$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f8a304c9-6c20-3542-be9e-17d0b39a7ff2.roa File: f8a304c9-6c20-3542-be9e-17d0b39a7ff2.roa (raw, json) Hash identifier: C6HyUgqtvw6X6CwBQG0cIoj5F+3QKfZBhI7VLwC8F1w= Subject key identifier: 6A:E1:EC:AF:D9:B3:E7:D9:4D:9B:AC:27:56:AD:15:0A:D3:45:AF:01 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4112BEA73D1516B3286D64F0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f8a304c9-6c20-3542-be9e-17d0b39a7ff2.roa Signing time: Tue 22 Sep 2026 01:00:12 +0000 ROA not before: Tue 22 Sep 2026 01:00:12 +0000 ROA not after: Mon 21 Dec 2026 02:00:12 +0000 asID: 43515 IP address blocks: 34.3.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:41:12:be:a7:3d:15:16:b3:28:6d:64:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 22 01:00:12 2026 GMT Not After : Dec 21 02:00:12 2026 GMT Subject: CN=adb4931b-c7d9-42f7-8b4b-53289f26c4dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:3a:12:6f:93:a9:f1:dc:6f:81:5c:f3:20:3b: d1:b8:99:ee:c0:76:aa:49:43:06:c6:e9:a7:af:60: b1:90:c5:f0:bd:fc:63:4d:ce:01:3e:8d:7c:d0:cc: d7:cd:d3:03:3f:97:1a:a6:81:d3:b6:b2:dd:ae:f7: 5b:0e:82:67:1e:63:39:46:66:ac:aa:28:89:37:d3: ae:7e:08:12:56:1d:eb:eb:16:29:3b:98:cd:dc:e3: 9e:78:17:56:85:cf:fe:e6:c9:17:9f:80:37:f6:a4: 7d:a3:c2:b1:d0:5a:6b:37:1d:47:e5:0f:91:76:a9: 67:41:dc:06:05:bd:37:a9:d3:ba:a4:38:1a:35:19: d5:cf:0c:a0:f8:b9:c2:ea:d0:41:79:3d:eb:6a:c1: 09:62:bd:3b:ef:86:32:80:35:c3:3b:65:f0:f9:67: 10:09:0a:2c:4e:85:2b:8e:1a:4f:c1:2b:7c:2d:87: 5b:cc:2b:78:76:1c:1c:1f:f8:29:f5:a9:cf:53:37: aa:fc:61:d9:97:7e:04:70:57:98:f5:b6:64:23:7a: b7:b6:18:fe:35:7f:fa:8a:09:5a:df:51:30:bc:ee: 78:3e:c9:b8:fd:f1:1b:8f:3e:c3:b4:5b:79:86:00: 6e:30:4f:80:55:36:79:60:34:32:1d:f4:63:46:5f: 16:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:E1:EC:AF:D9:B3:E7:D9:4D:9B:AC:27:56:AD:15:0A:D3:45:AF:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f8a304c9-6c20-3542-be9e-17d0b39a7ff2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.3.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:e8:36:5e:cf:73:04:0b:5a:03:50:40:e9:48:c8:45:8e:b1: f4:4b:0e:d9:c2:9b:7c:ec:00:2a:1c:62:a7:96:81:b3:ac:71: 86:1a:52:dd:6d:a5:df:8f:2d:ef:b5:94:f5:39:83:57:67:25: 05:78:2f:6b:78:f0:1c:71:c4:b5:c2:dc:42:30:b0:10:8d:9f: 75:23:2a:5e:9b:b0:91:2f:a2:9e:f2:3f:91:ea:d0:bc:fc:92: 88:9d:0a:68:6d:39:0f:48:45:0b:9c:cc:55:47:87:c8:ec:a4: 6f:5b:af:c7:dc:ae:c3:db:14:b3:d2:f1:82:8f:1f:93:ab:86: 12:7d:12:fc:78:d2:3b:43:4e:db:7b:7c:ae:cc:e7:c9:90:4e: 1e:74:ba:95:30:d7:b8:39:97:c0:a9:02:36:9e:d6:4c:e1:a0: 63:be:57:72:b2:2e:7c:d4:e6:f8:3d:d5:66:62:1a:10:70:ac: d7:17:ec:6f:c0:a7:6b:29:6a:fa:c1:00:7e:a4:4f:8a:38:14: 1b:6b:3a:21:7d:ac:3c:04:4a:e5:7b:fd:5e:53:fc:eb:c8:c5: 61:07:ce:03:cc:f3:07:3d:4c:be:86:c8:03:72:8e:58:02:a9: 81:dd:45:dc:53:f1:e7:0b:b0:7d:ff:8c:84:be:cb:e1:b8:3d: ac:f4:92:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9BEr6nPRUWsyhtZPAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyMjAxMDAxMloXDTI2MTIyMTAyMDAxMlowLzEtMCsGA1UEAxMk YWRiNDkzMWItYzdkOS00MmY3LThiNGItNTMyODlmMjZjNGRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1joSb5Op8dxvgVzzIDvRuJnuwHaqSUMGxumn r2CxkMXwvfxjTc4BPo180MzXzdMDP5capoHTtrLdrvdbDoJnHmM5RmasqiiJN9Ou fggSVh3r6xYpO5jN3OOeeBdWhc/+5skXn4A39qR9o8Kx0FprNx1H5Q+RdqlnQdwG Bb03qdO6pDgaNRnVzwyg+LnC6tBBeT3rasEJYr0774YygDXDO2Xw+WcQCQosToUr jhpPwSt8LYdbzCt4dhwcH/gp9anPUzeq/GHZl34EcFeY9bZkI3q3thj+NX/6igla 31EwvO54Psm4/fEbjz7DtFt5hgBuME+AVTZ5YDQyHfRjRl8WwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGrh7K/Zs+fZTZusJ1atFQrTRa8BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZjhhMzA0YzktNmMyMC0z NTQyLWJlOWUtMTdkMGIzOWE3ZmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGIgNAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJzoNl7PcwQLWgNQQOlIyEWOsfRLDtnCm3zsACocYqeWgbOscYYaUt1t pd+PLe+1lPU5g1dnJQV4L2t48BxxxLXC3EIwsBCNn3UjKl6bsJEvop7yP5Hq0Lz8 koidCmhtOQ9IRQuczFVHh8jspG9br8fcrsPbFLPS8YKPH5OrhhJ9Evx40jtDTtt7 fK7M58mQTh50upUw17g5l8CpAjae1kzhoGO+V3KyLnzU5vg91WZiGhBwrNcX7G/A p2spavrBAH6kT4o4FBtrOiF9rDwESuV7/V5T/OvIxWEHzgPM8wc9TL6GyANyjlgC qYHdRdxT8ecLsH3/jIS+y+G4Paz0knM= -----END CERTIFICATE-----Generated at Sat Sep 26 13:19:17 2026 by rpki-client