$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cffdb071-c372-4fb8-ae3c-ab449c400178/bf398656-87b8-31bc-bc34-40b0e06987a0.roa File: bf398656-87b8-31bc-bc34-40b0e06987a0.roa (raw, json) Hash identifier: /7AsZ4VAFz/Y/xzAzRG42vYmfm3zKZGY3ehEer1j34g= Subject key identifier: 4D:EA:D3:58:D3:A3:12:8A:25:89:60:F8:3E:C2:B0:34:CE:86:51:15 Certificate issuer: /CN=cffdb071-c372-4fb8-ae3c-ab449c400178 Certificate serial: 010D0C9F4328584EF71762A8A56E2588D7443280 Authority key identifier: D0:6F:6B:A4:AA:B8:36:BB:87:9F:70:9F:26:54:41:88:92:FD:6D:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cffdb071-c372-4fb8-ae3c-ab449c400178.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cffdb071-c372-4fb8-ae3c-ab449c400178/bf398656-87b8-31bc-bc34-40b0e06987a0.roa Signing time: Wed 26 Aug 2026 13:00:12 +0000 ROA not before: Wed 26 Aug 2026 13:00:12 +0000 ROA not after: Tue 24 Nov 2026 14:00:12 +0000 asID: 16509 IP address blocks: 207.34.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cffdb071-c372-4fb8-ae3c-ab449c400178/cffdb071-c372-4fb8-ae3c-ab449c400178.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cffdb071-c372-4fb8-ae3c-ab449c400178/cffdb071-c372-4fb8-ae3c-ab449c400178.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cffdb071-c372-4fb8-ae3c-ab449c400178.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f7:17:62:a8:a5:6e:25:88:d7:44:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cffdb071-c372-4fb8-ae3c-ab449c400178 Validity Not Before: Aug 26 13:00:12 2026 GMT Not After : Nov 24 14:00:12 2026 GMT Subject: CN=53d4247e-4816-4234-a76a-e9223871ef84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8e:f6:72:06:8b:c0:1b:31:bc:29:69:ac:04: bc:1c:d9:1a:20:27:55:62:4a:1e:4b:3c:6a:a8:86: 5c:99:5a:c9:5c:2e:be:ba:e4:77:49:52:f1:2f:18: 01:17:87:ea:88:e7:1f:0e:f3:95:52:7e:8e:15:3a: ed:01:a5:e7:f6:e2:a2:de:05:14:d5:65:07:eb:cd: 36:5f:5f:66:99:f5:ce:8b:81:a2:06:fd:b6:c4:5b: 0a:e2:52:d9:b4:a8:3d:3b:92:3f:9f:c3:40:c1:5c: 01:e9:12:f7:48:6f:fd:ca:38:a8:fc:c9:57:70:90: c6:4f:b8:5c:f6:60:e8:38:76:4c:a5:53:e7:57:a9: 98:b6:1d:f4:b9:ff:9d:ca:5c:10:fe:2f:39:72:31: 4e:dd:f9:97:3b:61:7e:50:3d:d6:85:42:92:81:94: 25:d4:b4:41:74:70:ba:c2:9a:9c:bc:8d:fe:e8:e1: 89:52:90:8e:e9:9b:d1:10:77:7c:ea:4e:36:4b:db: 3e:42:75:26:30:12:b8:77:c1:60:5a:6e:ea:1d:5b: e2:24:5b:39:e9:f9:50:c2:5f:89:10:6b:dc:47:4b: 2e:83:66:5d:cf:e7:97:55:15:d8:e3:10:c5:6b:51: ae:6d:1e:42:72:35:46:26:bd:95:e3:7d:d9:87:67: 50:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:EA:D3:58:D3:A3:12:8A:25:89:60:F8:3E:C2:B0:34:CE:86:51:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cffdb071-c372-4fb8-ae3c-ab449c400178/bf398656-87b8-31bc-bc34-40b0e06987a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cffdb071-c372-4fb8-ae3c-ab449c400178/cffdb071-c372-4fb8-ae3c-ab449c400178.crl X509v3 Authority Key Identifier: keyid:D0:6F:6B:A4:AA:B8:36:BB:87:9F:70:9F:26:54:41:88:92:FD:6D:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cffdb071-c372-4fb8-ae3c-ab449c400178.cer sbgp-ipAddrBlock: critical IPv4: 207.34.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cc:14:a9:0e:45:a9:18:bc:7e:a5:c0:3a:76:bb:ee:36:30:19: 20:e6:4e:ed:7e:82:2c:38:38:3c:b7:c7:73:45:30:c9:5f:13: a8:de:71:a3:25:fb:1d:19:3d:53:3f:52:78:2e:2f:77:72:04: 8b:ed:f2:75:12:95:90:f7:2a:48:ea:9e:76:fa:27:8b:f1:97: 16:a9:6b:99:15:47:94:b2:42:9f:48:d1:64:71:88:48:e5:1b: b8:85:54:a0:71:2c:11:31:fb:b8:97:60:6d:e2:ba:65:70:78: 82:e0:32:1a:ae:86:c4:a1:3d:8a:63:07:5a:06:12:6a:8f:4e: 96:28:e2:44:bc:ac:e7:81:bc:2b:0d:f7:90:d9:21:83:e4:98: 54:40:d8:d2:21:71:fe:46:8f:fd:3e:97:36:69:0b:7f:95:45: 34:70:62:8a:d0:17:8e:e9:e0:bd:ad:8a:74:07:2c:06:fe:50: 1e:ab:d9:44:22:15:17:43:8d:65:37:75:de:aa:41:75:66:39: 00:ec:fd:92:89:f8:66:28:2b:14:92:62:91:ac:6e:97:26:25: e8:74:ec:fe:04:d6:3e:a9:e9:22:28:4c:84:06:83:90:30:fa: db:02:3f:0b:20:30:88:62:47:de:af:b3:2a:53:41:50:b8:89: 21:45:cc:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE73F2KopW4liNdEMoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2ZmZGIwNzEtYzM3Mi00ZmI4LWFlM2MtYWI0NDljNDAw MTc4MB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk NTNkNDI0N2UtNDgxNi00MjM0LWE3NmEtZTkyMjM4NzFlZjg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuY72cgaLwBsxvClprAS8HNkaICdVYkoeSzxq qIZcmVrJXC6+uuR3SVLxLxgBF4fqiOcfDvOVUn6OFTrtAaXn9uKi3gUU1WUH6802 X19mmfXOi4GiBv22xFsK4lLZtKg9O5I/n8NAwVwB6RL3SG/9yjio/MlXcJDGT7hc 9mDoOHZMpVPnV6mYth30uf+dylwQ/i85cjFO3fmXO2F+UD3WhUKSgZQl1LRBdHC6 wpqcvI3+6OGJUpCO6ZvREHd86k42S9s+QnUmMBK4d8FgWm7qHVviJFs56flQwl+J EGvcR0sug2Zdz+eXVRXY4xDFa1GubR5CcjVGJr2V433Zh2dQywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE3q01jToxKKJYlg+D7CsDTOhlEVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZmZk YjA3MS1jMzcyLTRmYjgtYWUzYy1hYjQ0OWM0MDAxNzgvYmYzOTg2NTYtODdiOC0z MWJjLWJjMzQtNDBiMGUwNjk4N2EwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2ZmZGIwNzEtYzM3Mi00ZmI4LWFl M2MtYWI0NDljNDAwMTc4L2NmZmRiMDcxLWMzNzItNGZiOC1hZTNjLWFiNDQ5YzQw MDE3OC5jcmwwHwYDVR0jBBgwFoAU0G9rpKq4NruHn3CfJlRBiJL9bcQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZmZkYjA3MS1jMzcyLTRmYjgtYWUzYy1hYjQ0 OWM0MDAxNzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzyILMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMwUqQ5FqRi8fqXAOna77jYwGSDmTu1+giw4ODy3x3NFMMlfE6jecaMl +x0ZPVM/UnguL3dyBIvt8nUSlZD3Kkjqnnb6J4vxlxapa5kVR5SyQp9I0WRxiEjl G7iFVKBxLBEx+7iXYG3iumVweILgMhquhsShPYpjB1oGEmqPTpYo4kS8rOeBvCsN 95DZIYPkmFRA2NIhcf5Gj/0+lzZpC3+VRTRwYorQF47p4L2tinQHLAb+UB6r2UQi FRdDjWU3dd6qQXVmOQDs/ZKJ+GYoKxSSYpGsbpcmJeh07P4E1j6p6SIoTIQGg5Aw +tsCPwsgMIhiR96vsypTQVC4iSFFzBw= -----END CERTIFICATE-----Generated at Tue Sep 22 11:21:53 2026 by rpki-client