$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/07aa8d50-5e38-328a-b741-022a373baf8e.roa File: 07aa8d50-5e38-328a-b741-022a373baf8e.roa (raw, json) Hash identifier: Jc211KZoqLR9XbLsL/aNMfs+SI+DnHVunsCS0Qp68FI= Subject key identifier: 36:89:71:F3:8C:BD:D2:82:F0:A2:D6:85:B2:B3:97:9C:C5:81:F9:36 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B4D11C99F0FFC210580233420 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/07aa8d50-5e38-328a-b741-022a373baf8e.roa Signing time: Wed 24 Sep 2025 13:00:41 +0000 ROA not before: Wed 24 Sep 2025 13:00:41 +0000 ROA not after: Tue 23 Dec 2025 14:00:41 +0000 asID: 21723 IP address blocks: 207.34.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:11:c9:9f:0f:fc:21:05:80:23:34:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 24 13:00:41 2025 GMT Not After : Dec 23 14:00:41 2025 GMT Subject: CN=868f31df-88e7-4a61-8828-fdd0b99e6fe6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:ae:50:9b:54:f1:6f:f2:01:fb:db:a6:13:c8: be:ea:38:f4:9b:9f:5a:1c:6a:5b:53:e8:33:dd:fd: f1:51:79:09:46:3c:37:e4:82:42:dc:01:b4:1b:fa: e7:5e:44:b1:7f:63:ca:62:0e:c7:27:d4:00:15:45: 50:92:11:f4:5d:cb:48:5f:87:5a:28:01:84:b7:cb: d3:58:00:4a:c0:52:19:16:63:ac:16:1d:21:5f:f8: 1d:f2:a2:7a:bc:bf:19:9e:bc:69:1b:8a:c8:8c:05: ae:65:5b:ae:45:76:3a:dc:2b:e1:39:b1:66:c5:fe: 60:c7:05:be:c0:94:f7:1e:80:25:ac:a1:b6:6a:68: d1:92:4f:89:7c:53:5a:b1:74:55:98:06:2b:35:f7: 73:82:79:4b:3d:f7:87:ca:53:cb:61:8a:a6:aa:3e: 76:e5:69:0f:7f:69:71:89:e1:f0:eb:1c:6c:e5:15: f0:5a:bc:b6:6c:2b:7a:a2:33:d8:21:f4:8f:96:ce: 2c:04:3e:ab:bc:d5:ac:ad:1e:19:27:99:ba:ff:58: 9b:63:f6:08:bc:6a:49:ac:2a:aa:c2:f1:11:af:a4: be:63:c5:24:63:49:51:1a:36:44:0d:59:72:0a:c0: d6:b8:20:65:18:6c:37:8f:3f:2b:79:6b:f2:48:d7: fd:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:89:71:F3:8C:BD:D2:82:F0:A2:D6:85:B2:B3:97:9C:C5:81:F9:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/07aa8d50-5e38-328a-b741-022a373baf8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 207.34.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d7:77:e3:6b:7a:84:9c:64:a4:9b:99:8f:58:37:e2:2b:d5:d4: 69:65:68:ef:c9:ee:53:38:e2:d2:77:49:2b:78:49:ea:ff:5c: e5:10:c8:72:c5:7f:22:57:25:f0:80:c5:d9:2b:cd:9f:20:b3: b9:22:85:66:fc:86:b7:4d:d5:70:e1:1d:0c:74:d1:5e:38:8e: ad:e8:92:76:89:72:31:5a:ee:68:87:17:38:db:81:be:6b:7e: 55:4e:5d:0c:81:30:9a:da:ee:8e:a1:fc:fa:53:2d:a5:93:bc: 91:43:73:24:21:54:a8:ce:3f:ad:b8:ef:25:21:77:4b:3b:b8: 40:db:7e:3e:00:a9:b3:4a:b1:d4:17:96:8f:f6:41:dc:59:e0: 68:10:38:7e:2d:4b:8a:73:81:29:17:7e:54:2b:b0:64:5e:ad: 5b:72:c4:18:4a:da:57:4b:d4:34:09:22:cc:c1:f7:69:c4:1d: d7:7f:77:10:6f:eb:84:d1:c4:d6:41:bb:73:f7:ac:81:ec:c2: 4f:62:1d:86:07:07:bb:58:22:09:fc:35:8b:92:0b:c3:ec:de: 62:37:df:0f:1f:06:a0:7e:4c:8e:8d:ee:ea:83:36:f5:00:c7: 65:bb:7c:87:02:38:f2:5d:b3:ac:57:d4:3e:2f:27:65:45:3f: 6c:c4:28:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtNEcmfD/whBYAjNCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDkyNDEzMDA0MVoXDTI1MTIyMzE0MDA0MVowLzEtMCsGA1UEAxMk ODY4ZjMxZGYtODhlNy00YTYxLTg4MjgtZmRkMGI5OWU2ZmU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjK5Qm1Txb/IB+9umE8i+6jj0m59aHGpbU+gz 3f3xUXkJRjw35IJC3AG0G/rnXkSxf2PKYg7HJ9QAFUVQkhH0XctIX4daKAGEt8vT WABKwFIZFmOsFh0hX/gd8qJ6vL8ZnrxpG4rIjAWuZVuuRXY63CvhObFmxf5gxwW+ wJT3HoAlrKG2amjRkk+JfFNasXRVmAYrNfdzgnlLPfeHylPLYYqmqj525WkPf2lx ieHw6xxs5RXwWry2bCt6ojPYIfSPls4sBD6rvNWsrR4ZJ5m6/1ibY/YIvGpJrCqq wvERr6S+Y8UkY0lRGjZEDVlyCsDWuCBlGGw3jz8reWvySNf9GwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDaJcfOMvdKC8KLWhbKzl5zFgfk2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMDdhYThkNTAtNWUzOC0z MjhhLWI3NDEtMDIyYTM3M2JhZjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzyJ/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANd342t6hJxkpJuZj1g34ivV1GllaO/J7lM44tJ3SSt4Ser/XOUQyHLF fyJXJfCAxdkrzZ8gs7kihWb8hrdN1XDhHQx00V44jq3oknaJcjFa7miHFzjbgb5r flVOXQyBMJra7o6h/PpTLaWTvJFDcyQhVKjOP6247yUhd0s7uEDbfj4AqbNKsdQX lo/2QdxZ4GgQOH4tS4pzgSkXflQrsGRerVtyxBhK2ldL1DQJIszB92nEHdd/dxBv 64TRxNZBu3P3rIHswk9iHYYHB7tYIgn8NYuSC8Ps3mI33w8fBqB+TI6N7uqDNvUA x2W7fIcCOPJds6xX1D4vJ2VFP2zEKPU= -----END CERTIFICATE-----Generated at Fri Oct 24 08:24:28 2025 by rpki-client