$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4d06f9a2-2d27-3423-97c3-08af8ddc6425.roa File: 4d06f9a2-2d27-3423-97c3-08af8ddc6425.roa (raw, json) Hash identifier: NG6kYuGHzqdPyRU3qB++Ia/PyCgWD2QSdnk9lKDov0M= Subject key identifier: EA:ED:D2:FA:83:2E:5E:45:69:DB:B3:05:78:90:61:F4:40:F4:19:85 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F497D1F55201B000DEC128080 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4d06f9a2-2d27-3423-97c3-08af8ddc6425.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396982 IP address blocks: 34.104.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7d:1f:55:20:1b:00:0d:ec:12:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=9eb217f9-7ed3-49d1-90a9-decbaa118059 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:a5:60:d5:ee:eb:45:d9:f3:41:06:24:fe:0d: 1d:27:bd:28:67:9e:d9:42:4e:ec:87:75:2d:dd:2e: fb:c4:b1:5a:67:0c:21:8b:22:ef:d6:92:d5:3b:de: 84:86:df:bb:c6:cf:fc:a4:cb:cd:6c:8d:59:bd:8b: 16:52:18:69:ef:c6:ca:b7:ab:f2:f7:e7:9f:cd:24: 4e:dd:c4:79:ac:7f:e5:01:85:0e:95:92:7c:79:25: 3a:f6:54:bc:60:e1:e8:1c:20:33:b0:08:ed:d3:34: 9a:76:b6:df:b0:04:70:b2:c2:3d:47:ef:52:b8:b7: d3:e3:2c:1c:e6:e2:76:21:6c:2e:b3:29:d7:d4:df: ad:5b:01:32:18:86:26:9f:d0:a5:28:e3:b6:87:d0: 6d:03:6c:dd:40:a3:60:f3:ef:a5:af:94:e0:6a:d5: c3:95:3c:48:a9:03:47:33:2c:34:80:52:a6:00:98: 44:d4:a9:5f:a8:b4:a6:ce:56:f5:98:71:e7:90:36: 12:19:11:7f:0e:e1:4b:98:7e:4f:e7:a1:62:9a:88: 95:6b:72:e2:0e:b5:4a:86:2c:71:68:b9:34:15:43: 47:d7:0c:e3:c8:d4:48:83:9f:4a:2d:3a:bd:34:22: 4f:a2:92:38:5c:cd:09:da:05:ce:a1:f8:f6:76:52: cd:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:ED:D2:FA:83:2E:5E:45:69:DB:B3:05:78:90:61:F4:40:F4:19:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4d06f9a2-2d27-3423-97c3-08af8ddc6425.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.104.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:1b:80:8a:79:81:d5:6b:91:0c:ee:79:0f:dd:31:5c:87:63: 87:10:59:21:57:4b:df:3f:80:40:39:95:57:9b:c1:85:a1:ba: 8b:8d:43:d0:62:e3:57:bf:26:ec:2d:e3:4f:f1:99:ba:78:45: 99:23:98:24:ae:27:a8:c9:78:92:d4:0e:7e:65:7b:01:a9:c1: 4c:0e:91:e8:95:13:6f:29:96:8a:c0:d7:5b:4f:79:52:b2:c4: aa:f7:5b:a6:a1:d3:d6:2e:9c:d0:b7:38:04:16:9b:a4:99:2a: e1:2d:ce:45:53:b0:a4:7a:3d:4e:b3:a3:c7:bd:24:1b:5e:6e: 70:2f:b6:39:bb:32:45:01:3b:7f:35:ec:ad:59:47:5b:62:bb: 1b:84:46:6a:92:7c:ac:7b:c7:3e:cc:e5:23:a4:0e:35:0a:9f: e3:38:b2:2b:c4:b5:a5:85:db:ca:d2:b5:b6:ad:c9:d2:a7:74: d3:fd:6c:fb:9d:f5:84:d1:e5:f0:aa:cc:16:3f:8a:ac:f1:5f: 88:c4:a1:6e:cc:89:7c:88:07:f0:b1:56:7a:8d:21:c5:19:58: a8:40:78:fa:da:f2:9a:12:5b:bd:b2:02:71:a8:66:41:d4:eb: d1:5e:e3:1b:9b:2d:02:ac:3f:f2:b5:2a:bc:ce:2f:92:43:c4: 59:74:4b:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfR9VIBsADewSgIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OWViMjE3ZjktN2VkMy00OWQxLTkwYTktZGVjYmFhMTE4MDU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqVg1e7rRdnzQQYk/g0dJ70oZ57ZQk7sh3Ut 3S77xLFaZwwhiyLv1pLVO96Eht+7xs/8pMvNbI1ZvYsWUhhp78bKt6vy9+efzSRO 3cR5rH/lAYUOlZJ8eSU69lS8YOHoHCAzsAjt0zSadrbfsARwssI9R+9SuLfT4ywc 5uJ2IWwusynX1N+tWwEyGIYmn9ClKOO2h9BtA2zdQKNg8++lr5TgatXDlTxIqQNH Myw0gFKmAJhE1KlfqLSmzlb1mHHnkDYSGRF/DuFLmH5P56FimoiVa3LiDrVKhixx aLk0FUNH1wzjyNRIg59KLTq9NCJPopI4XM0J2gXOofj2dlLNkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOrt0vqDLl5FaduzBXiQYfRA9BmFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNGQwNmY5YTItMmQyNy0z NDIzLTk3YzMtMDhhZjhkZGM2NDI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDImgIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFsbgIp5gdVrkQzueQ/dMVyHY4cQWSFXS98/gEA5lVebwYWhuouNQ9Bi 41e/Juwt40/xmbp4RZkjmCSuJ6jJeJLUDn5lewGpwUwOkeiVE28plorA11tPeVKy xKr3W6ah09YunNC3OAQWm6SZKuEtzkVTsKR6PU6zo8e9JBtebnAvtjm7MkUBO381 7K1ZR1tiuxuERmqSfKx7xz7M5SOkDjUKn+M4sivEtaWF28rStbatydKndNP9bPud 9YTR5fCqzBY/iqzxX4jEoW7MiXyIB/CxVnqNIcUZWKhAePra8poSW72yAnGoZkHU 69Fe4xubLQKsP/K1KrzOL5JDxFl0S4I= -----END CERTIFICATE-----Generated at Mon Sep 28 19:00:40 2026 by rpki-client