$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d66ccce3-6dcf-3966-ad6a-dce21ddca433.roa File: d66ccce3-6dcf-3966-ad6a-dce21ddca433.roa (raw, json) Hash identifier: L3HzZKBNYChoPIPY4NsB6C72CGKjbr28gdPs+FLAHHA= Subject key identifier: B1:87:13:C0:30:CA:92:A8:70:C7:97:68:F2:C7:DF:6C:F5:11:01:87 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F498A228F8D970D47EC8F6B00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d66ccce3-6dcf-3966-ad6a-dce21ddca433.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 34.3.56.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8a:22:8f:8d:97:0d:47:ec:8f:6b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=732814a4-3574-4bbb-b526-f1f7b4cec382 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:df:4b:aa:f4:fa:f6:c1:b5:bb:6e:f9:37:15: fd:ab:52:de:67:d7:dc:ac:68:3c:2b:27:35:b8:57: 0f:bd:bf:3d:2a:37:35:46:f4:11:5c:4a:4f:e4:64: 6e:fa:6b:ab:13:6b:b8:79:ed:62:11:ad:b4:3b:36: 4a:ad:d5:49:81:4f:7e:85:82:65:a7:6b:32:45:21: 4f:54:9e:76:70:e7:ac:a1:e7:20:82:db:61:aa:c1: 68:d4:f6:fa:3e:1e:37:99:ab:19:e8:57:97:a0:e2: df:74:67:e6:02:79:bf:2b:3a:28:dc:4b:a2:63:3a: bf:14:b7:95:d3:15:a5:e3:63:cf:f9:c5:68:99:f8: ab:eb:a7:3d:99:cd:8c:65:90:1b:55:d6:22:93:a9: a9:18:bf:72:a9:c5:69:67:38:66:a4:6d:b9:e3:21: 93:be:5c:07:51:00:b1:ad:de:26:18:11:03:3c:a2: 66:40:a8:0b:d8:36:7a:2c:b2:f0:3d:65:86:74:8c: 4c:70:83:24:03:32:f0:ae:cf:ec:69:8d:f4:cd:9d: 9a:94:5a:88:67:6c:61:e1:86:54:e4:c8:aa:42:47: d1:ac:5f:eb:63:09:0d:9e:f9:eb:e5:79:23:1e:36: 22:46:17:22:7f:2e:d0:3e:a8:a8:cf:1c:5d:53:61: aa:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:87:13:C0:30:CA:92:A8:70:C7:97:68:F2:C7:DF:6C:F5:11:01:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d66ccce3-6dcf-3966-ad6a-dce21ddca433.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.3.56.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:53:86:f5:bc:c6:88:d3:66:b7:60:62:6d:8c:fa:03:de:58: 96:e1:a2:67:63:da:eb:74:a9:e5:17:83:3e:49:1a:2f:36:6f: 5f:53:52:45:e5:06:72:14:12:25:b3:e9:f6:e1:c1:fe:16:fb: 6d:97:c7:a0:07:d4:33:41:26:d1:7c:05:11:4d:9d:af:1a:f2: 4b:93:c9:cb:be:55:97:72:fb:77:57:e1:b1:1e:65:2d:06:f1: cc:9f:b5:d5:56:99:94:5f:ea:d9:d2:f8:1b:a8:af:06:54:45: b0:2c:ad:0b:de:03:49:43:d4:1d:7d:06:8e:b6:55:eb:cd:26: 10:3f:4c:a4:d7:02:8c:c3:49:c2:b4:d4:2f:a3:e0:fb:3f:52: 2e:98:60:0a:12:bb:5c:13:6c:64:f8:74:56:6f:86:cb:57:f1: b4:31:ae:c5:45:83:08:37:cd:47:b3:94:b2:8a:82:b5:ca:1e: ac:f5:23:d7:ac:16:cb:bf:ce:c8:ba:a9:8b:5c:98:8a:84:db: ea:2b:a6:0c:76:92:50:bf:d9:7c:7d:ae:bd:97:86:d2:93:6e: e9:c2:56:84:a0:25:9e:da:f2:01:85:ec:2b:4e:ca:82:4d:cf: ca:26:bf:9a:1f:ce:a9:3a:6e:bc:4b:d5:ce:f2:1b:bf:e9:19: dd:bf:41:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiiKPjZcNR+yPawAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NzMyODE0YTQtMzU3NC00YmJiLWI1MjYtZjFmN2I0Y2VjMzgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsd9LqvT69sG1u275NxX9q1LeZ9fcrGg8Kyc1 uFcPvb89Kjc1RvQRXEpP5GRu+murE2u4ee1iEa20OzZKrdVJgU9+hYJlp2syRSFP VJ52cOesoecggtthqsFo1Pb6Ph43masZ6FeXoOLfdGfmAnm/Kzoo3EuiYzq/FLeV 0xWl42PP+cVomfir66c9mc2MZZAbVdYik6mpGL9yqcVpZzhmpG254yGTvlwHUQCx rd4mGBEDPKJmQKgL2DZ6LLLwPWWGdIxMcIMkAzLwrs/saY30zZ2alFqIZ2xh4YZU 5MiqQkfRrF/rYwkNnvnr5XkjHjYiRhcify7QPqiozxxdU2GqGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLGHE8AwypKocMeXaPLH32z1EQGHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDY2Y2NjZTMtNmRjZi0z OTY2LWFkNmEtZGNlMjFkZGNhNDMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCIgM4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABVThvW8xojTZrdgYm2M+gPeWJbhomdj2ut0qeUXgz5JGi82b19TUkXl BnIUEiWz6fbhwf4W+22Xx6AH1DNBJtF8BRFNna8a8kuTycu+VZdy+3dX4bEeZS0G 8cyftdVWmZRf6tnS+BuorwZURbAsrQveA0lD1B19Bo62VevNJhA/TKTXAozDScK0 1C+j4Ps/Ui6YYAoSu1wTbGT4dFZvhstX8bQxrsVFgwg3zUezlLKKgrXKHqz1I9es Fsu/zsi6qYtcmIqE2+orpgx2klC/2Xx9rr2XhtKTbunCVoSgJZ7a8gGF7CtOyoJN z8omv5ofzqk6brxL1c7yG7/pGd2/QdE= -----END CERTIFICATE-----Generated at Mon Sep 28 17:59:51 2026 by rpki-client