$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2cab29e8-7037-3c42-86c5-a019d15e6983.roa File: 2cab29e8-7037-3c42-86c5-a019d15e6983.roa (raw, json) Hash identifier: BQdLHgNsluBx82Jw8eDuRlWhpkPgaoN1uMt3NXcBJCA= Subject key identifier: 35:D5:07:BD:BC:D4:BD:54:BA:FF:95:E9:56:29:76:AB:5B:6E:37:BA Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F5767FAF4A725596F1D01E000 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2cab29e8-7037-3c42-86c5-a019d15e6983.roa Signing time: Wed 30 Sep 2026 01:00:12 +0000 ROA not before: Wed 30 Sep 2026 01:00:12 +0000 ROA not after: Tue 29 Dec 2026 02:00:12 +0000 asID: 396982 IP address blocks: 34.136.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:57:67:fa:f4:a7:25:59:6f:1d:01:e0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 30 01:00:12 2026 GMT Not After : Dec 29 02:00:12 2026 GMT Subject: CN=cdda3e0b-1c22-48a8-be7a-891c9d9e82f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:95:7b:a6:d5:2b:e6:95:29:fe:40:3c:41:0c: 8b:59:ba:bf:e1:25:cf:bc:b3:71:2b:2c:eb:96:12: 1a:01:50:00:5d:86:02:fb:86:28:51:22:17:a8:62: 7e:54:9a:3b:83:7d:96:b4:e3:23:c4:28:96:e9:c2: 71:45:07:0b:b0:62:d0:95:16:ac:44:6f:78:6b:33: bd:93:7b:43:92:d8:4b:39:69:4c:ff:12:5a:b2:cd: db:46:5b:3a:91:b2:1c:2e:21:a3:ba:75:e8:0c:1e: 16:1e:60:1b:f5:f1:e0:9c:c4:02:6a:22:0c:bc:15: 87:2d:2e:f8:6c:5d:cd:df:b9:ba:3e:a0:e8:65:56: 57:12:1a:98:1f:52:55:4e:db:36:c1:56:3d:36:05: 1e:d3:0a:1d:26:17:fc:b5:c2:92:e3:17:a7:14:cf: 29:63:79:d2:3c:c0:cd:2a:58:72:15:ac:15:d5:a7: f6:77:27:3f:70:2e:10:aa:47:44:39:42:fc:22:77: 91:b3:b9:17:d4:67:0c:1c:e8:b2:47:57:1e:a3:08: d8:1e:54:51:a6:7e:b3:2c:ef:d7:43:26:a0:dc:47: cb:ac:4e:5a:50:4f:28:d2:d8:c2:7a:37:88:a3:d9: 06:69:ae:a2:04:a1:c4:45:0f:2a:97:d5:ad:94:1d: 53:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:D5:07:BD:BC:D4:BD:54:BA:FF:95:E9:56:29:76:AB:5B:6E:37:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2cab29e8-7037-3c42-86c5-a019d15e6983.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.136.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:54:ff:c1:21:05:8a:ba:21:03:08:6a:46:5d:fa:c9:94:13: 94:d6:69:78:09:b9:75:77:4c:06:43:94:a6:77:a6:15:de:1e: 9e:79:cb:2c:53:e9:9f:b6:33:b8:3a:3d:ae:ed:fc:1e:67:61: 1a:e4:00:86:a6:07:1e:92:78:76:64:9c:63:94:79:2a:40:4b: 5d:58:0e:f4:4b:4b:9d:4d:bb:ec:e7:ed:a1:90:0a:e9:6e:74: 85:41:2f:3f:d2:b0:2d:7b:a4:58:a6:0d:4c:41:5c:d8:5b:96: 76:da:12:13:a6:39:28:98:7b:a6:81:c3:57:17:0f:6b:c6:69: 92:0e:5b:ed:e7:a8:dc:93:ea:a7:e0:8c:2d:5c:88:5d:29:b0: c0:61:1e:f1:1d:87:91:26:84:a5:9a:f1:8e:2c:aa:2c:cd:ac: d7:86:cf:45:67:62:51:29:8e:81:1e:4a:18:3b:6d:55:b3:09: 43:0e:69:90:a0:8e:d1:c8:42:12:57:78:7c:8a:88:8d:31:36: 40:e5:b7:f8:f0:9d:42:06:ca:07:21:ec:f4:16:04:c7:0f:52: 4c:83:04:5e:40:04:ce:fb:3c:bf:b5:f2:b4:15:2c:df:44:fb: 39:7e:db:71:48:46:ee:27:93:a5:e8:7b:2a:16:d2:f3:ed:73: f7:f4:ef:74 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE9XZ/r0pyVZbx0B4AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkzMDAxMDAxMloXDTI2MTIyOTAyMDAxMlowLzEtMCsGA1UEAxMk Y2RkYTNlMGItMWMyMi00OGE4LWJlN2EtODkxYzlkOWU4MmYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZV7ptUr5pUp/kA8QQyLWbq/4SXPvLNxKyzr lhIaAVAAXYYC+4YoUSIXqGJ+VJo7g32WtOMjxCiW6cJxRQcLsGLQlRasRG94azO9 k3tDkthLOWlM/xJass3bRls6kbIcLiGjunXoDB4WHmAb9fHgnMQCaiIMvBWHLS74 bF3N37m6PqDoZVZXEhqYH1JVTts2wVY9NgUe0wodJhf8tcKS4xenFM8pY3nSPMDN KlhyFawV1af2dyc/cC4QqkdEOUL8IneRs7kX1GcMHOiyR1ceowjYHlRRpn6zLO/X Qyag3EfLrE5aUE8o0tjCejeIo9kGaa6iBKHERQ8ql9WtlB1T8QIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFDXVB7281L1Uuv+V6VYpdqtbbje6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMmNhYjI5ZTgtNzAzNy0z YzQyLTg2YzUtYTAxOWQxNWU2OTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAIogwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAMFT/wSEFirohAwhqRl36yZQTlNZpeAm5dXdMBkOUpnemFd4ennnLLFPp n7YzuDo9ru38HmdhGuQAhqYHHpJ4dmScY5R5KkBLXVgO9EtLnU277OftoZAK6W50 hUEvP9KwLXukWKYNTEFc2FuWdtoSE6Y5KJh7poHDVxcPa8Zpkg5b7eeo3JPqp+CM LVyIXSmwwGEe8R2HkSaEpZrxjiyqLM2s14bPRWdiUSmOgR5KGDttVbMJQw5pkKCO 0chCEld4fIqIjTE2QOW3+PCdQgbKByHs9BYExw9STIMEXkAEzvs8v7XytBUs30T7 OX7bcUhG7ieTpeh7KhbS8+1z9/TvdA== -----END CERTIFICATE-----Generated at Mon Oct 12 00:40:12 2026 by rpki-client