$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3fb55c58-0b19-35cf-a572-501263f0b63e.roa File: 3fb55c58-0b19-35cf-a572-501263f0b63e.roa (raw, json) Hash identifier: j2Mlldsucfpbx31vDT+05ZFLmDBY89LRWZyLUvOlf60= Subject key identifier: 62:26:8B:70:FA:84:AF:20:F5:4E:7A:28:A9:A4:9A:AA:D1:9F:A7:E3 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4972C4496A98BF01E2FEA180 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3fb55c58-0b19-35cf-a572-501263f0b63e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396982 IP address blocks: 34.4.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:c4:49:6a:98:bf:01:e2:fe:a1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=842d7664-ecad-4511-ae1f-5e4fc7a0ba43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:70:d2:39:bf:e5:60:80:3f:82:16:bc:08:d1: a5:e2:b6:03:b7:13:76:9a:49:3d:90:0a:43:02:d4: 05:02:30:96:2d:fd:ba:ef:99:9c:85:26:7d:78:66: 45:fc:d3:0b:be:34:ca:07:be:29:8f:cd:49:8a:53: c7:3f:8e:33:63:14:fd:56:a5:1b:d6:6f:d2:53:6a: 8c:8b:c4:78:81:6d:38:88:be:15:5f:b8:0a:6e:a0: b7:13:dd:ae:82:75:5f:77:86:96:a7:20:25:45:0f: 01:fb:94:59:a4:ef:f1:ef:b6:3f:b6:9f:e0:52:68: 9c:e1:89:49:da:a6:34:a9:5d:47:f7:9b:e9:f4:55: 6b:18:04:86:6d:ac:0c:9e:3a:84:8d:11:9b:fd:b1: 6c:f7:74:d8:fa:fd:1a:e6:ea:d6:46:80:3f:d0:a1: ad:8d:5b:e2:52:92:c0:09:4b:c2:cc:3e:1f:ff:8b: 3d:7a:18:f6:3c:18:94:de:74:fc:da:c2:8d:c3:63: a2:b8:14:e6:18:12:39:0e:7f:2e:5d:b1:30:99:a3: 2a:54:ca:a9:93:d2:39:25:51:fd:25:bf:93:bb:e8: 68:34:10:d9:2a:0d:15:d2:cf:7c:fc:63:84:69:e1: bd:55:b2:06:2a:6b:98:f3:9b:ea:f1:c9:aa:74:54: 6d:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:26:8B:70:FA:84:AF:20:F5:4E:7A:28:A9:A4:9A:AA:D1:9F:A7:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3fb55c58-0b19-35cf-a572-501263f0b63e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.4.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:4f:62:ff:41:c0:b0:ca:80:59:ec:26:e2:64:7d:d8:83:d3: ee:c8:25:80:06:5b:e7:d5:50:ad:96:98:16:60:76:3f:6f:09: 68:48:4d:41:e2:a0:65:58:93:27:6e:f6:13:e4:21:6f:0e:67: db:f7:c2:e9:a8:cc:e2:6b:c2:17:08:4d:11:1a:c6:de:bd:a8: e8:69:5d:4d:f7:27:cd:84:4e:d0:0f:a8:ff:b5:e1:f5:ac:86: 62:8a:3d:86:0a:98:39:c0:6d:65:f2:ab:eb:78:84:64:b2:ec: 32:c1:a6:a4:51:28:6f:38:f4:bc:7e:97:f9:56:41:8e:24:00: 71:04:e2:9e:68:eb:9c:08:a2:b6:17:7e:ca:c6:83:9d:78:34: c7:2f:61:3d:4d:d0:cc:62:76:f5:f4:8d:5d:c3:32:4b:32:17: 67:ca:9c:42:f5:00:4a:03:d0:97:04:d7:5d:72:eb:d8:d8:5b: 26:7c:94:73:95:fd:42:6e:f7:3a:ef:f5:f1:21:b7:d7:08:1d: cd:d6:85:69:f8:52:dc:ca:fa:f0:f2:26:78:b2:bf:b7:6b:29: a9:ab:cd:34:26:c3:79:fc:96:33:6d:11:66:dd:8c:21:03:61: 17:6e:72:aa:34:ba:b5:0f:f4:68:23:0d:97:f5:58:14:e5:0b: 06:32:77:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JcsRJapi/AeL+oYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ODQyZDc2NjQtZWNhZC00NTExLWFlMWYtNWU0ZmM3YTBiYTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2XDSOb/lYIA/gha8CNGl4rYDtxN2mkk9kApD AtQFAjCWLf2675mchSZ9eGZF/NMLvjTKB74pj81JilPHP44zYxT9VqUb1m/SU2qM i8R4gW04iL4VX7gKbqC3E92ugnVfd4aWpyAlRQ8B+5RZpO/x77Y/tp/gUmic4YlJ 2qY0qV1H95vp9FVrGASGbawMnjqEjRGb/bFs93TY+v0a5urWRoA/0KGtjVviUpLA CUvCzD4f/4s9ehj2PBiU3nT82sKNw2OiuBTmGBI5Dn8uXbEwmaMqVMqpk9I5JVH9 Jb+Tu+hoNBDZKg0V0s98/GOEaeG9VbIGKmuY85vq8cmqdFRtBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGImi3D6hK8g9U56KKmkmqrRn6fjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvM2ZiNTVjNTgtMGIxOS0z NWNmLWE1NzItNTAxMjYzZjBiNjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCIgQUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEtPYv9BwLDKgFnsJuJkfdiD0+7IJYAGW+fVUK2WmBZgdj9vCWhITUHi oGVYkydu9hPkIW8OZ9v3wumozOJrwhcITREaxt69qOhpXU33J82ETtAPqP+14fWs hmKKPYYKmDnAbWXyq+t4hGSy7DLBpqRRKG849Lx+l/lWQY4kAHEE4p5o65wIorYX fsrGg514NMcvYT1N0MxidvX0jV3DMksyF2fKnEL1AEoD0JcE111y69jYWyZ8lHOV /UJu9zrv9fEht9cIHc3WhWn4UtzK+vDyJniyv7drKamrzTQmw3n8ljNtEWbdjCED YRducqo0urUP9GgjDZf1WBTlCwYyd1o= -----END CERTIFICATE-----Generated at Mon Oct 12 15:25:35 2026 by rpki-client