$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8ef5aa47-cd5d-36c1-abca-db0be9baa846.roa File: 8ef5aa47-cd5d-36c1-abca-db0be9baa846.roa (raw, json) Hash identifier: OwX4az9lZPKNcqjwNrP1e2inuSKQy0Z04HNPCzKn0ZI= Subject key identifier: 84:E8:3E:F0:1F:CB:E3:6C:F4:E5:E8:96:05:4E:08:01:0D:A2:9C:C5 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F498BB69F7B2785E8540D0A00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8ef5aa47-cd5d-36c1-abca-db0be9baa846.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396982 IP address blocks: 34.4.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:b6:9f:7b:27:85:e8:54:0d:0a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=3b0af0c0-3d82-49fc-9b38-ae10e92f2d10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c3:87:1c:82:64:4b:a9:51:7f:71:d6:cf:09: 90:c2:e1:61:01:07:0c:bf:63:76:65:6a:e8:f5:43: f6:6e:05:49:4a:2a:81:64:54:9b:e7:c3:06:96:12: 34:1a:95:be:29:ca:02:1c:ef:42:79:1e:74:4e:c7: f3:01:11:e0:80:10:fd:8d:75:25:95:69:f0:00:96: 81:bc:a9:c2:b5:e7:0d:d6:e6:3d:24:fe:8d:e5:a1: 65:a2:75:e4:8c:64:f8:82:e5:67:af:ef:f9:ff:a3: c4:0b:2f:5d:aa:aa:fd:97:fb:89:cb:4e:7b:ab:e3: 59:79:ad:e7:3d:b5:87:ce:9f:c8:95:fa:86:a4:8f: 7e:68:86:0f:ef:4d:5f:e1:47:33:16:23:55:f7:20: bb:9e:ba:78:08:b0:23:84:bf:64:3d:15:89:ef:e0: e4:de:4e:0b:8e:b5:71:bc:23:10:66:ad:d8:86:64: 6e:da:ac:87:0d:35:28:51:b4:d1:ef:cd:8b:5e:ee: 88:4b:08:7d:59:9c:ae:bb:fd:e1:5f:f6:14:40:48: 6b:87:ea:e0:74:c6:fa:f1:e8:75:be:a5:eb:88:37: 47:39:d1:77:6d:04:ba:33:53:9d:4c:0a:c0:56:4f: 1e:2d:f2:30:62:5f:15:6f:af:6a:fd:29:cb:8b:63: ee:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:E8:3E:F0:1F:CB:E3:6C:F4:E5:E8:96:05:4E:08:01:0D:A2:9C:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8ef5aa47-cd5d-36c1-abca-db0be9baa846.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.4.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:b0:7d:ca:86:23:30:fc:eb:84:da:7d:b7:91:2a:0d:b2:79: 5d:82:d3:a3:dd:00:0b:be:42:ef:c1:79:b5:18:69:d0:12:b6: 5d:90:da:df:cf:db:93:c4:3f:31:dd:d4:1f:ea:0f:56:db:16: 7c:cf:03:11:5d:76:d2:18:34:1e:e2:1c:27:f2:6c:26:77:93: aa:51:d1:dc:07:f1:41:1d:62:75:0c:7b:66:34:df:1f:9b:f2: 58:5c:b1:70:b6:02:4a:a2:82:70:30:4d:df:b2:44:8d:28:46: 48:08:6b:c6:5a:4d:a9:96:84:51:86:8b:50:46:e0:85:5b:5b: 5b:66:4b:6b:f7:4c:a9:99:9a:20:6b:1b:62:72:44:2d:eb:7b: ee:c9:75:50:9c:73:8f:23:1a:3a:2e:79:e3:d6:43:96:f8:41: e0:cd:cc:9a:80:93:a8:d7:43:03:12:b1:15:46:26:78:24:a4: 21:07:79:d4:d2:50:6b:0c:81:bc:83:2e:56:bc:5f:73:64:a3: f6:cc:c3:c9:33:68:05:ac:9f:c0:9f:10:23:d0:45:b8:57:e6: ad:c0:e8:0f:f2:4a:97:eb:fb:b1:4d:03:7d:34:fd:73:9e:ca: 05:22:ef:34:21:f2:bc:88:0e:b7:c8:4a:35:02:07:14:58:eb: 2c:84:54:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Ji7afeyeF6FQNCgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk M2IwYWYwYzAtM2Q4Mi00OWZjLTliMzgtYWUxMGU5MmYyZDEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8OHHIJkS6lRf3HWzwmQwuFhAQcMv2N2ZWro 9UP2bgVJSiqBZFSb58MGlhI0GpW+KcoCHO9CeR50TsfzARHggBD9jXUllWnwAJaB vKnCtecN1uY9JP6N5aFlonXkjGT4guVnr+/5/6PECy9dqqr9l/uJy057q+NZea3n PbWHzp/IlfqGpI9+aIYP701f4UczFiNV9yC7nrp4CLAjhL9kPRWJ7+Dk3k4LjrVx vCMQZq3YhmRu2qyHDTUoUbTR782LXu6ISwh9WZyuu/3hX/YUQEhrh+rgdMb68eh1 vqXriDdHOdF3bQS6M1OdTArAVk8eLfIwYl8Vb69q/SnLi2PudQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIToPvAfy+Ns9OXolgVOCAENopzFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOGVmNWFhNDctY2Q1ZC0z NmMxLWFiY2EtZGIwYmU5YmFhODQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCIgQcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIawfcqGIzD864TafbeRKg2yeV2C06PdAAu+Qu/BebUYadAStl2Q2t/P 25PEPzHd1B/qD1bbFnzPAxFddtIYNB7iHCfybCZ3k6pR0dwH8UEdYnUMe2Y03x+b 8lhcsXC2AkqignAwTd+yRI0oRkgIa8ZaTamWhFGGi1BG4IVbW1tmS2v3TKmZmiBr G2JyRC3re+7JdVCcc48jGjoueePWQ5b4QeDNzJqAk6jXQwMSsRVGJngkpCEHedTS UGsMgbyDLla8X3Nko/bMw8kzaAWsn8CfECPQRbhX5q3A6A/ySpfr+7FNA300/XOe ygUi7zQh8ryIDrfISjUCBxRY6yyEVIc= -----END CERTIFICATE-----Generated at Wed Sep 30 20:09:41 2026 by rpki-client