$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/3356d989-0123-3d9e-b389-cf1f83f3df2b.roa File: 3356d989-0123-3d9e-b389-cf1f83f3df2b.roa (raw, json) Hash identifier: vTdZy+Kbnpd4o2IbOTYoB1R975xI8AJ7Wi3jzSvz6ko= Subject key identifier: 07:D0:95:B4:33:69:AB:07:AB:60:C4:6B:8C:54:DA:FA:C7:26:A7:72 Certificate issuer: /CN=346c6ea1-4f1c-4579-b4b1-78891a34647a Certificate serial: 010D0C9F4328584B1D9C22F52982D27FC0B79400 Authority key identifier: 72:8D:72:D7:99:F2:15:41:22:BE:EB:F1:09:AC:CF:96:BF:BF:86:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/3356d989-0123-3d9e-b389-cf1f83f3df2b.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 396026 IP address blocks: 199.96.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/346c6ea1-4f1c-4579-b4b1-78891a34647a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/346c6ea1-4f1c-4579-b4b1-78891a34647a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:22:f5:29:82:d2:7f:c0:b7:94:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=346c6ea1-4f1c-4579-b4b1-78891a34647a Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=0d3dcadd-666a-4fc3-9724-9a28ad51d720 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:90:48:1b:af:7c:21:b2:fa:fb:e9:fc:9c:10: c7:5b:6c:80:2a:47:65:e0:9d:ac:fe:3c:14:31:dd: 22:35:0d:99:b3:91:ed:b7:7b:40:cd:49:ec:45:84: d5:a7:d1:43:62:48:ef:b4:e9:8a:82:0b:e0:71:87: 38:15:14:44:32:8f:48:22:e2:b5:52:69:9b:5a:5f: 4c:fb:05:b5:bb:1d:f7:73:67:1e:5d:a1:e7:1f:bb: d1:f6:12:62:6e:30:98:1a:fb:03:56:32:c6:42:99: ed:33:b1:f7:7a:9e:e1:da:73:83:a8:7a:87:85:9d: c2:9f:5b:e0:80:71:7a:52:43:e1:ca:3e:ca:3e:1a: 9f:4b:56:45:21:11:c2:77:f2:b4:2b:58:f8:e5:36: a7:54:06:0c:19:69:1a:94:2c:d0:70:2f:66:2c:4f: 5a:93:63:8a:b4:5e:92:17:76:f4:46:b8:89:58:df: 70:4f:bb:9c:a3:3f:f4:94:1d:19:8b:7f:ea:ab:7a: 3e:f8:4e:40:27:94:76:2b:0d:a4:b1:9b:27:ad:47: d1:10:13:33:e9:eb:cc:84:36:4e:13:a9:63:75:97: fd:7d:88:06:17:98:5c:73:7c:54:a0:47:50:6e:f9: 0a:16:17:da:8e:1d:32:ec:b9:12:56:8a:41:f5:eb: 2d:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:D0:95:B4:33:69:AB:07:AB:60:C4:6B:8C:54:DA:FA:C7:26:A7:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/3356d989-0123-3d9e-b389-cf1f83f3df2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/346c6ea1-4f1c-4579-b4b1-78891a34647a.crl X509v3 Authority Key Identifier: keyid:72:8D:72:D7:99:F2:15:41:22:BE:EB:F1:09:AC:CF:96:BF:BF:86:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a.cer sbgp-ipAddrBlock: critical IPv4: 199.96.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:b4:37:99:e1:62:8b:29:4e:02:bf:09:8e:fa:9a:c0:2a:dd: a6:41:12:6c:58:87:ee:22:8f:e0:ca:4f:45:00:fe:78:3b:d1: 15:3c:f9:b6:56:a3:db:3c:48:b4:7a:f0:4f:91:56:8d:f2:5c: af:ec:aa:65:05:97:e4:4d:5b:92:2b:e1:17:75:10:75:9c:f8: 3a:cc:33:93:92:f6:b5:a2:4a:d9:37:21:63:a5:d4:ba:08:e8: d7:f8:c1:5d:07:84:c7:93:94:9e:bf:cb:6c:e0:fd:0b:d9:0b: 3d:4b:6a:84:fb:76:07:5d:b4:61:88:24:14:5f:02:8f:5e:df: 76:75:b2:76:ba:98:da:ac:0d:8d:e8:d0:00:a0:1a:fa:9d:bd: c7:fc:7d:fa:8b:3b:5a:58:93:b8:87:d1:60:c2:06:b7:80:a3: 5b:18:82:41:27:91:db:9d:1b:2e:4b:7c:d9:53:8f:cf:4a:6d: d4:73:b5:b4:bb:1a:b0:f3:c7:6a:36:45:2f:07:3e:f3:b4:e6: fb:38:d5:6c:3a:08:e3:26:d8:2e:12:b5:91:55:ba:da:35:85: 4d:77:c5:f2:db:85:15:e1:6e:65:aa:41:5e:bf:5e:a1:63:02: 7e:18:23:73:dd:ac:8e:b1:fe:b8:83:96:fd:46:40:71:0d:09: 0a:b7:95:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnCL1KYLSf8C3lAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzQ2YzZlYTEtNGYxYy00NTc5LWI0YjEtNzg4OTFhMzQ2 NDdhMB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk MGQzZGNhZGQtNjY2YS00ZmMzLTk3MjQtOWEyOGFkNTFkNzIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJBIG698IbL6++n8nBDHW2yAKkdl4J2s/jwU Md0iNQ2Zs5Htt3tAzUnsRYTVp9FDYkjvtOmKggvgcYc4FRREMo9IIuK1UmmbWl9M +wW1ux33c2ceXaHnH7vR9hJibjCYGvsDVjLGQpntM7H3ep7h2nODqHqHhZ3Cn1vg gHF6UkPhyj7KPhqfS1ZFIRHCd/K0K1j45TanVAYMGWkalCzQcC9mLE9ak2OKtF6S F3b0RriJWN9wT7ucoz/0lB0Zi3/qq3o++E5AJ5R2Kw2ksZsnrUfREBMz6evMhDZO E6ljdZf9fYgGF5hcc3xUoEdQbvkKFhfajh0y7LkSVopB9est6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAfQlbQzaasHq2DEa4xU2vrHJqdyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zNDZj NmVhMS00ZjFjLTQ1NzktYjRiMS03ODg5MWEzNDY0N2EvMzM1NmQ5ODktMDEyMy0z ZDllLWIzODktY2YxZjgzZjNkZjJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMzQ2YzZlYTEtNGYxYy00NTc5LWI0 YjEtNzg4OTFhMzQ2NDdhLzM0NmM2ZWExLTRmMWMtNDU3OS1iNGIxLTc4ODkxYTM0 NjQ3YS5jcmwwHwYDVR0jBBgwFoAUco1y15nyFUEivuvxCazPlr+/hnYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zNDZjNmVhMS00ZjFjLTQ1NzktYjRiMS03ODg5 MWEzNDY0N2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx2CGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADK0N5nhYospTgK/CY76msAq3aZBEmxYh+4ij+DKT0UA/ng70RU8+bZW o9s8SLR68E+RVo3yXK/sqmUFl+RNW5Ir4Rd1EHWc+DrMM5OS9rWiStk3IWOl1LoI 6Nf4wV0HhMeTlJ6/y2zg/QvZCz1LaoT7dgddtGGIJBRfAo9e33Z1sna6mNqsDY3o 0ACgGvqdvcf8ffqLO1pYk7iH0WDCBreAo1sYgkEnkdudGy5LfNlTj89KbdRztbS7 GrDzx2o2RS8HPvO05vs41Ww6COMm2C4StZFVuto1hU13xfLbhRXhbmWqQV6/XqFj An4YI3PdrI6x/riDlv1GQHENCQq3lb4= -----END CERTIFICATE-----Generated at Sun Nov 2 18:16:46 2025 by rpki-client