$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cffdb071-c372-4fb8-ae3c-ab449c400178/7ba90678-5506-3097-8a4a-c53ede395ba8.roa File: 7ba90678-5506-3097-8a4a-c53ede395ba8.roa (raw, json) Hash identifier: cCchsYrxs3KHmUVG6/Nf7iXzkRrm0kzPPyWXb/+Iw/c= Subject key identifier: 79:11:3C:73:44:5E:29:7A:7F:2A:FD:41:57:2E:E8:4C:BF:CF:32:2B Certificate issuer: /CN=cffdb071-c372-4fb8-ae3c-ab449c400178 Certificate serial: 010D0C9F4328584BB2F7AD65650BECA08D89D300 Authority key identifier: D0:6F:6B:A4:AA:B8:36:BB:87:9F:70:9F:26:54:41:88:92:FD:6D:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cffdb071-c372-4fb8-ae3c-ab449c400178.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cffdb071-c372-4fb8-ae3c-ab449c400178/7ba90678-5506-3097-8a4a-c53ede395ba8.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 14618 IP address blocks: 207.34.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cffdb071-c372-4fb8-ae3c-ab449c400178/cffdb071-c372-4fb8-ae3c-ab449c400178.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cffdb071-c372-4fb8-ae3c-ab449c400178/cffdb071-c372-4fb8-ae3c-ab449c400178.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cffdb071-c372-4fb8-ae3c-ab449c400178.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:ad:65:65:0b:ec:a0:8d:89:d3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cffdb071-c372-4fb8-ae3c-ab449c400178 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=ab62ddcf-9652-44a7-8aa9-485b8468f677 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:0b:5a:e9:14:4c:46:72:09:10:1d:76:76:91: 5d:3b:e5:b0:b9:dd:a0:69:e9:11:2f:17:3e:ec:ad: 99:0c:31:6a:cb:ba:89:7a:fb:16:ed:c3:f5:65:70: 3b:ff:45:e8:c5:c2:4e:5c:4a:8b:fc:87:92:e1:37: df:b6:c0:0b:23:82:5f:b6:05:32:1f:dc:cb:76:7d: f6:f2:4e:8e:43:79:7d:92:0c:16:59:b8:11:f9:6c: f2:7e:23:48:f8:da:9f:c1:2a:cc:e2:b0:1f:98:06: c4:8c:64:e6:cf:3c:49:0e:70:1c:74:2a:66:ef:ef: aa:23:7f:17:90:72:92:41:6b:ce:da:15:d7:4d:c2: d9:25:b3:e2:93:a3:4e:13:cf:ae:8e:25:09:be:27: ed:b2:36:6e:7e:6d:59:11:a5:01:58:f5:40:64:6e: 99:0e:b8:22:b1:09:33:05:02:38:c2:e4:cc:89:be: df:e8:52:cc:09:8e:93:9f:ec:d7:c7:28:6c:e7:34: 5a:b5:22:77:2f:3c:7b:4f:cc:7a:6a:cb:8c:cc:2e: bb:8e:a8:a1:43:81:c6:67:d2:eb:26:da:36:53:3b: ed:37:ee:03:ab:2b:36:6d:f9:90:b1:e2:20:ac:6f: e3:46:da:f6:16:ad:a5:b1:85:23:ea:c7:52:c3:e5: d4:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:11:3C:73:44:5E:29:7A:7F:2A:FD:41:57:2E:E8:4C:BF:CF:32:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cffdb071-c372-4fb8-ae3c-ab449c400178/7ba90678-5506-3097-8a4a-c53ede395ba8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cffdb071-c372-4fb8-ae3c-ab449c400178/cffdb071-c372-4fb8-ae3c-ab449c400178.crl X509v3 Authority Key Identifier: keyid:D0:6F:6B:A4:AA:B8:36:BB:87:9F:70:9F:26:54:41:88:92:FD:6D:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cffdb071-c372-4fb8-ae3c-ab449c400178.cer sbgp-ipAddrBlock: critical IPv4: 207.34.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:db:e2:8b:b9:6b:de:1f:e7:06:d9:d5:b2:34:08:cb:27:fc: 53:d6:4e:c7:d6:c3:0c:71:c9:2d:a8:8f:02:fe:39:e3:3e:7a: d5:01:41:60:bd:c0:10:fd:04:28:2a:f0:fd:d5:4d:85:e3:a7: 60:83:e7:ba:5e:c4:0c:0b:42:5d:c5:51:16:b6:da:7d:54:66: 9a:7f:2a:40:e8:72:9c:5b:7c:ca:1f:1c:80:79:23:7c:c8:61: 1d:ae:e3:a7:05:06:78:df:cf:c8:5f:ac:a7:eb:2c:f3:38:19: 96:3d:ff:53:12:ae:24:d9:6b:98:53:a5:45:2b:70:46:b9:a4: 52:2e:c3:b8:ce:d6:90:d1:c6:53:77:98:47:95:11:6c:fb:de: d6:65:ad:f9:68:50:2c:18:c2:63:ef:a8:4e:84:fc:64:00:5d: 93:eb:87:15:5e:63:78:00:79:4c:28:8f:d1:e0:22:e7:2c:5e: a7:d7:07:db:ab:cb:58:15:e3:9b:8a:92:8c:9a:c8:63:9e:b8: d0:20:db:59:6e:c8:79:18:13:74:eb:e9:7d:cc:47:2a:af:85: 2f:0d:6d:42:82:dd:1d:4e:d3:0c:96:ac:5e:ca:49:1a:95:4b: 47:c8:58:bb:ba:c5:e4:cb:ac:e4:e7:b3:f2:fa:7d:ef:80:45: ed:c0:3b:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy961lZQvsoI2J0wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2ZmZGIwNzEtYzM3Mi00ZmI4LWFlM2MtYWI0NDljNDAw MTc4MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk YWI2MmRkY2YtOTY1Mi00NGE3LThhYTktNDg1Yjg0NjhmNjc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQta6RRMRnIJEB12dpFdO+Wwud2gaekRLxc+ 7K2ZDDFqy7qJevsW7cP1ZXA7/0XoxcJOXEqL/IeS4TfftsALI4JftgUyH9zLdn32 8k6OQ3l9kgwWWbgR+WzyfiNI+NqfwSrM4rAfmAbEjGTmzzxJDnAcdCpm7++qI38X kHKSQWvO2hXXTcLZJbPik6NOE8+ujiUJviftsjZufm1ZEaUBWPVAZG6ZDrgisQkz BQI4wuTMib7f6FLMCY6Tn+zXxyhs5zRatSJ3Lzx7T8x6asuMzC67jqihQ4HGZ9Lr Jto2UzvtN+4Dqys2bfmQseIgrG/jRtr2Fq2lsYUj6sdSw+XUywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHkRPHNEXil6fyr9QVcu6Ey/zzIrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZmZk YjA3MS1jMzcyLTRmYjgtYWUzYy1hYjQ0OWM0MDAxNzgvN2JhOTA2NzgtNTUwNi0z MDk3LThhNGEtYzUzZWRlMzk1YmE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2ZmZGIwNzEtYzM3Mi00ZmI4LWFl M2MtYWI0NDljNDAwMTc4L2NmZmRiMDcxLWMzNzItNGZiOC1hZTNjLWFiNDQ5YzQw MDE3OC5jcmwwHwYDVR0jBBgwFoAU0G9rpKq4NruHn3CfJlRBiJL9bcQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZmZkYjA3MS1jMzcyLTRmYjgtYWUzYy1hYjQ0 OWM0MDAxNzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzyILMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALzb4ou5a94f5wbZ1bI0CMsn/FPWTsfWwwxxyS2ojwL+OeM+etUBQWC9 wBD9BCgq8P3VTYXjp2CD57pexAwLQl3FURa22n1UZpp/KkDocpxbfMofHIB5I3zI YR2u46cFBnjfz8hfrKfrLPM4GZY9/1MSriTZa5hTpUUrcEa5pFIuw7jO1pDRxlN3 mEeVEWz73tZlrfloUCwYwmPvqE6E/GQAXZPrhxVeY3gAeUwoj9HgIucsXqfXB9ur y1gV45uKkoyayGOeuNAg21luyHkYE3Tr6X3MRyqvhS8NbUKC3R1O0wyWrF7KSRqV S0fIWLu6xeTLrOTns/L6fe+ARe3AO50= -----END CERTIFICATE-----Generated at Wed Nov 5 01:59:00 2025 by rpki-client