$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/291f0c07-656e-3b2b-b9b3-a77de7909e9a.roa File: 291f0c07-656e-3b2b-b9b3-a77de7909e9a.roa (raw, json) Hash identifier: rqXmzw6c2Z5Cf4mCPQN5lg/IOlNemjCAlwhWAmdSTeM= Subject key identifier: 6F:8F:71:7F:1D:46:7E:DF:4D:38:90:8C:A8:EE:2F:CA:5A:64:63:C6 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3D7F1F427248F0B5047280 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/291f0c07-656e-3b2b-b9b3-a77de7909e9a.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.23.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:7f:1f:42:72:48:f0:b5:04:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=a61c72e9-e8a9-48aa-9c6a-185983e48f8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f1:dc:5b:68:a0:5e:24:3b:84:9d:79:1a:e7: e7:fe:90:08:3d:43:53:c2:81:80:18:cc:9f:31:0f: 3a:8b:53:6b:6e:1d:53:1e:8d:81:be:38:7c:e9:6a: f6:1b:d3:37:16:84:c2:e4:4b:fe:0f:31:01:44:a4: 38:b9:a4:a4:25:a2:fc:7e:34:49:87:71:1c:bf:31: f6:b1:40:c1:07:e9:b9:8d:88:12:5c:c6:bf:77:7d: 31:93:e9:94:58:3d:7e:c5:f9:4a:bf:c7:23:d4:fb: 6c:30:94:4a:69:ac:36:04:37:fe:70:f3:1c:d6:92: 37:ce:f2:6c:aa:28:ae:ed:0c:73:be:54:a4:89:86: e6:17:cc:fa:94:1a:2c:d3:8d:cf:13:45:38:e7:85: 42:8b:8a:d8:41:98:09:2e:bd:0c:a9:4e:66:b0:56: 22:42:2d:a6:b1:9e:0b:0a:da:f3:ee:04:78:72:18: 55:dd:a1:65:5f:3a:bd:63:33:0b:d3:95:e8:90:ff: 1c:f8:72:b5:98:49:9b:27:fb:e6:1d:c0:bb:41:12: e1:fd:02:79:58:45:ff:5a:76:14:91:d5:fa:7c:f2: a3:54:fb:85:6e:6e:a6:0d:ba:b5:08:f0:af:d2:58: 16:f1:e4:35:4c:08:30:9b:ea:02:f5:7a:ca:a8:85: 05:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:8F:71:7F:1D:46:7E:DF:4D:38:90:8C:A8:EE:2F:CA:5A:64:63:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/291f0c07-656e-3b2b-b9b3-a77de7909e9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.23.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:d4:bb:2c:91:5d:20:99:cd:1c:73:cc:08:eb:fe:d3:d7:5b: 27:82:16:75:6f:ad:c2:61:88:8e:e8:8d:79:00:46:ed:10:f3: f0:91:20:e7:74:61:28:63:23:ff:25:11:85:e7:e0:7d:2e:b9: c7:7a:56:78:9e:4d:1c:44:4e:9c:c9:7c:8f:70:ae:77:f0:9f: 0e:46:e9:78:aa:ea:53:9d:d7:73:d4:d7:b9:f5:fd:19:43:06: f1:05:b6:2c:41:ee:82:33:ba:2f:d1:1d:8d:b7:fe:8e:cf:a7: 13:d3:48:d8:a1:9d:9e:c0:87:52:6f:29:0a:cc:29:1d:7c:a0: 5d:af:37:80:4f:55:d3:3b:d8:48:ee:40:9c:e1:dc:01:60:9d: 5b:27:29:e1:f3:17:f2:a9:f4:f6:63:e6:9d:19:b0:03:d7:a7: 04:de:07:53:64:a5:20:16:02:8c:3f:9d:65:5f:03:5f:8e:f3: 3e:0d:45:3f:b3:93:a2:af:c8:05:42:4a:69:5c:7e:5a:4d:0c: 0d:22:e6:8a:a9:d8:d9:98:88:29:65:f4:02:cd:bf:34:7c:bf: 31:6e:34:01:5c:66:b9:0b:15:35:58:71:fe:91:f5:50:f6:df: 4f:b9:73:54:e5:3f:b0:bd:d7:61:cc:c1:ff:10:b0:d3:05:6f: 7e:e3:f2:17 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE9MPX8fQnJI8LUEcoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk YTYxYzcyZTktZThhOS00OGFhLTljNmEtMTg1OTgzZTQ4ZjhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPHcW2igXiQ7hJ15Gufn/pAIPUNTwoGAGMyf MQ86i1Nrbh1THo2Bvjh86Wr2G9M3FoTC5Ev+DzEBRKQ4uaSkJaL8fjRJh3EcvzH2 sUDBB+m5jYgSXMa/d30xk+mUWD1+xflKv8cj1PtsMJRKaaw2BDf+cPMc1pI3zvJs qiiu7QxzvlSkiYbmF8z6lBos043PE0U454VCi4rYQZgJLr0MqU5msFYiQi2msZ4L Ctrz7gR4chhV3aFlXzq9YzML05XokP8c+HK1mEmbJ/vmHcC7QRLh/QJ5WEX/WnYU kdX6fPKjVPuFbm6mDbq1CPCv0lgW8eQ1TAgwm+oC9XrKqIUFtwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFG+PcX8dRn7fTTiQjKjuL8paZGPGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjkxZjBjMDctNjU2ZS0z YjJiLWI5YjMtYTc3ZGU3OTA5ZTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAIhcwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAYtS7LJFdIJnNHHPMCOv+09dbJ4IWdW+twmGIjuiNeQBG7RDz8JEg53Rh KGMj/yURhefgfS65x3pWeJ5NHEROnMl8j3Cud/CfDkbpeKrqU53Xc9TXufX9GUMG 8QW2LEHugjO6L9Edjbf+js+nE9NI2KGdnsCHUm8pCswpHXygXa83gE9V0zvYSO5A nOHcAWCdWycp4fMX8qn09mPmnRmwA9enBN4HU2SlIBYCjD+dZV8DX47zPg1FP7OT oq/IBUJKaVx+Wk0MDSLmiqnY2ZiIKWX0As2/NHy/MW40AVxmuQsVNVhx/pH1UPbf T7lzVOU/sL3XYczB/xCw0wVvfuPyFw== -----END CERTIFICATE-----Generated at Mon Sep 28 16:27:40 2026 by rpki-client