$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dffa6a3c-db63-3677-aacf-fb370f210400.roa File: dffa6a3c-db63-3677-aacf-fb370f210400.roa (raw, json) Hash identifier: JCjVkj05yFyiaq61E3nnatgm2PgrQwhkbvvupH4yznE= Subject key identifier: 72:77:65:6E:66:9B:EF:E4:1E:77:B5:BD:A8:AE:32:C7:13:5C:9F:4A Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DCC932662EA8141921400 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dffa6a3c-db63-3677-aacf-fb370f210400.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.75.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:cc:93:26:62:ea:81:41:92:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=d01e8c1a-a112-4b0f-ae3c-ec1bde42d174 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:cc:18:4e:b9:0b:4b:d2:dd:98:88:20:d5:39: eb:00:a9:26:7c:d1:d4:89:d2:80:bb:a8:63:8e:d5: fe:2f:5e:4b:6a:b0:fa:60:83:4f:bc:40:a4:a3:82: 52:54:31:d7:f8:df:82:b4:c9:9c:e9:76:49:b3:8b: 57:b7:bd:aa:cf:6a:f1:96:c7:a8:c1:6b:6c:30:0f: 31:4d:22:ed:8b:c5:d4:8a:37:85:b5:53:ae:df:a5: 26:e9:0c:a5:cb:1e:09:a7:16:29:96:b9:29:96:8d: ce:bc:de:d4:fe:3a:ad:24:ae:f8:7e:b8:3a:29:b0: 1b:94:97:26:21:86:14:e3:d3:78:00:6a:d7:cc:7c: e9:1c:94:f8:b5:c3:3c:62:34:14:b1:97:e1:82:96: d9:22:d4:8f:52:72:a9:b5:a1:48:df:ca:dd:05:8d: 10:a7:3b:d5:7c:d5:53:ac:1b:f2:3c:9d:60:04:81: 30:5f:1e:55:f6:61:7f:bf:c8:39:43:69:d7:e2:bf: a6:86:cd:69:23:33:2a:67:8d:10:05:71:13:2f:ea: 86:20:df:7b:73:d9:f4:97:61:7b:78:f3:6b:f7:b0: cd:fc:d9:88:6a:5a:aa:39:54:3a:94:33:b3:04:10: 98:1f:41:db:3b:bb:74:5c:fd:55:1e:3d:84:b8:32: 74:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:77:65:6E:66:9B:EF:E4:1E:77:B5:BD:A8:AE:32:C7:13:5C:9F:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dffa6a3c-db63-3677-aacf-fb370f210400.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.75.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:f2:5f:3b:f8:41:83:90:23:e8:60:34:c4:a4:bb:20:01:b1: 15:55:e0:06:38:ab:93:c0:7b:74:bb:3d:c6:74:11:8a:85:f2: b0:25:c6:a7:d6:15:03:16:6f:bb:4a:df:c0:f8:be:0c:35:41: 89:2d:db:60:6b:78:7c:96:f1:f7:6f:b1:76:2d:06:1a:55:5a: 36:e6:d3:1a:41:2e:e8:c4:cb:9b:cf:1d:0c:72:51:9c:9a:63: 1e:27:37:3c:44:63:91:d9:72:dd:9f:fd:ef:1c:a7:38:61:ec: 53:d5:9e:e6:fe:9e:c4:2c:44:8e:d9:e4:c3:87:ad:c2:17:6e: ae:a5:54:7c:07:ad:b1:a6:2b:ae:3b:50:c1:94:71:aa:0f:5d: f5:3c:25:b3:70:2e:46:4f:79:14:d6:96:a5:61:80:1e:3b:d0: 2f:b6:a0:b8:d2:71:ba:ba:a9:ec:5e:c4:ec:a4:55:45:3c:3b: b1:5d:22:7d:74:ea:62:a7:c0:7c:47:c9:d0:91:71:d4:7d:7d: 7f:b0:8e:cf:79:7b:5c:f0:b5:1d:32:9b:6b:63:8e:01:06:fe: f2:d2:87:1e:c1:6e:ac:52:7e:bc:14:6b:91:d6:42:b0:83:8e: 53:ef:e1:a6:49:5f:9f:e0:59:1d:40:e6:be:d7:77:27:84:01: 0d:ee:34:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPcyTJmLqgUGSFAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk ZDAxZThjMWEtYTExMi00YjBmLWFlM2MtZWMxYmRlNDJkMTc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMwYTrkLS9LdmIgg1TnrAKkmfNHUidKAu6hj jtX+L15LarD6YINPvECko4JSVDHX+N+CtMmc6XZJs4tXt72qz2rxlseowWtsMA8x TSLti8XUijeFtVOu36Um6Qylyx4JpxYplrkplo3OvN7U/jqtJK74frg6KbAblJcm IYYU49N4AGrXzHzpHJT4tcM8YjQUsZfhgpbZItSPUnKptaFI38rdBY0QpzvVfNVT rBvyPJ1gBIEwXx5V9mF/v8g5Q2nX4r+mhs1pIzMqZ40QBXETL+qGIN97c9n0l2F7 ePNr97DN/NmIalqqOVQ6lDOzBBCYH0HbO7t0XP1VHj2EuDJ02QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHJ3ZW5mm+/kHne1vaiuMscTXJ9KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZGZmYTZhM2MtZGI2My0z Njc3LWFhY2YtZmIzNzBmMjEwNDAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkvwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGXyXzv4QYOQI+hgNMSkuyABsRVV4AY4q5PAe3S7PcZ0EYqF8rAlxqfW FQMWb7tK38D4vgw1QYkt22BreHyW8fdvsXYtBhpVWjbm0xpBLujEy5vPHQxyUZya Yx4nNzxEY5HZct2f/e8cpzhh7FPVnub+nsQsRI7Z5MOHrcIXbq6lVHwHrbGmK647 UMGUcaoPXfU8JbNwLkZPeRTWlqVhgB470C+2oLjScbq6qexexOykVUU8O7FdIn10 6mKnwHxHydCRcdR9fX+wjs95e1zwtR0ym2tjjgEG/vLShx7BbqxSfrwUa5HWQrCD jlPv4aZJX5/gWR1A5r7XdyeEAQ3uNBc= -----END CERTIFICATE-----Generated at Mon Sep 28 22:49:50 2026 by rpki-client