$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3ca8bc7d-e124-30c9-b965-8e12cd94e52e.roa File: 3ca8bc7d-e124-30c9-b965-8e12cd94e52e.roa (raw, json) Hash identifier: TaXsN0ga52P3beiOMYYmJjhbhQhE479bwyeP82SJd/Y= Subject key identifier: 46:EA:52:A7:47:73:BE:54:E9:49:64:25:46:85:A9:7D:6F:5F:81:97 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3D8FE0E1D45A7B15772600 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3ca8bc7d-e124-30c9-b965-8e12cd94e52e.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.70.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:8f:e0:e1:d4:5a:7b:15:77:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=7534f8f7-0039-470a-ac7f-123d5e860d9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:63:7b:b6:00:e6:23:7d:e8:47:55:f7:11:ac: b6:1e:53:7a:27:8e:df:d5:19:88:a2:3a:1f:a5:4b: 9c:71:01:f9:42:18:fb:ec:c3:2a:73:71:58:bc:44: 0d:f4:4e:88:ca:7b:3a:58:a9:53:3f:de:e8:af:fe: cc:f2:06:ac:c3:9a:bc:2f:41:c6:00:61:58:88:4b: 9b:b6:37:41:29:aa:49:cf:25:d5:0e:c7:43:ab:c0: 27:be:ef:c5:73:47:95:df:d6:fc:6e:3b:79:43:e2: 0c:3c:4e:a9:16:1b:2d:c3:ab:33:66:5d:4a:bd:5b: 03:c4:0a:c1:4c:92:ca:41:43:b3:ae:5a:32:85:98: 9b:f4:46:cc:47:68:0d:15:1f:45:75:b0:98:c9:90: 50:ea:1f:ea:bc:de:42:87:6a:f1:12:a7:4a:68:70: 67:d1:99:d2:ff:ba:71:68:b0:be:fb:ab:2a:af:8a: 55:f2:35:f8:ad:7e:46:8a:b1:d6:40:82:75:22:37: 76:75:05:d3:0d:65:af:03:2b:7c:06:26:11:b2:7d: 9b:87:28:2c:86:08:19:86:4e:60:2a:31:85:c5:7b: b8:e7:6f:0f:ba:95:a8:0d:b8:8b:4b:f7:10:09:39: 46:14:d3:94:e1:24:56:b4:a7:bb:7e:3c:f5:7a:77: e1:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:EA:52:A7:47:73:BE:54:E9:49:64:25:46:85:A9:7D:6F:5F:81:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3ca8bc7d-e124-30c9-b965-8e12cd94e52e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.70.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:c9:69:3c:78:d2:2f:ba:23:23:e1:36:62:05:d6:b2:87:f1: d2:24:84:8c:ce:36:b6:73:0f:da:22:24:e4:d1:75:ae:a3:62: 1e:75:19:db:a5:32:32:f4:19:db:7f:08:56:ce:d7:97:d0:d8: 32:db:63:cc:9b:3b:98:27:90:c5:34:ee:1b:9c:f7:d4:89:45: b0:d0:cf:45:24:64:8e:fa:01:1d:83:00:43:20:d8:a4:c5:44: 1b:bf:6f:5c:e8:e4:de:ec:01:70:af:45:82:0a:c2:47:0a:b5: 7f:03:8f:36:95:67:65:20:33:5c:a6:03:6f:47:c3:f7:60:a0: 54:7c:f8:77:02:df:bd:9a:b4:73:31:bf:e1:83:c6:4e:3a:3a: 4d:d8:88:50:9a:3b:d7:6c:9b:bc:21:5c:4d:bd:a9:d4:77:c4: b1:b8:cd:25:2d:57:9f:a5:24:37:24:24:5c:3c:d9:98:41:b5: 7d:0d:9f:1f:e1:44:8b:fe:2c:b5:31:18:87:6a:7f:fa:70:fc: eb:53:3f:13:66:b6:ba:85:1d:e9:67:a5:a8:c6:aa:27:ba:db: 87:28:9a:eb:28:3b:82:20:1e:6a:5a:bc:18:90:39:0c:93:71: 4a:90:c8:eb:84:6a:a7:e7:fc:05:5e:f7:f7:ad:a8:e2:b8:7b: df:f5:fe:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPY/g4dRaexV3JgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk NzUzNGY4ZjctMDAzOS00NzBhLWFjN2YtMTIzZDVlODYwZDlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWN7tgDmI33oR1X3Eay2HlN6J47f1RmIojof pUuccQH5Qhj77MMqc3FYvEQN9E6Iyns6WKlTP97or/7M8gasw5q8L0HGAGFYiEub tjdBKapJzyXVDsdDq8Anvu/Fc0eV39b8bjt5Q+IMPE6pFhstw6szZl1KvVsDxArB TJLKQUOzrloyhZib9EbMR2gNFR9FdbCYyZBQ6h/qvN5Ch2rxEqdKaHBn0ZnS/7px aLC++6sqr4pV8jX4rX5GirHWQIJ1Ijd2dQXTDWWvAyt8BiYRsn2bhygshggZhk5g KjGFxXu4528PupWoDbiLS/cQCTlGFNOU4SRWtKe7fjz1enfhRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEbqUqdHc75U6UlkJUaFqX1vX4GXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvM2NhOGJjN2QtZTEyNC0z MGM5LWI5NjUtOGUxMmNkOTRlNTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkYAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGzJaTx40i+6IyPhNmIF1rKH8dIkhIzONrZzD9oiJOTRda6jYh51Gdul MjL0Gdt/CFbO15fQ2DLbY8ybO5gnkMU07huc99SJRbDQz0UkZI76AR2DAEMg2KTF RBu/b1zo5N7sAXCvRYIKwkcKtX8DjzaVZ2UgM1ymA29Hw/dgoFR8+HcC372atHMx v+GDxk46Ok3YiFCaO9dsm7whXE29qdR3xLG4zSUtV5+lJDckJFw82ZhBtX0Nnx/h RIv+LLUxGIdqf/pw/OtTPxNmtrqFHelnpajGqie624comusoO4IgHmpavBiQOQyT cUqQyOuEaqfn/AVe9/etqOK4e9/1/uw= -----END CERTIFICATE-----Generated at Tue Sep 29 12:27:41 2026 by rpki-client