$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/745829b0-e3a2-35d1-a495-7525b0a51e23.roa File: 745829b0-e3a2-35d1-a495-7525b0a51e23.roa (raw, json) Hash identifier: G1gfoxzGdzfj5D0xyHRhihsTwH435OZsOAXYq9vUzZE= Subject key identifier: D1:64:50:F2:0C:10:66:01:BE:D5:FF:06:4D:A4:52:FC:9F:C5:77:A4 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DD3F826580323C04E9380 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/745829b0-e3a2-35d1-a495-7525b0a51e23.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.94.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:d3:f8:26:58:03:23:c0:4e:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=dd4cf194-b087-48da-9fc5-c72cf053f41c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d3:09:c9:2c:56:fd:61:64:3a:f5:a6:c0:fb: 0e:b4:f0:87:2a:d9:ca:a2:ca:64:03:49:b5:82:ae: 5d:3f:00:55:56:81:01:e1:38:ca:85:62:0c:1f:d7: 8c:8f:2c:18:fe:e9:2f:ea:d9:9b:11:52:a5:50:9c: 56:e5:eb:c0:0f:87:5f:63:3b:28:a8:e0:fe:5b:69: b8:ee:a0:f3:51:78:0b:d3:c1:6e:cc:11:0d:dd:54: 60:4a:aa:14:9d:b4:bf:ab:37:38:9e:b9:bb:16:54: b1:f3:c9:d8:ef:a4:a3:c1:a3:87:14:28:53:50:61: 5d:f5:50:95:ff:a8:85:c8:66:78:a5:64:7f:68:57: e9:8a:23:2b:5a:8f:2d:40:c3:f3:12:72:74:fa:19: 1c:4c:4f:d1:07:87:14:0f:e5:f4:c1:ee:05:4e:7d: 1e:26:50:c8:1d:cb:3a:84:2c:29:8c:78:d9:22:77: 7d:e5:37:2c:41:b0:a5:b5:7f:94:a6:9a:8e:fc:47: ff:8b:06:db:96:7b:be:1c:5a:ba:dc:20:7f:87:9d: dc:cc:e8:be:03:cf:2e:dd:42:f8:5f:f6:78:cd:56: 55:d0:3e:c6:68:89:5c:78:c2:ee:98:fe:71:1c:86: 77:75:47:44:45:39:30:17:d5:71:0a:02:b3:1c:0d: 56:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:64:50:F2:0C:10:66:01:BE:D5:FF:06:4D:A4:52:FC:9F:C5:77:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/745829b0-e3a2-35d1-a495-7525b0a51e23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.94.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:8a:50:70:b9:d4:5f:22:0d:8f:41:00:2d:87:a9:47:90:8b: d4:a2:76:aa:ec:e4:33:6d:3b:01:77:56:ad:fd:cf:5a:dc:02: 46:24:c4:6b:a8:14:51:c1:0c:46:85:41:79:a3:13:dc:6a:d1: e7:6e:3e:ca:29:49:c1:f6:30:62:21:43:c3:45:74:da:12:b0: 3b:38:b4:87:31:ee:7a:da:ba:4f:f5:0b:ff:0d:07:cd:cf:59: 53:e7:b1:89:dd:88:7c:6e:4f:a4:04:78:cf:2b:07:a5:18:2a: 54:b0:b5:c1:7f:56:1c:3f:b4:44:d7:ed:4c:a3:b8:7e:67:30: 88:3f:e1:54:c8:9b:16:8c:64:ee:5a:37:07:49:57:b5:b5:53: 0b:ac:df:5d:33:e2:14:fd:f2:d6:cd:de:1d:4e:2a:d7:f2:fc: c9:11:59:4f:ab:02:6b:5a:b5:2c:14:e3:6f:d1:1e:c6:d6:c4: 22:7c:40:5d:c5:92:a1:35:5e:fb:06:9c:92:05:3b:48:f2:15: c3:1a:d5:ab:a1:a1:29:7b:2c:a9:e0:c5:18:1c:95:87:00:d1: 49:de:5c:cb:b7:7d:32:9f:56:8f:32:7c:4a:1a:29:2d:48:85: 8b:e9:b5:50:69:f3:01:1d:10:a5:64:90:81:fa:37:03:2e:78: f6:5c:27:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPdP4JlgDI8BOk4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk ZGQ0Y2YxOTQtYjA4Ny00OGRhLTlmYzUtYzcyY2YwNTNmNDFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttMJySxW/WFkOvWmwPsOtPCHKtnKospkA0m1 gq5dPwBVVoEB4TjKhWIMH9eMjywY/ukv6tmbEVKlUJxW5evAD4dfYzsoqOD+W2m4 7qDzUXgL08FuzBEN3VRgSqoUnbS/qzc4nrm7FlSx88nY76SjwaOHFChTUGFd9VCV /6iFyGZ4pWR/aFfpiiMrWo8tQMPzEnJ0+hkcTE/RB4cUD+X0we4FTn0eJlDIHcs6 hCwpjHjZInd95TcsQbCltX+UppqO/Ef/iwbblnu+HFq63CB/h53czOi+A88u3UL4 X/Z4zVZV0D7GaIlceMLumP5xHIZ3dUdERTkwF9VxCgKzHA1WZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNFkUPIMEGYBvtX/Bk2kUvyfxXekMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNzQ1ODI5YjAtZTNhMi0z NWQxLWE0OTUtNzUyNWIwYTUxZTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIl5AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB2KUHC51F8iDY9BAC2HqUeQi9Sidqrs5DNtOwF3Vq39z1rcAkYkxGuo FFHBDEaFQXmjE9xq0eduPsopScH2MGIhQ8NFdNoSsDs4tIcx7nrauk/1C/8NB83P WVPnsYndiHxuT6QEeM8rB6UYKlSwtcF/Vhw/tETX7UyjuH5nMIg/4VTImxaMZO5a NwdJV7W1Uwus310z4hT98tbN3h1OKtfy/MkRWU+rAmtatSwU42/RHsbWxCJ8QF3F kqE1XvsGnJIFO0jyFcMa1auhoSl7LKngxRgclYcA0UneXMu3fTKfVo8yfEoaKS1I hYvptVBp8wEdEKVkkIH6NwMuePZcJwA= -----END CERTIFICATE-----Generated at Mon Sep 28 13:25:11 2026 by rpki-client