/cffdb071-c372-4fb8-ae3c-ab449c400178.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cffdb071-c372-4fb8-ae3c-ab449c400178/cffdb071-c372-4fb8-ae3c-ab449c400178.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cffdb071-c372-4fb8-ae3c-ab449c400178.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:32:8c:5e:e2:fc:d2:bc:a6:4e:b0:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cffdb071-c372-4fb8-ae3c-ab449c400178 Validity Not Before: Sep 15 01:00:33 2025 GMT Not After : Dec 14 02:00:33 2025 GMT Subject: CN=e4d0d86c-b177-4e91-a789-52783429d416 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:8d:67:43:af:ef:b5:7e:39:25:1b:0e:e6:c6: e2:93:74:21:b1:1b:13:64:8b:74:2d:3b:7f:82:d6: 00:e3:00:c1:aa:e3:73:6c:d8:dc:05:68:bd:c1:54: 8c:1a:b9:5d:ac:43:7a:d2:b1:b5:50:33:62:65:fa: fd:e7:6d:db:6a:5d:a6:a3:9a:0b:0e:69:a9:58:71: 11:21:bc:c2:1c:53:b4:7f:c3:8c:6c:df:cb:d1:4d: a3:5a:0a:8f:0a:f3:3a:c3:6d:f2:d1:c0:98:b1:3a: 61:44:41:d2:e1:6e:56:78:7d:b7:57:4e:49:04:58: c3:54:e1:ae:a0:b5:16:86:84:5a:62:99:98:0a:0e: 2e:10:92:3d:cb:35:de:0a:5d:9b:69:5f:8e:de:f6: 7c:83:c7:d0:06:13:b1:84:9d:67:43:1b:bf:10:e3: a7:d0:af:b3:71:58:c1:60:66:62:4b:18:a0:2c:18: 55:16:20:1e:1e:87:4d:f9:cf:ac:75:33:df:f5:ac: 1e:b7:72:a9:e6:c2:c4:36:6c:a5:76:f1:49:a1:32: 52:26:9c:5d:0f:3b:ee:ca:05:b6:e9:fb:bf:81:3a: 11:f4:51:8b:cb:44:17:24:43:b2:ba:8a:45:b4:c4: ab:84:55:24:bc:0a:b5:8d:d2:c9:62:47:8b:78:33: d7:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:1D:B8:91:3C:C5:74:2A:E2:32:97:56:6C:26:C4:9E:17:AD:E0:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cffdb071-c372-4fb8-ae3c-ab449c400178/372527a6-bb91-3566-8da6-f837ff4a29fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cffdb071-c372-4fb8-ae3c-ab449c400178/cffdb071-c372-4fb8-ae3c-ab449c400178.crl X509v3 Authority Key Identifier: keyid:D0:6F:6B:A4:AA:B8:36:BB:87:9F:70:9F:26:54:41:88:92:FD:6D:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cffdb071-c372-4fb8-ae3c-ab449c400178.cer sbgp-ipAddrBlock: critical IPv4: 207.34.10.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:7b:dc:f2:9f:e9:c6:6d:71:be:b5:34:15:f7:f4:c9:05:26: d7:d2:cf:69:4f:ba:ec:78:a6:fa:43:47:55:74:a7:3f:b7:93: 3e:32:61:47:b9:67:d4:b3:c4:7e:55:88:c6:46:38:87:9b:ec: 35:c3:96:15:66:c0:cf:06:c3:24:c8:94:ee:41:df:f0:f2:65: 75:3e:3b:d1:0e:65:dd:c3:93:d0:99:bc:bd:c4:64:bb:15:a4: bc:5a:94:c1:27:00:64:0c:7c:e4:98:ad:21:26:2f:bd:ce:24: 04:67:83:a3:4c:cf:cd:46:b9:da:2f:5f:af:17:e6:1e:91:71: e2:e1:20:81:4d:86:e3:1d:af:6f:96:0f:c3:2f:91:b5:61:35: 4f:bc:15:9c:c4:54:27:5b:cb:ae:1a:89:eb:17:b6:13:65:69: 7b:c0:94:55:98:7a:e4:80:0b:8a:ce:91:43:0c:73:45:92:84: 10:fb:ee:e3:65:c7:6d:c1:77:5a:5f:21:94:e2:55:f5:fb:32: 7d:a3:04:50:6a:95:e3:e1:ae:33:f1:a1:f5:db:e3:79:3e:0e: 1c:51:fc:ed:1c:9e:b8:0d:6a:cf:cf:95:df:0d:ff:bc:75:84: 53:c8:6f:40:2b:8f:ee:95:c9:26:b3:22:a2:6f:2e:47:c6:f6: ff:94:8e:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsyjF7i/NK8pk6wLIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2ZmZGIwNzEtYzM3Mi00ZmI4LWFlM2MtYWI0NDljNDAw MTc4MB4XDTI1MDkxNTAxMDAzM1oXDTI1MTIxNDAyMDAzM1owLzEtMCsGA1UEAxMk ZTRkMGQ4NmMtYjE3Ny00ZTkxLWE3ODktNTI3ODM0MjlkNDE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxY1nQ6/vtX45JRsO5sbik3QhsRsTZIt0LTt/ gtYA4wDBquNzbNjcBWi9wVSMGrldrEN60rG1UDNiZfr9523bal2mo5oLDmmpWHER IbzCHFO0f8OMbN/L0U2jWgqPCvM6w23y0cCYsTphREHS4W5WeH23V05JBFjDVOGu oLUWhoRaYpmYCg4uEJI9yzXeCl2baV+O3vZ8g8fQBhOxhJ1nQxu/EOOn0K+zcVjB YGZiSxigLBhVFiAeHodN+c+sdTPf9awet3Kp5sLENmyldvFJoTJSJpxdDzvuygW2 6fu/gToR9FGLy0QXJEOyuopFtMSrhFUkvAq1jdLJYkeLeDPX6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKoduJE8xXQq4jKXVmwmxJ4XreDHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZmZk YjA3MS1jMzcyLTRmYjgtYWUzYy1hYjQ0OWM0MDAxNzgvMzcyNTI3YTYtYmI5MS0z NTY2LThkYTYtZjgzN2ZmNGEyOWZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2ZmZGIwNzEtYzM3Mi00ZmI4LWFl M2MtYWI0NDljNDAwMTc4L2NmZmRiMDcxLWMzNzItNGZiOC1hZTNjLWFiNDQ5YzQw MDE3OC5jcmwwHwYDVR0jBBgwFoAU0G9rpKq4NruHn3CfJlRBiJL9bcQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZmZkYjA3MS1jMzcyLTRmYjgtYWUzYy1hYjQ0 OWM0MDAxNzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzyIKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHx73PKf6cZtcb61NBX39MkFJtfSz2lPuux4pvpDR1V0pz+3kz4yYUe5 Z9SzxH5ViMZGOIeb7DXDlhVmwM8GwyTIlO5B3/DyZXU+O9EOZd3Dk9CZvL3EZLsV pLxalMEnAGQMfOSYrSEmL73OJARng6NMz81GudovX68X5h6RceLhIIFNhuMdr2+W D8MvkbVhNU+8FZzEVCdby64aiesXthNlaXvAlFWYeuSAC4rOkUMMc0WShBD77uNl x23Bd1pfIZTiVfX7Mn2jBFBqlePhrjPxofXb43k+DhxR/O0cnrgNas/Pld8N/7x1 hFPIb0Arj+6VySazIqJvLkfG9v+UjjY= -----END CERTIFICATE-----Generated at Wed Oct 8 19:42:49 2025 by rpki-client