$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/38dad04f-bd9c-32b0-965b-6bea245e7888.roa File: 38dad04f-bd9c-32b0-965b-6bea245e7888.roa (raw, json) Hash identifier: 3RE0mpbcnk/hNa4UiBJcWT/Ea8ElH9KufT6SnMs//sU= Subject key identifier: EF:E9:CC:09:17:CF:59:7D:45:30:3B:0F:C1:CC:BC:66:A8:CD:F8:42 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F5767F58B95143A6DD84A6400 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/38dad04f-bd9c-32b0-965b-6bea245e7888.roa Signing time: Wed 30 Sep 2026 01:00:12 +0000 ROA not before: Wed 30 Sep 2026 01:00:12 +0000 ROA not after: Tue 29 Dec 2026 02:00:12 +0000 asID: 396982 IP address blocks: 34.157.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:57:67:f5:8b:95:14:3a:6d:d8:4a:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 30 01:00:12 2026 GMT Not After : Dec 29 02:00:12 2026 GMT Subject: CN=c912cb8b-a4db-4e65-840d-06733b7bae9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:49:39:aa:b2:0d:58:12:7b:e7:10:92:48:c0: e9:fe:d2:b5:1b:52:ec:f1:a5:77:9f:02:2b:ad:94: 9a:cc:d9:43:73:e5:77:90:93:0b:c0:ad:f0:f3:9d: de:ef:44:a4:b0:19:87:09:cc:49:3a:e1:6e:20:01: 37:c4:85:d0:60:94:67:ae:f7:f3:de:03:8e:f7:0d: b7:b2:a7:36:9f:48:47:ec:cc:61:ce:c8:03:20:bd: 9a:5b:3c:a4:bf:71:da:4c:c4:46:4a:d9:92:b8:71: ef:00:0c:ba:1f:07:e9:7a:5f:cc:a7:bf:00:ee:1f: 53:48:09:9d:80:62:e7:19:b0:82:2b:bf:ab:58:20: eb:81:c0:a0:d5:4a:11:2f:0c:90:d4:f4:77:11:86: 75:1e:f8:5d:69:7d:df:24:c2:98:70:69:15:c4:28: 30:85:c7:56:e6:33:2c:c3:19:72:66:ea:87:6d:6e: 61:7d:cc:be:26:89:3b:cd:53:8c:30:2f:46:fd:30: e9:e7:75:28:c3:00:fe:22:29:ca:33:92:ae:ab:51: 42:b4:78:70:3b:04:00:d3:48:65:a1:30:8a:54:fa: 14:24:d7:1b:9f:f1:56:57:c4:b2:90:57:5f:c4:88: 9e:76:04:70:24:50:dd:00:9c:26:c6:25:e0:04:68: b4:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:E9:CC:09:17:CF:59:7D:45:30:3B:0F:C1:CC:BC:66:A8:CD:F8:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/38dad04f-bd9c-32b0-965b-6bea245e7888.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.157.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:66:8b:07:24:e5:ad:70:cf:21:71:6a:4e:cc:ba:63:dc:a1: b0:8a:ac:4b:c2:a3:93:86:fa:fc:3b:13:ca:ab:cd:ab:31:22: 4e:20:15:ad:2f:17:bb:2f:36:d5:0f:b2:c9:85:f8:4b:cf:6a: 0a:40:2d:c7:ab:da:e5:1c:47:aa:5a:a1:d4:81:b9:e1:d2:45: ac:34:ba:5b:31:28:d5:36:01:47:e8:05:eb:1b:13:00:5b:ed: c1:c2:16:d1:17:90:fc:f0:9e:42:99:ee:a5:24:a5:22:ae:0a: c4:cd:44:7c:cd:33:47:da:8a:fb:a7:23:5c:44:b5:d8:ef:0c: 2c:73:d0:23:fc:77:e6:99:b5:51:e6:73:cd:17:17:e4:95:47: dd:e8:15:77:c9:99:f2:89:70:c8:3c:5b:45:07:c9:c1:dd:92: 4f:bd:4a:ab:7e:fd:15:b8:13:a6:07:01:d9:6d:4e:d7:d2:d3: e8:2b:f8:20:aa:c9:f7:f0:07:84:69:c4:cb:72:28:bd:aa:c7: d4:78:80:7f:cc:bf:f4:25:88:51:bd:04:f2:68:43:cb:9b:c5: fc:b1:74:a5:6c:ac:70:b9:7b:0e:0e:e6:ad:26:72:01:8d:0f: 85:9c:14:4d:6b:ba:d5:9d:76:e3:63:db:2f:13:5a:f6:27:05: b2:14:a0:07 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE9XZ/WLlRQ6bdhKZAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkzMDAxMDAxMloXDTI2MTIyOTAyMDAxMlowLzEtMCsGA1UEAxMk YzkxMmNiOGItYTRkYi00ZTY1LTg0MGQtMDY3MzNiN2JhZTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+Ek5qrINWBJ75xCSSMDp/tK1G1Ls8aV3nwIr rZSazNlDc+V3kJMLwK3w853e70SksBmHCcxJOuFuIAE3xIXQYJRnrvfz3gOO9w23 sqc2n0hH7MxhzsgDIL2aWzykv3HaTMRGStmSuHHvAAy6Hwfpel/Mp78A7h9TSAmd gGLnGbCCK7+rWCDrgcCg1UoRLwyQ1PR3EYZ1HvhdaX3fJMKYcGkVxCgwhcdW5jMs wxlyZuqHbW5hfcy+Jok7zVOMMC9G/TDp53UowwD+IinKM5Kuq1FCtHhwOwQA00hl oTCKVPoUJNcbn/FWV8SykFdfxIiedgRwJFDdAJwmxiXgBGi0dwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFO/pzAkXz1l9RTA7D8HMvGaozfhCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzhkYWQwNGYtYmQ5Yy0z MmIwLTk2NWItNmJlYTI0NWU3ODg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAIp0wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAAWaLByTlrXDPIXFqTsy6Y9yhsIqsS8Kjk4b6/DsTyqvNqzEiTiAVrS8X uy821Q+yyYX4S89qCkAtx6va5RxHqlqh1IG54dJFrDS6WzEo1TYBR+gF6xsTAFvt wcIW0ReQ/PCeQpnupSSlIq4KxM1EfM0zR9qK+6cjXES12O8MLHPQI/x35pm1UeZz zRcX5JVH3egVd8mZ8olwyDxbRQfJwd2ST71Kq379FbgTpgcB2W1O19LT6Cv4IKrJ 9/AHhGnEy3IovarH1HiAf8y/9CWIUb0E8mhDy5vF/LF0pWyscLl7Dg7mrSZyAY0P hZwUTWu61Z1242PbLxNa9icFshSgBw== -----END CERTIFICATE-----Generated at Sun Oct 4 21:14:18 2026 by rpki-client