$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3e2e82f8-ef4b-3775-91b1-0bc67a2a8381.roa File: 3e2e82f8-ef4b-3775-91b1-0bc67a2a8381.roa (raw, json) Hash identifier: ipC/OEQd70J1Zcz62ekE+j1mAxOSUB+vsZBLTVFArgU= Subject key identifier: 46:5D:CF:6A:01:BA:5D:70:E7:46:60:1C:6A:10:58:EC:C7:B2:BF:C2 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F498879EB767C25CEB2213F80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3e2e82f8-ef4b-3775-91b1-0bc67a2a8381.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 43515 IP address blocks: 34.2.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:79:eb:76:7c:25:ce:b2:21:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=4f7264a4-e6a1-426a-a284-213221d93cbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:20:51:01:15:bb:93:03:36:15:81:f4:86:66: 4e:ad:a2:7a:c7:06:9e:8d:90:f8:81:d9:35:7c:66: f0:40:f8:05:15:23:4c:75:5a:6c:76:76:07:92:37: df:62:5c:ee:4f:d2:e6:60:c2:81:4a:22:54:e5:1e: d7:c8:65:01:21:bb:26:c1:25:a4:3d:e7:bb:fb:ee: c3:eb:98:34:d6:2f:f9:08:51:f3:45:24:ab:d6:eb: 87:32:4e:95:ef:6e:8f:62:13:db:69:74:c3:11:9a: cd:a3:d4:be:7a:ed:f6:5c:ba:0a:40:0f:44:67:89: 7a:5c:d2:87:7a:c4:88:c7:5d:8f:d1:78:ec:98:11: 77:d1:dc:36:40:3f:dd:27:55:2a:0a:fa:16:62:5b: fb:00:3e:42:25:20:e9:09:f0:9e:f1:a9:8e:f2:53: bd:0e:1e:38:48:c6:95:b4:90:9c:6e:5a:6f:70:ee: fb:d9:2d:fb:4d:be:d4:b3:b4:66:6b:67:60:a6:a7: ae:e7:fe:ec:09:c8:8c:e5:e2:52:dd:b2:d4:b0:52: ec:93:d0:ee:79:53:9f:03:c1:f7:9e:27:16:2a:7d: 64:e8:dd:43:94:e7:c8:83:03:b2:97:61:a1:fc:5d: e0:44:ee:94:ea:7f:5e:a7:6e:52:ce:b2:2c:5c:af: 03:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:5D:CF:6A:01:BA:5D:70:E7:46:60:1C:6A:10:58:EC:C7:B2:BF:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3e2e82f8-ef4b-3775-91b1-0bc67a2a8381.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.2.72.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:2a:28:54:ce:d3:f2:4c:4a:b8:45:e8:fe:71:90:f7:fa:3c: 5d:f8:52:8e:2f:1c:a0:18:13:9c:1b:35:a1:f7:cc:eb:7b:cd: f4:69:b2:ad:ab:21:eb:c0:3d:2e:53:88:0a:d5:de:d2:dc:10: bd:f9:03:50:18:96:49:76:f9:a5:57:af:d9:2d:ad:1d:57:23: 92:84:76:81:dd:77:c7:90:3a:1c:66:97:26:37:b6:cc:6e:13: 3b:be:76:48:e4:fe:53:b4:b3:ae:c8:ef:ad:39:23:69:8d:b9: 22:7d:28:64:b9:4e:7a:7d:69:64:94:42:ce:cb:9a:4a:f8:3c: f3:78:86:6a:a0:43:be:e2:5a:e1:a3:2a:8d:66:a3:76:91:61: 30:cc:a0:7b:b5:17:da:42:c3:c0:89:1a:d5:98:1d:ba:db:92: a4:7f:e9:aa:ca:c6:da:1f:4b:74:80:34:a0:cc:d0:e5:97:a1: 5c:08:9c:b8:99:a8:f5:29:7a:87:a5:8a:4f:3d:4b:83:be:31: af:05:ae:78:8f:54:44:93:c1:6b:cb:bf:ed:39:9f:30:ca:c0: f6:ee:81:b7:08:14:a2:17:29:a1:04:82:b1:9e:17:d2:39:9c: b9:55:fe:56:b2:fb:97:4d:ec:d4:d6:d0:65:6c:09:57:ce:b2: c8:dc:0b:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiHnrdnwlzrIhP4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NGY3MjY0YTQtZTZhMS00MjZhLWEyODQtMjEzMjIxZDkzY2JlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSBRARW7kwM2FYH0hmZOraJ6xwaejZD4gdk1 fGbwQPgFFSNMdVpsdnYHkjffYlzuT9LmYMKBSiJU5R7XyGUBIbsmwSWkPee7++7D 65g01i/5CFHzRSSr1uuHMk6V726PYhPbaXTDEZrNo9S+eu32XLoKQA9EZ4l6XNKH esSIx12P0XjsmBF30dw2QD/dJ1UqCvoWYlv7AD5CJSDpCfCe8amO8lO9Dh44SMaV tJCcblpvcO772S37Tb7Us7Rma2dgpqeu5/7sCciM5eJS3bLUsFLsk9DueVOfA8H3 nicWKn1k6N1DlOfIgwOyl2Gh/F3gRO6U6n9ep25SzrIsXK8D8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEZdz2oBul1w50ZgHGoQWOzHsr/CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvM2UyZTgyZjgtZWY0Yi0z Nzc1LTkxYjEtMGJjNjdhMmE4MzgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCIgJIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADQqKFTO0/JMSrhF6P5xkPf6PF34Uo4vHKAYE5wbNaH3zOt7zfRpsq2r IevAPS5TiArV3tLcEL35A1AYlkl2+aVXr9ktrR1XI5KEdoHdd8eQOhxmlyY3tsxu Ezu+dkjk/lO0s67I7605I2mNuSJ9KGS5Tnp9aWSUQs7Lmkr4PPN4hmqgQ77iWuGj Ko1mo3aRYTDMoHu1F9pCw8CJGtWYHbrbkqR/6arKxtofS3SANKDM0OWXoVwInLiZ qPUpeoelik89S4O+Ma8FrniPVESTwWvLv+05nzDKwPbugbcIFKIXKaEEgrGeF9I5 nLlV/lay+5dN7NTW0GVsCVfOssjcC5k= -----END CERTIFICATE-----Generated at Sat Sep 26 14:28:37 2026 by rpki-client