$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/34c75caf-5f31-3ddf-b113-d584f51f166e.roa File: 34c75caf-5f31-3ddf-b113-d584f51f166e.roa (raw, json) Hash identifier: e443ziRnsjjV+nrbakVugq6Vt/qSskPYyFo8Q88ue/0= Subject key identifier: 6C:F8:90:87:33:1A:B0:4D:4D:30:80:AC:DB:32:C3:14:DC:D8:16:BC Certificate issuer: /CN=29d35b5d-b56a-49ea-be01-fcbff8e02fcf Certificate serial: 010D0C9F4328584F1CC7AB03D133F70D466022C0 Authority key identifier: 0A:EB:6D:13:D7:F0:60:7B:8A:D1:00:7B:28:A0:95:8B:45:10:A4:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/34c75caf-5f31-3ddf-b113-d584f51f166e.roa Signing time: Wed 09 Sep 2026 01:00:11 +0000 ROA not before: Wed 09 Sep 2026 01:00:11 +0000 ROA not after: Tue 08 Dec 2026 02:00:11 +0000 asID: 8075 IP address blocks: 204.209.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1c:c7:ab:03:d1:33:f7:0d:46:60:22:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29d35b5d-b56a-49ea-be01-fcbff8e02fcf Validity Not Before: Sep 9 01:00:11 2026 GMT Not After : Dec 8 02:00:11 2026 GMT Subject: CN=c4ff57e4-223c-45bf-af86-8100478a19e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:b6:24:af:a6:6e:9a:a7:00:0a:97:b4:ae:4b: a2:e1:d4:8b:ba:eb:d2:8a:da:2c:1a:39:ad:58:c4: 1e:08:5a:c8:3a:41:7c:db:60:37:b1:27:a6:48:0d: 15:21:3d:b3:88:da:38:bd:56:88:0f:c7:cf:3b:c3: 70:e4:ef:fd:df:58:d2:7c:26:73:d9:fc:b1:26:22: f8:60:d2:df:f5:ef:d0:ae:a4:8c:5e:03:7b:43:4a: d4:69:d9:73:60:f4:72:58:c6:5f:59:1d:9a:05:ad: 3b:bc:b8:d7:31:70:38:8d:cb:58:18:30:de:ae:74: 00:13:ae:96:87:48:74:2a:02:81:54:71:e0:0b:e8: 15:c1:52:4a:99:3b:4d:1b:e6:b8:ab:4c:18:61:a2: e4:5f:f1:ec:77:73:a1:f6:fc:15:fe:81:20:4c:0b: 9e:6e:9a:0a:b6:d8:0d:5a:7b:a7:44:e4:e4:08:95: 63:a3:37:78:a5:f2:89:d4:98:89:1f:1a:ca:c3:07: 64:4e:d0:ff:49:49:76:39:29:a8:c8:d3:10:ed:af: 5a:35:82:f4:50:b5:04:8c:53:95:b4:81:f1:7f:74: 1c:f3:9c:45:91:09:1b:cd:f5:a8:64:61:d5:20:56: a3:cb:fe:0a:d6:7d:40:3d:e9:90:19:52:be:b8:7b: e4:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:F8:90:87:33:1A:B0:4D:4D:30:80:AC:DB:32:C3:14:DC:D8:16:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/34c75caf-5f31-3ddf-b113-d584f51f166e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.crl X509v3 Authority Key Identifier: keyid:0A:EB:6D:13:D7:F0:60:7B:8A:D1:00:7B:28:A0:95:8B:45:10:A4:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.cer sbgp-ipAddrBlock: critical IPv4: 204.209.219.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:de:d1:b4:07:1b:d7:c5:17:33:98:a8:e2:3d:01:e5:6e:fe: 89:ac:71:52:f3:25:c3:0a:0b:64:f0:fe:08:21:eb:f8:6a:73: 9a:d6:ab:bf:30:06:32:3d:e2:59:99:a5:1b:d0:28:b5:4c:06: 20:71:c1:84:bb:0c:f9:d5:59:6d:c5:9e:2a:d2:3d:09:86:0b: dc:1d:3a:a2:7a:3c:b0:e4:e8:1e:6c:b1:a5:2b:a9:c9:d1:cb: 02:15:48:2c:24:05:60:1b:0f:e3:8c:a7:c4:72:a5:8c:ed:3c: 6b:b6:54:5f:9e:c0:4d:29:65:6a:d9:72:43:82:c1:e4:6a:e3: 45:49:35:78:dd:0a:bd:d2:e6:f4:d9:7b:4a:23:d4:fa:38:7c: eb:9c:c0:58:7d:b2:e3:cf:bc:be:e4:67:64:2a:da:67:42:be: 64:0a:f1:12:22:05:d0:e6:ac:d3:bb:50:97:2b:01:58:20:15: 07:6a:e8:75:95:46:f3:6e:5f:4a:8f:05:30:67:ab:3c:2c:28: 2e:56:7e:70:46:99:33:f7:36:c5:a4:a0:ae:53:a1:ad:df:fb: 55:92:3d:94:d3:d7:c2:4f:99:2b:b2:d9:0b:98:5c:ad:38:70: 61:ca:7b:8b:1a:d0:6a:bb:b4:9c:02:4f:f6:f5:cd:29:e0:35: 50:b0:36:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8cx6sD0TP3DUZgIsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjlkMzViNWQtYjU2YS00OWVhLWJlMDEtZmNiZmY4ZTAy ZmNmMB4XDTI2MDkwOTAxMDAxMVoXDTI2MTIwODAyMDAxMVowLzEtMCsGA1UEAxMk YzRmZjU3ZTQtMjIzYy00NWJmLWFmODYtODEwMDQ3OGExOWU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbYkr6ZumqcACpe0rkui4dSLuuvSitosGjmt WMQeCFrIOkF822A3sSemSA0VIT2ziNo4vVaID8fPO8Nw5O/931jSfCZz2fyxJiL4 YNLf9e/QrqSMXgN7Q0rUadlzYPRyWMZfWR2aBa07vLjXMXA4jctYGDDernQAE66W h0h0KgKBVHHgC+gVwVJKmTtNG+a4q0wYYaLkX/Hsd3Oh9vwV/oEgTAuebpoKttgN WnunROTkCJVjozd4pfKJ1JiJHxrKwwdkTtD/SUl2OSmoyNMQ7a9aNYL0ULUEjFOV tIHxf3Qc85xFkQkbzfWoZGHVIFajy/4K1n1APemQGVK+uHvk5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGz4kIczGrBNTTCArNsywxTc2Ba8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yOWQz NWI1ZC1iNTZhLTQ5ZWEtYmUwMS1mY2JmZjhlMDJmY2YvMzRjNzVjYWYtNWYzMS0z ZGRmLWIxMTMtZDU4NGY1MWYxNjZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMjlkMzViNWQtYjU2YS00OWVhLWJl MDEtZmNiZmY4ZTAyZmNmLzI5ZDM1YjVkLWI1NmEtNDllYS1iZTAxLWZjYmZmOGUw MmZjZi5jcmwwHwYDVR0jBBgwFoAUCuttE9fwYHuK0QB7KKCVi0UQpC0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8yOWQzNWI1ZC1iNTZhLTQ5ZWEtYmUwMS1mY2Jm ZjhlMDJmY2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzNHbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKje0bQHG9fFFzOYqOI9AeVu/omscVLzJcMKC2Tw/ggh6/hqc5rWq78w BjI94lmZpRvQKLVMBiBxwYS7DPnVWW3FnirSPQmGC9wdOqJ6PLDk6B5ssaUrqcnR ywIVSCwkBWAbD+OMp8RypYztPGu2VF+ewE0pZWrZckOCweRq40VJNXjdCr3S5vTZ e0oj1Po4fOucwFh9suPPvL7kZ2Qq2mdCvmQK8RIiBdDmrNO7UJcrAVggFQdq6HWV RvNuX0qPBTBnqzwsKC5WfnBGmTP3NsWkoK5Toa3f+1WSPZTT18JPmSuy2QuYXK04 cGHKe4sa0Gq7tJwCT/b1zSngNVCwNvw= -----END CERTIFICATE-----Generated at Sun Sep 20 20:52:59 2026 by rpki-client