$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3823196c-ffe1-3608-8f83-e03cbc3b766f.roa File: 3823196c-ffe1-3608-8f83-e03cbc3b766f.roa (raw, json) Hash identifier: 7vObCApbsXJoDVQMgtMeNGeRseHTnS2thQcdBPkJYGk= Subject key identifier: D4:BE:05:E3:4F:AD:70:8A:B6:42:9F:D9:61:3F:1E:C9:D7:59:97:C0 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F497CE85A044A9E59DCB25B00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3823196c-ffe1-3608-8f83-e03cbc3b766f.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 36040 IP address blocks: 34.104.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7c:e8:5a:04:4a:9e:59:dc:b2:5b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a2c9c1f2-1f22-4112-8a60-9d1af8677b12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:2b:2c:a4:7b:d5:73:a2:20:d9:9d:c4:07:9a: 7e:d0:4e:5d:ba:21:ae:e0:13:91:1c:1f:05:4e:59: 22:a5:e5:3e:a4:6f:28:31:ca:22:51:ae:97:2f:a6: 47:a3:99:25:8a:37:6a:9e:ba:2f:bc:a0:b1:47:9c: dd:c5:2f:88:41:09:55:df:e1:25:f7:8c:5f:95:a7: 59:de:c9:dd:a8:8d:38:7a:e0:37:aa:5f:b9:2f:4c: d7:68:2e:37:7f:00:3c:68:e8:61:4a:4c:12:cd:31: 04:12:66:7a:31:47:45:cf:82:cc:38:76:09:dc:7a: e6:1e:5b:2f:e8:7b:bf:b5:a0:60:db:a4:fa:b4:ee: 7d:48:a4:c4:7f:73:9a:6a:a5:2a:d8:4f:1c:be:e4: f3:74:24:21:18:42:15:a0:95:bb:a0:cd:bd:37:58: ee:0d:07:50:6f:c3:26:18:32:7a:4d:e6:e9:c4:74: c4:b1:ac:d1:b2:4e:33:4d:c2:d8:cd:d5:25:65:a1: 12:2c:b5:81:1f:c5:11:8e:9c:05:04:fd:13:a5:dd: 6e:78:84:8f:09:a4:68:af:0f:40:eb:c8:aa:1b:c3: f9:d9:48:06:41:52:b0:b1:4a:3b:0f:fe:cf:1a:c7: 27:7b:87:93:77:b7:73:29:b4:f5:87:08:70:81:9c: 57:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:BE:05:E3:4F:AD:70:8A:B6:42:9F:D9:61:3F:1E:C9:D7:59:97:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3823196c-ffe1-3608-8f83-e03cbc3b766f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.104.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:a5:c3:60:ea:fb:f1:88:0e:06:38:86:b6:f0:6f:61:af:73: a6:7f:a6:36:0e:7c:ab:49:48:7c:13:9d:3f:8b:4a:05:90:95: f1:43:68:4b:7a:f1:7d:7e:d6:25:39:3a:b5:33:dc:16:95:56: a9:74:b2:fb:b2:ed:38:54:45:b0:7c:a8:63:45:83:4a:83:e2: 57:27:4f:40:ad:c7:ea:a3:88:6c:51:97:7a:e1:a1:f0:c8:74: 16:a1:9c:5e:a5:12:38:a6:6b:ad:0b:5b:c4:ee:15:45:6f:fc: 8c:25:93:ae:29:63:18:4c:9e:c4:55:11:35:ec:be:b5:a1:e1: c8:0d:76:e1:cb:77:7f:f2:04:fa:6f:2c:f0:8f:51:ea:41:a4: 1c:db:e2:db:3e:9b:aa:52:b0:52:4c:ac:41:db:01:37:63:18: 22:59:db:56:33:bb:93:49:e0:29:74:66:5a:c1:4e:73:7a:6a: 9f:f6:d8:81:a3:e1:26:23:35:72:89:c0:55:65:15:f6:12:bf: 35:be:5b:a4:74:98:2e:a7:c6:b8:6e:0e:35:85:39:6d:83:a0: 31:1f:7a:d0:a9:75:f5:39:e7:56:fd:20:9e:82:15:62:32:02: 0f:8d:c2:8b:73:2b:88:f4:9e:47:bb:e4:ae:3c:67:a8:20:12: 06:9b:2c:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfOhaBEqeWdyyWwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YTJjOWMxZjItMWYyMi00MTEyLThhNjAtOWQxYWY4Njc3YjEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArysspHvVc6Ig2Z3EB5p+0E5duiGu4BORHB8F TlkipeU+pG8oMcoiUa6XL6ZHo5klijdqnrovvKCxR5zdxS+IQQlV3+El94xfladZ 3sndqI04euA3ql+5L0zXaC43fwA8aOhhSkwSzTEEEmZ6MUdFz4LMOHYJ3HrmHlsv 6Hu/taBg26T6tO59SKTEf3OaaqUq2E8cvuTzdCQhGEIVoJW7oM29N1juDQdQb8Mm GDJ6TebpxHTEsazRsk4zTcLYzdUlZaESLLWBH8URjpwFBP0Tpd1ueISPCaRorw9A 68iqG8P52UgGQVKwsUo7D/7PGscne4eTd7dzKbT1hwhwgZxXdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNS+BeNPrXCKtkKf2WE/HsnXWZfAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzgyMzE5NmMtZmZlMS0z NjA4LThmODMtZTAzY2JjM2I3NjZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAImgmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEqlw2Dq+/GIDgY4hrbwb2Gvc6Z/pjYOfKtJSHwTnT+LSgWQlfFDaEt6 8X1+1iU5OrUz3BaVVql0svuy7ThURbB8qGNFg0qD4lcnT0Ctx+qjiGxRl3rhofDI dBahnF6lEjima60LW8TuFUVv/Iwlk64pYxhMnsRVETXsvrWh4cgNduHLd3/yBPpv LPCPUepBpBzb4ts+m6pSsFJMrEHbATdjGCJZ21Yzu5NJ4Cl0ZlrBTnN6ap/22IGj 4SYjNXKJwFVlFfYSvzW+W6R0mC6nxrhuDjWFOW2DoDEfetCpdfU551b9IJ6CFWIy Ag+NwotzK4j0nke75K48Z6ggEgabLAs= -----END CERTIFICATE-----Generated at Sun Sep 27 05:58:30 2026 by rpki-client