$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2855a8ef-bca0-3a5e-9056-8d2563dfb91e.roa File: 2855a8ef-bca0-3a5e-9056-8d2563dfb91e.roa (raw, json) Hash identifier: sCpyR9TATvjKjONBO+lOt7aik0V0Jru2oOo7H0CsxsA= Subject key identifier: EE:59:7C:F0:1A:64:CE:A5:21:8B:A4:FB:FE:B8:C3:14:10:62:47:81 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DB5D7A8C6276A20A46600 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2855a8ef-bca0-3a5e-9056-8d2563dfb91e.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.74.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:b5:d7:a8:c6:27:6a:20:a4:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=907bd19f-8424-4f27-8a55-3654bbb202d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:30:59:c7:25:d4:06:b5:25:36:b9:c5:66:6f: d2:3a:67:56:1e:de:8f:f7:2b:ec:4d:f4:8d:87:81: f7:92:d4:45:87:99:17:6f:85:83:82:9f:2d:85:f5: 36:fb:77:38:44:39:f4:4a:65:80:76:fd:23:9d:09: 89:18:56:1e:f8:c7:ae:a1:cb:b9:cc:e8:20:50:55: 23:37:54:14:3e:80:de:f7:c5:93:23:10:c1:16:d2: b0:89:fb:1c:a4:1e:ff:ae:49:4c:b7:5d:5f:4b:a4: 66:eb:7e:f9:52:9a:78:cd:c3:1f:f8:d4:8c:19:8a: 0e:a0:81:58:f4:3d:a3:31:79:16:13:a0:de:a8:41: 4f:b8:3c:d0:db:06:30:78:56:8f:fc:2b:2d:45:3d: cd:14:11:d8:91:d2:5b:68:cc:59:30:76:30:06:3b: f9:8a:6f:3b:c3:79:36:76:ae:6b:2e:b6:73:15:71: 41:e4:e3:5e:62:ff:f5:84:17:78:9f:a0:b7:ed:b7: f0:6f:a1:7c:a9:9f:51:60:80:6b:8f:69:8d:5a:5a: e7:66:1f:6f:a3:3e:88:a1:1b:a5:16:1e:19:a1:3f: 43:3e:78:f2:2d:33:0e:af:bd:0f:ec:1c:51:7e:87: f8:85:da:22:66:11:6c:03:31:71:51:dc:05:71:6e: ff:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:59:7C:F0:1A:64:CE:A5:21:8B:A4:FB:FE:B8:C3:14:10:62:47:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2855a8ef-bca0-3a5e-9056-8d2563dfb91e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.74.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:f2:14:69:81:6a:62:9a:0f:de:9e:68:20:a1:78:7b:0d:e2: 63:5a:71:a3:13:12:94:d3:e6:eb:e8:f4:3c:77:8d:0a:f7:e3: aa:19:38:07:d9:d8:19:93:8e:08:58:ac:fc:c2:66:96:a9:74: 35:5f:70:f1:ae:9d:37:67:18:08:8d:ab:88:d6:47:bd:aa:eb: 86:3b:b8:83:fa:53:43:8c:e7:bd:51:96:ed:bf:b7:99:9e:d2: 70:4a:2c:bd:99:f0:b1:e8:b0:ba:14:9f:df:c6:98:97:40:9e: 0a:fd:35:fd:6a:59:b4:77:d9:91:67:64:d0:9c:ef:8f:ea:c7: 71:82:64:e3:a1:6e:4e:b4:65:0f:fc:d8:c8:09:a0:af:68:c0: a6:a7:e2:36:41:db:b5:5f:73:21:9c:4c:82:a1:32:d7:5e:a2: e1:5c:53:91:84:f6:6c:5d:70:20:a9:6c:26:2b:22:85:74:e5: b0:40:19:53:4d:6b:2d:25:9b:f1:f0:2a:38:65:4a:52:25:6d: fd:36:89:bd:f4:b6:62:cb:8d:5a:78:e6:ca:73:24:3b:83:fa: a2:b7:2d:00:7b:3e:b3:2c:18:b5:d6:51:57:a2:75:f7:b7:0d: 1e:96:d0:97:0a:16:7e:47:e2:8c:5a:35:e3:06:39:cb:68:8e: 8a:f0:08:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPbXXqMYnaiCkZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk OTA3YmQxOWYtODQyNC00ZjI3LThhNTUtMzY1NGJiYjIwMmQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDBZxyXUBrUlNrnFZm/SOmdWHt6P9yvsTfSN h4H3ktRFh5kXb4WDgp8thfU2+3c4RDn0SmWAdv0jnQmJGFYe+Meuocu5zOggUFUj N1QUPoDe98WTIxDBFtKwifscpB7/rklMt11fS6Rm6375Upp4zcMf+NSMGYoOoIFY 9D2jMXkWE6DeqEFPuDzQ2wYweFaP/CstRT3NFBHYkdJbaMxZMHYwBjv5im87w3k2 dq5rLrZzFXFB5ONeYv/1hBd4n6C37bfwb6F8qZ9RYIBrj2mNWlrnZh9voz6IoRul Fh4ZoT9DPnjyLTMOr70P7BxRfof4hdoiZhFsAzFxUdwFcW7/lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO5ZfPAaZM6lIYuk+/64wxQQYkeBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjg1NWE4ZWYtYmNhMC0z YTVlLTkwNTYtOGQyNTYzZGZiOTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkoAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKHyFGmBamKaD96eaCCheHsN4mNacaMTEpTT5uvo9Dx3jQr346oZOAfZ 2BmTjghYrPzCZpapdDVfcPGunTdnGAiNq4jWR72q64Y7uIP6U0OM571Rlu2/t5me 0nBKLL2Z8LHosLoUn9/GmJdAngr9Nf1qWbR32ZFnZNCc74/qx3GCZOOhbk60ZQ/8 2MgJoK9owKan4jZB27VfcyGcTIKhMtdeouFcU5GE9mxdcCCpbCYrIoV05bBAGVNN ay0lm/HwKjhlSlIlbf02ib30tmLLjVp45spzJDuD+qK3LQB7PrMsGLXWUVeidfe3 DR6W0JcKFn5H4oxaNeMGOctojorwCPI= -----END CERTIFICATE-----Generated at Mon Sep 28 05:44:33 2026 by rpki-client