$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ffd4d11b-7be4-3453-ad82-0b71adf00095.roa File: ffd4d11b-7be4-3453-ad82-0b71adf00095.roa (raw, json) Hash identifier: RFp+BrHsEEn9q1UvpSrlFQ4tkweRC5kEEPfEjJ7jS+w= Subject key identifier: 95:72:F6:64:DE:35:02:06:36:6C:F8:F0:29:FE:6F:DF:CE:87:5B:A3 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DCEF1B7D8DACFCB0D8C60 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ffd4d11b-7be4-3453-ad82-0b71adf00095.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.94.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:ce:f1:b7:d8:da:cf:cb:0d:8c:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=b1a804db-e22d-43d5-b4bb-c1453ed403ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:69:b9:85:ed:17:15:24:8b:b0:e9:b9:41:8f: 69:1c:9c:0f:c1:99:8f:44:2c:75:22:25:fc:0a:c1: 7a:c7:7d:99:cd:1d:b7:9a:0d:4d:0a:73:1d:8a:b9: 8b:47:68:41:71:b5:5c:29:a5:d7:72:c7:e4:aa:d1: 6f:0f:28:61:f3:d4:fa:3f:69:34:18:fb:cc:e9:63: 59:09:f7:fe:6f:6b:93:22:eb:c8:ed:38:8d:ba:fa: 0b:70:c0:a6:79:3d:44:b2:66:19:01:b7:6c:b8:a8: 25:28:6e:67:95:2c:0c:f2:7e:54:11:7f:49:d1:63: 41:58:cc:59:05:a4:91:67:dc:f0:ab:ed:ce:3f:1d: 2c:5a:1d:6d:2d:b6:41:00:1e:48:c7:3a:a9:09:92: e3:ee:a7:97:d7:cf:a3:f2:13:a1:95:7d:f6:8d:a9: 4a:be:a0:58:7e:e2:d5:21:b7:6c:d1:75:1c:cc:92: b3:12:e4:76:60:02:b4:fd:96:a1:44:3e:8d:01:d7: 8a:0a:7e:bc:be:fe:38:c4:17:4c:db:82:04:92:1a: 34:ac:b5:24:42:23:ed:a6:ba:ae:2f:0c:81:59:93: 6f:8a:ca:92:95:88:c4:f0:4f:4b:9f:48:46:1c:6a: 4e:e7:4a:f9:28:76:b6:a5:54:70:17:7d:76:0f:34: 0d:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:72:F6:64:DE:35:02:06:36:6C:F8:F0:29:FE:6F:DF:CE:87:5B:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ffd4d11b-7be4-3453-ad82-0b71adf00095.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.94.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:1e:e5:88:13:e6:ad:4a:85:54:bf:ae:a3:84:e9:b8:d9:2d: f7:5c:9e:de:20:29:32:c5:aa:51:c1:17:ce:4c:2e:cf:64:a9: 5d:65:1f:53:50:4b:87:4b:c1:2d:f3:a1:81:8b:01:cb:da:f5: c3:bb:6d:f9:75:3e:31:d8:2d:4e:ec:40:9c:51:95:7b:ef:12: bd:fc:c4:79:c1:65:1d:26:66:36:8d:6f:58:31:a3:ce:58:2c: c7:54:7d:7f:29:27:40:4a:02:a0:b7:6b:fc:11:42:b9:8e:80: 97:db:74:b1:00:0e:c8:5e:63:48:b4:7b:13:f2:ce:d6:8b:66: 8b:55:00:9f:79:06:4a:03:38:49:b3:79:74:d2:94:cf:02:f9: e1:b6:cf:e6:a3:1b:15:72:ee:98:13:e1:0c:28:8b:df:40:a4: 0b:6c:72:53:8f:c1:05:3c:c7:e4:96:c0:03:df:cb:cb:4d:64: 48:b8:e1:10:8e:75:f5:f8:a1:8a:dd:2c:b9:bb:0f:7c:87:56: fb:7d:e3:8e:94:f9:76:18:a9:e0:bf:d6:3a:b9:f9:00:bc:66: f5:9b:39:26:7f:6f:4d:7a:d8:f6:af:fa:b0:13:d7:20:16:ab: 14:4f:c2:d4:3c:25:73:d0:ca:34:c1:76:f0:8c:a2:0b:2f:06: b4:5d:62:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPc7xt9jaz8sNjGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk YjFhODA0ZGItZTIyZC00M2Q1LWI0YmItYzE0NTNlZDQwM2NhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWm5he0XFSSLsOm5QY9pHJwPwZmPRCx1IiX8 CsF6x32ZzR23mg1NCnMdirmLR2hBcbVcKaXXcsfkqtFvDyhh89T6P2k0GPvM6WNZ Cff+b2uTIuvI7TiNuvoLcMCmeT1EsmYZAbdsuKglKG5nlSwM8n5UEX9J0WNBWMxZ BaSRZ9zwq+3OPx0sWh1tLbZBAB5IxzqpCZLj7qeX18+j8hOhlX32jalKvqBYfuLV Ibds0XUczJKzEuR2YAK0/ZahRD6NAdeKCn68vv44xBdM24IEkho0rLUkQiPtprqu LwyBWZNvisqSlYjE8E9Ln0hGHGpO50r5KHa2pVRwF312DzQNtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJVy9mTeNQIGNmz48Cn+b9/Oh1ujMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZmZkNGQxMWItN2JlNC0z NDUzLWFkODItMGI3MWFkZjAwMDk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIl4AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACse5YgT5q1KhVS/rqOE6bjZLfdcnt4gKTLFqlHBF85MLs9kqV1lH1NQ S4dLwS3zoYGLAcva9cO7bfl1PjHYLU7sQJxRlXvvEr38xHnBZR0mZjaNb1gxo85Y LMdUfX8pJ0BKAqC3a/wRQrmOgJfbdLEADsheY0i0exPyztaLZotVAJ95BkoDOEmz eXTSlM8C+eG2z+ajGxVy7pgT4Qwoi99ApAtsclOPwQU8x+SWwAPfy8tNZEi44RCO dfX4oYrdLLm7D3yHVvt9446U+XYYqeC/1jq5+QC8ZvWbOSZ/b0162Pav+rAT1yAW qxRPwtQ8JXPQyjTBdvCMogsvBrRdYoY= -----END CERTIFICATE-----Generated at Sun Oct 4 17:46:41 2026 by rpki-client