$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/834556e6-e518-3dbb-9a98-83d3ac747600.roa File: 834556e6-e518-3dbb-9a98-83d3ac747600.roa (raw, json) Hash identifier: yFWdbLfaWQkIpMz5mGFQSH0e9Aj8t9gIWxEyuHo+hsY= Subject key identifier: AC:97:8C:30:4C:A1:3D:F0:EA:18:1D:AD:DC:30:80:E4:6A:A7:B5:09 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F498A1238B189A21DB34EBC00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/834556e6-e518-3dbb-9a98-83d3ac747600.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396982 IP address blocks: 34.191.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8a:12:38:b1:89:a2:1d:b3:4e:bc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=7ffe6d7d-d681-44a9-b066-808edb0cf71f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:80:2f:09:7e:3a:19:15:c7:64:75:b4:2f:80: 53:28:b2:f3:0f:dd:23:c3:3d:a2:4a:5e:e5:8a:97: cb:99:7a:92:56:b6:ba:e6:48:5c:d4:29:d0:42:72: 1d:83:8d:85:8a:2c:57:d1:fd:3e:82:ed:d2:ba:2d: a1:76:ec:c2:9e:60:ca:1c:9d:11:84:3c:f7:d1:7c: a9:9b:a2:a8:75:cc:64:bb:92:2b:b3:d4:cf:db:3e: 16:55:6f:ef:6c:e2:f8:7e:d7:30:c4:81:d9:61:2f: eb:38:89:a0:18:11:bf:e6:d7:f4:79:b4:1e:9e:e3: 9f:ed:d1:4b:d7:34:85:6a:b5:30:0e:74:66:ae:ab: c2:6e:cd:37:af:36:8e:44:23:5f:5c:32:87:bf:4d: c3:bd:b5:43:95:02:c1:91:65:e8:5e:ef:78:96:c3: 78:79:ef:8f:6d:a6:48:af:03:71:90:01:96:b4:3f: 33:13:35:a1:d0:90:d5:f2:b0:91:d7:1b:b2:88:ce: 9d:b7:b8:ec:a1:6d:60:07:3b:ed:b5:8f:16:a8:48: ab:cd:79:56:08:c7:45:21:65:69:b5:62:31:a8:93: bd:f4:88:8b:be:c9:4f:b9:c8:d8:0c:ce:28:0b:5e: 5c:e8:d6:3e:9f:bf:05:14:c9:c8:19:f6:44:7c:f2: f6:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:97:8C:30:4C:A1:3D:F0:EA:18:1D:AD:DC:30:80:E4:6A:A7:B5:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/834556e6-e518-3dbb-9a98-83d3ac747600.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.191.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:cf:06:ec:e4:c7:17:5a:28:82:68:87:f5:e3:67:4b:cf:4c: 7b:52:9b:ba:b7:54:b8:f2:b0:ce:36:bb:7f:84:c3:bb:ff:14: 9a:26:24:a4:e0:1e:ed:c4:62:47:31:e1:8c:25:e4:08:bb:16: 5b:2b:61:04:73:ff:28:44:1e:c9:c4:ba:d1:92:82:05:75:a7: a8:88:12:87:e3:93:21:48:70:7e:da:e0:50:78:a1:2a:7d:a9: 7f:a7:51:99:8c:4f:b7:f4:74:4c:dd:fb:b1:83:29:e1:b8:25: a8:16:90:92:99:b1:69:3c:48:73:d0:81:f6:f2:15:10:d1:7d: c1:cd:a6:fb:b8:ae:ff:f6:b7:14:d8:09:90:e2:26:da:cc:1c: fc:17:77:b9:10:69:3c:15:d2:42:57:52:52:82:e1:f4:03:9c: be:de:ec:44:7e:e4:c5:ee:56:98:09:39:96:79:0e:0c:d2:20: 72:9f:89:27:e0:36:85:75:dd:5d:54:5e:fe:ae:fe:72:23:e5: 8d:0a:7b:42:14:ae:11:9a:f9:39:cb:c8:c7:80:ad:45:2b:94: b3:9f:df:1f:7f:68:a5:0f:01:37:8a:ac:52:62:be:cb:bb:23: 35:f5:86:43:c0:cb:8d:7f:7b:9b:ad:b1:60:1a:0a:4c:ca:e0: 2b:d0:43:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JihI4sYmiHbNOvAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk N2ZmZTZkN2QtZDY4MS00NGE5LWIwNjYtODA4ZWRiMGNmNzFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4AvCX46GRXHZHW0L4BTKLLzD90jwz2iSl7l ipfLmXqSVra65khc1CnQQnIdg42FiixX0f0+gu3Sui2hduzCnmDKHJ0RhDz30Xyp m6Kodcxku5Irs9TP2z4WVW/vbOL4ftcwxIHZYS/rOImgGBG/5tf0ebQenuOf7dFL 1zSFarUwDnRmrqvCbs03rzaORCNfXDKHv03DvbVDlQLBkWXoXu94lsN4ee+PbaZI rwNxkAGWtD8zEzWh0JDV8rCR1xuyiM6dt7jsoW1gBzvttY8WqEirzXlWCMdFIWVp tWIxqJO99IiLvslPucjYDM4oC15c6NY+n78FFMnIGfZEfPL2pQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKyXjDBMoT3w6hgdrdwwgORqp7UJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvODM0NTU2ZTYtZTUxOC0z ZGJiLTlhOTgtODNkM2FjNzQ3NjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDIr9IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHbPBuzkxxdaKIJoh/XjZ0vPTHtSm7q3VLjysM42u3+Ew7v/FJomJKTg Hu3EYkcx4Ywl5Ai7FlsrYQRz/yhEHsnEutGSggV1p6iIEofjkyFIcH7a4FB4oSp9 qX+nUZmMT7f0dEzd+7GDKeG4JagWkJKZsWk8SHPQgfbyFRDRfcHNpvu4rv/2txTY CZDiJtrMHPwXd7kQaTwV0kJXUlKC4fQDnL7e7ER+5MXuVpgJOZZ5DgzSIHKfiSfg NoV13V1UXv6u/nIj5Y0Ke0IUrhGa+TnLyMeArUUrlLOf3x9/aKUPATeKrFJivsu7 IzX1hkPAy41/e5utsWAaCkzK4CvQQ94= -----END CERTIFICATE-----Generated at Sun Oct 11 07:07:52 2026 by rpki-client