$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3522a44b-9834-3ba3-bf38-77634819db56.roa File: 3522a44b-9834-3ba3-bf38-77634819db56.roa (raw, json) Hash identifier: 4LMEr+opGnDWA3KLRY10vd4cB5DEhF3GfcIz5rks/p4= Subject key identifier: AC:2C:12:1C:D8:A3:13:4B:3A:5A:B6:D0:7C:1E:FF:95:67:E6:5E:AE Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3D9E84740293C7DCBC3200 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3522a44b-9834-3ba3-bf38-77634819db56.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.72.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:9e:84:74:02:93:c7:dc:bc:32:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=11473dfe-ad7c-4b34-baa2-f483a9649384 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:71:9d:56:3b:e4:a3:07:8e:81:a7:0c:c2:36: 3a:47:87:74:a0:55:3a:fb:5c:88:11:f3:45:e2:18: 86:b7:16:21:fc:e8:11:cf:06:96:fc:b2:c5:6b:44: 27:34:fe:0f:8c:00:a8:9f:7d:9f:0f:51:d9:c3:39: b7:fb:81:ec:b9:a7:16:1f:ba:cd:ce:f8:43:97:5e: 9a:be:a3:a3:c6:80:1c:bc:7b:ef:04:d0:2c:12:58: 8d:98:10:d6:4d:03:76:0d:66:5b:89:95:53:78:61: a8:48:59:a8:84:4a:d7:31:ce:b1:fe:d0:21:e2:93: d2:2d:2c:87:8e:ef:3c:16:b0:c5:18:12:83:3c:0e: be:52:50:95:52:99:4f:9b:da:48:e3:4a:2d:ad:5a: 8e:9c:fb:92:ce:ff:59:9a:e3:ef:c6:38:02:5a:7b: 36:20:ef:44:7e:2d:56:98:45:47:33:17:6c:08:0d: 48:90:b2:bc:b3:6e:50:1b:09:bd:99:8f:67:f2:ea: 40:3a:55:5b:89:f9:50:2e:71:f7:dd:bc:c6:ed:21: d9:7d:eb:01:83:3b:14:e4:45:11:63:c6:74:e1:d5: 0e:28:7e:c7:4c:38:47:00:cd:df:48:cc:e4:64:3f: 17:e5:fd:6a:b1:c8:ac:99:86:15:d0:e3:01:db:d7: c8:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:2C:12:1C:D8:A3:13:4B:3A:5A:B6:D0:7C:1E:FF:95:67:E6:5E:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3522a44b-9834-3ba3-bf38-77634819db56.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.72.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:87:08:2d:b0:72:b9:64:a7:a1:e8:8a:a2:c1:6a:6e:4d:e5: 54:ae:f5:29:0a:d7:10:44:f5:e7:4e:25:19:09:b7:9c:59:e3: 27:cf:6a:84:54:eb:f1:a6:05:e3:de:7b:d7:5d:f6:9f:dd:3b: 7d:1d:df:4e:b3:98:36:24:4a:13:97:a4:a7:0d:fb:92:6e:90: b3:16:1c:6c:20:42:14:44:70:4d:d7:dc:76:4e:a2:f1:e0:88: 06:d0:0f:da:5b:31:dc:d7:8c:1b:40:e7:f0:68:27:7b:83:a6: f4:f9:c4:0b:2f:f0:4a:04:61:4b:50:71:74:35:8b:91:78:7a: 10:74:9b:b7:d8:66:51:34:e2:f7:80:9e:16:c3:5e:32:7b:f4: bd:a0:7a:5b:0e:82:3d:61:8d:e3:1a:b4:bc:b3:68:17:bb:a6: 7e:06:4c:ce:eb:1a:e5:5a:4c:73:99:d5:60:e6:52:e8:bb:5d: bd:a3:78:2e:b7:73:00:0d:12:00:f1:9e:53:12:e9:3f:69:f9: a1:76:11:fd:e0:01:f4:9a:74:21:f1:cb:54:e1:e3:e4:21:de: 42:19:72:c2:51:9e:d7:28:4b:b4:e0:77:07:76:8f:b0:f5:57: 59:d6:0d:0b:30:a1:68:39:0b:4c:30:f0:3d:0f:57:d9:c6:49: 27:ca:49:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPZ6EdAKTx9y8MgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk MTE0NzNkZmUtYWQ3Yy00YjM0LWJhYTItZjQ4M2E5NjQ5Mzg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXGdVjvkoweOgacMwjY6R4d0oFU6+1yIEfNF 4hiGtxYh/OgRzwaW/LLFa0QnNP4PjACon32fD1HZwzm3+4HsuacWH7rNzvhDl16a vqOjxoAcvHvvBNAsEliNmBDWTQN2DWZbiZVTeGGoSFmohErXMc6x/tAh4pPSLSyH ju88FrDFGBKDPA6+UlCVUplPm9pI40otrVqOnPuSzv9ZmuPvxjgCWns2IO9Efi1W mEVHMxdsCA1IkLK8s25QGwm9mY9n8upAOlVbiflQLnH33bzG7SHZfesBgzsU5EUR Y8Z04dUOKH7HTDhHAM3fSMzkZD8X5f1qscismYYV0OMB29fISQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKwsEhzYoxNLOlq20Hwe/5Vn5l6uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzUyMmE0NGItOTgzNC0z YmEzLWJmMzgtNzc2MzQ4MTlkYjU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkiAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGiHCC2wcrlkp6HoiqLBam5N5VSu9SkK1xBE9edOJRkJt5xZ4yfPaoRU 6/GmBePee9dd9p/dO30d306zmDYkShOXpKcN+5JukLMWHGwgQhREcE3X3HZOovHg iAbQD9pbMdzXjBtA5/BoJ3uDpvT5xAsv8EoEYUtQcXQ1i5F4ehB0m7fYZlE04veA nhbDXjJ79L2gelsOgj1hjeMatLyzaBe7pn4GTM7rGuVaTHOZ1WDmUui7Xb2jeC63 cwANEgDxnlMS6T9p+aF2Ef3gAfSadCHxy1Th4+Qh3kIZcsJRntcoS7Tgdwd2j7D1 V1nWDQswoWg5C0ww8D0PV9nGSSfKSbQ= -----END CERTIFICATE-----Generated at Fri Oct 9 21:48:14 2026 by rpki-client