$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cffdb071-c372-4fb8-ae3c-ab449c400178/bf398656-87b8-31bc-bc34-40b0e06987a0.roa File: bf398656-87b8-31bc-bc34-40b0e06987a0.roa (raw, json) Hash identifier: AMi0n1dOir7a9eC3qQjibyDROno2oNHU19qvatLerGw= Subject key identifier: F1:2D:8C:F8:1D:F6:DB:DA:4E:5C:2E:DF:1E:06:2B:A1:AD:1E:4D:9F Certificate issuer: /CN=cffdb071-c372-4fb8-ae3c-ab449c400178 Certificate serial: 010D0C9F4328584AD23BB15F1D3718C576E1C9E0 Authority key identifier: D0:6F:6B:A4:AA:B8:36:BB:87:9F:70:9F:26:54:41:88:92:FD:6D:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cffdb071-c372-4fb8-ae3c-ab449c400178.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cffdb071-c372-4fb8-ae3c-ab449c400178/bf398656-87b8-31bc-bc34-40b0e06987a0.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 16509 IP address blocks: 207.34.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cffdb071-c372-4fb8-ae3c-ab449c400178/cffdb071-c372-4fb8-ae3c-ab449c400178.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cffdb071-c372-4fb8-ae3c-ab449c400178/cffdb071-c372-4fb8-ae3c-ab449c400178.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cffdb071-c372-4fb8-ae3c-ab449c400178.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:b1:5f:1d:37:18:c5:76:e1:c9:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cffdb071-c372-4fb8-ae3c-ab449c400178 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=1f494dff-3a85-44f8-8401-447001f844cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e4:b2:1e:22:65:81:23:96:59:11:d0:6b:39: 4e:33:b4:49:79:ea:6a:16:16:e4:f3:cd:41:b9:f2: ad:13:1e:ae:57:89:fa:87:1b:50:6f:d4:a2:5e:87: 76:49:2e:c5:10:e4:be:84:3d:c9:79:12:99:29:ed: 6a:5b:02:fe:9a:44:db:04:f8:cb:f1:de:47:f3:24: 52:91:cb:a6:5e:8b:97:12:48:71:ec:5f:37:34:fb: 42:52:67:a3:23:9e:09:dc:aa:96:58:d1:a6:d3:2e: 4f:c1:26:84:c5:18:94:e9:b9:5f:72:73:9b:72:80: dd:57:11:c9:0f:2c:2a:3c:c7:2f:4a:13:c0:12:0d: 64:66:7b:1d:e4:15:6d:4a:e2:08:10:6e:9d:e4:41: 53:d9:3f:2d:8e:d5:f6:41:e4:52:45:84:a9:74:46: 57:21:ee:95:ad:c0:b1:78:ca:78:ce:c8:85:92:8f: 3e:4a:36:d1:fb:b8:18:9d:16:19:f4:d0:8f:46:ea: 5b:de:0f:1e:21:15:65:7d:31:1f:b2:f4:0a:fd:d7: 79:9d:26:af:a0:81:00:2f:98:1d:b2:dc:f8:94:c9: 11:f6:9b:58:cd:fb:47:13:c3:6d:12:d9:a9:bf:82: 12:e4:42:e9:8f:49:cf:37:0e:d9:19:0a:14:4f:ed: 9f:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:2D:8C:F8:1D:F6:DB:DA:4E:5C:2E:DF:1E:06:2B:A1:AD:1E:4D:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cffdb071-c372-4fb8-ae3c-ab449c400178/bf398656-87b8-31bc-bc34-40b0e06987a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cffdb071-c372-4fb8-ae3c-ab449c400178/cffdb071-c372-4fb8-ae3c-ab449c400178.crl X509v3 Authority Key Identifier: keyid:D0:6F:6B:A4:AA:B8:36:BB:87:9F:70:9F:26:54:41:88:92:FD:6D:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cffdb071-c372-4fb8-ae3c-ab449c400178.cer sbgp-ipAddrBlock: critical IPv4: 207.34.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:7e:46:05:10:87:0e:f6:f9:f5:bf:17:b8:c9:83:ec:d1:44: 6c:81:10:4f:0d:a1:13:5a:37:c8:a0:78:dd:16:bc:f8:b6:15: b2:4b:8d:6a:8e:09:b9:60:32:dd:2c:11:f1:46:8c:c8:03:a7: b9:e3:1f:91:92:bd:9b:6b:0e:dd:92:4b:44:dc:55:c5:06:fe: 5e:80:d2:87:68:2c:68:e3:68:79:34:c2:2f:ac:21:05:4d:5e: 0b:2f:0b:6a:a2:ea:de:3d:eb:cd:7a:bb:11:b8:7b:56:37:fc: 1e:78:1f:a3:92:f4:84:2f:57:07:6d:9d:bd:85:c0:cd:b6:c9: 82:86:40:df:55:aa:74:1f:4d:df:7f:74:33:ec:ac:53:fd:21: 7b:d8:dc:ce:1d:65:1b:fe:38:ce:27:0f:64:0e:e5:20:e6:f5: bd:31:98:07:31:63:48:e9:c6:b1:b0:39:bb:7b:82:3f:70:ce: 88:94:02:39:15:79:47:e3:4c:02:03:b5:32:b6:6e:ed:15:ae: 3e:c8:62:8d:98:16:9d:42:0e:56:86:77:b4:1b:c4:6c:13:54: f4:05:89:94:60:28:73:b7:c8:d5:f9:10:47:fe:b5:2f:d4:69: 9e:4f:26:3e:9f:58:ce:af:02:ae:10:af:4d:c6:01:50:19:7b: 7a:fb:a5:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO7FfHTcYxXbhyeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2ZmZGIwNzEtYzM3Mi00ZmI4LWFlM2MtYWI0NDljNDAw MTc4MB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk MWY0OTRkZmYtM2E4NS00NGY4LTg0MDEtNDQ3MDAxZjg0NGNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOSyHiJlgSOWWRHQazlOM7RJeepqFhbk881B ufKtEx6uV4n6hxtQb9SiXod2SS7FEOS+hD3JeRKZKe1qWwL+mkTbBPjL8d5H8yRS kcumXouXEkhx7F83NPtCUmejI54J3KqWWNGm0y5PwSaExRiU6blfcnObcoDdVxHJ DywqPMcvShPAEg1kZnsd5BVtSuIIEG6d5EFT2T8tjtX2QeRSRYSpdEZXIe6VrcCx eMp4zsiFko8+SjbR+7gYnRYZ9NCPRupb3g8eIRVlfTEfsvQK/dd5nSavoIEAL5gd stz4lMkR9ptYzftHE8NtEtmpv4IS5ELpj0nPNw7ZGQoUT+2fSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPEtjPgd9tvaTlwu3x4GK6GtHk2fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZmZk YjA3MS1jMzcyLTRmYjgtYWUzYy1hYjQ0OWM0MDAxNzgvYmYzOTg2NTYtODdiOC0z MWJjLWJjMzQtNDBiMGUwNjk4N2EwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2ZmZGIwNzEtYzM3Mi00ZmI4LWFl M2MtYWI0NDljNDAwMTc4L2NmZmRiMDcxLWMzNzItNGZiOC1hZTNjLWFiNDQ5YzQw MDE3OC5jcmwwHwYDVR0jBBgwFoAU0G9rpKq4NruHn3CfJlRBiJL9bcQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZmZkYjA3MS1jMzcyLTRmYjgtYWUzYy1hYjQ0 OWM0MDAxNzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzyILMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA5+RgUQhw72+fW/F7jJg+zRRGyBEE8NoRNaN8igeN0WvPi2FbJLjWqO CblgMt0sEfFGjMgDp7njH5GSvZtrDt2SS0TcVcUG/l6A0odoLGjjaHk0wi+sIQVN XgsvC2qi6t496816uxG4e1Y3/B54H6OS9IQvVwdtnb2FwM22yYKGQN9VqnQfTd9/ dDPsrFP9IXvY3M4dZRv+OM4nD2QO5SDm9b0xmAcxY0jpxrGwObt7gj9wzoiUAjkV eUfjTAIDtTK2bu0Vrj7IYo2YFp1CDlaGd7QbxGwTVPQFiZRgKHO3yNX5EEf+tS/U aZ5PJj6fWM6vAq4Qr03GAVAZe3r7pRg= -----END CERTIFICATE-----Generated at Wed Aug 20 13:02:46 2025 by rpki-client