$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/35f9a5dd-95d0-32ed-b2ce-e3834ecc00e9.roa File: 35f9a5dd-95d0-32ed-b2ce-e3834ecc00e9.roa (raw, json) Hash identifier: sliHsjKMUHf0Hmh/Y8heO6hiGzOMmI2V9lfAFnHPxfs= Subject key identifier: 6D:55:48:32:A2:15:2B:2C:7D:DC:33:CE:A9:94:D0:5C:66:E7:CF:2E Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F49747925E985B24B1520499A Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/35f9a5dd-95d0-32ed-b2ce-e3834ecc00e9.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 43515 IP address blocks: 34.3.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:79:25:e9:85:b2:4b:15:20:49:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=589f2f8b-63d0-47d8-8460-76ddbd96ad50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:cb:03:3b:6f:45:81:89:75:4e:29:e7:a9:82: 08:26:cf:88:85:55:de:2a:19:b3:01:00:32:4b:58: 13:1f:56:fa:f9:f9:8a:5d:47:dd:64:32:e1:62:ff: cd:e6:82:05:fb:96:09:e0:02:c0:3b:dd:73:7d:aa: 4f:8f:1b:83:5b:db:7c:19:fc:d1:f8:ed:bc:90:fe: a5:12:60:81:bf:ee:5a:42:c2:07:49:a9:f5:51:73: 47:ce:a0:cf:28:23:02:b3:5d:3f:f1:07:2d:8c:64: 08:93:80:84:1c:58:e9:f2:d4:be:d7:2d:bf:5d:52: 95:b7:bf:98:27:19:e2:02:70:eb:60:1c:ff:46:d7: cd:82:51:f7:eb:96:40:78:bf:58:e8:f1:df:83:af: 1b:f7:18:8f:86:dd:87:32:9a:ad:41:82:f1:6f:f8: 84:e3:50:b6:bd:d9:32:ab:78:ed:48:51:2b:a3:26: 19:4b:b1:76:a6:d1:89:eb:09:43:c5:2f:6a:2f:17: b5:66:03:b1:9c:49:e7:07:47:98:af:35:0c:b5:ae: 43:38:80:78:7c:14:57:17:a1:47:b5:ca:cc:88:b4: 5c:8c:68:14:18:6f:23:2d:83:20:1c:6d:db:11:a3: 9e:a9:e5:1d:53:f9:6b:52:78:cb:fe:02:4a:9c:df: c1:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:55:48:32:A2:15:2B:2C:7D:DC:33:CE:A9:94:D0:5C:66:E7:CF:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/35f9a5dd-95d0-32ed-b2ce-e3834ecc00e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.3.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:3e:03:a0:11:82:55:ec:d7:fa:78:8e:cb:00:bd:d0:c0:be: b2:1f:c9:0f:ec:53:58:80:35:74:52:43:f2:9a:bb:b0:64:e6: 6e:d3:81:05:01:a8:40:af:a1:32:d3:a2:ed:2f:45:d1:f6:2f: 32:6a:e6:f7:fe:92:c5:c5:e1:8a:10:91:ce:38:0a:80:bd:5a: 5d:48:8e:a1:b1:13:96:44:ca:d0:0a:50:b2:8b:09:21:f2:31: a4:30:21:c5:2b:ca:05:21:74:40:ae:ee:01:90:f4:b0:82:86: 53:ae:1e:ce:3f:b4:6d:6f:06:43:41:ba:b9:0a:91:d3:a4:69: 49:dd:3b:9d:56:b6:7d:f4:be:25:9a:7e:26:81:a8:5c:af:48: fd:19:27:eb:3b:6f:a2:fe:c7:09:5c:fd:ae:fa:8a:ab:98:07: 1c:0b:4f:76:11:ed:4a:cc:61:99:1d:18:f1:04:28:72:de:64: 86:2d:9f:52:58:7a:65:4b:80:ce:ca:fa:38:47:17:fc:79:a8: 61:88:b4:19:de:fd:cf:13:02:c1:41:f5:a7:06:92:82:a7:a2: 1e:4d:63:ac:9e:9e:c9:ca:f2:23:52:3e:10:0f:4b:f5:69:52: b6:76:51:a8:df:20:b2:cd:f6:3e:3e:74:67:f7:e1:5c:67:6a: d1:9f:d6:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdHkl6YWySxUgSZowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NTg5ZjJmOGItNjNkMC00N2Q4LTg0NjAtNzZkZGJkOTZhZDUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhssDO29FgYl1TinnqYIIJs+IhVXeKhmzAQAy S1gTH1b6+fmKXUfdZDLhYv/N5oIF+5YJ4ALAO91zfapPjxuDW9t8GfzR+O28kP6l EmCBv+5aQsIHSan1UXNHzqDPKCMCs10/8QctjGQIk4CEHFjp8tS+1y2/XVKVt7+Y JxniAnDrYBz/RtfNglH365ZAeL9Y6PHfg68b9xiPht2HMpqtQYLxb/iE41C2vdky q3jtSFEroyYZS7F2ptGJ6wlDxS9qLxe1ZgOxnEnnB0eYrzUMta5DOIB4fBRXF6FH tcrMiLRcjGgUGG8jLYMgHG3bEaOeqeUdU/lrUnjL/gJKnN/BfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG1VSDKiFSssfdwzzqmU0Fxm588uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzVmOWE1ZGQtOTVkMC0z MmVkLWIyY2UtZTM4MzRlY2MwMGU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCIgNEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABs+A6ARglXs1/p4jssAvdDAvrIfyQ/sU1iANXRSQ/Kau7Bk5m7TgQUB qECvoTLTou0vRdH2LzJq5vf+ksXF4YoQkc44CoC9Wl1IjqGxE5ZEytAKULKLCSHy MaQwIcUrygUhdECu7gGQ9LCChlOuHs4/tG1vBkNBurkKkdOkaUndO51Wtn30viWa fiaBqFyvSP0ZJ+s7b6L+xwlc/a76iquYBxwLT3YR7UrMYZkdGPEEKHLeZIYtn1JY emVLgM7K+jhHF/x5qGGItBne/c8TAsFB9acGkoKnoh5NY6yensnK8iNSPhAPS/Vp UrZ2UajfILLN9j4+dGf34VxnatGf1sA= -----END CERTIFICATE-----Generated at Sat Sep 26 15:33:28 2026 by rpki-client