$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3d8e4cdf-4a24-3785-a344-22418afeb608.roa File: 3d8e4cdf-4a24-3785-a344-22418afeb608.roa (raw, json) Hash identifier: s4OxpLFFjSZXSIs8djeAIS9skogQcl34z3U2TNLYvfA= Subject key identifier: 0C:C3:F9:B0:05:F1:BC:05:56:37:EA:7D:00:17:66:18:22:AB:C9:46 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F49899DBA9A177C3DC430CBC0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3d8e4cdf-4a24-3785-a344-22418afeb608.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396982 IP address blocks: 34.1.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:89:9d:ba:9a:17:7c:3d:c4:30:cb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=92195e06-7cab-4b86-be8f-0494fc6ba858 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:fc:81:64:29:45:a3:48:ab:11:82:0c:e7:62: b5:67:d2:5a:3d:42:ac:04:02:6b:e4:60:3a:91:fe: c5:11:b5:e1:68:ec:3e:9f:90:ce:b0:b7:86:0b:77: 33:66:94:3a:d7:5a:84:d1:5b:a8:ad:65:7e:39:5a: 68:02:bb:a1:97:f9:2a:f3:e3:5a:b2:d3:6b:6b:29: 73:da:0f:e5:1d:99:ca:cc:b9:9a:56:11:f1:37:01: 1f:61:72:97:42:0f:10:eb:35:51:55:2c:8c:08:15: a7:0a:06:28:f5:64:b6:c9:bc:fa:e6:56:d6:38:34: 07:c8:b6:1d:31:e7:63:ec:6d:06:19:01:14:c3:f2: df:d3:78:1a:33:e1:20:25:0f:e2:64:a7:6e:65:ea: ea:17:b5:71:f8:42:fc:fa:fa:49:bb:f8:43:1b:1d: b3:7b:bc:14:13:69:f6:46:46:88:93:38:37:6d:fc: 67:f2:c2:69:65:ed:63:3c:8d:c0:69:05:1d:5b:26: d5:70:fd:49:cd:9b:98:a2:a9:68:cd:12:e1:3b:5d: 1c:a9:a5:05:a6:cf:72:f3:80:de:7b:34:3d:14:05: 35:d5:c9:e0:cb:69:ea:44:bf:65:7d:ff:e4:d8:c3: af:7c:ac:f5:70:32:67:0a:2c:36:84:aa:48:e8:76: 22:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:C3:F9:B0:05:F1:BC:05:56:37:EA:7D:00:17:66:18:22:AB:C9:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3d8e4cdf-4a24-3785-a344-22418afeb608.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.1.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:f7:85:5b:11:2b:b9:4f:64:98:34:7e:6a:0b:35:7e:1b:83: 1c:8a:2a:9d:59:88:b3:d6:bd:0c:7f:cc:b7:36:6d:76:4a:97: c1:08:d8:c7:05:75:d0:e5:69:1b:35:2e:ce:a7:58:72:cf:81: f7:ef:f7:28:2b:28:76:f7:36:e7:a4:a3:6f:5a:fa:eb:40:da: 79:35:e2:07:0b:f3:e0:fd:7b:d3:2e:e1:5e:90:cc:80:86:23: 89:03:51:98:a4:1b:bc:99:4b:42:e1:ae:55:2d:a3:58:55:28: e3:6f:7f:1c:b6:17:8e:de:91:45:ec:88:b0:c5:84:17:d9:f3: 86:ba:89:09:2c:ea:27:02:95:07:2a:ab:db:18:ac:6f:15:1b: b8:60:33:bc:0c:57:7d:a9:87:d8:17:86:e2:93:5a:14:59:5d: 69:b9:d0:ae:8b:77:34:94:3a:09:0b:58:71:79:66:6b:ac:61: 5a:45:54:d8:c3:e4:36:ad:e3:13:5e:e0:5e:96:a6:2d:0e:c6: 99:9d:ba:d7:95:91:4e:6c:c3:3d:32:aa:ce:c2:d1:5f:db:9b: b6:cf:73:63:61:40:c2:8e:77:18:01:43:87:4a:a0:c8:a7:20: 54:fe:d1:73:5d:d1:c8:ce:f1:66:05:21:27:13:98:67:3a:9a: 79:90:d9:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiZ26mhd8PcQwy8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OTIxOTVlMDYtN2NhYi00Yjg2LWJlOGYtMDQ5NGZjNmJhODU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvyBZClFo0irEYIM52K1Z9JaPUKsBAJr5GA6 kf7FEbXhaOw+n5DOsLeGC3czZpQ611qE0VuorWV+OVpoAruhl/kq8+NastNraylz 2g/lHZnKzLmaVhHxNwEfYXKXQg8Q6zVRVSyMCBWnCgYo9WS2ybz65lbWODQHyLYd Medj7G0GGQEUw/Lf03gaM+EgJQ/iZKduZerqF7Vx+EL8+vpJu/hDGx2ze7wUE2n2 RkaIkzg3bfxn8sJpZe1jPI3AaQUdWybVcP1JzZuYoqlozRLhO10cqaUFps9y84De ezQ9FAU11cngy2nqRL9lff/k2MOvfKz1cDJnCiw2hKpI6HYirwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAzD+bAF8bwFVjfqfQAXZhgiq8lGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvM2Q4ZTRjZGYtNGEyNC0z Nzg1LWEzNDQtMjI0MThhZmViNjA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAIgFZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHD3hVsRK7lPZJg0fmoLNX4bgxyKKp1ZiLPWvQx/zLc2bXZKl8EI2McF ddDlaRs1Ls6nWHLPgffv9ygrKHb3Nueko29a+utA2nk14gcL8+D9e9Mu4V6QzICG I4kDUZikG7yZS0LhrlUto1hVKONvfxy2F47ekUXsiLDFhBfZ84a6iQks6icClQcq q9sYrG8VG7hgM7wMV32ph9gXhuKTWhRZXWm50K6LdzSUOgkLWHF5ZmusYVpFVNjD 5Dat4xNe4F6Wpi0OxpmduteVkU5swz0yqs7C0V/bm7bPc2NhQMKOdxgBQ4dKoMin IFT+0XNd0cjO8WYFIScTmGc6mnmQ2X4= -----END CERTIFICATE-----Generated at Mon Sep 28 06:51:07 2026 by rpki-client