$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/668d5a3e-df97-3fd9-881f-29cee41e2d88.roa File: 668d5a3e-df97-3fd9-881f-29cee41e2d88.roa (raw, json) Hash identifier: CWJ61qc+A6Ffps9UUBTCJRjnqMLBRK6arpm7RN2R0RA= Subject key identifier: 77:A9:85:40:FB:01:FD:55:E3:EA:5C:73:89:EF:89:4C:68:59:4C:7B Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F49742AAD4ACC043783F5CC00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/668d5a3e-df97-3fd9-881f-29cee41e2d88.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 34.1.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:2a:ad:4a:cc:04:37:83:f5:cc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=601c0d17-f1af-436e-ac67-c093f4c40524 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:c2:09:b5:a7:e6:9a:59:e6:84:90:26:52:ab: ba:99:55:3c:b0:33:65:24:57:e5:52:a1:04:2b:3f: c7:e5:e3:96:2e:1d:67:a4:c0:2c:19:c1:75:e6:2f: d7:e2:ad:6a:ac:d3:39:ed:fd:bb:9f:5e:00:4d:cc: a6:ce:c2:bf:67:30:ae:c9:51:ea:a3:4d:bc:c1:10: 22:8d:aa:9b:96:aa:ff:19:a7:00:70:63:c0:68:69: 98:75:98:e9:09:ef:54:4c:29:50:67:d1:4e:75:ee: cc:ce:8e:dd:6e:c6:9d:f8:3e:32:38:9c:8c:82:f0: de:be:95:c0:ef:bc:b7:e9:d1:1a:37:23:f2:72:f2: da:ce:dd:39:6c:d3:fd:3e:03:35:83:58:75:37:bd: 56:d9:b2:83:26:a2:cc:54:f5:fb:0e:65:39:c4:b5: 05:b0:4a:83:aa:f8:d4:af:f5:c0:70:60:3f:80:d8: 7d:37:28:67:46:2c:80:86:de:4f:ef:cf:30:87:c3: 1c:39:48:57:e1:c7:8e:13:4a:a1:bc:fd:ea:7b:b6: 41:b8:29:8e:dc:c5:ec:41:40:c4:b0:ed:1a:4b:a4: 31:5c:ff:89:85:f5:92:30:d4:46:63:7e:53:4e:57: e3:e6:e7:fe:cc:6a:95:40:de:a4:92:8a:8c:ad:99: f2:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:A9:85:40:FB:01:FD:55:E3:EA:5C:73:89:EF:89:4C:68:59:4C:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/668d5a3e-df97-3fd9-881f-29cee41e2d88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.1.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:72:e0:95:71:46:07:e1:f0:cd:67:a3:18:1e:39:ea:35:9f: fc:b9:a5:3a:b9:5a:ec:60:ca:0f:fa:24:85:03:77:88:51:c7: 4d:8c:01:42:e4:2b:e6:73:f4:36:96:fa:bc:d8:fa:75:a1:54: 5d:d2:6f:88:9e:b5:80:9f:7b:7c:b7:ce:b4:8d:b0:22:12:b6: 0c:c7:8a:ff:72:ae:8f:92:ce:13:56:14:c8:38:14:77:71:c6: 28:98:a9:51:85:69:bb:da:85:95:a7:a8:ca:10:ba:93:c2:92: 00:23:02:8b:8d:db:fa:10:64:54:4a:ee:89:6a:94:fa:c2:85: e5:35:16:b3:cf:ae:47:01:62:e8:23:cc:1b:cf:85:3f:13:a5: d2:7c:7e:23:de:19:4a:6f:69:be:74:51:b7:0d:2b:0d:cf:27: d8:51:5e:72:de:dd:a6:bc:ca:d5:a8:33:32:a3:44:ae:9b:d2: 89:99:dc:2f:a1:0c:76:41:ea:a8:c6:58:a9:8d:0b:da:20:45: 36:b9:b3:9e:64:b4:12:94:cf:f4:b1:52:bb:85:57:43:df:b3: 62:e3:8f:95:24:f6:83:0a:2d:be:fd:e6:f5:9c:c2:3b:0c:c9: 7e:cc:f0:03:01:2a:e2:e9:05:0f:a0:a6:75:af:f5:95:cb:6f: ae:9c:92:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdCqtSswEN4P1zAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NjAxYzBkMTctZjFhZi00MzZlLWFjNjctYzA5M2Y0YzQwNTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgcIJtafmmlnmhJAmUqu6mVU8sDNlJFflUqEE Kz/H5eOWLh1npMAsGcF15i/X4q1qrNM57f27n14ATcymzsK/ZzCuyVHqo028wRAi jaqblqr/GacAcGPAaGmYdZjpCe9UTClQZ9FOde7Mzo7dbsad+D4yOJyMgvDevpXA 77y36dEaNyPycvLazt05bNP9PgM1g1h1N71W2bKDJqLMVPX7DmU5xLUFsEqDqvjU r/XAcGA/gNh9NyhnRiyAht5P788wh8McOUhX4ceOE0qhvP3qe7ZBuCmO3MXsQUDE sO0aS6QxXP+JhfWSMNRGY35TTlfj5uf+zGqVQN6kkoqMrZnyrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHephUD7Af1V4+pcc4nviUxoWUx7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNjY4ZDVhM2UtZGY5Ny0z ZmQ5LTg4MWYtMjljZWU0MWUyZDg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAIgFtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI1y4JVxRgfh8M1noxgeOeo1n/y5pTq5Wuxgyg/6JIUDd4hRx02MAULk K+Zz9DaW+rzY+nWhVF3Sb4ietYCfe3y3zrSNsCIStgzHiv9yro+SzhNWFMg4FHdx xiiYqVGFabvahZWnqMoQupPCkgAjAouN2/oQZFRK7olqlPrCheU1FrPPrkcBYugj zBvPhT8TpdJ8fiPeGUpvab50UbcNKw3PJ9hRXnLe3aa8ytWoMzKjRK6b0omZ3C+h DHZB6qjGWKmNC9ogRTa5s55ktBKUz/SxUruFV0Pfs2Ljj5Uk9oMKLb795vWcwjsM yX7M8AMBKuLpBQ+gpnWv9ZXLb66ckgY= -----END CERTIFICATE-----Generated at Sat Sep 26 12:17:35 2026 by rpki-client