$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/899dddc1-837f-34cb-add0-565299e2f720.roa File: 899dddc1-837f-34cb-add0-565299e2f720.roa (raw, json) Hash identifier: 8iU/3oV8GGSjriFys+Gbd6mMWJxgJ0jTSJW/Xm49S7I= Subject key identifier: 42:26:DA:73:2D:D8:42:E6:65:F2:9E:6D:02:6C:51:9D:D3:E5:FA:8A Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F49736E330A12A734ED33F940 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/899dddc1-837f-34cb-add0-565299e2f720.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396982 IP address blocks: 34.0.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:6e:33:0a:12:a7:34:ed:33:f9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=0643183f-2771-41bb-9477-375b3d668241 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:d8:0f:31:a5:aa:29:ee:13:52:4b:52:59:49: 1f:54:df:98:88:0c:9c:1f:07:7b:7c:70:6c:97:65: e7:d2:06:5b:d2:bc:20:dd:19:ef:6c:25:f0:d9:83: 9e:8e:6c:17:47:f4:27:81:c5:ad:38:5d:ed:f1:a3: 2b:f6:26:cc:72:a4:f7:4d:1a:c0:46:45:5a:9d:a2: 26:5f:99:70:13:e8:96:08:e3:bc:fb:ae:78:40:0b: db:c1:c4:3e:71:7f:96:f7:3d:5d:88:22:29:7a:23: ec:26:a3:1f:b9:25:af:bd:21:51:66:f2:f5:ab:6e: c6:e6:a9:d9:20:31:a4:2a:1a:c2:1f:47:b6:24:59: 51:1d:0c:81:4c:46:fa:fd:f7:7e:ed:d3:a9:7c:fc: 24:ab:51:fa:29:de:a3:96:1c:2d:55:e7:e3:5a:74: a0:fa:9f:1a:85:fe:25:99:23:56:61:17:ae:e3:33: 31:97:42:d7:3b:80:e0:c5:97:5c:09:ad:d2:da:81: 1b:4f:2d:21:6e:a9:7d:e3:df:ec:a3:31:f7:00:dd: 3f:31:6f:5c:9c:c8:67:09:4d:ae:ba:5a:65:6a:5d: d7:da:65:8b:76:be:72:39:33:0c:30:7b:00:66:41: 26:a3:44:9b:a9:29:63:75:d7:d3:d6:7b:e6:9b:f6: f9:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:26:DA:73:2D:D8:42:E6:65:F2:9E:6D:02:6C:51:9D:D3:E5:FA:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/899dddc1-837f-34cb-add0-565299e2f720.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.0.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:d1:6e:62:53:ea:c7:50:82:73:94:c0:88:a1:c7:f7:bc:1b: 01:48:ce:fb:49:d8:8e:ee:c2:c3:4b:df:74:f6:96:3a:24:13: ca:71:4f:ef:8e:22:2a:22:12:33:b5:29:c3:c1:9d:f2:b3:b9: 6a:cc:95:16:27:b7:14:3f:d4:63:fc:8b:4f:ac:0b:50:40:8a: d9:89:08:0e:ce:45:ba:d9:5e:89:64:ae:ce:fa:20:31:1a:23: 41:6e:2e:63:60:0c:3a:33:9f:c0:71:68:73:b3:22:ae:43:31: 05:2f:3f:98:1d:34:b7:72:28:c5:72:c8:0c:6a:84:1d:c6:ab: 60:1b:c2:77:03:29:96:0d:eb:48:d9:e5:b7:22:f0:7b:19:a5: 63:76:e6:b5:70:2e:f7:ea:95:14:10:5c:6d:30:06:6f:0c:8a: 39:5c:34:9c:e5:b8:b7:18:b7:a6:40:84:47:2e:e2:c7:9b:46: b9:48:c0:ae:17:10:0b:03:1c:10:19:81:92:ca:5d:4b:1f:f0: 69:55:ae:bb:04:2c:66:4b:f5:7b:c5:b3:42:3d:52:d0:9c:8b: ca:4b:49:07:db:a2:4a:51:f4:57:7d:70:55:57:9e:ad:70:43: 19:91:8d:58:63:be:7e:bb:9a:54:28:63:25:a2:ca:40:7d:e1: d2:87:03:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc24zChKnNO0z+UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MDY0MzE4M2YtMjc3MS00MWJiLTk0NzctMzc1YjNkNjY4MjQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtgPMaWqKe4TUktSWUkfVN+YiAycHwd7fHBs l2Xn0gZb0rwg3RnvbCXw2YOejmwXR/QngcWtOF3t8aMr9ibMcqT3TRrARkVanaIm X5lwE+iWCOO8+654QAvbwcQ+cX+W9z1diCIpeiPsJqMfuSWvvSFRZvL1q27G5qnZ IDGkKhrCH0e2JFlRHQyBTEb6/fd+7dOpfPwkq1H6Kd6jlhwtVefjWnSg+p8ahf4l mSNWYReu4zMxl0LXO4DgxZdcCa3S2oEbTy0hbql949/sozH3AN0/MW9cnMhnCU2u ulplal3X2mWLdr5yOTMMMHsAZkEmo0SbqSljddfT1nvmm/b5qwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEIm2nMt2ELmZfKebQJsUZ3T5fqKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvODk5ZGRkYzEtODM3Zi0z NGNiLWFkZDAtNTY1Mjk5ZTJmNzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFIgBAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABDRbmJT6sdQgnOUwIihx/e8GwFIzvtJ2I7uwsNL33T2ljokE8pxT++O IioiEjO1KcPBnfKzuWrMlRYntxQ/1GP8i0+sC1BAitmJCA7ORbrZXolkrs76IDEa I0FuLmNgDDozn8BxaHOzIq5DMQUvP5gdNLdyKMVyyAxqhB3Gq2AbwncDKZYN60jZ 5bci8HsZpWN25rVwLvfqlRQQXG0wBm8MijlcNJzluLcYt6ZAhEcu4sebRrlIwK4X EAsDHBAZgZLKXUsf8GlVrrsELGZL9XvFs0I9UtCci8pLSQfbokpR9Fd9cFVXnq1w QxmRjVhjvn67mlQoYyWiykB94dKHA/Q= -----END CERTIFICATE-----Generated at Thu Oct 8 15:23:55 2026 by rpki-client