$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/87d8cc26-2181-3324-a473-ee0b0e445357.roa File: 87d8cc26-2181-3324-a473-ee0b0e445357.roa (raw, json) Hash identifier: Q6O/LXmRqERsaLUVDyHEhs/nlSrmatM3ivugROlA26w= Subject key identifier: DE:62:30:7B:01:08:67:F6:7E:09:E2:8C:A1:43:06:65:BB:9B:A6:A2 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F5768020DC4A5C84DEE112100 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/87d8cc26-2181-3324-a473-ee0b0e445357.roa Signing time: Wed 30 Sep 2026 01:00:12 +0000 ROA not before: Wed 30 Sep 2026 01:00:12 +0000 ROA not after: Tue 29 Dec 2026 02:00:12 +0000 asID: 19527 IP address blocks: 34.0.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:57:68:02:0d:c4:a5:c8:4d:ee:11:21:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 30 01:00:12 2026 GMT Not After : Dec 29 02:00:12 2026 GMT Subject: CN=393eee97-93c1-408a-a1e5-991d2267aeb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:34:1d:83:51:19:74:01:58:73:ae:10:3b:cb: 44:df:08:43:a2:c3:16:c3:e6:7b:f0:c8:60:24:3a: e1:4e:83:7f:c2:38:c0:7f:c5:2d:d3:2e:26:ae:83: 74:0a:e9:5b:e6:bc:11:a8:8e:92:21:11:70:92:3a: c2:8d:34:77:31:3c:be:a4:91:75:8c:0d:90:9f:56: 58:7a:32:f1:43:e3:d3:be:62:fd:6d:8e:6a:9c:b5: 51:32:1d:b2:ce:0b:4f:7d:27:13:94:f5:74:a2:d8: 78:60:f2:8c:9f:a4:05:01:e2:40:e7:28:25:27:70: 0b:2c:57:56:c0:2a:8f:5a:3e:91:5c:96:7e:1b:ca: 74:a7:06:b2:03:e3:cb:fe:a4:28:83:c8:65:56:f1: c2:3f:02:c1:dc:cb:5e:86:6d:4b:ab:96:be:b9:68: 49:75:ed:bd:9e:fc:23:cd:4d:b0:e0:a4:c3:0d:39: ee:10:d0:85:fb:09:a9:3f:11:60:aa:36:72:bc:55: b4:3b:8d:d2:67:fe:b0:4f:9f:95:61:01:9d:60:d8: 76:e1:b4:dd:d2:f8:1a:2f:a1:4e:38:fb:ed:07:a4: c4:43:e6:7f:86:8c:aa:f3:43:92:24:d3:2d:7d:ce: b8:5c:e3:09:43:47:4c:06:2e:07:b8:61:be:8b:8a: dc:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:62:30:7B:01:08:67:F6:7E:09:E2:8C:A1:43:06:65:BB:9B:A6:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/87d8cc26-2181-3324-a473-ee0b0e445357.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.0.238.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:9f:bd:e9:31:6b:25:4d:b2:00:05:6d:cd:9f:ef:4f:90:4c: a4:78:bd:d3:81:1b:fa:99:b5:19:a4:33:71:71:19:55:45:b5: e6:31:86:bf:62:b3:f9:47:bf:d4:ce:81:99:4c:7a:8b:50:67: 1c:a0:6d:d4:e6:ed:f8:ea:6b:02:01:68:11:09:e2:11:a6:f1: 8a:2a:92:3d:ce:b8:47:67:0b:10:a1:34:b7:02:fb:89:6c:63: 78:2b:dd:a8:d5:62:84:d4:15:ae:54:02:51:d8:46:5c:8d:14: ae:a7:87:5f:d2:13:63:65:26:a5:4a:5d:e5:87:53:e5:fc:08: d0:69:80:27:0a:90:5f:56:07:c6:ba:45:b1:38:1b:18:d0:38: 21:5f:dc:eb:a8:0f:99:a2:13:1e:c1:fb:34:8f:55:66:cb:d1: 05:31:bb:ad:88:2c:d9:d0:c8:8b:23:ab:44:35:30:63:38:53: e0:05:5a:1b:01:3c:30:80:98:6a:8a:36:64:d2:06:6a:c2:cd: d5:43:72:ee:3f:8d:48:88:1f:04:db:5a:8e:50:7f:06:a5:6f: e8:ca:59:b8:58:81:b8:e3:d7:fa:3f:cc:61:08:8f:64:af:40: c3:69:b4:37:14:31:81:d1:18:e9:7d:c7:e0:f6:b4:27:93:f6: c2:b7:b7:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9XaAINxKXITe4RIQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkzMDAxMDAxMloXDTI2MTIyOTAyMDAxMlowLzEtMCsGA1UEAxMk MzkzZWVlOTctOTNjMS00MDhhLWExZTUtOTkxZDIyNjdhZWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTQdg1EZdAFYc64QO8tE3whDosMWw+Z78Mhg JDrhToN/wjjAf8Ut0y4mroN0Culb5rwRqI6SIRFwkjrCjTR3MTy+pJF1jA2Qn1ZY ejLxQ+PTvmL9bY5qnLVRMh2yzgtPfScTlPV0oth4YPKMn6QFAeJA5yglJ3ALLFdW wCqPWj6RXJZ+G8p0pwayA+PL/qQog8hlVvHCPwLB3Mtehm1Lq5a+uWhJde29nvwj zU2w4KTDDTnuENCF+wmpPxFgqjZyvFW0O43SZ/6wT5+VYQGdYNh24bTd0vgaL6FO OPvtB6TEQ+Z/hoyq80OSJNMtfc64XOMJQ0dMBi4HuGG+i4rc/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN5iMHsBCGf2fgnijKFDBmW7m6aiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvODdkOGNjMjYtMjE4MS0z MzI0LWE0NzMtZWUwYjBlNDQ1MzU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBIgDuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGKfvekxayVNsgAFbc2f70+QTKR4vdOBG/qZtRmkM3FxGVVFteYxhr9i s/lHv9TOgZlMeotQZxygbdTm7fjqawIBaBEJ4hGm8Yoqkj3OuEdnCxChNLcC+4ls Y3gr3ajVYoTUFa5UAlHYRlyNFK6nh1/SE2NlJqVKXeWHU+X8CNBpgCcKkF9WB8a6 RbE4GxjQOCFf3OuoD5miEx7B+zSPVWbL0QUxu62ILNnQyIsjq0Q1MGM4U+AFWhsB PDCAmGqKNmTSBmrCzdVDcu4/jUiIHwTbWo5Qfwalb+jKWbhYgbjj1/o/zGEIj2Sv QMNptDcUMYHRGOl9x+D2tCeT9sK3t+Y= -----END CERTIFICATE-----Generated at Thu Oct 8 13:36:05 2026 by rpki-client