$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2290a827-99da-3e73-88a7-58e0f56aecfa.roa File: 2290a827-99da-3e73-88a7-58e0f56aecfa.roa (raw, json) Hash identifier: eXTsNsHvxgLY3x1vUssxZpGc6pg93R7tf0aHWVUTO4M= Subject key identifier: 52:CB:87:C7:2C:69:9C:D0:0B:A0:72:F8:9A:7C:75:8A:01:9B:3C:EB Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F497D1892C4FE891A3256E980 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2290a827-99da-3e73-88a7-58e0f56aecfa.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 19527 IP address blocks: 34.0.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7d:18:92:c4:fe:89:1a:32:56:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=76271f2c-425f-4a0d-b7f7-69aff9c9d091 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:51:a9:53:bb:df:9a:df:d7:e3:89:d1:00:5b: 76:a8:99:b3:d3:f3:38:67:ea:13:f0:a9:5f:c6:a3: 6d:ca:d6:57:60:61:c4:8c:57:86:5b:d6:53:4e:fb: 28:f8:2c:e2:66:59:92:73:df:f6:5c:d0:e6:55:9f: ec:58:f1:09:7f:26:a2:9d:7a:ef:b9:f5:a5:63:53: 2a:c8:45:b6:35:9a:2d:25:c4:f1:f6:10:47:c8:07: 25:e0:51:8b:89:31:6f:6a:2b:77:91:bb:4b:d0:06: 45:24:1c:37:d6:3c:21:a9:a9:bb:a4:cf:01:cb:12: 7c:1d:91:bf:6c:85:95:48:94:5f:ea:04:de:91:79: 7f:7b:18:39:1e:31:93:09:c5:d7:7c:9a:43:34:6e: a8:f5:ea:e0:ae:9f:76:15:ff:7a:e0:46:13:4a:38: 59:17:f7:7b:ed:44:df:04:9e:69:bc:8e:38:d7:bb: 55:50:0c:81:6a:c5:33:59:98:40:af:a6:83:9f:75: 24:99:ca:08:48:b1:86:75:c1:dd:06:5d:d2:f7:4d: bb:21:db:36:d6:bf:4d:63:b5:f8:c1:ff:05:74:9b: 51:27:b5:ae:d1:3a:ef:b2:ac:30:16:1b:7c:85:11: e4:86:2a:a4:0b:70:db:38:cc:31:8c:29:05:75:41: e5:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:CB:87:C7:2C:69:9C:D0:0B:A0:72:F8:9A:7C:75:8A:01:9B:3C:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2290a827-99da-3e73-88a7-58e0f56aecfa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.0.230.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:11:a8:f8:cc:9f:35:01:7e:65:60:f5:0a:1e:18:f9:0c:11: ab:dd:1d:5a:d6:62:9b:1e:15:0a:33:38:dc:fe:bd:a3:f0:a2: 6f:47:bf:93:94:49:02:d3:b6:7e:79:ff:39:8a:af:d3:f5:65: 2e:77:bc:ee:82:34:86:d7:81:91:b2:6f:2e:e0:76:f9:a3:d6: 0f:b4:c6:92:80:e8:71:b8:2b:d4:09:56:ef:d9:27:36:ee:81: 02:d1:ee:4a:8a:9f:69:92:db:57:5e:18:cb:4a:8f:db:64:d6: 8a:49:0a:bf:79:74:6c:e9:ae:76:c1:a7:d9:c4:81:c3:3b:73: ca:5d:28:93:fa:6e:f6:e1:c3:b1:06:be:95:2f:1d:2f:4e:a7: 9b:6f:5c:cc:6f:7a:b7:9a:4f:54:c0:de:d1:0b:c4:1b:b1:ad: 98:f2:04:c6:ae:0c:2f:1d:45:31:41:63:1a:3a:b2:67:ef:e1: bc:17:a3:31:28:32:be:a1:48:a4:5c:8a:70:22:87:08:bf:84: 9f:5c:0c:89:d8:a3:0f:59:63:a0:09:19:83:aa:71:89:95:39: 74:a9:91:80:e5:51:1f:74:2a:7b:d9:ca:e5:de:fe:65:5d:0b: 6a:c2:25:b0:29:06:50:2c:90:1c:35:71:3a:10:24:25:70:be: 0e:1d:da:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfRiSxP6JGjJW6YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NzYyNzFmMmMtNDI1Zi00YTBkLWI3ZjctNjlhZmY5YzlkMDkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1GpU7vfmt/X44nRAFt2qJmz0/M4Z+oT8Klf xqNtytZXYGHEjFeGW9ZTTvso+CziZlmSc9/2XNDmVZ/sWPEJfyainXrvufWlY1Mq yEW2NZotJcTx9hBHyAcl4FGLiTFvait3kbtL0AZFJBw31jwhqam7pM8ByxJ8HZG/ bIWVSJRf6gTekXl/exg5HjGTCcXXfJpDNG6o9ergrp92Ff964EYTSjhZF/d77UTf BJ5pvI4417tVUAyBasUzWZhAr6aDn3UkmcoISLGGdcHdBl3S9027Ids21r9NY7X4 wf8FdJtRJ7Wu0TrvsqwwFht8hRHkhiqkC3DbOMwxjCkFdUHlQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFLLh8csaZzQC6By+Jp8dYoBmzzrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjI5MGE4MjctOTlkYS0z ZTczLTg4YTctNThlMGY1NmFlY2ZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAIgDmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKkRqPjMnzUBfmVg9QoeGPkMEavdHVrWYpseFQozONz+vaPwom9Hv5OU SQLTtn55/zmKr9P1ZS53vO6CNIbXgZGyby7gdvmj1g+0xpKA6HG4K9QJVu/ZJzbu gQLR7kqKn2mS21deGMtKj9tk1opJCr95dGzprnbBp9nEgcM7c8pdKJP6bvbhw7EG vpUvHS9Op5tvXMxvereaT1TA3tELxBuxrZjyBMauDC8dRTFBYxo6smfv4bwXozEo Mr6hSKRcinAihwi/hJ9cDInYow9ZY6AJGYOqcYmVOXSpkYDlUR90KnvZyuXe/mVd C2rCJbApBlAskBw1cToQJCVwvg4d2iU= -----END CERTIFICATE-----Generated at Mon Sep 28 16:07:27 2026 by rpki-client