$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3be2fd1b-ec09-346a-8459-60b5003eb551.roa File: 3be2fd1b-ec09-346a-8459-60b5003eb551.roa (raw, json) Hash identifier: VP1XbmOqbKHLHaVh6qSEkGITqSCq6+dwpG8qqXT9CYI= Subject key identifier: FC:B3:7C:9C:42:F1:68:11:95:11:81:E7:6F:53:74:40:42:78:3B:EC Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3D7F6B1D698FE4CD7E9CA0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3be2fd1b-ec09-346a-8459-60b5003eb551.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.76.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:7f:6b:1d:69:8f:e4:cd:7e:9c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=881c0cc2-291b-46c7-8aad-78775c41e23d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:7f:9e:eb:77:54:62:fd:73:35:e9:bb:60:31: e5:2b:f3:7d:51:b7:b9:bb:9b:e6:43:1a:67:1d:66: fe:f3:9e:66:a2:85:a6:18:d8:d5:43:99:32:6e:6d: 69:c4:ec:76:ee:c9:64:7f:94:16:40:20:51:90:d6: 83:3a:48:cd:99:de:6f:85:77:6d:80:e0:9c:3b:e9: 4e:66:4c:b3:ae:42:49:13:bb:80:60:2e:97:2a:13: 50:9b:15:c2:00:fa:e1:99:ca:0d:cd:f0:28:2f:0d: 19:f0:50:23:78:3a:aa:0d:f9:6c:1d:91:26:cc:87: 33:73:7c:a9:af:5d:43:82:5b:40:85:a3:49:1b:e5: 60:f4:21:fc:92:81:c0:f3:87:b7:2c:d2:95:16:2e: e2:39:45:6d:ab:c7:50:f3:5a:4c:a6:a0:9b:19:68: 49:75:77:8b:99:b7:2d:84:a7:f3:73:a9:52:41:65: cc:f2:89:19:39:07:51:cb:51:a4:ca:2e:99:ee:9b: 2c:0f:68:93:b6:9d:f3:c0:1f:b6:a9:12:5f:6b:e2: f6:f2:c2:35:f7:8e:ac:76:32:04:90:1b:36:cd:d2: 46:65:2a:84:ff:23:d3:15:3a:ca:8d:99:a2:53:bd: fc:78:2f:ca:5f:4d:27:bc:b4:60:1f:52:6c:1f:f5: 10:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:B3:7C:9C:42:F1:68:11:95:11:81:E7:6F:53:74:40:42:78:3B:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3be2fd1b-ec09-346a-8459-60b5003eb551.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.76.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:4f:bd:b7:dd:d0:cc:16:82:9e:75:de:bf:db:56:e9:29:1d: f0:9c:b7:46:a3:7b:c6:a8:83:23:1a:c4:b8:72:a6:fb:4b:23: 36:fd:15:c7:b6:59:87:71:fb:80:62:2e:5d:db:1e:76:db:c2: e4:c1:ef:72:d3:e1:24:6c:95:8c:c3:bb:3a:c4:d7:c6:0e:19: ad:62:f5:b3:63:f6:ac:ee:16:da:d0:29:5c:6d:76:e8:39:68: 2a:3e:05:18:5e:5b:8e:96:4c:2b:d9:0a:bc:8c:25:fb:91:f3: 8e:5f:81:2e:a2:59:09:2d:9a:91:e8:27:b4:c1:33:98:f6:64: c3:1a:c3:34:48:56:af:5f:1a:14:c5:71:a7:98:19:5f:44:6e: 53:d7:c3:5b:da:48:2a:e3:56:ba:e9:6d:cc:71:4d:5a:95:90: 38:03:e9:22:9f:4b:3f:27:1f:af:28:44:6f:bc:ab:7d:78:27: 27:99:6f:f8:ec:ca:25:33:df:95:0e:b1:d4:22:82:e3:96:90: 73:73:4b:34:56:3a:52:33:b6:76:50:c7:e7:bd:25:e8:f8:7e: 96:e6:15:22:10:be:fe:73:88:3c:7f:af:f3:16:52:5e:eb:9d: 45:a6:b3:61:f0:c9:82:75:cd:31:29:3d:31:d3:61:d4:29:74: fd:57:d0:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPX9rHWmP5M1+nKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk ODgxYzBjYzItMjkxYi00NmM3LThhYWQtNzg3NzVjNDFlMjNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3+e63dUYv1zNem7YDHlK/N9Ube5u5vmQxpn HWb+855mooWmGNjVQ5kybm1pxOx27slkf5QWQCBRkNaDOkjNmd5vhXdtgOCcO+lO ZkyzrkJJE7uAYC6XKhNQmxXCAPrhmcoNzfAoLw0Z8FAjeDqqDflsHZEmzIczc3yp r11DgltAhaNJG+Vg9CH8koHA84e3LNKVFi7iOUVtq8dQ81pMpqCbGWhJdXeLmbct hKfzc6lSQWXM8okZOQdRy1Gkyi6Z7pssD2iTtp3zwB+2qRJfa+L28sI1946sdjIE kBs2zdJGZSqE/yPTFTrKjZmiU738eC/KX00nvLRgH1JsH/UQkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPyzfJxC8WgRlRGB529TdEBCeDvsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvM2JlMmZkMWItZWMwOS0z NDZhLTg0NTktNjBiNTAwM2ViNTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkwwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGhPvbfd0MwWgp513r/bVukpHfCct0aje8aogyMaxLhypvtLIzb9Fce2 WYdx+4BiLl3bHnbbwuTB73LT4SRslYzDuzrE18YOGa1i9bNj9qzuFtrQKVxtdug5 aCo+BRheW46WTCvZCryMJfuR845fgS6iWQktmpHoJ7TBM5j2ZMMawzRIVq9fGhTF caeYGV9EblPXw1vaSCrjVrrpbcxxTVqVkDgD6SKfSz8nH68oRG+8q314JyeZb/js yiUz35UOsdQiguOWkHNzSzRWOlIztnZQx+e9Jej4fpbmFSIQvv5ziDx/r/MWUl7r nUWms2HwyYJ1zTEpPTHTYdQpdP1X0Lg= -----END CERTIFICATE-----Generated at Mon Sep 28 13:25:01 2026 by rpki-client