$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/04701c02-444f-34aa-bb8f-bcaac76d2d27.roa File: 04701c02-444f-34aa-bb8f-bcaac76d2d27.roa (raw, json) Hash identifier: Wni+mBFMnLgx4nUmVGkhcoBnARXaqDOApwlf82MP9H4= Subject key identifier: 21:4C:43:44:A3:D6:25:AC:F1:F1:28:E5:C3:97:47:B0:FF:DB:CD:EB Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F49741D1588184EC688F4AE70 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/04701c02-444f-34aa-bb8f-bcaac76d2d27.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396982 IP address blocks: 34.2.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:1d:15:88:18:4e:c6:88:f4:ae:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=e95bb19a-d898-4324-af9e-e6ae67f5e05f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:8e:70:d3:7b:81:18:9a:c1:ae:40:b6:23:ce: ef:09:fc:a7:73:95:f1:2e:d1:37:06:39:08:37:99: 9c:20:e6:49:52:c3:72:0d:e9:77:5a:30:cf:32:4f: 1f:16:8d:70:e4:42:b1:2f:a3:2e:c3:47:b4:60:cc: dc:eb:c5:62:19:74:fe:ab:22:74:10:c8:3b:2b:59: 86:24:47:7c:34:5a:a1:a5:6a:11:17:89:49:87:fa: 41:c2:26:45:5a:e6:5d:6e:c4:ba:b4:4a:bf:c9:ef: 2e:60:23:d1:2d:56:10:2f:43:55:01:7b:d1:a1:42: 36:72:df:16:93:49:9c:fa:31:c8:c8:93:c6:99:0d: 0c:2b:61:7a:a4:b4:f2:11:e0:44:51:29:c7:18:c3: 43:d0:6a:ed:74:38:99:09:16:a0:4f:68:74:26:bf: 3e:8b:2e:e4:74:eb:44:e5:03:63:3b:6d:18:fb:2c: a3:64:5d:98:4c:bb:b7:65:56:07:9d:d7:45:8a:e7: 9f:88:33:4a:79:9e:58:2b:9a:a3:ba:a6:20:86:2c: 83:de:a5:81:46:9e:eb:f3:72:ca:48:91:68:d6:67: bc:f8:f3:de:77:40:b9:9c:70:6e:63:0d:91:66:d7: c8:96:cb:7d:bb:3c:e3:2b:45:05:4e:ca:9f:60:a4: 98:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:4C:43:44:A3:D6:25:AC:F1:F1:28:E5:C3:97:47:B0:FF:DB:CD:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/04701c02-444f-34aa-bb8f-bcaac76d2d27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.2.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:1a:74:e2:ff:46:12:9c:c4:fc:62:d4:c4:71:c0:d2:2f:e9: ce:99:d8:61:58:59:70:75:91:8d:d4:86:e4:6b:54:c2:4a:e9: 02:b7:e9:f8:13:d1:87:4e:c6:a0:e4:7c:b2:a5:49:33:b9:84: b7:69:c7:62:a2:8b:7a:37:bc:92:68:57:f6:82:d2:ff:68:83: ef:89:28:a6:7b:50:d2:b7:0c:87:14:52:ff:3d:89:7c:cc:e3: 2f:88:8c:95:16:69:9c:5e:b0:26:03:1a:ba:b6:92:b0:aa:7f: 80:ff:fe:99:c8:79:42:51:0f:ff:1c:1f:26:26:a2:dc:41:8d: df:5c:4c:95:18:81:74:dc:f2:91:40:f8:57:fa:97:27:24:65: 9a:af:b9:97:d7:d4:5e:2c:6c:c0:eb:b2:f1:a3:98:55:b0:8d: 23:83:54:c3:63:e0:00:0b:31:c8:e8:a8:5f:35:8f:df:4d:24: 18:b0:90:4a:68:23:79:ce:4e:31:b9:39:f5:e5:2c:11:01:fb: cb:fd:e6:32:72:b8:e3:1b:4c:0f:5f:7d:63:9e:e2:91:44:02: a9:39:cc:6a:d5:87:fa:59:dd:bf:a6:e7:9e:d3:ed:76:44:eb: b1:87:05:5b:25:b7:a2:b9:00:98:20:b5:29:13:e7:57:35:a9: 30:68:6e:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdB0ViBhOxoj0rnAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZTk1YmIxOWEtZDg5OC00MzI0LWFmOWUtZTZhZTY3ZjVlMDVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApY5w03uBGJrBrkC2I87vCfync5XxLtE3BjkI N5mcIOZJUsNyDel3WjDPMk8fFo1w5EKxL6Muw0e0YMzc68ViGXT+qyJ0EMg7K1mG JEd8NFqhpWoRF4lJh/pBwiZFWuZdbsS6tEq/ye8uYCPRLVYQL0NVAXvRoUI2ct8W k0mc+jHIyJPGmQ0MK2F6pLTyEeBEUSnHGMND0GrtdDiZCRagT2h0Jr8+iy7kdOtE 5QNjO20Y+yyjZF2YTLu3ZVYHnddFiuefiDNKeZ5YK5qjuqYghiyD3qWBRp7r83LK SJFo1me8+PPed0C5nHBuYw2RZtfIlst9uzzjK0UFTsqfYKSY9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCFMQ0Sj1iWs8fEo5cOXR7D/283rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMDQ3MDFjMDItNDQ0Zi0z NGFhLWJiOGYtYmNhYWM3NmQyZDI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIgIAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFcadOL/RhKcxPxi1MRxwNIv6c6Z2GFYWXB1kY3UhuRrVMJK6QK36fgT 0YdOxqDkfLKlSTO5hLdpx2Kii3o3vJJoV/aC0v9og++JKKZ7UNK3DIcUUv89iXzM 4y+IjJUWaZxesCYDGrq2krCqf4D//pnIeUJRD/8cHyYmotxBjd9cTJUYgXTc8pFA +Ff6lyckZZqvuZfX1F4sbMDrsvGjmFWwjSODVMNj4AALMcjoqF81j99NJBiwkEpo I3nOTjG5OfXlLBEB+8v95jJyuOMbTA9ffWOe4pFEAqk5zGrVh/pZ3b+m557T7XZE 67GHBVslt6K5AJggtSkT51c1qTBobtk= -----END CERTIFICATE-----Generated at Tue Sep 29 19:46:28 2026 by rpki-client