$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d8c1954a-162e-3f42-b967-933def913af7.roa File: d8c1954a-162e-3f42-b967-933def913af7.roa (raw, json) Hash identifier: ZMc9bSSWyVmNO6199YYoEB6Sc3R3uJIKDD/TNVivvLE= Subject key identifier: A8:7B:92:31:AC:E9:AF:92:B0:86:78:EF:F9:3A:27:CD:DD:78:96:DA Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4972B7521B752B7D0D7B6500 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d8c1954a-162e-3f42-b967-933def913af7.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396982 IP address blocks: 34.3.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:b7:52:1b:75:2b:7d:0d:7b:65:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=7cbf8e7b-0dcc-4d54-a684-e54aadc5f5ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:1c:62:51:00:5f:d4:a5:c6:e4:bd:d3:7a:28: 3c:14:44:21:62:d1:01:19:2e:f1:f3:82:5b:39:30: 63:d1:6e:ac:be:95:f6:bd:6c:11:2a:40:ed:ec:5c: a8:2d:f7:64:fa:65:7b:97:1f:86:81:31:ca:bd:e5: 59:e9:dd:70:62:0c:18:7a:e9:d1:00:d7:71:74:b4: b2:51:7a:04:1d:65:42:a2:cc:27:a5:07:24:96:da: 29:62:85:34:d6:c5:02:31:d7:a1:06:18:70:d9:d1: 71:f1:9d:43:3d:ed:d4:bf:fa:99:7a:b9:c3:39:e7: 0a:78:21:45:42:52:49:6d:bb:72:6d:4c:c0:b5:0d: 5d:16:44:62:e0:64:ce:06:6d:4f:81:d0:f7:d1:2e: 49:ba:e7:48:d2:a6:a9:8d:6f:30:85:66:d8:fb:0e: 61:46:3f:61:66:c6:64:50:e2:d1:70:c5:f2:80:c9: a2:42:3b:3f:07:62:73:ad:83:40:ee:51:c9:ab:d1: e4:07:3c:99:ee:45:02:d2:9d:eb:5b:8f:a1:56:54: 44:aa:dc:86:a9:d6:37:cf:ce:60:96:0a:70:4a:46: 83:94:f2:ee:e3:8b:e8:7c:f8:fd:b4:2d:19:b1:b5: 2c:e4:64:07:0c:7b:0c:b8:00:36:b1:67:7f:a5:c6: 55:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:7B:92:31:AC:E9:AF:92:B0:86:78:EF:F9:3A:27:CD:DD:78:96:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d8c1954a-162e-3f42-b967-933def913af7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.3.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:1a:e4:f6:bb:ba:70:f6:60:b2:c4:08:ab:19:21:5a:72:fc: be:fe:44:f1:af:77:c7:c2:64:96:5f:f9:65:91:87:2c:fe:f1: a1:67:97:8e:5b:ef:e4:bf:a5:0f:8a:db:3d:cb:1f:50:2c:cb: 12:b2:00:ee:4a:83:ac:ee:58:30:a0:4e:2f:ed:17:88:b3:61: 44:16:16:ec:b1:3b:63:6d:28:ef:15:2b:23:c4:4a:0f:0a:ac: a7:88:b1:63:2b:b5:d1:48:30:b8:48:d1:da:a1:b9:1d:e0:74: 48:95:4f:fc:09:51:02:6f:2b:65:b7:49:7f:8e:8a:c9:56:8f: 23:cc:65:26:21:5a:24:f2:fa:a4:ee:a1:c9:e3:89:4d:49:7e: 88:6f:bd:b6:8c:ad:4a:d6:63:5b:27:93:52:00:19:16:8d:ea: 26:7d:da:3b:a2:ac:3d:46:fa:66:bb:b7:55:5e:c1:aa:6e:71: 89:43:4a:07:67:4d:2e:e0:20:1c:d7:df:36:2d:eb:82:1f:c1: d6:55:c6:53:90:d4:68:3e:31:99:44:db:4a:97:db:43:9e:bd: 5c:2f:21:f2:74:46:3a:d0:58:64:54:9e:35:a0:71:c8:aa:56: c3:81:28:dd:d5:00:6d:80:cf:05:6f:16:bd:2f:6f:60:fc:4e: cd:f4:95:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JcrdSG3UrfQ17ZQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk N2NiZjhlN2ItMGRjYy00ZDU0LWE2ODQtZTU0YWFkYzVmNWJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxxiUQBf1KXG5L3Teig8FEQhYtEBGS7x84Jb OTBj0W6svpX2vWwRKkDt7FyoLfdk+mV7lx+GgTHKveVZ6d1wYgwYeunRANdxdLSy UXoEHWVCoswnpQckltopYoU01sUCMdehBhhw2dFx8Z1DPe3Uv/qZernDOecKeCFF QlJJbbtybUzAtQ1dFkRi4GTOBm1PgdD30S5JuudI0qapjW8whWbY+w5hRj9hZsZk UOLRcMXygMmiQjs/B2JzrYNA7lHJq9HkBzyZ7kUC0p3rW4+hVlREqtyGqdY3z85g lgpwSkaDlPLu44vofPj9tC0ZsbUs5GQHDHsMuAA2sWd/pcZVOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKh7kjGs6a+SsIZ47/k6J83deJbaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDhjMTk1NGEtMTYyZS0z ZjQyLWI5NjctOTMzZGVmOTEzYWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAIgMBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHoa5Pa7unD2YLLECKsZIVpy/L7+RPGvd8fCZJZf+WWRhyz+8aFnl45b 7+S/pQ+K2z3LH1AsyxKyAO5Kg6zuWDCgTi/tF4izYUQWFuyxO2NtKO8VKyPESg8K rKeIsWMrtdFIMLhI0dqhuR3gdEiVT/wJUQJvK2W3SX+OislWjyPMZSYhWiTy+qTu ocnjiU1JfohvvbaMrUrWY1snk1IAGRaN6iZ92juirD1G+ma7t1VewapucYlDSgdn TS7gIBzX3zYt64IfwdZVxlOQ1Gg+MZlE20qX20OevVwvIfJ0RjrQWGRUnjWgcciq VsOBKN3VAG2AzwVvFr0vb2D8Ts30lUs= -----END CERTIFICATE-----Generated at Mon Sep 28 11:22:09 2026 by rpki-client