$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cffdb071-c372-4fb8-ae3c-ab449c400178/0352d911-2e18-33fc-aaaf-abf4b4e22500.roa File: 0352d911-2e18-33fc-aaaf-abf4b4e22500.roa (raw, json) Hash identifier: wIgrUJh5tJMZNY7w/i7/2OxbLrsdNCtq2B5SP/p9a9Q= Subject key identifier: 3A:2D:D3:FF:BE:A4:94:96:C0:47:A8:46:6B:7C:BC:8E:22:B3:2F:5F Certificate issuer: /CN=cffdb071-c372-4fb8-ae3c-ab449c400178 Certificate serial: 010D0C9F4328584DD35B1F8228D7107793F7A196 Authority key identifier: D0:6F:6B:A4:AA:B8:36:BB:87:9F:70:9F:26:54:41:88:92:FD:6D:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cffdb071-c372-4fb8-ae3c-ab449c400178.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cffdb071-c372-4fb8-ae3c-ab449c400178/0352d911-2e18-33fc-aaaf-abf4b4e22500.roa Signing time: Thu 14 May 2026 01:00:25 +0000 ROA not before: Thu 14 May 2026 01:00:25 +0000 ROA not after: Wed 12 Aug 2026 01:00:25 +0000 asID: 16509 IP address blocks: 207.34.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cffdb071-c372-4fb8-ae3c-ab449c400178/cffdb071-c372-4fb8-ae3c-ab449c400178.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cffdb071-c372-4fb8-ae3c-ab449c400178/cffdb071-c372-4fb8-ae3c-ab449c400178.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cffdb071-c372-4fb8-ae3c-ab449c400178.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d3:5b:1f:82:28:d7:10:77:93:f7:a1:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cffdb071-c372-4fb8-ae3c-ab449c400178 Validity Not Before: May 14 01:00:25 2026 GMT Not After : Aug 12 01:00:25 2026 GMT Subject: CN=0ef708be-2d7b-4179-bbd2-fac13f2c26fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:ae:87:85:d4:c0:fc:63:03:51:21:78:cb:f3: 1e:00:9e:1c:e2:04:5e:22:a4:d7:4a:7d:1f:68:1c: e2:c3:c9:23:b2:3b:e6:77:ef:13:98:ee:77:3d:3e: ba:38:3e:c4:f8:2f:81:76:38:8b:f5:c4:47:21:b8: 22:06:2a:bd:92:96:5c:10:56:81:ee:ef:53:97:35: 1f:71:26:08:d6:ec:66:07:2b:61:e8:08:e2:65:58: 5f:f0:32:3b:89:1a:1b:17:7b:fe:5c:03:dc:65:cc: f9:dc:36:80:a1:10:7e:88:19:2c:d5:f2:ce:e1:15: 43:d1:58:82:b2:a5:57:55:ba:33:5a:0c:3b:84:eb: e8:e4:83:1f:bb:8a:fa:d5:ef:36:19:0e:81:69:c0: 39:38:a4:6e:0a:8a:72:41:b1:ce:8e:55:c4:97:91: 9c:b9:83:91:29:dc:10:e3:3e:78:45:2a:f4:ae:ce: f6:c4:a7:7e:26:e7:b7:91:15:62:3a:c2:ee:e9:56: bc:42:14:69:0e:fa:34:1f:87:6e:59:15:01:cc:c8: 3d:a5:3d:03:49:80:0a:49:fd:34:35:55:47:00:4b: dd:9b:3d:bd:fe:55:88:a7:a9:5d:ad:84:78:1f:cf: cc:4a:6e:52:5c:b5:ca:3d:22:bf:d0:f5:8c:6b:94: 75:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:2D:D3:FF:BE:A4:94:96:C0:47:A8:46:6B:7C:BC:8E:22:B3:2F:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cffdb071-c372-4fb8-ae3c-ab449c400178/0352d911-2e18-33fc-aaaf-abf4b4e22500.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cffdb071-c372-4fb8-ae3c-ab449c400178/cffdb071-c372-4fb8-ae3c-ab449c400178.crl X509v3 Authority Key Identifier: keyid:D0:6F:6B:A4:AA:B8:36:BB:87:9F:70:9F:26:54:41:88:92:FD:6D:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cffdb071-c372-4fb8-ae3c-ab449c400178.cer sbgp-ipAddrBlock: critical IPv4: 207.34.10.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:89:46:86:5d:31:7b:a4:36:d2:11:7e:cf:24:3c:a5:23:ab: 4d:62:4a:33:91:b8:f0:6d:65:78:e6:95:0e:ea:bf:36:78:71: 97:a5:bb:b8:63:fa:5a:8f:21:d6:c5:59:8a:68:d5:fa:bf:f2: 4f:8e:23:9a:4b:b8:bf:0a:32:66:76:d0:e4:22:cd:67:c1:13: d8:8c:2a:3e:5b:a9:46:af:0b:d8:23:97:7c:11:05:1e:63:f5: 85:b5:14:4b:16:fe:9a:9c:e0:1c:50:d8:3c:5c:cd:50:ce:b8: 4b:f6:81:c1:90:36:07:6a:69:32:e8:88:bd:51:2f:cb:f9:9b: d3:70:f5:a6:41:bc:70:38:88:dd:df:2a:44:7a:de:9f:59:9b: 28:4d:04:7d:9c:9b:26:c7:e0:4b:17:a2:a8:90:57:c3:c1:e0: 57:62:f2:90:a7:ed:a2:b1:ef:14:10:77:d2:fb:66:b2:bb:87: a4:e1:c6:1a:02:8d:2f:2c:dc:b9:d9:53:fa:ca:7c:69:36:50: 62:05:69:8d:9c:3a:09:21:20:e7:8b:92:c5:90:40:2e:53:a4: f3:8a:4a:cd:2e:1a:9c:3b:3d:ae:2d:f4:bb:d9:13:06:90:c2: 17:b9:5a:dc:bc:39:fb:ae:29:30:b1:2e:50:c3:25:0e:0b:ef: 2a:3b:a4:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3TWx+CKNcQd5P3oZYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2ZmZGIwNzEtYzM3Mi00ZmI4LWFlM2MtYWI0NDljNDAw MTc4MB4XDTI2MDUxNDAxMDAyNVoXDTI2MDgxMjAxMDAyNVowLzEtMCsGA1UEAxMk MGVmNzA4YmUtMmQ3Yi00MTc5LWJiZDItZmFjMTNmMmMyNmZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg66HhdTA/GMDUSF4y/MeAJ4c4gReIqTXSn0f aBziw8kjsjvmd+8TmO53PT66OD7E+C+BdjiL9cRHIbgiBiq9kpZcEFaB7u9TlzUf cSYI1uxmByth6AjiZVhf8DI7iRobF3v+XAPcZcz53DaAoRB+iBks1fLO4RVD0ViC sqVXVbozWgw7hOvo5IMfu4r61e82GQ6BacA5OKRuCopyQbHOjlXEl5GcuYORKdwQ 4z54RSr0rs72xKd+Jue3kRViOsLu6Va8QhRpDvo0H4duWRUBzMg9pT0DSYAKSf00 NVVHAEvdmz29/lWIp6ldrYR4H8/MSm5SXLXKPSK/0PWMa5R10QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDot0/++pJSWwEeoRmt8vI4isy9fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZmZk YjA3MS1jMzcyLTRmYjgtYWUzYy1hYjQ0OWM0MDAxNzgvMDM1MmQ5MTEtMmUxOC0z M2ZjLWFhYWYtYWJmNGI0ZTIyNTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2ZmZGIwNzEtYzM3Mi00ZmI4LWFl M2MtYWI0NDljNDAwMTc4L2NmZmRiMDcxLWMzNzItNGZiOC1hZTNjLWFiNDQ5YzQw MDE3OC5jcmwwHwYDVR0jBBgwFoAU0G9rpKq4NruHn3CfJlRBiJL9bcQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZmZkYjA3MS1jMzcyLTRmYjgtYWUzYy1hYjQ0 OWM0MDAxNzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzyIKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH6JRoZdMXukNtIRfs8kPKUjq01iSjORuPBtZXjmlQ7qvzZ4cZelu7hj +lqPIdbFWYpo1fq/8k+OI5pLuL8KMmZ20OQizWfBE9iMKj5bqUavC9gjl3wRBR5j 9YW1FEsW/pqc4BxQ2DxczVDOuEv2gcGQNgdqaTLoiL1RL8v5m9Nw9aZBvHA4iN3f KkR63p9ZmyhNBH2cmybH4EsXoqiQV8PB4Fdi8pCn7aKx7xQQd9L7ZrK7h6ThxhoC jS8s3LnZU/rKfGk2UGIFaY2cOgkhIOeLksWQQC5TpPOKSs0uGpw7Pa4t9LvZEwaQ whe5Wty8OfuuKTCxLlDDJQ4L7yo7pB4= -----END CERTIFICATE-----Generated at Sat Jun 13 16:55:53 2026 by rpki-client