$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3f3d455d-5faa-3dc1-b867-5a3377f0e553.roa File: 3f3d455d-5faa-3dc1-b867-5a3377f0e553.roa (raw, json) Hash identifier: HEEaS1QxivpCGO9cRx9avsHYkg6QeNUGrY/xRsAf83k= Subject key identifier: BD:C2:CD:82:F5:CA:AA:ED:D0:43:EE:D8:E1:E5:FE:EE:B3:8D:29:C3 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3D8E01228615AFDFD0FE80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3f3d455d-5faa-3dc1-b867-5a3377f0e553.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.68.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:8e:01:22:86:15:af:df:d0:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=6ee34dab-457b-4c21-a421-8627ae611832 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:8a:b2:d8:30:dd:10:fb:7e:bc:84:99:a7:9c: b8:e8:9e:a4:de:fe:a2:dc:f8:e1:ee:9b:b6:63:42: 27:1c:0e:20:48:c1:a3:13:13:22:ba:c1:b4:4c:09: e2:fa:ed:4e:66:98:bd:54:35:47:f0:f2:d4:d6:9e: 40:16:27:7a:96:a3:4a:35:8c:b1:ac:c0:96:c2:11: 0c:44:5e:73:93:42:c2:9b:4c:76:4b:51:48:bd:7f: a7:fb:08:18:1e:7f:25:06:9d:a6:16:1f:49:e6:a3: b7:6c:7b:c0:57:6f:44:13:44:cd:e8:6e:7e:f5:71: 30:4b:2a:02:9c:cb:19:0f:f2:87:1d:3f:09:46:13: 22:72:ce:67:d1:39:e8:2b:f3:28:8c:ba:30:f4:db: 39:33:b4:d9:8c:22:d9:f5:45:09:2c:91:ae:dc:dc: a9:b8:46:a4:59:9c:f7:dd:3f:03:b1:d4:e1:11:c8: bf:89:32:4d:a7:01:c4:aa:3d:93:d1:44:4b:24:a6: 58:2e:95:50:be:62:37:af:d4:df:24:87:08:a4:33: de:40:9b:e0:79:d3:14:3a:d9:e0:cc:e2:9b:6f:41: 11:04:ff:df:ac:ae:23:78:ec:9d:b4:7e:b5:d6:18: f4:8c:83:e8:bd:99:c5:a7:dc:46:2c:01:d9:24:98: c4:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:C2:CD:82:F5:CA:AA:ED:D0:43:EE:D8:E1:E5:FE:EE:B3:8D:29:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3f3d455d-5faa-3dc1-b867-5a3377f0e553.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.68.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:37:fb:64:3a:cc:59:f0:1b:60:75:2f:94:b9:bf:67:37:9f: 9c:49:1d:08:23:8a:d4:ff:bd:9d:e5:34:6d:d6:db:1c:78:31: e6:86:14:d1:b2:e4:39:8b:12:7a:4f:9e:48:c8:4b:b5:7a:49: be:57:f3:97:e0:7e:6a:2c:44:6e:08:c2:5d:d2:9c:97:30:6f: f7:e5:37:f3:e2:08:93:2c:7a:4c:aa:24:d4:ac:51:50:cc:87: 75:1d:98:fa:91:ba:72:3b:d6:f6:4b:35:26:8e:e1:5b:26:f6: 13:1a:21:02:b9:35:5f:68:7b:c5:f7:57:a9:78:41:34:6f:09: 11:33:ad:36:ec:6e:24:53:02:67:81:3d:d7:31:11:6b:e2:6e: c3:aa:6f:5b:80:c4:69:c9:58:b1:fb:1d:61:64:90:93:58:be: f9:95:8e:3b:f8:c0:7f:6a:5d:54:73:9a:87:0f:4a:c3:a5:f1: c3:af:2a:0e:aa:3e:70:01:46:aa:87:b8:93:f8:7d:8b:7c:80: ea:d7:20:b0:38:5a:ab:b4:fa:e8:60:a3:a7:05:8d:d7:df:29: 62:6a:b8:c4:c8:6f:a3:6c:df:b1:ea:0a:b6:2d:75:4a:05:d3: 2c:9c:01:d1:a9:96:d8:70:ec:f8:09:a9:73:bd:6a:07:41:ab: 88:10:82:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPY4BIoYVr9/Q/oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk NmVlMzRkYWItNDU3Yi00YzIxLWE0MjEtODYyN2FlNjExODMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYqy2DDdEPt+vISZp5y46J6k3v6i3Pjh7pu2 Y0InHA4gSMGjExMiusG0TAni+u1OZpi9VDVH8PLU1p5AFid6lqNKNYyxrMCWwhEM RF5zk0LCm0x2S1FIvX+n+wgYHn8lBp2mFh9J5qO3bHvAV29EE0TN6G5+9XEwSyoC nMsZD/KHHT8JRhMics5n0TnoK/MojLow9Ns5M7TZjCLZ9UUJLJGu3NypuEakWZz3 3T8DsdThEci/iTJNpwHEqj2T0URLJKZYLpVQvmI3r9TfJIcIpDPeQJvgedMUOtng zOKbb0ERBP/frK4jeOydtH611hj0jIPovZnFp9xGLAHZJJjEcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL3CzYL1yqrt0EPu2OHl/u6zjSnDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvM2YzZDQ1NWQtNWZhYS0z ZGMxLWI4NjctNWEzMzc3ZjBlNTUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkRgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAM3+2Q6zFnwG2B1L5S5v2c3n5xJHQgjitT/vZ3lNG3W2xx4MeaGFNGy 5DmLEnpPnkjIS7V6Sb5X85fgfmosRG4Iwl3SnJcwb/flN/PiCJMsekyqJNSsUVDM h3UdmPqRunI71vZLNSaO4Vsm9hMaIQK5NV9oe8X3V6l4QTRvCREzrTbsbiRTAmeB PdcxEWvibsOqb1uAxGnJWLH7HWFkkJNYvvmVjjv4wH9qXVRzmocPSsOl8cOvKg6q PnABRqqHuJP4fYt8gOrXILA4Wqu0+uhgo6cFjdffKWJquMTIb6Ns37HqCrYtdUoF 0yycAdGplthw7PgJqXO9agdBq4gQgjA= -----END CERTIFICATE-----Generated at Mon Sep 28 13:14:53 2026 by rpki-client