$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cffdb071-c372-4fb8-ae3c-ab449c400178/0352d911-2e18-33fc-aaaf-abf4b4e22500.roa File: 0352d911-2e18-33fc-aaaf-abf4b4e22500.roa (raw, json) Hash identifier: PO9V+r4pVJTp3QAkUZ8T1j4mtMqkrjHjC7UenzpH4qo= Subject key identifier: B6:B5:84:3F:B0:3A:C7:1B:BE:35:9F:80:46:33:56:CF:E6:93:F2:3D Certificate issuer: /CN=cffdb071-c372-4fb8-ae3c-ab449c400178 Certificate serial: 010D0C9F4328584CF2BD0A33866145ABB5937DC0 Authority key identifier: D0:6F:6B:A4:AA:B8:36:BB:87:9F:70:9F:26:54:41:88:92:FD:6D:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cffdb071-c372-4fb8-ae3c-ab449c400178.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cffdb071-c372-4fb8-ae3c-ab449c400178/0352d911-2e18-33fc-aaaf-abf4b4e22500.roa Signing time: Sun 22 Feb 2026 14:00:41 +0000 ROA not before: Sun 22 Feb 2026 14:00:41 +0000 ROA not after: Sat 23 May 2026 13:00:41 +0000 asID: 16509 IP address blocks: 207.34.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cffdb071-c372-4fb8-ae3c-ab449c400178/cffdb071-c372-4fb8-ae3c-ab449c400178.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cffdb071-c372-4fb8-ae3c-ab449c400178/cffdb071-c372-4fb8-ae3c-ab449c400178.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cffdb071-c372-4fb8-ae3c-ab449c400178.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f2:bd:0a:33:86:61:45:ab:b5:93:7d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cffdb071-c372-4fb8-ae3c-ab449c400178 Validity Not Before: Feb 22 14:00:41 2026 GMT Not After : May 23 13:00:41 2026 GMT Subject: CN=fd1e9141-c30e-4093-8869-7eff9debe078 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:11:e0:bd:f3:e6:3f:3d:c7:3f:75:bc:63:8e: fe:da:66:f3:d3:0d:f4:01:d4:fe:d9:a3:08:b4:86: 30:9d:f2:bc:26:31:bf:1d:7c:24:2f:64:27:c6:af: d7:77:28:66:fe:a7:a9:7b:a7:9c:10:48:68:1d:63: 32:10:5c:58:08:de:fb:20:ad:57:b8:32:4a:fa:11: 14:31:48:c9:7a:21:9c:f1:07:c3:de:b4:4c:99:1e: 69:8c:2d:73:82:16:ae:c9:73:72:66:cb:da:0a:c8: 8c:ad:c9:6e:63:f4:0c:74:36:0c:4e:cd:76:d3:f2: e8:f8:9a:a4:f8:d5:0f:81:ea:bc:ab:9f:e9:38:5d: 2b:c5:65:73:36:41:de:01:8f:ee:8e:16:aa:2d:a8: 70:f0:4f:ca:88:b8:0d:66:8a:95:e0:32:fe:7a:16: 75:4b:45:f9:64:84:e6:63:d8:a9:86:61:f1:5c:18: 8e:32:58:d1:e3:37:57:9e:8e:50:ec:e1:8f:32:03: 5a:b3:39:b8:f1:78:50:ed:96:65:f2:50:ad:14:24: 93:80:55:1c:dd:d1:fe:9a:ea:3b:73:48:2f:52:6e: bc:99:a4:b4:8b:44:2d:5e:7e:81:c4:c0:cc:74:0c: 15:d7:9d:d1:db:9e:67:e6:30:d6:7a:00:a1:ec:61: a5:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:B5:84:3F:B0:3A:C7:1B:BE:35:9F:80:46:33:56:CF:E6:93:F2:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cffdb071-c372-4fb8-ae3c-ab449c400178/0352d911-2e18-33fc-aaaf-abf4b4e22500.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cffdb071-c372-4fb8-ae3c-ab449c400178/cffdb071-c372-4fb8-ae3c-ab449c400178.crl X509v3 Authority Key Identifier: keyid:D0:6F:6B:A4:AA:B8:36:BB:87:9F:70:9F:26:54:41:88:92:FD:6D:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cffdb071-c372-4fb8-ae3c-ab449c400178.cer sbgp-ipAddrBlock: critical IPv4: 207.34.10.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:04:52:ce:95:21:68:a5:e9:36:e7:48:02:e6:d6:85:bc:95: 83:f1:8c:dc:f7:ce:40:b4:72:02:3e:e6:c2:0d:b7:5b:e9:dc: e2:c6:a8:bf:d6:1d:14:c1:05:30:27:cd:ed:36:c7:d9:4b:09: 78:f2:67:0d:3d:c6:68:53:f1:3c:b8:60:6a:6b:36:60:8a:4b: 5d:e8:a1:81:c8:50:90:fd:b0:a2:89:1f:d0:72:bc:b2:2c:2e: 0b:79:5c:b3:6c:a7:a6:14:81:2f:97:46:09:c7:23:2d:dd:41: 29:4b:ca:51:b1:ac:31:4c:66:29:01:3b:28:b4:81:62:53:9e: 6a:eb:70:ed:0a:19:dc:45:46:73:a6:8a:1e:a1:32:1f:bb:a6: c1:eb:4d:db:0b:68:d0:dd:e8:74:51:07:de:37:0d:af:04:d5: b3:14:b0:d9:ab:de:0f:bb:70:2f:c9:51:6a:f3:45:51:ac:30: 13:89:16:fb:23:51:85:af:0e:97:9b:11:3a:bb:5f:7c:87:76: 00:18:4b:ac:cd:ca:73:4c:62:09:1b:be:63:5d:52:ff:23:03: b2:c2:15:3b:a1:89:87:f9:3e:58:79:d3:94:45:96:79:d4:b1: 7e:a1:d0:e0:69:05:ed:12:41:59:42:18:20:f9:bf:a6:29:b2: f2:52:82:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzyvQozhmFFq7WTfcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2ZmZGIwNzEtYzM3Mi00ZmI4LWFlM2MtYWI0NDljNDAw MTc4MB4XDTI2MDIyMjE0MDA0MVoXDTI2MDUyMzEzMDA0MVowLzEtMCsGA1UEAxMk ZmQxZTkxNDEtYzMwZS00MDkzLTg4NjktN2VmZjlkZWJlMDc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5hHgvfPmPz3HP3W8Y47+2mbz0w30AdT+2aMI tIYwnfK8JjG/HXwkL2Qnxq/Xdyhm/qepe6ecEEhoHWMyEFxYCN77IK1XuDJK+hEU MUjJeiGc8QfD3rRMmR5pjC1zghauyXNyZsvaCsiMrcluY/QMdDYMTs120/Lo+Jqk +NUPgeq8q5/pOF0rxWVzNkHeAY/ujhaqLahw8E/KiLgNZoqV4DL+ehZ1S0X5ZITm Y9iphmHxXBiOMljR4zdXno5Q7OGPMgNaszm48XhQ7ZZl8lCtFCSTgFUc3dH+muo7 c0gvUm68maS0i0QtXn6BxMDMdAwV153R255n5jDWegCh7GGlIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLa1hD+wOscbvjWfgEYzVs/mk/I9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZmZk YjA3MS1jMzcyLTRmYjgtYWUzYy1hYjQ0OWM0MDAxNzgvMDM1MmQ5MTEtMmUxOC0z M2ZjLWFhYWYtYWJmNGI0ZTIyNTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2ZmZGIwNzEtYzM3Mi00ZmI4LWFl M2MtYWI0NDljNDAwMTc4L2NmZmRiMDcxLWMzNzItNGZiOC1hZTNjLWFiNDQ5YzQw MDE3OC5jcmwwHwYDVR0jBBgwFoAU0G9rpKq4NruHn3CfJlRBiJL9bcQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZmZkYjA3MS1jMzcyLTRmYjgtYWUzYy1hYjQ0 OWM0MDAxNzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzyIKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADUEUs6VIWil6TbnSALm1oW8lYPxjNz3zkC0cgI+5sINt1vp3OLGqL/W HRTBBTAnze02x9lLCXjyZw09xmhT8Ty4YGprNmCKS13ooYHIUJD9sKKJH9ByvLIs Lgt5XLNsp6YUgS+XRgnHIy3dQSlLylGxrDFMZikBOyi0gWJTnmrrcO0KGdxFRnOm ih6hMh+7psHrTdsLaNDd6HRRB943Da8E1bMUsNmr3g+7cC/JUWrzRVGsMBOJFvsj UYWvDpebETq7X3yHdgAYS6zNynNMYgkbvmNdUv8jA7LCFTuhiYf5Plh505RFlnnU sX6h0OBpBe0SQVlCGCD5v6YpsvJSgqQ= -----END CERTIFICATE-----Generated at Mon Mar 2 00:32:11 2026 by rpki-client