$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3f5597a9-3a5a-3b61-83d2-0a823bc09450.roa File: 3f5597a9-3a5a-3b61-83d2-0a823bc09450.roa (raw, json) Hash identifier: VEm5V7ZifsXDmGdfkKLpz3bjl7NdbFHscMpDCW52jf0= Subject key identifier: 4C:53:6C:70:69:08:B0:B5:7F:C6:04:55:F4:36:C4:88:9A:2C:1E:EB Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3D8A12759A7DF88E23D500 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3f5597a9-3a5a-3b61-83d2-0a823bc09450.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.95.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:8a:12:75:9a:7d:f8:8e:23:d5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=e257101e-0525-4863-9e71-e6390a323910 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:c2:63:f3:8b:83:9a:da:b5:9e:42:6b:ec:dd: f9:f0:1f:75:4a:98:62:90:da:9e:e2:81:5e:74:79: c0:1d:35:8b:a3:1f:6a:e2:46:5c:b4:3c:da:e2:bc: 03:43:6e:a2:4b:84:38:d3:3b:3a:94:41:69:9b:73: f4:0a:37:e4:36:6c:42:98:0f:65:59:4e:40:39:73: 25:8f:51:11:48:45:5d:18:bd:7d:63:a8:65:1d:18: d7:2a:c2:96:fc:62:ed:5c:35:d1:17:24:2e:d3:40: aa:a4:8f:18:c1:ed:46:29:12:f6:59:b3:84:2a:86: 93:a7:a3:f0:53:8d:9f:a9:26:00:41:b8:db:42:db: 38:f4:0c:43:c1:1d:79:ed:fe:0a:f5:3d:4f:b4:15: be:d0:82:72:f6:08:99:d0:ad:7c:2f:38:a4:57:ea: c9:db:f7:aa:1e:e6:54:0b:97:b2:d8:02:a1:ef:66: 92:03:4e:d2:1c:f1:14:6e:b5:5d:01:d8:85:71:09: 21:0a:55:fe:e7:aa:c9:a5:b9:05:e1:75:83:bf:02: 4f:f5:2f:ed:13:82:26:47:03:8e:87:15:9c:6e:d3: e1:34:a3:72:0d:27:c9:a6:f2:a6:6f:8f:c8:5d:b0: 95:3e:96:fc:2e:15:a6:de:aa:3c:b7:19:45:5a:d2: 08:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:53:6C:70:69:08:B0:B5:7F:C6:04:55:F4:36:C4:88:9A:2C:1E:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3f5597a9-3a5a-3b61-83d2-0a823bc09450.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.95.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:5e:d0:cf:0a:49:60:46:bb:66:25:62:ad:ba:16:7c:18:74: be:5d:d5:67:d7:8e:5c:ef:20:fc:94:c4:7c:ee:25:16:d3:2c: 2e:67:7e:51:91:d2:1b:8e:fc:2e:07:c6:20:b9:3f:78:0f:7b: bb:fb:71:cb:b0:5b:5b:75:d6:62:14:24:e0:1a:56:f7:9a:06: e4:0c:63:0c:0a:1d:98:0d:a2:ef:96:d4:82:a3:93:d4:a7:bf: b8:82:43:d7:d7:bc:b8:4e:14:6f:38:5a:ff:35:61:fe:18:6e: 4e:43:1e:55:4c:f0:4c:d7:e4:14:49:6e:72:1b:56:6d:a7:01: 53:47:74:b3:70:07:af:27:74:05:8f:1e:d6:68:51:f8:70:92: 02:d0:66:e0:e7:ff:4c:b4:8e:3d:32:28:e8:93:73:43:de:f8: 54:4d:54:10:b6:b0:6c:e8:e0:30:7c:1e:ed:bb:4d:65:be:42: eb:b6:62:fb:9c:26:94:61:da:fc:3e:96:f3:a5:48:a2:67:bc: 31:d0:6b:6c:2a:7b:8b:0d:98:17:ed:a4:40:e5:b7:d5:8f:19: dd:7b:13:86:b5:30:d1:6c:ef:4e:29:b0:d5:3f:45:40:dd:62: 74:78:36:c2:2f:32:23:d3:90:a3:f1:64:4b:e4:d0:7b:1c:76: dd:78:aa:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPYoSdZp9+I4j1QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk ZTI1NzEwMWUtMDUyNS00ODYzLTllNzEtZTYzOTBhMzIzOTEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgcJj84uDmtq1nkJr7N358B91SphikNqe4oFe dHnAHTWLox9q4kZctDza4rwDQ26iS4Q40zs6lEFpm3P0CjfkNmxCmA9lWU5AOXMl j1ERSEVdGL19Y6hlHRjXKsKW/GLtXDXRFyQu00CqpI8Ywe1GKRL2WbOEKoaTp6Pw U42fqSYAQbjbQts49AxDwR157f4K9T1PtBW+0IJy9giZ0K18LzikV+rJ2/eqHuZU C5ey2AKh72aSA07SHPEUbrVdAdiFcQkhClX+56rJpbkF4XWDvwJP9S/tE4ImRwOO hxWcbtPhNKNyDSfJpvKmb4/IXbCVPpb8LhWm3qo8txlFWtIIAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFExTbHBpCLC1f8YEVfQ2xIiaLB7rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvM2Y1NTk3YTktM2E1YS0z YjYxLTgzZDItMGE4MjNiYzA5NDUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIl/QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKNe0M8KSWBGu2YlYq26FnwYdL5d1WfXjlzvIPyUxHzuJRbTLC5nflGR 0huO/C4HxiC5P3gPe7v7ccuwW1t11mIUJOAaVveaBuQMYwwKHZgNou+W1IKjk9Sn v7iCQ9fXvLhOFG84Wv81Yf4Ybk5DHlVM8EzX5BRJbnIbVm2nAVNHdLNwB68ndAWP HtZoUfhwkgLQZuDn/0y0jj0yKOiTc0Pe+FRNVBC2sGzo4DB8Hu27TWW+Quu2Yvuc JpRh2vw+lvOlSKJnvDHQa2wqe4sNmBftpEDlt9WPGd17E4a1MNFs704psNU/RUDd YnR4NsIvMiPTkKPxZEvk0Hscdt14qjY= -----END CERTIFICATE-----Generated at Mon Sep 28 18:44:00 2026 by rpki-client