$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3e23d70b-75f1-360d-af84-bd1568ad2fdc.roa File: 3e23d70b-75f1-360d-af84-bd1568ad2fdc.roa (raw, json) Hash identifier: lQzfjieum6JVLYk2ysh+130Jv9FUWZwaZi/sHj0f0xI= Subject key identifier: B3:EF:9E:8E:FD:91:6C:A5:C0:70:5A:27:3E:F4:0F:95:AE:2C:57:33 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DD2C9A084F86935AA4A20 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3e23d70b-75f1-360d-af84-bd1568ad2fdc.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.86.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:d2:c9:a0:84:f8:69:35:aa:4a:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=fbc21881-e4fd-4b4a-ba86-3c2ad3aa5fda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ad:d2:55:8a:a4:a1:01:30:fd:70:9a:89:23: 6d:f0:a2:b4:a4:50:8d:b8:61:4e:75:4b:23:41:de: a9:0e:06:83:e4:76:10:fd:d1:1a:d7:6a:2f:ea:f5: 7c:ba:03:3b:24:23:8e:ef:10:41:fd:42:15:4e:92: fa:1e:18:49:d5:8e:47:0b:79:a3:f8:4f:fe:e7:4e: 32:2f:90:96:56:ba:31:59:16:4e:5e:f6:f6:be:12: d0:6c:af:fe:82:1e:6f:fb:37:8c:be:46:dc:94:25: 6c:e0:e2:43:8a:f9:fd:81:9d:e7:62:95:e2:8d:8a: a5:af:9d:47:2c:aa:f4:33:d8:81:98:5c:74:d2:c6: 73:ee:68:a7:92:1b:bd:40:a8:23:36:57:e7:9e:f3: 5f:c0:7d:27:30:be:18:c7:6c:9b:01:5a:02:98:08: 9f:f1:4c:4d:5f:b1:ed:49:09:72:68:b0:69:fc:a7: 0a:6c:5f:ec:e5:11:6e:13:c6:d1:dd:31:fe:37:fb: 21:25:06:42:8b:18:01:42:16:1c:db:d4:15:62:7b: 23:77:8d:ff:9e:57:33:83:7b:97:96:4d:ff:50:ec: c7:41:23:79:45:73:db:4e:38:e1:ef:27:55:50:98: ca:16:e9:d7:b3:b7:2d:68:2e:c9:aa:d1:4f:c1:5f: ef:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:EF:9E:8E:FD:91:6C:A5:C0:70:5A:27:3E:F4:0F:95:AE:2C:57:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3e23d70b-75f1-360d-af84-bd1568ad2fdc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.86.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:ef:f9:91:b0:74:d5:5e:2c:22:1a:29:c1:f1:17:75:5b:7d: 52:86:d6:7b:5e:95:ec:62:b6:43:38:71:92:23:4b:56:f4:7c: 8c:cf:4e:da:86:ef:d4:ca:fb:9d:35:c0:3a:e4:e4:25:a0:fe: 02:11:20:15:33:51:6f:30:d4:82:02:f6:66:2a:48:28:05:da: 13:46:f5:26:af:6b:fd:87:25:1b:b0:20:75:72:9e:17:0d:bc: c6:f6:a6:ec:07:46:1d:f8:48:a5:0c:38:3f:81:03:d3:3e:22: 2b:83:2b:9f:b7:64:49:7c:c4:3d:c7:f1:9e:14:38:3d:0c:eb: 8f:4d:27:2a:5e:3f:a4:d7:d4:03:e4:0a:6d:b0:54:95:2b:ac: 75:d5:c2:dc:2b:5b:ec:98:83:f7:a8:b2:50:10:89:ac:ac:65: ec:ff:d3:0f:a6:c2:08:96:70:1d:e2:ca:c1:01:8d:be:f3:f2: 7b:a3:4d:aa:0b:1c:a8:6a:5e:b8:de:84:41:af:73:18:b3:62: f8:d3:d2:ec:e3:12:55:ca:18:08:63:9d:57:1d:d6:9a:52:fa: 4d:7a:e2:45:90:59:2c:1b:c5:67:42:3d:df:55:cd:03:ed:31: 27:4b:62:ce:04:23:15:36:6d:26:53:4b:67:c0:72:66:9d:7c: e7:9e:b5:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPdLJoIT4aTWqSiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk ZmJjMjE4ODEtZTRmZC00YjRhLWJhODYtM2MyYWQzYWE1ZmRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs63SVYqkoQEw/XCaiSNt8KK0pFCNuGFOdUsj Qd6pDgaD5HYQ/dEa12ov6vV8ugM7JCOO7xBB/UIVTpL6HhhJ1Y5HC3mj+E/+504y L5CWVroxWRZOXvb2vhLQbK/+gh5v+zeMvkbclCVs4OJDivn9gZ3nYpXijYqlr51H LKr0M9iBmFx00sZz7minkhu9QKgjNlfnnvNfwH0nML4Yx2ybAVoCmAif8UxNX7Ht SQlyaLBp/KcKbF/s5RFuE8bR3TH+N/shJQZCixgBQhYc29QVYnsjd43/nlczg3uX lk3/UOzHQSN5RXPbTjjh7ydVUJjKFunXs7ctaC7JqtFPwV/vBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLPvno79kWylwHBaJz70D5WuLFczMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvM2UyM2Q3MGItNzVmMS0z NjBkLWFmODQtYmQxNTY4YWQyZmRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlaQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG3v+ZGwdNVeLCIaKcHxF3VbfVKG1ntelexitkM4cZIjS1b0fIzPTtqG 79TK+501wDrk5CWg/gIRIBUzUW8w1IIC9mYqSCgF2hNG9Sava/2HJRuwIHVynhcN vMb2puwHRh34SKUMOD+BA9M+IiuDK5+3ZEl8xD3H8Z4UOD0M649NJypeP6TX1APk Cm2wVJUrrHXVwtwrW+yYg/eoslAQiaysZez/0w+mwgiWcB3iysEBjb7z8nujTaoL HKhqXrjehEGvcxizYvjT0uzjElXKGAhjnVcd1ppS+k164kWQWSwbxWdCPd9VzQPt MSdLYs4EIxU2bSZTS2fAcmadfOeetZk= -----END CERTIFICATE-----Generated at Mon Sep 28 21:40:57 2026 by rpki-client