$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87baa4d2-11b1-4829-9bf6-86e0efc65ff4/34cdba4c-80f1-350c-adea-5c65a62ef612.roa File: 34cdba4c-80f1-350c-adea-5c65a62ef612.roa (raw, json) Hash identifier: myUou4JRChslpeKV5S1vo0y1XKiwF3qRkeFA8mJiH1g= Subject key identifier: B3:06:28:E9:99:50:79:DD:79:18:0F:A7:E6:E9:C9:E3:DF:ED:69:93 Certificate issuer: /CN=87baa4d2-11b1-4829-9bf6-86e0efc65ff4 Certificate serial: 010D0C9F4328584B609C901E944E09A36B56A800 Authority key identifier: 05:BF:BA:DD:14:E0:8D:B2:E2:C7:E6:7B:D7:8E:F9:39:E1:C8:46:51 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87baa4d2-11b1-4829-9bf6-86e0efc65ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87baa4d2-11b1-4829-9bf6-86e0efc65ff4/34cdba4c-80f1-350c-adea-5c65a62ef612.roa Signing time: Wed 01 Oct 2025 13:00:41 +0000 ROA not before: Wed 01 Oct 2025 13:00:41 +0000 ROA not after: Tue 30 Dec 2025 14:00:41 +0000 asID: 14618 IP address blocks: 208.79.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87baa4d2-11b1-4829-9bf6-86e0efc65ff4/87baa4d2-11b1-4829-9bf6-86e0efc65ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87baa4d2-11b1-4829-9bf6-86e0efc65ff4/87baa4d2-11b1-4829-9bf6-86e0efc65ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87baa4d2-11b1-4829-9bf6-86e0efc65ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:60:9c:90:1e:94:4e:09:a3:6b:56:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87baa4d2-11b1-4829-9bf6-86e0efc65ff4 Validity Not Before: Oct 1 13:00:41 2025 GMT Not After : Dec 30 14:00:41 2025 GMT Subject: CN=4456a0d9-878d-4c43-ba7e-9b35abf5876a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:95:cd:d5:64:2f:69:48:2b:7c:8f:a0:da:2a: c2:57:3e:27:31:4a:2e:3e:f7:c7:98:e1:c8:83:b4: f1:52:b0:52:68:be:a0:7b:80:cd:6b:aa:1c:da:1d: 7a:91:9b:74:ad:a7:98:12:5f:d4:34:22:78:68:c3: 42:fc:d4:53:65:36:77:b2:d0:6a:72:10:fe:64:38: 6b:72:ae:01:ad:2e:a3:30:44:72:bd:6a:f3:83:3f: 58:b4:d3:19:e2:b8:c8:38:32:03:e3:41:41:d5:fd: d5:a8:ff:94:1e:18:8a:01:62:10:c2:f1:70:a2:75: 15:08:8b:c4:6f:fe:b8:b1:c4:00:b1:fb:15:5f:07: 55:92:e9:c9:52:d4:87:ab:83:fe:b0:f1:71:c6:a9: db:3a:3d:5a:23:8a:d3:ef:21:43:b6:7f:f0:24:db: 51:b8:38:62:d8:d4:b4:b3:10:9b:a3:0c:0e:c5:07: fc:fb:a9:1a:b7:7e:1e:47:4b:f1:d8:f2:3e:a8:c7: b9:76:c0:df:89:ce:1d:69:1b:e2:6f:57:19:a8:70: c7:c4:74:91:75:1b:bf:53:c3:5a:d4:b3:64:cb:d4: 62:62:1d:56:df:38:1e:e5:b0:37:b5:9a:b0:b5:d0: 1d:43:57:8d:96:93:b8:f0:80:b4:36:fd:1b:50:0a: 9e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:06:28:E9:99:50:79:DD:79:18:0F:A7:E6:E9:C9:E3:DF:ED:69:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87baa4d2-11b1-4829-9bf6-86e0efc65ff4/34cdba4c-80f1-350c-adea-5c65a62ef612.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87baa4d2-11b1-4829-9bf6-86e0efc65ff4/87baa4d2-11b1-4829-9bf6-86e0efc65ff4.crl X509v3 Authority Key Identifier: keyid:05:BF:BA:DD:14:E0:8D:B2:E2:C7:E6:7B:D7:8E:F9:39:E1:C8:46:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87baa4d2-11b1-4829-9bf6-86e0efc65ff4.cer sbgp-ipAddrBlock: critical IPv4: 208.79.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:76:68:07:62:cb:44:c1:a5:d4:06:e5:da:08:87:c5:f6:80: f3:c8:49:71:b1:14:a0:00:ea:50:7d:b2:ad:ba:72:45:19:04: 8a:2d:03:4e:c1:c1:77:9c:67:99:63:36:1d:f7:d9:16:05:33: c4:cf:8a:bf:6d:21:ed:99:c9:2b:cb:f7:53:54:27:56:43:8c: f5:8f:a3:de:bb:5e:9e:dc:2b:85:f8:e7:63:9f:4f:f8:d0:8b: 54:91:71:43:8c:b8:77:7f:45:89:9d:bb:12:f3:7f:bd:e2:f9: 6e:bb:88:5d:3c:a7:b4:a8:14:4c:b1:4a:e2:a2:ea:43:83:5d: 68:24:98:7a:6a:e2:2d:24:63:65:d9:38:55:36:06:c6:e0:4d: 32:a9:50:fc:bf:35:46:58:d8:71:6c:08:19:81:ae:be:82:63: 20:87:45:a0:11:98:1e:3a:bb:20:eb:94:17:70:c5:d1:0c:25: 50:73:aa:c1:1d:87:c4:2a:86:ea:22:21:40:c4:20:17:46:ce: 51:54:ed:50:7e:71:f5:a6:0d:98:b1:c2:0c:18:2d:01:ce:08: 6f:14:a5:80:2a:4c:c4:32:d5:1a:b9:f9:44:fc:87:84:f2:e1: d6:ae:66:a8:8a:ea:30:49:1b:dc:56:e9:96:ab:e0:ec:cc:1f: 20:47:ee:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtgnJAelE4Jo2tWqAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODdiYWE0ZDItMTFiMS00ODI5LTliZjYtODZlMGVmYzY1 ZmY0MB4XDTI1MTAwMTEzMDA0MVoXDTI1MTIzMDE0MDA0MVowLzEtMCsGA1UEAxMk NDQ1NmEwZDktODc4ZC00YzQzLWJhN2UtOWIzNWFiZjU4NzZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15XN1WQvaUgrfI+g2irCVz4nMUouPvfHmOHI g7TxUrBSaL6ge4DNa6oc2h16kZt0raeYEl/UNCJ4aMNC/NRTZTZ3stBqchD+ZDhr cq4BrS6jMERyvWrzgz9YtNMZ4rjIODID40FB1f3VqP+UHhiKAWIQwvFwonUVCIvE b/64scQAsfsVXwdVkunJUtSHq4P+sPFxxqnbOj1aI4rT7yFDtn/wJNtRuDhi2NS0 sxCbowwOxQf8+6kat34eR0vx2PI+qMe5dsDfic4daRvib1cZqHDHxHSRdRu/U8Na 1LNky9RiYh1W3zge5bA3tZqwtdAdQ1eNlpO48IC0Nv0bUAqeqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLMGKOmZUHndeRgPp+bpyePf7WmTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84N2Jh YTRkMi0xMWIxLTQ4MjktOWJmNi04NmUwZWZjNjVmZjQvMzRjZGJhNGMtODBmMS0z NTBjLWFkZWEtNWM2NWE2MmVmNjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODdiYWE0ZDItMTFiMS00ODI5LTli ZjYtODZlMGVmYzY1ZmY0Lzg3YmFhNGQyLTExYjEtNDgyOS05YmY2LTg2ZTBlZmM2 NWZmNC5jcmwwHwYDVR0jBBgwFoAUBb+63RTgjbLix+Z71475OeHIRlEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84N2JhYTRkMi0xMWIxLTQ4MjktOWJmNi04NmUw ZWZjNjVmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0E+HMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAJ2aAdiy0TBpdQG5doIh8X2gPPISXGxFKAA6lB9sq26ckUZBIotA07B wXecZ5ljNh332RYFM8TPir9tIe2ZySvL91NUJ1ZDjPWPo967Xp7cK4X452OfT/jQ i1SRcUOMuHd/RYmduxLzf73i+W67iF08p7SoFEyxSuKi6kODXWgkmHpq4i0kY2XZ OFU2BsbgTTKpUPy/NUZY2HFsCBmBrr6CYyCHRaARmB46uyDrlBdwxdEMJVBzqsEd h8QqhuoiIUDEIBdGzlFU7VB+cfWmDZixwgwYLQHOCG8UpYAqTMQy1Rq5+UT8h4Ty 4dauZqiK6jBJG9xW6Zar4OzMHyBH7jI= -----END CERTIFICATE-----Generated at Wed Oct 8 23:12:03 2025 by rpki-client