$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f7a23c73-1c73-30be-aa79-12316b00152f.roa File: f7a23c73-1c73-30be-aa79-12316b00152f.roa (raw, json) Hash identifier: ZIqd7HUdARwTrpoZ4+F5CFsO8pNRdV2xKSh1xGcw9L8= Subject key identifier: 87:71:5A:F5:B1:1A:A1:7C:87:60:44:EB:71:A9:C6:4A:72:E9:F7:99 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DB4E108F2F75F70640E00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f7a23c73-1c73-30be-aa79-12316b00152f.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.3.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:b4:e1:08:f2:f7:5f:70:64:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=d19d9ee2-cf32-4fa4-a44c-24538e15749e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:19:ac:a1:69:44:56:da:47:6b:d6:51:c9:a3: c1:9a:1d:8b:68:28:41:7b:b1:b1:4e:b6:55:71:6f: 25:95:2c:7c:10:3b:9a:85:4e:a8:05:b6:83:bd:f5: 91:2e:00:c3:25:8e:8c:e0:78:4d:06:57:79:1e:85: 46:2e:df:e9:39:41:be:b4:88:50:b6:77:2f:23:ed: 10:81:da:02:43:5a:2d:a6:fa:a9:ee:8e:93:da:42: 53:40:16:85:e3:57:a7:f1:d3:5e:ef:75:fc:eb:05: 74:ae:6a:15:66:22:72:f2:b1:f4:da:6e:a0:c1:a9: 81:fc:7f:ed:75:6e:b1:1a:4d:1c:d5:9d:1c:2d:d4: 9b:72:46:5b:2a:33:01:34:77:37:39:6d:55:3d:18: bf:17:67:4d:ee:0b:4b:38:9c:66:6c:dd:84:96:c9: 63:cd:56:ab:ef:66:b4:bc:08:d9:e5:32:35:b2:e3: 9e:c5:b0:2c:ff:dc:40:1a:05:1e:8f:16:8b:a7:49: ab:86:85:ed:ac:67:ae:cc:a8:f9:ab:5f:df:9f:dd: 39:47:ae:fb:e8:2f:5e:8a:9b:fd:2c:0c:45:a8:53: a3:16:fe:4b:b1:6b:a5:c6:32:08:da:df:96:79:c8: 2e:fd:02:45:4d:63:d3:5d:ad:0c:f8:ac:2b:7d:11: ca:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:71:5A:F5:B1:1A:A1:7C:87:60:44:EB:71:A9:C6:4A:72:E9:F7:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f7a23c73-1c73-30be-aa79-12316b00152f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.3.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:74:ce:62:f7:89:0e:c8:36:67:16:73:5f:5b:16:4e:67:d4: d1:b0:50:39:1d:ca:6b:9d:88:31:4e:58:01:3a:c7:57:70:fc: 63:4c:73:35:4b:bc:09:e1:48:59:f0:48:39:c7:e0:6c:98:61: 72:77:df:df:6a:56:5c:3b:7f:40:13:65:d0:64:bd:a9:79:01: 1b:24:64:49:f8:61:e2:e1:5d:c6:da:07:fa:ed:a5:f9:52:36: ea:55:aa:16:93:c8:5e:84:fb:3e:0b:58:20:ab:f7:d6:ce:1c: 28:36:be:e8:8a:33:e8:69:db:96:27:3b:a5:2f:63:10:57:24: f8:dc:10:ad:1d:3f:55:b1:b2:42:0e:9a:d2:0b:70:ce:aa:35: 08:11:88:70:45:b8:c7:0e:ff:a9:e5:c2:20:d8:cc:7e:cd:cd: 83:c7:40:53:b6:cb:2d:ee:f7:2f:4f:91:dd:22:a1:01:8d:39: df:55:36:af:d1:79:6c:3a:1d:d4:be:fd:ae:c0:fa:78:3c:87: 4c:6c:3d:7b:f7:80:a6:ad:16:f2:5a:8f:e6:7a:e2:84:c8:a1: 3f:c5:af:81:83:ac:07:67:d2:6e:7f:78:41:bd:e6:bc:bd:dc: 2b:9f:18:db:a9:94:21:fb:f3:5d:d4:d8:38:4b:6c:9c:c4:b0: 74:ae:99:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPbThCPL3X3BkDgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk ZDE5ZDllZTItY2YzMi00ZmE0LWE0NGMtMjQ1MzhlMTU3NDllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRmsoWlEVtpHa9ZRyaPBmh2LaChBe7GxTrZV cW8llSx8EDuahU6oBbaDvfWRLgDDJY6M4HhNBld5HoVGLt/pOUG+tIhQtncvI+0Q gdoCQ1otpvqp7o6T2kJTQBaF41en8dNe73X86wV0rmoVZiJy8rH02m6gwamB/H/t dW6xGk0c1Z0cLdSbckZbKjMBNHc3OW1VPRi/F2dN7gtLOJxmbN2ElsljzVar72a0 vAjZ5TI1suOexbAs/9xAGgUejxaLp0mrhoXtrGeuzKj5q1/fn905R6776C9eipv9 LAxFqFOjFv5LsWulxjII2t+Wecgu/QJFTWPTXa0M+KwrfRHKzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIdxWvWxGqF8h2BE63Gpxkpy6feZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZjdhMjNjNzMtMWM3My0z MGJlLWFhNzktMTIzMTZiMDAxNTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAIgMEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJF0zmL3iQ7INmcWc19bFk5n1NGwUDkdymudiDFOWAE6x1dw/GNMczVL vAnhSFnwSDnH4GyYYXJ3399qVlw7f0ATZdBkval5ARskZEn4YeLhXcbaB/rtpflS NupVqhaTyF6E+z4LWCCr99bOHCg2vuiKM+hp25YnO6UvYxBXJPjcEK0dP1WxskIO mtILcM6qNQgRiHBFuMcO/6nlwiDYzH7NzYPHQFO2yy3u9y9Pkd0ioQGNOd9VNq/R eWw6HdS+/a7A+ng8h0xsPXv3gKatFvJaj+Z64oTIoT/Fr4GDrAdn0m5/eEG95ry9 3CufGNuplCH7813U2DhLbJzEsHSumZI= -----END CERTIFICATE-----Generated at Sat Oct 3 14:28:29 2026 by rpki-client