$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b39385ed-2b52-39e5-9e7e-d4bfa56a6be8.roa File: b39385ed-2b52-39e5-9e7e-d4bfa56a6be8.roa (raw, json) Hash identifier: ZZFnVWsofDA3DN6cyDv5uWoaxJkbDdWPTAFFieXD7DY= Subject key identifier: 56:E5:34:A0:DA:0E:EF:18:58:D9:82:BD:E8:83:DB:81:AA:5C:19:9A Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F497CFEC0615AA50D5FA46F00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b39385ed-2b52-39e5-9e7e-d4bfa56a6be8.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396982 IP address blocks: 34.120.0.0/14 maxlen: 14 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7c:fe:c0:61:5a:a5:0d:5f:a4:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=9c2d68cb-9baf-4524-9489-25f4fb604253 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:93:39:e5:07:e4:b5:62:85:bd:c8:24:c3:6c: 7a:0b:2f:0b:9d:15:a2:8c:5a:f5:27:44:d0:94:27: b8:7a:96:09:ef:4e:2b:cc:1a:bd:17:34:60:42:60: be:1f:52:a4:1e:d3:ac:7b:56:c2:f0:3d:bc:e6:fb: f2:fb:3b:cb:60:19:9c:5f:bb:ac:38:94:06:48:21: bc:73:ba:ac:c1:d5:7e:ee:f8:f9:b1:ce:00:56:a5: bf:26:63:f9:a1:db:f0:f1:15:08:46:46:eb:65:69: 44:9b:e9:b1:03:38:57:f3:a5:6a:6e:19:6d:fb:e8: d9:05:37:70:f6:c5:c3:95:45:26:e7:db:6c:4a:cb: a1:d1:28:dc:6f:8e:88:cb:c7:da:92:d7:e6:57:d2: f6:17:eb:e1:3f:60:49:ea:e3:4a:fa:f7:eb:32:a4: 86:7c:df:5a:33:aa:cf:dc:1f:b6:e8:a9:34:d7:90: 0f:cd:c1:15:03:b6:f6:04:99:d8:14:48:6a:fc:a6: a6:be:85:5e:e3:23:c2:72:7f:a2:49:ad:56:90:d6: df:8b:8e:7b:a4:62:41:a5:cb:43:c7:80:a8:5e:00: b7:e7:7e:a2:67:92:54:65:9c:05:d3:1b:ba:e1:c2: 67:4e:e8:13:88:fd:ca:28:bf:a7:47:92:89:1f:be: 7a:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:E5:34:A0:DA:0E:EF:18:58:D9:82:BD:E8:83:DB:81:AA:5C:19:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b39385ed-2b52-39e5-9e7e-d4bfa56a6be8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.120.0.0/14 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:d2:ed:35:e2:ae:29:69:d5:2c:da:8f:c7:bf:bc:c7:a0:4b: 81:2e:0f:5e:84:34:f5:ba:2a:a0:e4:2a:55:61:37:76:31:d2: 9a:94:01:e0:93:0d:2e:a9:44:61:1c:7a:dc:63:ab:f0:5b:43: 0f:b5:da:1b:e8:b4:6c:33:25:85:ee:cd:23:b2:74:d8:1c:01: 0a:5f:79:57:41:38:1a:b0:03:da:ce:c6:dc:85:15:20:81:0b: fe:6f:ae:c0:8a:c2:07:00:fd:35:c8:4f:5b:9e:35:14:68:d3: 04:5b:4e:65:8a:54:60:c6:8a:2d:a7:d4:84:09:85:79:fe:01: 63:cb:3b:13:e5:74:be:56:56:f3:de:02:53:99:73:6c:e2:8e: 8f:98:04:55:29:34:45:ff:4f:2a:2d:f0:91:ab:20:2d:35:45: 5f:d9:96:56:83:7e:d2:3e:e0:5b:a8:56:8b:15:45:39:a7:95: 09:11:f9:25:6d:e6:44:79:46:a6:8b:9c:e7:b7:f0:1d:0e:5c: 70:83:ff:1f:b7:29:c8:66:51:ab:3d:b7:f8:44:3c:8e:3e:cf: ae:ff:ce:f7:e2:b4:9f:93:8a:3d:f8:34:41:61:74:00:89:d5: b4:54:c2:bd:f9:a7:88:40:2a:f9:c1:52:62:b3:c6:e5:47:4b: 0f:d8:37:b3 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE9JfP7AYVqlDV+kbwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OWMyZDY4Y2ItOWJhZi00NTI0LTk0ODktMjVmNGZiNjA0MjUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZM55QfktWKFvcgkw2x6Cy8LnRWijFr1J0TQ lCe4epYJ704rzBq9FzRgQmC+H1KkHtOse1bC8D285vvy+zvLYBmcX7usOJQGSCG8 c7qswdV+7vj5sc4AVqW/JmP5odvw8RUIRkbrZWlEm+mxAzhX86Vqbhlt++jZBTdw 9sXDlUUm59tsSsuh0Sjcb46Iy8faktfmV9L2F+vhP2BJ6uNK+vfrMqSGfN9aM6rP 3B+26Kk015APzcEVA7b2BJnYFEhq/KamvoVe4yPCcn+iSa1WkNbfi457pGJBpctD x4CoXgC3536iZ5JUZZwF0xu64cJnTugTiP3KKL+nR5KJH7569QIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFFblNKDaDu8YWNmCveiD24GqXBmaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYjM5Mzg1ZWQtMmI1Mi0z OWU1LTllN2UtZDRiZmE1NmE2YmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCIngwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAgdLtNeKuKWnVLNqPx7+8x6BLgS4PXoQ09boqoOQqVWE3djHSmpQB4JMN LqlEYRx63GOr8FtDD7XaG+i0bDMlhe7NI7J02BwBCl95V0E4GrAD2s7G3IUVIIEL /m+uwIrCBwD9NchPW541FGjTBFtOZYpUYMaKLafUhAmFef4BY8s7E+V0vlZW894C U5lzbOKOj5gEVSk0Rf9PKi3wkasgLTVFX9mWVoN+0j7gW6hWixVFOaeVCRH5JW3m RHlGpouc57fwHQ5ccIP/H7cpyGZRqz23+EQ8jj7Prv/O9+K0n5OKPfg0QWF0AInV tFTCvfmniEAq+cFSYrPG5UdLD9g3sw== -----END CERTIFICATE-----Generated at Mon Sep 28 18:00:02 2026 by rpki-client