$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/34d4b1da-be17-3ee1-887a-bbacb4e35968.roa File: 34d4b1da-be17-3ee1-887a-bbacb4e35968.roa (raw, json) Hash identifier: xQu60cCGkDgwAaatrWaMqaGLMR/eGdF9v7YQNoRk+vA= Subject key identifier: B9:CD:73:2D:79:04:C0:C7:DD:E6:00:DE:86:D9:44:A0:E4:7D:9A:DC Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F4328584F07D775D37ABF30F1F8B4E980 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/34d4b1da-be17-3ee1-887a-bbacb4e35968.roa Signing time: Tue 01 Sep 2026 13:00:12 +0000 ROA not before: Tue 01 Sep 2026 13:00:12 +0000 ROA not after: Mon 30 Nov 2026 14:00:12 +0000 asID: 54113 IP address blocks: 172.111.84.0/25 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:07:d7:75:d3:7a:bf:30:f1:f8:b4:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: Sep 1 13:00:12 2026 GMT Not After : Nov 30 14:00:12 2026 GMT Subject: CN=3fd821b2-66d8-4b82-a501-a90e50ccf5e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:87:9f:1c:3e:9c:d6:04:fc:c5:f8:01:27:a1: 37:2a:e4:37:94:fc:82:99:13:d4:4b:29:29:06:94: 35:c4:7a:89:cb:0b:da:26:15:35:37:66:07:77:2c: 97:8a:72:a9:c0:33:88:42:65:3e:79:1f:20:05:37: 87:df:14:b3:45:32:46:ad:07:b6:57:8a:5e:ee:a5: d3:9b:af:c0:ce:b0:6b:18:78:67:2c:0d:44:df:60: 15:8d:67:af:47:79:69:c8:39:8c:7e:72:f8:f5:13: da:e1:a1:04:11:23:35:22:bc:0a:61:31:b8:06:98: 75:c5:a3:55:c5:07:31:8c:ac:66:75:13:90:0c:7e: 0a:67:c6:16:b3:d0:e0:db:a6:3b:86:b7:6b:ba:ba: bb:9c:c4:b3:5d:cf:b0:18:22:0c:40:92:df:c9:01: 71:91:83:67:10:76:95:03:be:b0:42:81:73:7e:e0: 98:97:7a:ce:91:9b:99:9d:82:9c:5b:62:ca:b6:06: 78:ba:f1:6b:e6:af:52:08:9d:ba:2f:37:9b:29:a3: 82:eb:69:c4:a9:0b:44:88:6b:f5:2d:f3:1a:2e:29: 1a:24:b7:ef:1f:61:93:6e:4d:44:93:56:03:26:f1: da:42:72:1c:dc:0e:36:b2:f7:46:ff:a5:c6:9d:44: 11:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:CD:73:2D:79:04:C0:C7:DD:E6:00:DE:86:D9:44:A0:E4:7D:9A:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/34d4b1da-be17-3ee1-887a-bbacb4e35968.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv4: 172.111.84.0/25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:a9:58:66:13:da:be:32:58:9e:49:ee:b9:b7:9e:54:74:fc: 8e:f4:97:10:65:38:59:bd:7f:1e:b9:ee:3b:1c:30:4f:d2:a3: a4:41:70:31:e3:92:64:7e:c0:48:bb:d6:ab:69:c8:6b:86:e7: 76:dd:85:94:6a:48:3b:dc:4a:e8:81:7b:82:df:59:9f:24:5f: bc:6a:91:16:79:d2:da:7f:e0:37:4b:8a:56:7b:6e:47:c5:8f: 93:47:39:44:d7:13:66:17:96:ed:37:39:22:d3:64:3b:92:93: f0:9c:14:82:a6:33:64:24:ad:36:5f:a7:c7:72:22:82:b5:5d: 9f:a1:b0:7e:38:c8:64:5f:25:40:69:ba:73:c0:25:db:76:9e: 4c:80:18:a4:51:1a:7a:90:e1:e5:f2:55:0a:c5:10:e1:26:31: 7b:db:f4:ec:d0:c9:3d:ac:92:82:12:54:bc:1f:84:d0:24:13: 9c:a4:d2:d8:c1:33:8e:91:61:e9:4b:fc:f6:10:72:7d:86:7d: b9:ca:ad:34:aa:c2:16:d3:f9:33:76:19:03:56:19:07:bb:ef: 02:0a:32:2f:40:ee:2c:b2:bc:df:34:58:bd:07:4e:42:06:44: 3c:f3:07:3a:8d:86:a6:2c:87:e1:90:7f:20:3c:62:f1:26:f1: 69:28:d3:a6 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8H13XTer8w8fi06YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI2MDkwMTEzMDAxMloXDTI2MTEzMDE0MDAxMlowLzEtMCsGA1UEAxMk M2ZkODIxYjItNjZkOC00YjgyLWE1MDEtYTkwZTUwY2NmNWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYefHD6c1gT8xfgBJ6E3KuQ3lPyCmRPUSykp BpQ1xHqJywvaJhU1N2YHdyyXinKpwDOIQmU+eR8gBTeH3xSzRTJGrQe2V4pe7qXT m6/AzrBrGHhnLA1E32AVjWevR3lpyDmMfnL49RPa4aEEESM1IrwKYTG4Bph1xaNV xQcxjKxmdROQDH4KZ8YWs9Dg26Y7hrdrurq7nMSzXc+wGCIMQJLfyQFxkYNnEHaV A76wQoFzfuCYl3rOkZuZnYKcW2LKtgZ4uvFr5q9SCJ26LzebKaOC62nEqQtEiGv1 LfMaLikaJLfvH2GTbk1Ek1YDJvHaQnIc3A42svdG/6XGnUQRAQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLnNcy15BMDH3eYA3obZRKDkfZrcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvMzRkNGIxZGEtYmUxNy0z ZWUxLTg4N2EtYmJhY2I0ZTM1OTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUHrG9UADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCCqVhmE9q+MlieSe65t55UdPyO9JcQZThZvX8eue47HDBP0qOkQXAx 45JkfsBIu9arachrhud23YWUakg73ErogXuC31mfJF+8apEWedLaf+A3S4pWe25H xY+TRzlE1xNmF5btNzki02Q7kpPwnBSCpjNkJK02X6fHciKCtV2fobB+OMhkXyVA abpzwCXbdp5MgBikURp6kOHl8lUKxRDhJjF72/Ts0Mk9rJKCElS8H4TQJBOcpNLY wTOOkWHpS/z2EHJ9hn25yq00qsIW0/kzdhkDVhkHu+8CCjIvQO4ssrzfNFi9B05C BkQ88wc6jYamLIfhkH8gPGLxJvFpKNOm -----END CERTIFICATE-----Generated at Fri Sep 25 20:39:00 2026 by rpki-client