$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cffdb071-c372-4fb8-ae3c-ab449c400178/0352d911-2e18-33fc-aaaf-abf4b4e22500.roa File: 0352d911-2e18-33fc-aaaf-abf4b4e22500.roa (raw, json) Hash identifier: IouMvpKpbneSqgtaA1dBqTZdLsnwJtrcJmAICaCSpDo= Subject key identifier: 08:3D:C8:22:DC:5C:3A:E8:FE:A6:23:AA:7D:04:C6:8A:A0:36:DD:FF Certificate issuer: /CN=cffdb071-c372-4fb8-ae3c-ab449c400178 Certificate serial: 010D0C9F4328584F498A27B1937ED48DD42E8E00 Authority key identifier: D0:6F:6B:A4:AA:B8:36:BB:87:9F:70:9F:26:54:41:88:92:FD:6D:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cffdb071-c372-4fb8-ae3c-ab449c400178.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cffdb071-c372-4fb8-ae3c-ab449c400178/0352d911-2e18-33fc-aaaf-abf4b4e22500.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16509 IP address blocks: 207.34.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cffdb071-c372-4fb8-ae3c-ab449c400178/cffdb071-c372-4fb8-ae3c-ab449c400178.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cffdb071-c372-4fb8-ae3c-ab449c400178/cffdb071-c372-4fb8-ae3c-ab449c400178.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cffdb071-c372-4fb8-ae3c-ab449c400178.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8a:27:b1:93:7e:d4:8d:d4:2e:8e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cffdb071-c372-4fb8-ae3c-ab449c400178 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=1ac2e66f-e1a2-4567-95d9-5fa4d68a2630 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:46:4b:93:61:c7:0f:66:96:13:ea:ef:cf:55: 4a:12:39:dc:c6:bd:be:d0:13:db:b5:96:bb:ea:83: 3d:b6:c5:a4:74:df:55:10:d2:d0:22:b4:2c:97:c4: 04:4b:c7:86:c0:fe:6a:db:96:c9:80:76:22:c3:bf: 77:50:58:55:a1:c7:1e:99:44:38:32:10:d4:08:d9: 5d:43:77:82:bf:1a:12:01:bd:14:5e:c9:0b:d2:ca: c1:fe:ac:40:65:e7:2f:43:41:38:5f:b4:a4:cf:80: fc:20:41:d7:13:32:f1:7f:10:2f:bc:9c:38:fe:7d: b9:53:53:89:d5:2a:00:d1:de:b0:c2:c5:50:4e:d3: a8:9d:b5:3f:b3:af:20:60:9e:fa:e3:1c:9b:01:5b: 93:57:13:c0:b2:6f:63:07:91:84:5d:30:30:e3:c5: 12:80:e1:27:b7:62:68:65:ca:ae:a0:c7:19:a3:d7: 28:66:8d:2d:da:a9:0d:dd:2d:58:ce:b3:1e:62:fc: 6b:1c:cd:a0:03:71:60:cd:bc:2f:8f:cb:0c:e8:c4: 00:ff:de:e8:72:ec:4e:ac:cb:d6:45:69:9b:2f:67: 69:d4:cc:59:ed:21:a9:5c:09:6f:f2:1b:2e:e0:92: a6:40:d8:04:99:f9:8b:ce:bb:63:db:4c:af:e1:e3: a2:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:3D:C8:22:DC:5C:3A:E8:FE:A6:23:AA:7D:04:C6:8A:A0:36:DD:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cffdb071-c372-4fb8-ae3c-ab449c400178/0352d911-2e18-33fc-aaaf-abf4b4e22500.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cffdb071-c372-4fb8-ae3c-ab449c400178/cffdb071-c372-4fb8-ae3c-ab449c400178.crl X509v3 Authority Key Identifier: keyid:D0:6F:6B:A4:AA:B8:36:BB:87:9F:70:9F:26:54:41:88:92:FD:6D:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cffdb071-c372-4fb8-ae3c-ab449c400178.cer sbgp-ipAddrBlock: critical IPv4: 207.34.10.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:7e:f2:e8:49:72:c6:de:0f:06:4f:74:a1:4c:66:0f:39:92: 52:eb:89:ae:2e:da:63:b1:a0:f3:3d:04:1c:22:99:37:66:1d: 61:64:74:84:26:b6:3d:a5:68:5e:7a:6a:13:75:b7:01:ae:fa: 68:36:a7:58:c3:e7:57:e0:31:6c:89:3e:f8:bd:20:35:74:54: 40:11:4d:41:48:0b:40:94:47:82:34:2e:88:90:41:d1:a7:3d: 1c:3f:c1:7d:d3:37:0c:90:85:56:da:35:57:22:99:a3:b5:a1: 5a:74:b3:09:6e:97:d8:c6:af:74:89:87:51:ef:ce:2d:5f:d2: 57:1f:c1:66:63:e9:61:36:81:74:82:96:ec:32:c1:51:11:6d: 12:5c:33:f3:d1:2b:55:bd:8d:a1:c2:74:a7:c8:b1:81:ab:cd: 95:ad:0e:1b:0e:61:2a:9e:5d:d3:fe:bd:01:4b:87:ea:d5:7d: 8f:69:c0:67:72:32:42:6d:eb:33:a9:00:53:4e:a1:13:4e:45: d7:e3:28:99:56:e2:05:be:61:7d:5a:30:5d:6d:a7:9e:ef:30: a1:61:59:a0:6c:e0:8d:ef:69:3f:8c:13:02:05:04:18:38:21: ad:65:ce:17:cc:4e:82:da:f4:40:42:9b:18:dc:6e:0b:d3:98: 13:a9:1f:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jiiexk37UjdQujgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2ZmZGIwNzEtYzM3Mi00ZmI4LWFlM2MtYWI0NDljNDAw MTc4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MWFjMmU2NmYtZTFhMi00NTY3LTk1ZDktNWZhNGQ2OGEyNjMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkZLk2HHD2aWE+rvz1VKEjncxr2+0BPbtZa7 6oM9tsWkdN9VENLQIrQsl8QES8eGwP5q25bJgHYiw793UFhVoccemUQ4MhDUCNld Q3eCvxoSAb0UXskL0srB/qxAZecvQ0E4X7Skz4D8IEHXEzLxfxAvvJw4/n25U1OJ 1SoA0d6wwsVQTtOonbU/s68gYJ764xybAVuTVxPAsm9jB5GEXTAw48USgOEnt2Jo ZcquoMcZo9coZo0t2qkN3S1YzrMeYvxrHM2gA3Fgzbwvj8sM6MQA/97ocuxOrMvW RWmbL2dp1MxZ7SGpXAlv8hsu4JKmQNgEmfmLzrtj20yv4eOiVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAg9yCLcXDro/qYjqn0ExoqgNt3/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZmZk YjA3MS1jMzcyLTRmYjgtYWUzYy1hYjQ0OWM0MDAxNzgvMDM1MmQ5MTEtMmUxOC0z M2ZjLWFhYWYtYWJmNGI0ZTIyNTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2ZmZGIwNzEtYzM3Mi00ZmI4LWFl M2MtYWI0NDljNDAwMTc4L2NmZmRiMDcxLWMzNzItNGZiOC1hZTNjLWFiNDQ5YzQw MDE3OC5jcmwwHwYDVR0jBBgwFoAU0G9rpKq4NruHn3CfJlRBiJL9bcQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZmZkYjA3MS1jMzcyLTRmYjgtYWUzYy1hYjQ0 OWM0MDAxNzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzyIKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFt+8uhJcsbeDwZPdKFMZg85klLria4u2mOxoPM9BBwimTdmHWFkdIQm tj2laF56ahN1twGu+mg2p1jD51fgMWyJPvi9IDV0VEARTUFIC0CUR4I0LoiQQdGn PRw/wX3TNwyQhVbaNVcimaO1oVp0swlul9jGr3SJh1Hvzi1f0lcfwWZj6WE2gXSC luwywVERbRJcM/PRK1W9jaHCdKfIsYGrzZWtDhsOYSqeXdP+vQFLh+rVfY9pwGdy MkJt6zOpAFNOoRNORdfjKJlW4gW+YX1aMF1tp57vMKFhWaBs4I3vaT+MEwIFBBg4 Ia1lzhfMToLa9EBCmxjcbgvTmBOpH9E= -----END CERTIFICATE-----Generated at Sun Sep 27 01:54:04 2026 by rpki-client