$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/64f6a32e-ac35-3676-9e61-45668df42b9b.roa File: 64f6a32e-ac35-3676-9e61-45668df42b9b.roa (raw, json) Hash identifier: eTh3zSH6mbQvNyn4WgBwWb4s8ZIYVrLxn2FSxl3Chs0= Subject key identifier: 62:BB:1E:3C:38:90:10:EC:96:B4:7C:FF:73:FF:E0:70:79:1F:8A:C0 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F41129D062970D75DB2DDF200 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/64f6a32e-ac35-3676-9e61-45668df42b9b.roa Signing time: Tue 22 Sep 2026 01:00:12 +0000 ROA not before: Tue 22 Sep 2026 01:00:12 +0000 ROA not after: Mon 21 Dec 2026 02:00:12 +0000 asID: 43515 IP address blocks: 34.191.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:41:12:9d:06:29:70:d7:5d:b2:dd:f2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 22 01:00:12 2026 GMT Not After : Dec 21 02:00:12 2026 GMT Subject: CN=a1ba3cd5-dce1-436e-8f2b-72f4a52cf405 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:99:24:8e:45:86:2e:9d:31:55:47:26:01:88: 03:78:75:20:a4:fa:22:7b:04:97:c7:0b:bd:9f:6b: 10:64:da:6c:99:6d:24:23:58:b3:24:88:67:4f:e2: be:e8:a6:0a:e3:2f:4f:d2:28:d9:59:0f:f9:6e:22: 72:f1:ff:01:ec:8e:e8:db:5d:43:12:86:fe:a2:83: 20:a8:22:80:5f:4c:b2:23:17:72:c3:40:fa:14:d4: d5:3b:16:24:8b:1a:f5:e9:b9:46:cb:88:7f:e4:46: 94:d3:42:1c:cd:b7:71:e2:6d:13:c6:6c:94:44:4d: c4:ec:36:db:4a:7b:74:c0:93:fb:16:e6:71:2c:3c: 75:5d:5b:5a:0f:9b:94:ed:71:45:7f:56:e6:5e:07: 46:4a:a2:f5:3a:70:59:99:71:64:44:56:37:fc:9c: a8:72:da:cf:0f:59:76:8d:ca:77:68:ac:a0:c4:5c: 5d:a7:4c:f9:90:ae:55:0a:46:8b:9e:9a:69:4c:d3: 68:e4:5b:e8:b1:52:d5:3e:9b:23:05:bf:9e:66:82: 08:0e:e2:34:2a:de:f1:a4:4f:bb:64:e3:1c:3b:30: 31:14:89:0b:f9:78:68:94:ea:24:53:96:c8:22:48: a5:02:4d:5f:eb:53:81:a1:64:54:41:52:f0:a1:6a: a5:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:BB:1E:3C:38:90:10:EC:96:B4:7C:FF:73:FF:E0:70:79:1F:8A:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/64f6a32e-ac35-3676-9e61-45668df42b9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.191.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:66:96:bf:f9:17:de:65:ba:9f:62:b7:de:24:6d:3e:4b:45: 5a:43:27:2d:bd:65:dd:82:f9:e9:23:5e:e4:06:8f:7e:0d:b8: bb:0a:ff:94:7b:54:4b:83:85:9d:d6:2e:c6:e3:9d:c8:e2:5e: 14:98:71:ed:27:0b:2c:ae:4d:b5:0c:7f:95:9c:03:0f:15:40: 2f:74:4c:0c:76:dc:a5:e2:2d:a9:54:fc:13:ec:a6:75:50:86: 4d:c5:0c:b1:80:ce:20:5b:eb:2e:42:e4:79:a7:b1:75:60:5b: 03:3b:36:62:46:4e:2f:83:09:c5:87:9a:70:ba:09:cb:d7:8f: be:1f:e1:ca:1f:14:2e:31:44:48:db:fc:b4:bb:f9:43:57:c5: 92:bc:12:f1:49:a3:7d:a9:19:f4:01:e3:18:b1:4f:81:49:55: f7:c2:a9:43:67:b2:73:17:80:63:72:c3:d6:7e:f2:c0:46:3e: d8:38:45:fd:3b:7b:14:0f:82:3c:7a:53:bc:dd:88:0e:15:52: 46:6a:2a:91:85:f5:25:a8:be:e3:bf:b3:b0:84:05:ad:2e:bd: f9:45:d4:52:53:f9:fb:0c:45:c3:87:07:09:d1:2d:7e:b6:36: 8e:95:b4:fa:a3:71:a3:5e:6f:76:0a:3f:c9:52:9a:e7:83:82: db:06:74:28 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE9BEp0GKXDXXbLd8gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyMjAxMDAxMloXDTI2MTIyMTAyMDAxMlowLzEtMCsGA1UEAxMk YTFiYTNjZDUtZGNlMS00MzZlLThmMmItNzJmNGE1MmNmNDA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpkkjkWGLp0xVUcmAYgDeHUgpPoiewSXxwu9 n2sQZNpsmW0kI1izJIhnT+K+6KYK4y9P0ijZWQ/5biJy8f8B7I7o211DEob+ooMg qCKAX0yyIxdyw0D6FNTVOxYkixr16blGy4h/5EaU00Iczbdx4m0TxmyURE3E7Dbb Snt0wJP7FuZxLDx1XVtaD5uU7XFFf1bmXgdGSqL1OnBZmXFkRFY3/JyoctrPD1l2 jcp3aKygxFxdp0z5kK5VCkaLnpppTNNo5FvosVLVPpsjBb+eZoIIDuI0Kt7xpE+7 ZOMcOzAxFIkL+XholOokU5bIIkilAk1f61OBoWRUQVLwoWqlJwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFGK7Hjw4kBDslrR8/3P/4HB5H4rAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNjRmNmEzMmUtYWMzNS0z Njc2LTllNjEtNDU2NjhkZjQyYjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAIr8wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAXGaWv/kX3mW6n2K33iRtPktFWkMnLb1l3YL56SNe5AaPfg24uwr/lHtU S4OFndYuxuOdyOJeFJhx7ScLLK5NtQx/lZwDDxVAL3RMDHbcpeItqVT8E+ymdVCG TcUMsYDOIFvrLkLkeaexdWBbAzs2YkZOL4MJxYeacLoJy9ePvh/hyh8ULjFESNv8 tLv5Q1fFkrwS8UmjfakZ9AHjGLFPgUlV98KpQ2eycxeAY3LD1n7ywEY+2DhF/Tt7 FA+CPHpTvN2IDhVSRmoqkYX1Jai+47+zsIQFrS69+UXUUlP5+wxFw4cHCdEtfrY2 jpW0+qNxo15vdgo/yVKa54OC2wZ0KA== -----END CERTIFICATE-----Generated at Sat Sep 26 17:38:58 2026 by rpki-client