$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fdbdb5c9-f640-3c21-954a-a05e73f38fc6.roa File: fdbdb5c9-f640-3c21-954a-a05e73f38fc6.roa (raw, json) Hash identifier: u+Cspcl7PVI2UbpIoCSSlQzv4ZLz8cglMZySdBENSPE= Subject key identifier: E8:36:69:10:08:12:65:CC:DC:DE:AA:98:98:86:D6:06:18:F7:29:CA Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F497CDFE70E9DE7619D6FDE00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fdbdb5c9-f640-3c21-954a-a05e73f38fc6.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 19527 IP address blocks: 34.1.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7c:df:e7:0e:9d:e7:61:9d:6f:de:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=25cc9c85-c1e5-415b-bef5-913447843f41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d6:17:66:73:60:4a:a3:15:34:84:99:5a:bd: 9c:f8:53:25:48:ff:95:d3:7c:5b:77:41:6e:4f:47: 11:c0:9c:fc:db:40:57:df:1c:64:cc:1c:c6:3f:45: 4d:00:99:2c:ed:9f:6c:f9:17:da:df:d8:21:dd:62: b8:cb:7f:7e:c0:6e:2d:d2:60:ed:57:b9:67:7a:02: 08:19:12:f9:1e:da:ef:2a:be:9e:75:31:64:d4:47: 62:3b:68:ed:87:4b:31:5d:21:33:03:94:a9:e0:5b: 09:38:d5:0e:3d:df:54:01:d8:3c:60:3c:84:03:a6: 27:4f:94:85:7d:24:4b:c6:44:c0:92:e8:e8:1a:4f: 81:79:06:00:bb:31:b6:59:b0:dd:32:f5:d0:4d:36: 30:7c:be:46:c3:93:25:de:57:2d:7c:33:c5:14:35: 8f:ea:2f:e9:c6:de:39:14:0c:e8:54:8e:0b:5c:00: 7c:5f:bf:aa:e9:d6:e5:a5:10:f5:bb:76:02:fe:50: 75:2f:9e:39:4c:39:24:c8:1c:ed:b5:6c:4c:c7:c0: df:2f:5e:c4:df:ad:84:b0:e3:63:1e:99:ac:40:ff: b7:30:aa:23:8d:93:9c:63:b1:00:25:8d:5a:0c:d6: 5b:74:0a:8b:98:f4:f4:20:9e:a8:8d:d5:67:9e:75: 08:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:36:69:10:08:12:65:CC:DC:DE:AA:98:98:86:D6:06:18:F7:29:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fdbdb5c9-f640-3c21-954a-a05e73f38fc6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.1.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:ea:1a:7a:fd:ef:15:16:e7:b1:90:de:87:e8:de:d7:6a:bb: de:f1:2f:82:94:23:dd:ce:df:03:aa:a5:ab:46:f9:05:bd:95: 4a:d5:32:b7:02:5a:35:ff:6d:bd:9f:1e:e9:de:84:8c:4f:6a: fc:63:93:23:f8:74:13:59:df:fd:70:25:4d:d6:d4:8e:1d:2d: 60:a8:42:d1:f3:db:c0:a2:83:b3:97:2b:7c:c3:84:5d:f1:c4: 7f:f9:bb:34:33:87:f4:6d:e3:9a:d7:27:a3:d7:8c:a0:68:7c: 9c:37:cc:ec:2e:c0:f9:a3:b1:93:45:8a:b7:c6:f7:25:c1:6d: 5e:06:fb:ef:26:5a:01:c5:9d:7c:63:cc:ce:02:8a:c1:2a:6f: 06:e8:1f:b5:15:b0:38:0a:c9:ae:78:3e:ee:5b:55:c3:92:8c: ea:6a:eb:f5:dd:83:10:ab:b9:a3:70:1f:04:e6:21:fb:b1:79: 98:c8:db:77:18:4b:e1:68:c6:19:f6:7d:62:8d:72:ad:cd:b4: 41:65:85:0f:8a:89:72:5a:83:ba:79:ca:06:1f:9a:fe:bd:be: b6:c2:91:39:a3:f4:1f:e3:44:db:34:08:34:f3:f7:2d:a2:30: 4a:61:9a:43:45:27:dc:24:29:bc:b5:46:e6:09:c4:c9:86:74: e8:d8:45:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfN/nDp3nYZ1v3gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MjVjYzljODUtYzFlNS00MTViLWJlZjUtOTEzNDQ3ODQzZjQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndYXZnNgSqMVNISZWr2c+FMlSP+V03xbd0Fu T0cRwJz820BX3xxkzBzGP0VNAJks7Z9s+Rfa39gh3WK4y39+wG4t0mDtV7lnegII GRL5HtrvKr6edTFk1EdiO2jth0sxXSEzA5Sp4FsJONUOPd9UAdg8YDyEA6YnT5SF fSRLxkTAkujoGk+BeQYAuzG2WbDdMvXQTTYwfL5Gw5Ml3lctfDPFFDWP6i/pxt45 FAzoVI4LXAB8X7+q6dblpRD1u3YC/lB1L545TDkkyBzttWxMx8DfL17E362EsONj HpmsQP+3MKojjZOcY7EAJY1aDNZbdAqLmPT0IJ6ojdVnnnUIqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOg2aRAIEmXM3N6qmJiG1gYY9ynKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZmRiZGI1YzktZjY0MC0z YzIxLTk1NGEtYTA1ZTczZjM4ZmM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIgEgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADXqGnr97xUW57GQ3ofo3tdqu97xL4KUI93O3wOqpatG+QW9lUrVMrcC WjX/bb2fHunehIxPavxjkyP4dBNZ3/1wJU3W1I4dLWCoQtHz28Cig7OXK3zDhF3x xH/5uzQzh/Rt45rXJ6PXjKBofJw3zOwuwPmjsZNFirfG9yXBbV4G++8mWgHFnXxj zM4CisEqbwboH7UVsDgKya54Pu5bVcOSjOpq6/XdgxCruaNwHwTmIfuxeZjI23cY S+Foxhn2fWKNcq3NtEFlhQ+KiXJag7p5ygYfmv69vrbCkTmj9B/jRNs0CDTz9y2i MEphmkNFJ9wkKby1RuYJxMmGdOjYRZk= -----END CERTIFICATE-----Generated at Mon Sep 28 19:21:13 2026 by rpki-client