$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d134356b-d3eb-3e9f-ac5d-e0d3f3cd8186.roa File: d134356b-d3eb-3e9f-ac5d-e0d3f3cd8186.roa (raw, json) Hash identifier: X3spjmegCWc7rLolQ2+j7JmUohAnFhoAcfnOkV56S/0= Subject key identifier: 28:87:71:49:D9:CE:7A:6F:22:6F:80:76:A8:B8:E8:AD:56:C8:5D:FB Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3D99C73BCD5D3C20F7C680 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d134356b-d3eb-3e9f-ac5d-e0d3f3cd8186.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.71.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:99:c7:3b:cd:5d:3c:20:f7:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=a73aa1b9-2fd5-4f06-be05-e939d5cd509d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:57:df:1c:70:2e:65:3a:b9:13:ba:de:bf:c5: 1c:44:f8:30:a8:f7:a9:eb:b6:6a:16:fa:a3:87:85: 05:b5:36:25:ca:bd:fd:b7:db:c1:53:ed:4c:1c:1d: 68:a9:9a:1c:e0:59:bf:4a:95:96:3e:f3:8c:98:23: 7e:31:92:ef:2d:5e:1e:50:d5:22:31:87:2c:db:53: 28:97:01:79:f0:22:0c:e1:b1:ca:d4:2b:e0:41:29: 02:55:6e:f9:ca:89:6d:69:c4:f7:46:14:e8:5a:c2: 9a:c3:ea:71:13:a0:b3:d8:7f:a5:6d:ad:2b:34:57: 53:a4:84:d1:f2:4a:b6:cb:47:f7:ac:c0:1c:ac:cf: 23:e5:78:3b:0c:56:24:3d:fa:b9:c0:21:d2:2b:9f: fa:1a:98:19:5d:f4:92:40:f3:a1:c4:7b:bc:fc:cb: e7:73:85:6d:91:92:6e:da:00:14:1c:8d:f9:3d:69: b2:b5:ea:61:a3:1f:81:2a:a4:1a:9b:1e:37:db:cd: 12:da:4b:b8:ff:81:5c:ac:1f:c2:20:20:b5:f1:00: bc:e0:1f:a6:08:12:a8:1a:2a:56:b3:14:5c:69:98: 39:f5:f8:a9:39:f7:fd:21:97:f2:6d:96:b6:3e:74: f6:04:39:3c:1e:0b:00:83:63:a4:d3:c3:c9:b3:21: 8d:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:87:71:49:D9:CE:7A:6F:22:6F:80:76:A8:B8:E8:AD:56:C8:5D:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d134356b-d3eb-3e9f-ac5d-e0d3f3cd8186.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.71.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:34:65:2c:94:f9:21:8e:e9:56:7a:ca:a8:c7:3d:34:fd:d8: 6d:64:a0:eb:2f:d5:81:52:46:3f:5a:f5:39:47:f3:84:15:eb: 0e:3d:9a:3b:94:8a:03:be:84:8e:72:8a:fa:ff:f5:61:53:ae: 29:dd:53:ba:d7:fc:fa:ba:6b:c8:fd:88:5a:9f:ce:00:34:4b: 66:bd:52:f0:0f:c9:1f:ab:40:22:e7:7b:26:a4:d2:c4:4d:90: 2e:57:5b:c7:9b:c9:33:e4:1d:03:0b:60:e7:17:34:4e:5b:ce: fb:9d:0b:ba:5b:53:a2:e8:26:fe:5a:b2:a4:0b:7a:f0:c8:f3: 17:b2:05:39:29:30:d3:80:fd:f6:f1:b5:39:13:36:8b:84:15: f0:b0:bb:26:d7:a7:87:1a:95:c2:dc:ad:d5:7a:bb:30:a7:19: a7:e4:5f:2e:ad:3f:00:f3:74:20:e9:22:20:d4:7e:1f:a3:f0: 6b:c4:6b:4b:ae:6e:69:ca:e8:4d:5d:13:f9:39:6d:6a:ec:c1: 13:fa:19:b2:85:53:01:d5:5d:5c:63:d8:aa:2e:f9:3c:31:89: d7:d8:63:0a:d1:5e:1e:f6:6e:40:6b:98:90:65:b7:0f:67:8f: 4d:be:77:86:4f:f6:74:77:b0:90:d9:69:88:00:d5:93:ab:a0: 4d:11:e7:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPZnHO81dPCD3xoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk YTczYWExYjktMmZkNS00ZjA2LWJlMDUtZTkzOWQ1Y2Q1MDlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFffHHAuZTq5E7rev8UcRPgwqPep67ZqFvqj h4UFtTYlyr39t9vBU+1MHB1oqZoc4Fm/SpWWPvOMmCN+MZLvLV4eUNUiMYcs21Mo lwF58CIM4bHK1CvgQSkCVW75yoltacT3RhToWsKaw+pxE6Cz2H+lba0rNFdTpITR 8kq2y0f3rMAcrM8j5Xg7DFYkPfq5wCHSK5/6GpgZXfSSQPOhxHu8/Mvnc4VtkZJu 2gAUHI35PWmytephox+BKqQamx43280S2ku4/4FcrB/CICC18QC84B+mCBKoGipW sxRcaZg59fipOff9IZfybZa2PnT2BDk8HgsAg2Ok08PJsyGNTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCiHcUnZznpvIm+Adqi46K1WyF37MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDEzNDM1NmItZDNlYi0z ZTlmLWFjNWQtZTBkM2YzY2Q4MTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkcgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFM0ZSyU+SGO6VZ6yqjHPTT92G1koOsv1YFSRj9a9TlH84QV6w49mjuU igO+hI5yivr/9WFTrindU7rX/Pq6a8j9iFqfzgA0S2a9UvAPyR+rQCLneyak0sRN kC5XW8ebyTPkHQMLYOcXNE5bzvudC7pbU6LoJv5asqQLevDI8xeyBTkpMNOA/fbx tTkTNouEFfCwuybXp4calcLcrdV6uzCnGafkXy6tPwDzdCDpIiDUfh+j8GvEa0uu bmnK6E1dE/k5bWrswRP6GbKFUwHVXVxj2Kou+TwxidfYYwrRXh72bkBrmJBltw9n j02+d4ZP9nR3sJDZaYgA1ZOroE0R56k= -----END CERTIFICATE-----Generated at Mon Sep 28 11:59:22 2026 by rpki-client