$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f581bbcf-de06-3900-afbd-049e22bb338b.roa File: f581bbcf-de06-3900-afbd-049e22bb338b.roa (raw, json) Hash identifier: LzGHuJgCAbu6UCb9w33XB8tWQuzbqaR0OjCFVZfS1cA= Subject key identifier: 4D:68:92:3F:60:E2:D2:CF:42:2A:A7:6A:0A:91:14:AE:64:2A:91:75 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4985179A1D91DE4E38ECB700 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f581bbcf-de06-3900-afbd-049e22bb338b.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 34.0.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:85:17:9a:1d:91:de:4e:38:ec:b7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=b95c36d9-bd41-45c5-9750-b112399b4064 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:be:ab:25:96:b3:8b:f4:9e:d9:c2:5c:22:27: 27:c5:7b:4c:df:07:44:53:29:5b:cc:60:eb:6a:39: e5:d8:5d:4e:5d:1c:78:9f:15:66:4c:08:d8:64:59: 29:21:44:04:c8:31:e8:66:6c:91:b8:53:b8:87:18: 05:b1:ff:6d:3b:07:f1:29:f8:11:dc:ec:f8:53:bb: c3:9c:2a:be:4e:18:e4:91:83:ba:33:c2:1d:ce:e9: 91:d3:0f:23:96:60:ef:da:0b:89:50:c6:25:4a:3c: 0b:e4:d9:6d:de:6e:3b:96:a9:21:ed:c2:1c:d8:1e: b0:f5:98:0a:5c:79:a9:19:07:7f:e7:12:8d:85:3a: 96:d3:f7:56:ba:87:16:03:7a:e5:26:fa:b4:48:00: df:16:cd:ad:b2:5d:dc:ad:c5:a5:25:bb:40:fa:17: bb:1c:fb:be:8f:05:81:87:b4:cc:74:0b:c5:a9:d6: 3e:ee:8b:77:78:83:d7:67:69:c9:5b:59:3f:44:12: 34:8d:87:6e:de:94:cc:b6:a9:06:d6:26:82:e9:91: e8:94:5b:b1:b2:77:8d:2a:bb:35:0d:77:1b:48:3b: 33:bd:bc:01:5d:ee:52:0a:32:f6:81:81:31:22:41: fc:8c:0e:83:e7:ad:44:99:9a:bd:65:96:46:08:c8: d3:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:68:92:3F:60:E2:D2:CF:42:2A:A7:6A:0A:91:14:AE:64:2A:91:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f581bbcf-de06-3900-afbd-049e22bb338b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.0.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:09:5f:49:b0:17:c7:80:7c:bf:a5:9b:cf:6a:6b:31:29:ee: 6d:b2:5b:a8:7f:0a:f1:73:41:49:fa:72:1e:bd:b5:c9:48:e1: b7:bf:de:60:68:a6:1e:fc:57:7a:0e:64:b8:26:e6:20:df:d5: 2d:ad:3b:f3:a1:8a:e7:e2:0a:96:3a:f1:16:c0:27:11:b6:a4: ca:ae:dd:e6:f5:09:5b:62:ea:47:6f:ad:37:de:a0:ab:68:4d: 59:fa:60:b4:5e:29:79:1b:c9:b5:48:58:5b:08:76:52:46:33: 2e:07:df:a4:ac:ff:30:a8:c9:03:a6:f3:64:71:ee:87:ad:33: ff:a6:8d:60:e6:13:39:fd:3d:fe:6e:1a:90:3c:c7:9a:0a:25: 1f:ef:04:4b:c3:c4:0e:4c:0d:0e:eb:32:58:dc:3f:5d:1d:4f: 34:48:b7:30:99:3c:dd:c4:bd:38:df:bd:98:5c:47:42:50:22: 2a:41:40:e1:0a:08:1a:20:7e:c6:ad:fb:d2:8c:77:b3:2f:20: a1:58:36:44:32:e7:f8:31:43:57:80:de:7a:be:08:42:3a:73: 58:b2:1e:94:13:1a:31:b9:52:9e:8c:5e:7c:77:75:91:e0:e6: 1c:92:08:d1:64:21:bb:e3:c6:9a:4d:0b:56:62:26:84:03:45: 94:e4:e5:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhReaHZHeTjjstwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Yjk1YzM2ZDktYmQ0MS00NWM1LTk3NTAtYjExMjM5OWI0MDY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgr6rJZazi/Se2cJcIicnxXtM3wdEUylbzGDr ajnl2F1OXRx4nxVmTAjYZFkpIUQEyDHoZmyRuFO4hxgFsf9tOwfxKfgR3Oz4U7vD nCq+ThjkkYO6M8IdzumR0w8jlmDv2guJUMYlSjwL5Nlt3m47lqkh7cIc2B6w9ZgK XHmpGQd/5xKNhTqW0/dWuocWA3rlJvq0SADfFs2tsl3crcWlJbtA+he7HPu+jwWB h7TMdAvFqdY+7ot3eIPXZ2nJW1k/RBI0jYdu3pTMtqkG1iaC6ZHolFuxsneNKrs1 DXcbSDszvbwBXe5SCjL2gYExIkH8jA6D561EmZq9ZZZGCMjTZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE1okj9g4tLPQiqnagqRFK5kKpF1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZjU4MWJiY2YtZGUwNi0z OTAwLWFmYmQtMDQ5ZTIyYmIzMzhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIgDwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACoJX0mwF8eAfL+lm89qazEp7m2yW6h/CvFzQUn6ch69tclI4be/3mBo ph78V3oOZLgm5iDf1S2tO/OhiufiCpY68RbAJxG2pMqu3eb1CVti6kdvrTfeoKto TVn6YLReKXkbybVIWFsIdlJGMy4H36Ss/zCoyQOm82Rx7oetM/+mjWDmEzn9Pf5u GpA8x5oKJR/vBEvDxA5MDQ7rMljcP10dTzRItzCZPN3EvTjfvZhcR0JQIipBQOEK CBogfsat+9KMd7MvIKFYNkQy5/gxQ1eA3nq+CEI6c1iyHpQTGjG5Up6MXnx3dZHg 5hySCNFkIbvjxppNC1ZiJoQDRZTk5Zg= -----END CERTIFICATE-----Generated at Tue Sep 29 18:28:20 2026 by rpki-client