$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/20a256fc-40e1-33e1-bebd-b0b6e94a91d3.roa File: 20a256fc-40e1-33e1-bebd-b0b6e94a91d3.roa (raw, json) Hash identifier: pAuKqhOHTNqAKnAP8msWzLTH8TN4wV5bTl8h6vx5wDY= Subject key identifier: F0:F1:DB:65:6E:E6:06:7D:9A:3C:F8:42:A9:93:25:08:4E:F0:99:90 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4972C3F32E0DB3DD43CC8C2A Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/20a256fc-40e1-33e1-bebd-b0b6e94a91d3.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 43515 IP address blocks: 34.3.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:c3:f3:2e:0d:b3:dd:43:cc:8c:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=0af19944-d27d-485e-9e36-66455789397f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c6:bf:8e:cb:2d:b4:34:0c:45:1c:00:b6:38: a1:ac:ad:91:f1:0d:b4:53:62:f8:13:d8:0a:ed:71: f4:a0:69:ea:13:85:55:82:db:79:12:23:3b:c1:c4: b6:03:19:6d:4f:15:be:ae:92:a1:fe:85:f2:26:42: b2:7c:17:9c:50:f9:d2:08:d2:51:7d:75:88:0e:cd: 95:81:5a:33:78:73:3f:f9:33:c2:e2:c0:79:04:4e: 2f:91:9d:df:54:25:c8:fc:38:db:7f:7b:6c:c0:dd: 00:e7:b0:ef:41:c6:31:c7:cf:ff:93:16:28:93:fd: 4e:68:d3:09:dd:17:e2:8c:f4:74:28:ef:85:10:51: e9:a4:39:7a:0a:18:94:56:88:4f:4b:91:06:b7:48: 49:9d:61:48:65:35:40:e7:db:c5:af:f9:c0:85:f4: 18:d3:67:d7:3a:0c:5a:0a:77:65:fc:d2:eb:3e:a6: 7d:cc:58:a6:d5:89:06:d7:fa:5a:60:21:55:d0:e2: 1b:7d:5b:65:e6:4b:61:71:a9:35:7d:6f:59:b4:94: 5c:39:52:ab:82:e9:6b:6d:19:1a:ff:76:c5:b7:a8: 54:1d:7a:ff:53:91:d0:e3:ad:05:72:e6:63:50:1b: 84:52:79:8f:44:d0:d1:bd:1c:ea:76:bb:de:2d:47: 09:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:F1:DB:65:6E:E6:06:7D:9A:3C:F8:42:A9:93:25:08:4E:F0:99:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/20a256fc-40e1-33e1-bebd-b0b6e94a91d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.3.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:c4:76:b0:85:7a:3f:92:77:a8:d8:7a:e3:a5:1a:60:6c:3e: 2c:64:51:8f:22:6d:39:4a:12:a9:b0:20:f2:b5:ef:71:cb:f5: e2:55:01:4a:58:95:2a:b6:a3:49:e0:91:c8:36:6a:b6:e5:ce: 5d:23:2e:bd:79:4c:6c:ed:e9:fc:f6:50:a0:a1:a0:95:bf:2a: fe:dd:9a:e9:52:5a:50:71:e6:95:15:94:23:f6:3b:77:3f:82: 57:30:aa:65:22:9a:4b:f3:51:46:1d:7a:09:5f:58:6a:47:eb: 84:6e:21:b2:a1:1c:76:77:15:3f:81:1a:fd:e8:88:0d:74:dd: 31:44:ae:65:7d:05:04:9e:01:e2:8d:24:04:82:e9:ec:b8:2a: 0c:d9:e5:67:2a:c3:c8:42:aa:d6:e1:e9:8a:54:ca:a3:f5:07: d9:f9:78:18:da:2b:d5:71:f8:02:97:6e:15:99:b1:86:9b:4b: cc:59:f2:ed:0d:b6:5b:7e:8f:4d:56:b8:e2:d8:ca:3d:10:4f: 75:9d:8f:5c:03:c1:20:49:5f:9d:ac:cf:70:8d:44:50:25:b6: 30:77:77:1a:ac:70:d4:bb:dd:5e:a3:55:1f:e5:8c:1a:32:aa: 04:63:8a:5d:df:58:5e:30:e9:32:6b:c3:26:f4:4a:02:5c:f1: 76:7e:e9:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JcsPzLg2z3UPMjCowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MGFmMTk5NDQtZDI3ZC00ODVlLTllMzYtNjY0NTU3ODkzOTdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoca/jssttDQMRRwAtjihrK2R8Q20U2L4E9gK 7XH0oGnqE4VVgtt5EiM7wcS2AxltTxW+rpKh/oXyJkKyfBecUPnSCNJRfXWIDs2V gVozeHM/+TPC4sB5BE4vkZ3fVCXI/Djbf3tswN0A57DvQcYxx8//kxYok/1OaNMJ 3RfijPR0KO+FEFHppDl6ChiUVohPS5EGt0hJnWFIZTVA59vFr/nAhfQY02fXOgxa Cndl/NLrPqZ9zFim1YkG1/paYCFV0OIbfVtl5kthcak1fW9ZtJRcOVKrgulrbRka /3bFt6hUHXr/U5HQ460FcuZjUBuEUnmPRNDRvRzqdrveLUcJ4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPDx22Vu5gZ9mjz4QqmTJQhO8JmQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjBhMjU2ZmMtNDBlMS0z M2UxLWJlYmQtYjBiNmU5NGE5MWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCIgMUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIDEdrCFej+Sd6jYeuOlGmBsPixkUY8ibTlKEqmwIPK173HL9eJVAUpY lSq2o0ngkcg2arblzl0jLr15TGzt6fz2UKChoJW/Kv7dmulSWlBx5pUVlCP2O3c/ glcwqmUimkvzUUYdeglfWGpH64RuIbKhHHZ3FT+BGv3oiA103TFErmV9BQSeAeKN JASC6ey4KgzZ5Wcqw8hCqtbh6YpUyqP1B9n5eBjaK9Vx+AKXbhWZsYabS8xZ8u0N tlt+j01WuOLYyj0QT3Wdj1wDwSBJX52sz3CNRFAltjB3dxqscNS73V6jVR/ljBoy qgRjil3fWF4w6TJrwyb0SgJc8XZ+6S0= -----END CERTIFICATE-----Generated at Sat Sep 26 10:05:12 2026 by rpki-client