$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/68bf43aa-d432-3de9-8b80-6726c9e05884.roa File: 68bf43aa-d432-3de9-8b80-6726c9e05884.roa (raw, json) Hash identifier: zV7yiMM9RG2E12/C+paBe6GenlGT4wGPFYd5+d9WsDM= Subject key identifier: 22:B0:76:83:8F:AF:23:A0:E9:F8:43:77:A5:1D:44:99:5A:47:5B:9F Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F07D77D0D279205FAC39E8F80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/68bf43aa-d432-3de9-8b80-6726c9e05884.roa Signing time: Tue 01 Sep 2026 13:00:12 +0000 ROA not before: Tue 01 Sep 2026 13:00:12 +0000 ROA not after: Mon 30 Nov 2026 14:00:12 +0000 asID: 396982 IP address blocks: 34.3.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:07:d7:7d:0d:27:92:05:fa:c3:9e:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 1 13:00:12 2026 GMT Not After : Nov 30 14:00:12 2026 GMT Subject: CN=57bcb49c-fe37-4ee6-99db-f3366bc9337f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:b9:51:2e:12:8a:8a:1f:f8:7e:0e:62:17:e3: 0c:e2:fc:77:bc:73:c1:e1:6d:ea:57:73:0a:e9:dd: 8a:d8:cd:e0:5a:6a:eb:33:88:f1:fb:70:ce:3f:90: 18:6a:b5:92:ef:11:f0:c4:80:a6:a4:f6:7e:ed:59: e6:2d:b2:3a:53:4e:75:22:ab:44:82:bc:a4:5a:61: 5f:64:c5:74:9b:17:2b:e1:b1:a1:b7:4b:43:52:b6: 48:f6:af:6e:ab:e7:1b:e5:b8:ba:e4:14:ea:1a:13: 04:f4:43:c6:48:0f:41:b8:7c:7b:5f:f7:c7:d4:c8: 66:08:c0:47:a7:25:fc:46:34:b8:5b:a6:c6:f9:17: f9:2d:98:b3:4a:d7:1b:93:d5:bc:8c:e2:e2:d7:77: 9c:a4:60:f6:7e:10:b9:eb:07:67:1a:95:8c:35:76: 3a:a9:28:87:e4:ef:7d:46:a1:e9:8c:01:e0:aa:09: 5f:eb:76:94:d3:c7:8b:e3:2c:e2:8a:d5:3a:f1:cc: 41:ec:23:66:8c:8f:0f:96:f9:cf:17:d6:a0:4d:eb: 18:6f:54:47:fe:f5:19:41:b5:9a:85:cf:b6:34:94: 03:d4:5c:27:88:ef:ed:9e:62:ef:40:2c:b5:be:6a: 3d:0f:20:52:23:28:36:4b:7c:25:af:07:af:03:91: ae:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:B0:76:83:8F:AF:23:A0:E9:F8:43:77:A5:1D:44:99:5A:47:5B:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/68bf43aa-d432-3de9-8b80-6726c9e05884.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.3.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:ce:80:10:92:ad:5f:92:01:87:57:c3:72:e3:47:43:41:73: 46:b5:ee:46:36:00:e4:97:99:4d:54:f2:10:a7:15:f7:15:86: 77:35:a5:f8:76:79:d2:74:be:53:a9:a7:6e:3b:62:94:ab:be: 5d:f8:08:92:43:c2:bc:6d:56:47:10:a1:97:94:59:c0:75:50: 22:5d:1f:24:7d:78:49:08:3b:17:5c:6e:93:50:84:08:55:b1: 70:94:c8:60:f4:47:15:b3:02:2c:25:49:f8:84:0f:eb:a3:03: fe:3d:69:39:1b:39:ac:f0:d0:2f:63:61:7e:1c:f9:a3:87:c4: db:c3:51:5b:d0:10:b8:a6:ce:6b:6c:e1:a8:21:a1:74:20:34: 7a:de:e9:f6:a9:b2:c3:fb:43:ba:4e:de:42:09:df:7a:19:99: 25:35:30:79:5c:0c:82:c8:3d:c2:19:c4:f3:c9:4b:e1:0a:fb: 55:00:02:cd:d0:c5:a3:8f:40:be:ab:26:ca:0e:54:63:df:23: 78:02:45:88:54:6c:f2:89:51:85:34:1a:7f:33:c3:5b:f4:fd: 7e:ab:1e:ac:b0:b0:3c:62:90:b3:b6:18:fc:3e:4a:05:6b:87: 33:36:e0:8d:57:f9:39:b9:6b:16:66:03:1a:37:8d:cd:0b:32: 24:a5:89:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8H130NJ5IF+sOej4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkwMTEzMDAxMloXDTI2MTEzMDE0MDAxMlowLzEtMCsGA1UEAxMk NTdiY2I0OWMtZmUzNy00ZWU2LTk5ZGItZjMzNjZiYzkzMzdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkblRLhKKih/4fg5iF+MM4vx3vHPB4W3qV3MK 6d2K2M3gWmrrM4jx+3DOP5AYarWS7xHwxICmpPZ+7VnmLbI6U051IqtEgrykWmFf ZMV0mxcr4bGht0tDUrZI9q9uq+cb5bi65BTqGhME9EPGSA9BuHx7X/fH1MhmCMBH pyX8RjS4W6bG+Rf5LZizStcbk9W8jOLi13ecpGD2fhC56wdnGpWMNXY6qSiH5O99 RqHpjAHgqglf63aU08eL4yziitU68cxB7CNmjI8PlvnPF9agTesYb1RH/vUZQbWa hc+2NJQD1FwniO/tnmLvQCy1vmo9DyBSIyg2S3wlrwevA5GuLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCKwdoOPryOg6fhDd6UdRJlaR1ufMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNjhiZjQzYWEtZDQzMi0z ZGU5LThiODAtNjcyNmM5ZTA1ODg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDIgOIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACrOgBCSrV+SAYdXw3LjR0NBc0a17kY2AOSXmU1U8hCnFfcVhnc1pfh2 edJ0vlOpp247YpSrvl34CJJDwrxtVkcQoZeUWcB1UCJdHyR9eEkIOxdcbpNQhAhV sXCUyGD0RxWzAiwlSfiED+ujA/49aTkbOazw0C9jYX4c+aOHxNvDUVvQELimzmts 4aghoXQgNHre6fapssP7Q7pO3kIJ33oZmSU1MHlcDILIPcIZxPPJS+EK+1UAAs3Q xaOPQL6rJsoOVGPfI3gCRYhUbPKJUYU0Gn8zw1v0/X6rHqywsDxikLO2GPw+SgVr hzM24I1X+Tm5axZmAxo3jc0LMiSlibY= -----END CERTIFICATE-----Generated at Mon Sep 28 10:08:08 2026 by rpki-client