$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a42eda9c-48ab-3785-9416-503347b34f50.roa File: a42eda9c-48ab-3785-9416-503347b34f50.roa (raw, json) Hash identifier: Ju+P/180ngC7p4ZJVThFPT2bSnU3m/DJ7KAk6HGk4mM= Subject key identifier: CC:2D:49:50:64:31:B6:21:6F:53:E2:C5:15:DA:31:42:57:A0:51:68 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3D8C74D8906BDB4F24ED80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a42eda9c-48ab-3785-9416-503347b34f50.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.175.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:8c:74:d8:90:6b:db:4f:24:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=fb0c5017-8c98-4d72-bd0a-675be8cf2cbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:aa:f8:d9:e8:40:29:f4:16:6a:9d:25:3e:11: 38:a2:4d:27:92:c1:8e:1a:0d:dd:ca:6e:14:24:24: 35:06:19:f8:b7:5a:1a:ba:ea:dc:85:ca:f5:07:59: 9e:86:a9:15:0e:4b:b0:d3:fe:21:90:80:bf:d9:c0: a4:4d:34:7f:11:3d:c4:9d:4a:22:2b:5d:f8:f2:e0: f0:73:df:87:ea:88:a3:d7:7f:37:46:2d:db:c1:cc: c4:55:c7:34:36:62:5c:7e:eb:f5:d4:cf:92:45:ef: ac:d7:f8:e8:b3:b0:5e:67:9d:1d:b0:fe:cd:33:59: 4f:49:40:04:11:a5:72:07:2a:7d:bd:4f:3c:77:3f: 3f:aa:59:e4:38:92:b3:01:0a:e1:5a:13:4c:3b:49: d6:6b:53:06:d7:b9:4c:45:29:76:5d:8a:fb:55:7c: d0:e3:95:ca:df:f1:f6:f3:bc:fe:1b:38:97:88:f7: 6b:4a:44:dd:30:eb:43:f9:fd:3f:23:05:90:37:44: 67:03:13:f1:4c:4f:79:1e:8a:08:b1:5f:39:9d:5d: 8f:1d:c0:16:a7:13:78:9b:b1:5b:9d:bd:0f:b1:33: a1:4d:7c:56:25:6f:22:02:20:1e:77:bf:86:73:8d: c6:c7:0b:75:64:ec:39:a0:3f:ce:e4:50:a0:80:0d: 2d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:2D:49:50:64:31:B6:21:6F:53:E2:C5:15:DA:31:42:57:A0:51:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a42eda9c-48ab-3785-9416-503347b34f50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.175.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:07:39:de:d4:aa:9e:17:31:13:4f:60:1c:94:d7:22:5a:c1: 5c:cf:af:86:75:da:76:21:77:57:18:89:22:30:95:e5:9b:c7: 1e:e0:51:4c:48:a5:a3:70:cb:c4:04:97:4b:89:0b:92:3e:46: 64:f1:f9:91:ff:e1:38:03:4b:54:31:19:f8:a8:76:ab:ce:57: 73:ca:ab:4a:9c:c7:ea:2a:cb:f4:f1:e3:e4:9f:98:33:06:c9: 1a:b6:eb:e9:f4:19:c1:ad:ef:c4:b0:1b:1a:68:78:cb:d9:87: 02:6b:32:16:6f:41:69:a4:fe:16:c0:3e:3d:da:7b:72:a9:ca: 8f:3c:29:59:9a:cd:5a:92:37:31:9e:eb:d0:58:79:f1:f8:40: aa:22:01:04:bb:ed:82:20:9f:dc:9b:a2:fc:58:d9:e7:6e:cf: 0b:9a:6a:a5:5e:8d:8f:03:6d:c1:93:83:5d:e3:7f:f0:d8:c5: b6:6b:37:71:cf:7e:df:c6:cd:3b:4f:a1:9d:d1:d6:a3:dc:bf: 9d:56:c2:6c:01:fc:b8:46:f3:6f:d1:a7:44:8a:85:2a:96:ab: 68:bd:e3:97:c8:fb:45:35:69:4d:5b:7d:64:72:1a:32:bc:9c: db:c2:f5:57:a5:0e:9d:35:0a:4c:19:36:2e:f7:f1:c0:a3:af: 6d:4c:da:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPYx02JBr208k7YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk ZmIwYzUwMTctOGM5OC00ZDcyLWJkMGEtNjc1YmU4Y2YyY2JmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA36r42ehAKfQWap0lPhE4ok0nksGOGg3dym4U JCQ1Bhn4t1oauurchcr1B1mehqkVDkuw0/4hkIC/2cCkTTR/ET3EnUoiK1348uDw c9+H6oij1383Ri3bwczEVcc0NmJcfuv11M+SRe+s1/jos7BeZ50dsP7NM1lPSUAE EaVyByp9vU88dz8/qlnkOJKzAQrhWhNMO0nWa1MG17lMRSl2XYr7VXzQ45XK3/H2 87z+GziXiPdrSkTdMOtD+f0/IwWQN0RnAxPxTE95HooIsV85nV2PHcAWpxN4m7Fb nb0PsTOhTXxWJW8iAiAed7+Gc43Gxwt1ZOw5oD/O5FCggA0tGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMwtSVBkMbYhb1PixRXaMUJXoFFoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYTQyZWRhOWMtNDhhYi0z Nzg1LTk0MTYtNTAzMzQ3YjM0ZjUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHIq8AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA8HOd7Uqp4XMRNPYByU1yJawVzPr4Z12nYhd1cYiSIwleWbxx7gUUxI paNwy8QEl0uJC5I+RmTx+ZH/4TgDS1QxGfiodqvOV3PKq0qcx+oqy/Tx4+SfmDMG yRq26+n0GcGt78SwGxpoeMvZhwJrMhZvQWmk/hbAPj3ae3Kpyo88KVmazVqSNzGe 69BYefH4QKoiAQS77YIgn9ybovxY2eduzwuaaqVejY8DbcGTg13jf/DYxbZrN3HP ft/GzTtPoZ3R1qPcv51WwmwB/LhG82/Rp0SKhSqWq2i945fI+0U1aU1bfWRyGjK8 nNvC9VelDp01CkwZNi738cCjr21M2kc= -----END CERTIFICATE-----Generated at Sat Oct 3 11:30:50 2026 by rpki-client