$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3242ab37-b607-38a0-9f7f-30233dd92285.roa File: 3242ab37-b607-38a0-9f7f-30233dd92285.roa (raw, json) Hash identifier: Qn1YCGZ9apeGtYFKoZOO/mgt9V2n4TzTUPFg0RX0P1M= Subject key identifier: 6B:60:BC:0E:91:05:12:D6:27:D9:19:FC:A5:89:3F:A4:1A:26:07:A0 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4989B526C8A19934FDE1F820 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3242ab37-b607-38a0-9f7f-30233dd92285.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 43515 IP address blocks: 34.190.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:89:b5:26:c8:a1:99:34:fd:e1:f8:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=0d697cb0-79a9-4619-b3c9-6b3294ab0e44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:b1:08:c8:7f:95:8e:a0:30:b5:9a:93:f4:63: a4:14:9e:d8:05:85:27:c4:cb:19:4f:95:cf:f9:b3: 64:d4:16:25:42:27:6c:ab:79:b6:4a:d0:09:90:8f: ee:e2:49:57:6f:91:f2:99:1f:15:81:8b:44:f5:7c: 2f:9d:35:26:00:9e:7e:87:da:5f:ac:7c:75:33:81: 6f:ec:3f:8a:5c:5e:3f:40:e8:0f:97:c0:b8:14:20: e3:48:2f:71:4b:3b:d2:f3:70:f1:ec:03:47:4c:97: 1c:0f:2e:3b:2e:d7:86:e3:61:a7:f6:12:32:6e:22: 0f:27:f6:be:21:15:33:d1:de:1d:b8:31:8d:4b:d5: 3d:a1:34:74:f0:b4:f1:eb:b7:8b:d3:39:30:69:a7: 3f:8b:3c:9f:29:fd:d8:a3:f2:76:25:be:26:c2:1c: 0f:f9:88:6a:c0:16:03:98:2f:b7:26:54:a4:4d:e6: 5d:f8:5d:e2:fa:54:69:de:3e:8c:51:2d:42:20:64: 7d:a4:fe:12:4d:c9:dc:c9:d8:15:1b:bb:26:84:f2: 9d:e2:44:76:e3:45:4a:9c:fc:54:4e:b9:98:bd:b6: 8f:f0:3e:b0:f9:10:8e:a7:53:a3:9d:b6:e0:5f:5e: 8d:e1:f9:77:1b:da:77:3b:e4:ee:da:2a:44:c4:9e: 1e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:60:BC:0E:91:05:12:D6:27:D9:19:FC:A5:89:3F:A4:1A:26:07:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3242ab37-b607-38a0-9f7f-30233dd92285.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.190.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:37:28:1d:de:99:c2:82:f3:db:f6:1b:9a:58:b2:5c:09:99: 7c:16:ba:54:4a:e4:fb:af:4b:8b:c1:ff:c8:43:fd:b6:4a:3f: e5:df:6d:29:fb:00:39:2c:f3:36:90:b9:90:0b:20:cd:0f:14: 85:e9:bb:69:57:ca:47:15:ea:fc:7c:86:83:1b:56:4d:5c:3d: 82:05:57:bd:08:68:b1:66:b1:12:96:0b:a2:9c:38:f2:8b:27: 12:1b:4f:67:f6:54:aa:17:29:cf:97:ba:8c:35:3b:d4:34:86: 06:d1:a7:f8:db:3d:91:53:05:96:2c:2a:73:9e:56:e8:16:65: 6a:f9:a5:d4:e2:55:c5:04:93:ad:c3:af:06:16:a1:a0:38:8a: 26:12:b3:d5:ec:3c:74:ec:a8:7f:57:1b:61:df:f6:79:b4:10: d3:3a:3d:5b:21:81:9d:fa:89:4a:85:40:8d:ca:69:6a:3d:ef: fc:08:a1:17:03:ef:ee:4c:38:15:a5:18:ac:b7:e9:8a:30:ac: 23:a5:6b:46:ae:b6:6d:6c:8c:4b:1d:10:69:9d:a1:9e:f9:b1: cf:52:a1:47:e7:93:ff:50:7f:ef:25:54:d8:68:f8:d8:4c:e6: f7:e8:58:d1:ad:5e:51:93:60:72:67:e6:41:ba:14:13:76:49: e7:16:ac:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JibUmyKGZNP3h+CAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MGQ2OTdjYjAtNzlhOS00NjE5LWIzYzktNmIzMjk0YWIwZTQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7EIyH+VjqAwtZqT9GOkFJ7YBYUnxMsZT5XP +bNk1BYlQidsq3m2StAJkI/u4klXb5HymR8VgYtE9XwvnTUmAJ5+h9pfrHx1M4Fv 7D+KXF4/QOgPl8C4FCDjSC9xSzvS83Dx7ANHTJccDy47LteG42Gn9hIybiIPJ/a+ IRUz0d4duDGNS9U9oTR08LTx67eL0zkwaac/izyfKf3Yo/J2Jb4mwhwP+YhqwBYD mC+3JlSkTeZd+F3i+lRp3j6MUS1CIGR9pP4STcncydgVG7smhPKd4kR240VKnPxU TrmYvbaP8D6w+RCOp1OjnbbgX16N4fl3G9p3O+Tu2ipExJ4eMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGtgvA6RBRLWJ9kZ/KWJP6QaJgegMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzI0MmFiMzctYjYwNy0z OGEwLTlmN2YtMzAyMzNkZDkyMjg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDIr4QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEg3KB3emcKC89v2G5pYslwJmXwWulRK5PuvS4vB/8hD/bZKP+XfbSn7 ADks8zaQuZALIM0PFIXpu2lXykcV6vx8hoMbVk1cPYIFV70IaLFmsRKWC6KcOPKL JxIbT2f2VKoXKc+Xuow1O9Q0hgbRp/jbPZFTBZYsKnOeVugWZWr5pdTiVcUEk63D rwYWoaA4iiYSs9XsPHTsqH9XG2Hf9nm0ENM6PVshgZ36iUqFQI3KaWo97/wIoRcD 7+5MOBWlGKy36YowrCOla0autm1sjEsdEGmdoZ75sc9SoUfnk/9Qf+8lVNho+NhM 5vfoWNGtXlGTYHJn5kG6FBN2SecWrLo= -----END CERTIFICATE-----Generated at Sun Oct 11 09:01:02 2026 by rpki-client