$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1f440304-c238-3646-8ce9-88c22b8f07ef.roa File: 1f440304-c238-3646-8ce9-88c22b8f07ef.roa (raw, json) Hash identifier: ebuB5j7eRqeNht8yCw/T6CcMN6JOlkavK9UTX4q/oHU= Subject key identifier: 2A:A0:EC:55:8B:F2:4A:5B:D4:CA:08:24:3D:19:2D:43:84:C5:75:1F Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4972FA94D8A3CA28F3F4EF04 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1f440304-c238-3646-8ce9-88c22b8f07ef.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396982 IP address blocks: 34.2.86.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:fa:94:d8:a3:ca:28:f3:f4:ef:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=42234d33-a5b9-4c28-a37f-6a3f965528c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:a3:9c:cf:0f:81:74:7f:ec:3f:88:17:c2:14: 0f:88:b4:b2:0c:00:78:1b:97:45:21:ba:fa:00:ef: 9b:20:fd:4d:5f:28:4c:eb:e3:e0:92:b9:b6:38:d5: b9:0f:f0:69:d3:a5:6c:08:e7:a1:1c:7c:e2:74:27: 60:0d:12:1b:74:3d:07:60:b4:77:cf:af:40:5a:05: fb:b6:a0:03:a9:60:94:4a:ee:59:74:52:bc:fc:ab: 35:d1:0f:f0:9c:ef:5e:6b:68:60:85:01:7e:99:1f: 8c:71:2a:0e:be:17:b5:df:24:bc:d7:e9:36:b4:14: f9:90:b1:d8:85:85:bc:7c:64:50:18:71:37:bf:1e: 54:33:43:62:02:21:55:10:3d:a3:6e:eb:80:f1:38: a1:c8:76:74:ec:f5:76:38:28:96:80:0f:bb:ce:0b: 0b:d5:95:79:b8:82:09:65:78:96:79:24:a9:58:77: 96:1d:8e:7d:c9:8c:03:55:46:70:12:05:f4:aa:3f: 8c:15:56:85:b0:f4:fe:be:71:5a:64:cf:44:4e:b3: 33:78:b9:de:e1:bd:f7:04:23:85:d1:e8:f5:6b:1a: 2f:e3:00:0b:f9:8c:80:1b:20:5c:6d:7a:e9:83:26: ab:e9:0e:71:cf:b5:33:dd:39:b6:6c:fb:77:08:47: 44:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:A0:EC:55:8B:F2:4A:5B:D4:CA:08:24:3D:19:2D:43:84:C5:75:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1f440304-c238-3646-8ce9-88c22b8f07ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.2.86.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:a2:77:2e:7f:d5:a5:d6:c6:e1:c8:20:bd:17:ae:c6:47:13: e3:30:09:1b:a0:bb:6f:f3:86:85:0e:d8:7a:14:31:4a:6b:0a: 3c:c8:13:7f:6c:65:34:83:6a:aa:19:ce:43:61:38:a1:b7:02: bf:95:0b:80:35:9b:f9:4d:43:2c:24:5a:7d:95:13:d9:9f:cb: 3c:90:d1:78:d4:dc:b7:2a:d9:94:58:63:cc:37:f8:2c:2e:28: 87:69:f7:fe:30:4f:77:d9:18:ca:62:f1:bb:39:f1:14:cc:da: b3:9c:b9:6c:39:fa:af:04:ab:1d:57:cf:eb:40:ef:aa:16:78: 97:d1:40:92:af:4a:3e:5b:d4:c0:00:6e:7b:d5:3f:11:07:5f: 6a:d4:f4:e1:99:87:07:79:06:0d:d6:5c:e1:62:52:ee:ef:51: 40:1e:9b:6f:ed:bd:77:1c:5f:5f:6d:26:22:5b:32:f6:ac:d4: f5:52:30:a8:b5:01:c4:36:9b:12:f2:09:b7:cc:36:79:69:cd: 43:74:63:fd:55:1c:df:a9:1f:95:ce:b7:03:f4:83:ad:b8:b1: 83:20:8b:9a:19:01:4c:98:94:45:a8:70:d0:f0:8d:74:12:dd: ca:2d:da:84:14:14:b2:ab:51:06:a2:e2:60:da:3f:c5:b5:11: d5:f0:bd:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JcvqU2KPKKPP07wQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NDIyMzRkMzMtYTViOS00YzI4LWEzN2YtNmEzZjk2NTUyOGM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlaOczw+BdH/sP4gXwhQPiLSyDAB4G5dFIbr6 AO+bIP1NXyhM6+Pgkrm2ONW5D/Bp06VsCOehHHzidCdgDRIbdD0HYLR3z69AWgX7 tqADqWCUSu5ZdFK8/Ks10Q/wnO9ea2hghQF+mR+McSoOvhe13yS81+k2tBT5kLHY hYW8fGRQGHE3vx5UM0NiAiFVED2jbuuA8TihyHZ07PV2OCiWgA+7zgsL1ZV5uIIJ ZXiWeSSpWHeWHY59yYwDVUZwEgX0qj+MFVaFsPT+vnFaZM9ETrMzeLne4b33BCOF 0ej1axov4wAL+YyAGyBcbXrpgyar6Q5xz7Uz3Tm2bPt3CEdE2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCqg7FWL8kpb1MoIJD0ZLUOExXUfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMWY0NDAzMDQtYzIzOC0z NjQ2LThjZTktODhjMjJiOGYwN2VmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBIgJWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJmidy5/1aXWxuHIIL0XrsZHE+MwCRugu2/zhoUO2HoUMUprCjzIE39s ZTSDaqoZzkNhOKG3Ar+VC4A1m/lNQywkWn2VE9mfyzyQ0XjU3Lcq2ZRYY8w3+Cwu KIdp9/4wT3fZGMpi8bs58RTM2rOcuWw5+q8Eqx1Xz+tA76oWeJfRQJKvSj5b1MAA bnvVPxEHX2rU9OGZhwd5Bg3WXOFiUu7vUUAem2/tvXccX19tJiJbMvas1PVSMKi1 AcQ2mxLyCbfMNnlpzUN0Y/1VHN+pH5XOtwP0g624sYMgi5oZAUyYlEWocNDwjXQS 3cot2oQUFLKrUQai4mDaP8W1EdXwvSg= -----END CERTIFICATE-----Generated at Sun Oct 11 10:35:42 2026 by rpki-client