$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1d29fd2f-f996-3286-8bc4-07bc6b52248a.roa File: 1d29fd2f-f996-3286-8bc4-07bc6b52248a.roa (raw, json) Hash identifier: T+Qg+G+QL94xHExe+J0fk9ViHDz1eMenKOVqnpY9ymM= Subject key identifier: E0:B7:8F:5C:7A:51:2A:EC:D4:02:56:8E:F3:F5:9B:D9:5D:39:DD:74 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584EE0C21C0B3BBEB27C0D854040 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1d29fd2f-f996-3286-8bc4-07bc6b52248a.roa Signing time: Tue 18 Aug 2026 13:00:12 +0000 ROA not before: Tue 18 Aug 2026 13:00:12 +0000 ROA not after: Mon 16 Nov 2026 14:00:12 +0000 asID: 396982 IP address blocks: 34.3.214.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e0:c2:1c:0b:3b:be:b2:7c:0d:85:40:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Aug 18 13:00:12 2026 GMT Not After : Nov 16 14:00:12 2026 GMT Subject: CN=b14312a0-7339-4a5a-99b2-ddb9e2c734b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:7c:36:09:31:15:1b:46:dd:9f:6f:06:f3:c5: 69:84:de:10:95:d1:ad:ea:d3:32:42:62:28:3f:ff: 75:4b:c2:56:df:1e:0a:1d:63:2a:eb:37:2b:5d:1c: f9:dd:48:a8:42:86:39:e8:fd:4f:29:70:29:00:09: e0:99:8b:e7:5f:18:88:2d:97:aa:f1:13:60:7f:17: 1b:6b:06:ae:ae:d8:1c:a1:39:29:75:6e:fa:ce:13: 6f:36:9f:0c:64:2f:ad:f2:5a:45:c3:21:3b:bd:17: 6e:3e:5c:bf:c6:d8:0e:5e:70:0e:57:20:e5:8a:c8: 38:8b:dc:91:e5:ef:97:f5:4b:08:b4:17:03:c3:a1: d9:e8:53:bf:4d:65:da:d5:d6:67:1f:9b:1c:36:8a: 0c:66:a0:8c:a1:04:87:aa:dc:18:c8:70:54:4b:58: 14:98:ff:a0:ca:c1:b9:45:05:c1:cf:89:f0:34:20: e0:3d:6f:a7:17:d9:b3:fa:e3:06:84:bf:71:58:3d: b8:e1:de:03:b3:ad:90:43:52:3a:b8:7f:26:7a:46: 58:27:03:1a:24:38:ca:e0:97:65:8b:fe:08:02:3b: 09:5c:3f:1c:e3:6a:e6:b7:80:ff:24:b2:6c:e5:42: f6:2f:b9:91:7b:d4:3d:aa:4f:17:5d:08:e8:da:1b: 62:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:B7:8F:5C:7A:51:2A:EC:D4:02:56:8E:F3:F5:9B:D9:5D:39:DD:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1d29fd2f-f996-3286-8bc4-07bc6b52248a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.3.214.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:9c:69:6d:3e:23:e0:5e:ee:b4:19:cb:06:ff:1f:9c:0e:17: ba:5f:15:04:06:5d:da:ee:93:83:27:18:51:45:74:49:d1:3d: 50:d7:29:ae:a5:6f:b0:51:de:d5:2b:31:c7:94:e4:8d:cb:d6: c0:7f:29:94:2d:74:38:f7:8a:7f:3d:98:05:20:08:65:1f:2c: f6:5e:e6:30:64:cc:da:06:ad:2a:22:92:0b:db:76:7a:44:c0: 56:c4:e1:b5:2b:e8:91:fc:05:27:c0:74:63:2b:5c:72:8c:2d: ba:a1:38:e9:54:4f:6a:f5:8d:58:f5:b8:99:f4:be:4a:08:53: e6:b2:ee:05:85:02:a1:2d:9f:b8:53:0f:5e:06:a6:1f:5e:c0: e1:ae:88:e6:87:27:3b:ff:c7:93:8a:a0:ee:50:72:d2:6f:6f: 87:9f:98:4f:6d:d6:c3:48:39:53:dc:f9:47:ce:f8:cf:04:10: 66:3a:19:ab:36:cf:29:6c:21:54:bc:0a:89:e9:42:3b:43:b1: 9f:3b:75:da:45:7b:51:43:4f:a7:e2:e6:e9:d3:27:7c:6f:76: 09:e7:22:41:73:6d:fb:f0:47:ed:4e:7b:0c:62:be:b8:8a:c8: cb:8c:cb:23:20:f0:6f:f9:84:c7:f5:a7:e7:26:be:26:0f:8b: fc:2a:4e:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7gwhwLO76yfA2FQEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDgxODEzMDAxMloXDTI2MTExNjE0MDAxMlowLzEtMCsGA1UEAxMk YjE0MzEyYTAtNzMzOS00YTVhLTk5YjItZGRiOWUyYzczNGI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHw2CTEVG0bdn28G88VphN4QldGt6tMyQmIo P/91S8JW3x4KHWMq6zcrXRz53UioQoY56P1PKXApAAngmYvnXxiILZeq8RNgfxcb awaurtgcoTkpdW76zhNvNp8MZC+t8lpFwyE7vRduPly/xtgOXnAOVyDlisg4i9yR 5e+X9UsItBcDw6HZ6FO/TWXa1dZnH5scNooMZqCMoQSHqtwYyHBUS1gUmP+gysG5 RQXBz4nwNCDgPW+nF9mz+uMGhL9xWD244d4Ds62QQ1I6uH8mekZYJwMaJDjK4Jdl i/4IAjsJXD8c42rmt4D/JLJs5UL2L7mRe9Q9qk8XXQjo2htiJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOC3j1x6USrs1AJWjvP1m9ldOd10MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMWQyOWZkMmYtZjk5Ni0z Mjg2LThiYzQtMDdiYzZiNTIyNDhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBIgPWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKCcaW0+I+Be7rQZywb/H5wOF7pfFQQGXdruk4MnGFFFdEnRPVDXKa6l b7BR3tUrMceU5I3L1sB/KZQtdDj3in89mAUgCGUfLPZe5jBkzNoGrSoikgvbdnpE wFbE4bUr6JH8BSfAdGMrXHKMLbqhOOlUT2r1jVj1uJn0vkoIU+ay7gWFAqEtn7hT D14Gph9ewOGuiOaHJzv/x5OKoO5QctJvb4efmE9t1sNIOVPc+UfO+M8EEGY6Gas2 zylsIVS8ConpQjtDsZ87ddpFe1FDT6fi5unTJ3xvdgnnIkFzbfvwR+1OewxivriK yMuMyyMg8G/5hMf1p+cmviYPi/wqTo4= -----END CERTIFICATE-----Generated at Mon Sep 28 10:35:38 2026 by rpki-client