$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cffdb071-c372-4fb8-ae3c-ab449c400178/bf398656-87b8-31bc-bc34-40b0e06987a0.roa File: bf398656-87b8-31bc-bc34-40b0e06987a0.roa (raw, json) Hash identifier: Pm+7bR1pxmsjG/6703zsQhFBk1tjKsFu2u5V+eOH7aI= Subject key identifier: BC:C2:36:E0:F7:4C:7B:F9:BB:3A:28:D1:3C:39:EE:A6:2C:B4:00:06 Certificate issuer: /CN=cffdb071-c372-4fb8-ae3c-ab449c400178 Certificate serial: 010D0C9F4328584BB2F7AD797495C2495B927C00 Authority key identifier: D0:6F:6B:A4:AA:B8:36:BB:87:9F:70:9F:26:54:41:88:92:FD:6D:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cffdb071-c372-4fb8-ae3c-ab449c400178.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cffdb071-c372-4fb8-ae3c-ab449c400178/bf398656-87b8-31bc-bc34-40b0e06987a0.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 16509 IP address blocks: 207.34.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cffdb071-c372-4fb8-ae3c-ab449c400178/cffdb071-c372-4fb8-ae3c-ab449c400178.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cffdb071-c372-4fb8-ae3c-ab449c400178/cffdb071-c372-4fb8-ae3c-ab449c400178.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cffdb071-c372-4fb8-ae3c-ab449c400178.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:ad:79:74:95:c2:49:5b:92:7c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cffdb071-c372-4fb8-ae3c-ab449c400178 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=682d8f2d-ec2e-417a-bea8-cb46b3cf26b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:69:05:98:8b:39:fd:f7:d2:cc:03:fc:6f:4f: 62:c8:83:69:bc:f5:77:60:9b:5a:42:12:38:87:fe: e4:7b:34:c2:da:43:5b:48:0a:81:de:3e:fe:88:8e: 36:5f:82:e9:43:59:f9:74:c9:41:9e:ed:89:a6:8d: a5:14:2e:e3:71:7e:c4:9d:37:ab:a7:39:8c:07:34: d8:73:8d:d9:5f:c4:cc:02:1f:3b:aa:70:93:75:03: 32:36:1e:7b:fb:7b:7a:14:67:ef:86:c7:2b:96:84: 1b:c9:24:fd:d6:95:d5:09:66:c8:59:41:fb:f1:72: 58:2d:27:3c:1b:d6:be:52:40:29:72:3a:7a:d2:d0: 9c:66:dd:9c:62:e4:35:e9:92:85:10:81:1c:2d:82: 7f:fc:55:70:ad:11:76:e5:7e:5a:78:4f:ed:ac:63: de:d0:96:8c:4e:f3:fb:1d:00:a3:d6:23:8e:e7:1a: c4:0f:24:98:de:2b:1d:b3:5c:8a:a8:c4:4a:5d:16: 1e:0a:ba:38:d1:25:7b:be:b7:cd:b7:34:1f:fd:08: 06:dd:62:fe:f0:0a:db:fd:37:9b:4e:94:74:4e:0b: 64:f9:1f:a9:93:95:ef:7b:86:a8:58:01:d8:a4:96: 53:b8:ac:d5:fa:1b:87:50:9a:f4:d6:88:e5:37:f4: 97:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:C2:36:E0:F7:4C:7B:F9:BB:3A:28:D1:3C:39:EE:A6:2C:B4:00:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cffdb071-c372-4fb8-ae3c-ab449c400178/bf398656-87b8-31bc-bc34-40b0e06987a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cffdb071-c372-4fb8-ae3c-ab449c400178/cffdb071-c372-4fb8-ae3c-ab449c400178.crl X509v3 Authority Key Identifier: keyid:D0:6F:6B:A4:AA:B8:36:BB:87:9F:70:9F:26:54:41:88:92:FD:6D:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cffdb071-c372-4fb8-ae3c-ab449c400178.cer sbgp-ipAddrBlock: critical IPv4: 207.34.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:16:a6:8e:e0:5d:00:f4:a4:64:fd:94:45:ed:16:4b:87:86: e6:d8:db:c0:48:96:37:77:9d:34:65:9c:38:e4:52:ca:67:2a: 6c:bd:5b:e5:d9:d3:7d:67:d5:bc:4f:51:bb:8c:50:93:2a:31: 2c:d2:38:c5:54:95:b9:bf:be:6b:28:4b:de:06:0b:04:ed:31: 3b:4a:7b:cd:5d:1b:3e:0b:af:e4:db:53:b5:35:26:49:b0:1f: a9:07:8f:9c:24:90:63:ad:cb:f5:de:28:61:3e:e6:51:a7:ca: 90:35:fe:f5:1d:72:f2:93:82:4b:52:4a:15:50:bb:61:16:d9: b7:92:42:92:4e:e3:2d:b1:82:9d:81:b4:23:1d:31:8c:4b:b1: f6:c0:85:07:69:be:d9:5c:93:72:fd:b4:8c:9f:53:db:ec:28: 8d:bb:6c:12:9b:ee:3c:62:f1:b9:03:f2:dd:5f:29:56:86:a7: 32:e2:80:a9:ed:fd:3e:c7:64:94:ad:64:a4:5a:50:d2:f0:44: a2:16:ce:ca:b7:2b:74:c9:f1:29:60:19:a2:05:6e:f3:06:00: ab:d2:94:38:ec:f3:07:1c:f5:12:fe:84:d6:60:f5:22:1c:c8: 04:f7:ab:19:1d:d1:7f:80:ad:d3:b9:66:0e:3b:a6:b4:08:d7: 1f:d3:b6:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy9615dJXCSVuSfAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2ZmZGIwNzEtYzM3Mi00ZmI4LWFlM2MtYWI0NDljNDAw MTc4MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk NjgyZDhmMmQtZWMyZS00MTdhLWJlYTgtY2I0NmIzY2YyNmIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2kFmIs5/ffSzAP8b09iyINpvPV3YJtaQhI4 h/7kezTC2kNbSAqB3j7+iI42X4LpQ1n5dMlBnu2Jpo2lFC7jcX7EnTerpzmMBzTY c43ZX8TMAh87qnCTdQMyNh57+3t6FGfvhscrloQbyST91pXVCWbIWUH78XJYLSc8 G9a+UkApcjp60tCcZt2cYuQ16ZKFEIEcLYJ//FVwrRF25X5aeE/trGPe0JaMTvP7 HQCj1iOO5xrEDySY3isds1yKqMRKXRYeCro40SV7vrfNtzQf/QgG3WL+8Arb/Teb TpR0Tgtk+R+pk5Xve4aoWAHYpJZTuKzV+huHUJr01ojlN/SXrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLzCNuD3THv5uzoo0Tw57qYstAAGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZmZk YjA3MS1jMzcyLTRmYjgtYWUzYy1hYjQ0OWM0MDAxNzgvYmYzOTg2NTYtODdiOC0z MWJjLWJjMzQtNDBiMGUwNjk4N2EwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2ZmZGIwNzEtYzM3Mi00ZmI4LWFl M2MtYWI0NDljNDAwMTc4L2NmZmRiMDcxLWMzNzItNGZiOC1hZTNjLWFiNDQ5YzQw MDE3OC5jcmwwHwYDVR0jBBgwFoAU0G9rpKq4NruHn3CfJlRBiJL9bcQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZmZkYjA3MS1jMzcyLTRmYjgtYWUzYy1hYjQ0 OWM0MDAxNzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzyILMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL0Wpo7gXQD0pGT9lEXtFkuHhubY28BIljd3nTRlnDjkUspnKmy9W+XZ 031n1bxPUbuMUJMqMSzSOMVUlbm/vmsoS94GCwTtMTtKe81dGz4Lr+TbU7U1Jkmw H6kHj5wkkGOty/XeKGE+5lGnypA1/vUdcvKTgktSShVQu2EW2beSQpJO4y2xgp2B tCMdMYxLsfbAhQdpvtlck3L9tIyfU9vsKI27bBKb7jxi8bkD8t1fKVaGpzLigKnt /T7HZJStZKRaUNLwRKIWzsq3K3TJ8SlgGaIFbvMGAKvSlDjs8wcc9RL+hNZg9SIc yAT3qxkd0X+ArdO5Zg47prQI1x/Tths= -----END CERTIFICATE-----Generated at Wed Nov 5 05:44:53 2025 by rpki-client