$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/405fcc96-c1d5-329e-b5fc-eb174f26c299.roa File: 405fcc96-c1d5-329e-b5fc-eb174f26c299.roa (raw, json) Hash identifier: eQk7FCHlr+W/wVUT20plWACVEZP6wtOmGDSdUEqrr3E= Subject key identifier: 43:EB:8F:ED:8C:0B:69:9E:F2:83:72:67:F9:84:05:E8:66:A3:7D:BE Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4987B7716C8DD8AACB8EDBE0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/405fcc96-c1d5-329e-b5fc-eb174f26c299.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396982 IP address blocks: 34.191.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:b7:71:6c:8d:d8:aa:cb:8e:db:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=3dea7a46-7ace-4937-b47e-9a0aec946a37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:24:9a:2b:79:3f:4d:89:99:9f:75:9a:c9:8a: 68:47:3f:37:34:a9:4f:6b:9f:38:ef:6f:f6:76:c7: 21:0b:20:8b:d8:13:8a:0d:fa:aa:6a:9d:52:1b:97: c1:2e:b2:bc:0a:d9:08:e7:d7:70:05:f7:8a:3b:5f: e4:6b:d7:56:e3:da:db:35:53:a3:55:82:aa:70:a4: 34:55:52:81:72:67:c6:4d:a5:cb:78:07:c6:d3:0d: ad:39:94:79:5e:9b:03:0f:12:87:43:68:4d:5d:ff: c3:81:9e:a2:a6:f2:e7:f6:0a:71:78:a4:d2:32:67: a0:94:59:77:bc:97:c9:2c:46:b4:db:d7:a3:fd:c4: 3a:88:b3:c5:5b:4f:09:ab:66:08:fa:50:03:8c:ec: ca:40:91:10:4a:9d:a9:f4:4b:40:42:ba:92:7e:b1: 44:31:50:f8:6b:94:93:3d:aa:36:91:a4:ff:7c:4e: 90:17:80:7b:2c:01:0b:89:b7:5d:43:d5:c1:8c:cd: 3a:4f:b7:c3:db:9d:fe:ec:dc:42:05:5c:50:e2:40: a0:3c:fa:7c:fd:ec:60:f7:0f:e2:74:10:e1:c1:ed: a4:0e:f5:c5:e9:ca:b1:21:fd:4d:5f:3a:38:0b:f5: 17:90:e1:d6:0e:bc:a0:2b:19:1a:fc:a4:1a:60:ff: 30:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:EB:8F:ED:8C:0B:69:9E:F2:83:72:67:F9:84:05:E8:66:A3:7D:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/405fcc96-c1d5-329e-b5fc-eb174f26c299.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.191.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:31:5e:f3:63:20:86:e8:8b:b2:4d:86:30:35:c9:17:f9:44: 33:13:8e:93:a1:0f:f4:a6:11:5e:02:96:8e:b7:08:28:47:6d: d6:81:81:d9:26:21:53:11:23:07:09:a3:a2:94:e7:2f:cf:4a: 34:3a:f1:f1:05:fb:d7:e6:96:29:dc:46:8b:c4:f4:bb:2b:20: 2f:05:55:0f:d2:51:8a:f4:b9:a3:3a:d0:16:d6:da:64:89:c3: 81:44:ef:11:6d:5d:04:b0:29:d3:9b:63:69:38:63:3d:9c:dd: 34:29:53:e7:2b:e1:e1:9a:4b:60:a4:d6:77:1a:f4:5a:9a:0c: 5f:6d:00:68:45:81:5b:7a:99:3b:53:e8:72:08:7a:21:0c:7a: 96:54:08:bb:00:30:60:a0:8f:82:a7:5a:17:0d:2b:a6:a5:89: 2a:52:de:69:eb:60:fc:04:75:33:58:a0:71:36:3a:65:73:a3: fd:af:0a:0e:72:a1:93:53:0d:53:dd:4a:8a:bb:28:40:41:79: d4:e2:ce:06:e0:85:18:71:88:ff:e3:4e:42:96:6f:a0:54:40: ab:94:69:14:95:c6:41:8e:75:1b:8b:64:dd:52:2a:00:85:aa: 75:a2:68:03:c0:dc:ef:b0:18:e5:61:8b:ac:cf:d3:6d:49:a5: ab:a3:1e:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jh7dxbI3YqsuO2+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk M2RlYTdhNDYtN2FjZS00OTM3LWI0N2UtOWEwYWVjOTQ2YTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnySaK3k/TYmZn3WayYpoRz83NKlPa58472/2 dschCyCL2BOKDfqqap1SG5fBLrK8CtkI59dwBfeKO1/ka9dW49rbNVOjVYKqcKQ0 VVKBcmfGTaXLeAfG0w2tOZR5XpsDDxKHQ2hNXf/DgZ6ipvLn9gpxeKTSMmeglFl3 vJfJLEa029ej/cQ6iLPFW08Jq2YI+lADjOzKQJEQSp2p9EtAQrqSfrFEMVD4a5ST Pao2kaT/fE6QF4B7LAELibddQ9XBjM06T7fD253+7NxCBVxQ4kCgPPp8/exg9w/i dBDhwe2kDvXF6cqxIf1NXzo4C/UXkOHWDrygKxka/KQaYP8wuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEPrj+2MC2me8oNyZ/mEBehmo32+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNDA1ZmNjOTYtYzFkNS0z MjllLWI1ZmMtZWIxNzRmMjZjMjk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDIr9gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGIxXvNjIIboi7JNhjA1yRf5RDMTjpOhD/SmEV4Clo63CChHbdaBgdkm IVMRIwcJo6KU5y/PSjQ68fEF+9fmlincRovE9LsrIC8FVQ/SUYr0uaM60BbW2mSJ w4FE7xFtXQSwKdObY2k4Yz2c3TQpU+cr4eGaS2Ck1nca9FqaDF9tAGhFgVt6mTtT 6HIIeiEMepZUCLsAMGCgj4KnWhcNK6aliSpS3mnrYPwEdTNYoHE2OmVzo/2vCg5y oZNTDVPdSoq7KEBBedTizgbghRhxiP/jTkKWb6BUQKuUaRSVxkGOdRuLZN1SKgCF qnWiaAPA3O+wGOVhi6zP021JpaujHtM= -----END CERTIFICATE-----Generated at Sun Oct 4 02:23:37 2026 by rpki-client