$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cbeec8ab-651d-30ba-a929-25dd5cd0070e.roa File: cbeec8ab-651d-30ba-a929-25dd5cd0070e.roa (raw, json) Hash identifier: gizs1tRfoLB9p6Y9QvtXWOgypUvVP8lNeyklwnIGaqo= Subject key identifier: A2:76:F2:D8:5D:02:8B:50:29:97:5C:EA:7C:15:E2:0E:02:A4:E2:17 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4974AE4EDEE2B999D0D74B80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cbeec8ab-651d-30ba-a929-25dd5cd0070e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396982 IP address blocks: 34.0.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:ae:4e:de:e2:b9:99:d0:d7:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a08f39bf-3eac-43e4-b43d-82b706201a52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:56:78:df:d8:6e:e7:c2:f8:90:0f:c5:36:54: b3:da:0c:54:64:c6:7a:31:2a:a7:86:34:fa:86:ec: d4:66:32:0a:9f:9e:05:69:ce:37:dc:64:55:a2:e2: a5:2c:1a:af:b8:2e:51:96:ce:eb:be:4e:eb:b9:38: 22:b9:f7:89:36:23:64:89:57:04:93:b5:af:88:d5: 8f:65:df:c7:c1:5c:ba:da:ab:3c:c5:bf:17:c3:96: ad:fe:15:b3:9b:54:22:df:65:7d:8e:d2:ef:35:ee: 5b:ce:be:ac:8f:9c:9e:77:9a:c0:94:dd:c4:02:1a: ca:1c:23:3d:5f:d9:09:0d:78:b8:88:0e:7e:a2:65: 2f:63:8e:4d:46:04:d1:f2:d4:d1:97:3a:53:01:33: 2e:ec:41:73:27:f1:4e:e5:1e:4a:f2:0a:39:f4:e9: 3a:4e:89:85:56:b0:ab:ca:93:14:00:92:a3:a7:81: 07:52:42:5c:2f:ce:b9:b0:42:02:27:cd:65:f5:b1: de:9f:58:e7:32:12:a6:72:4a:5c:cb:7c:18:12:88: 1f:e7:af:a9:c1:ba:83:22:b5:2f:92:95:ed:e8:21: 98:b6:48:7c:56:9d:eb:3f:91:20:dd:cd:36:5e:b8: 72:37:00:2d:89:85:7f:8e:cc:d7:4b:ea:58:4f:c4: 09:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:76:F2:D8:5D:02:8B:50:29:97:5C:EA:7C:15:E2:0E:02:A4:E2:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cbeec8ab-651d-30ba-a929-25dd5cd0070e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.0.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:00:33:e8:e5:73:2e:10:7c:ba:c4:1e:d3:75:7e:41:ac:a7: a0:93:34:09:3b:00:59:bb:6c:f5:2e:7a:ec:25:9b:f9:fc:b5: 56:62:0e:b7:14:8f:e6:43:3a:ef:db:4f:7b:e6:1d:7d:83:0b: 29:e8:11:4d:7f:17:52:e8:ac:53:b4:d7:2a:e9:07:a4:44:00: 95:b1:20:ca:d6:bc:ce:e9:5d:a0:29:3f:63:29:25:08:e4:c2: 5d:f9:77:33:55:7e:83:0f:af:3b:1b:72:3a:c5:18:3e:36:46: 39:e4:4a:36:23:42:79:e6:6e:bb:91:0f:27:85:a8:1a:d6:88: e0:61:57:ba:e8:37:69:fe:e9:56:77:05:08:eb:df:a1:cd:a0: 34:6c:3b:64:12:14:d6:d6:d4:ea:03:1c:ed:ca:2c:63:89:ab: 6c:da:97:8e:56:4c:0e:da:da:ac:9b:94:85:e0:72:6a:de:d0: ac:45:bc:b1:da:64:ba:61:96:50:c6:ec:23:32:4a:96:cd:b2: 67:84:57:32:6c:92:1c:38:87:25:51:16:c9:06:8a:cf:b8:c4: cc:26:a7:45:00:6c:71:73:3e:89:d8:be:36:67:c5:9a:8e:b8: 60:8e:ee:b9:64:c5:a8:8f:0c:0f:33:40:a1:74:9d:f0:9c:8c: 2f:50:4d:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdK5O3uK5mdDXS4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YTA4ZjM5YmYtM2VhYy00M2U0LWI0M2QtODJiNzA2MjAxYTUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5lZ439hu58L4kA/FNlSz2gxUZMZ6MSqnhjT6 huzUZjIKn54Fac433GRVouKlLBqvuC5Rls7rvk7ruTgiufeJNiNkiVcEk7WviNWP Zd/HwVy62qs8xb8Xw5at/hWzm1Qi32V9jtLvNe5bzr6sj5yed5rAlN3EAhrKHCM9 X9kJDXi4iA5+omUvY45NRgTR8tTRlzpTATMu7EFzJ/FO5R5K8go59Ok6TomFVrCr ypMUAJKjp4EHUkJcL865sEICJ81l9bHen1jnMhKmckpcy3wYEogf56+pwbqDIrUv kpXt6CGYtkh8Vp3rP5Eg3c02XrhyNwAtiYV/jszXS+pYT8QJ6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKJ28thdAotQKZdc6nwV4g4CpOIXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvY2JlZWM4YWItNjUxZC0z MGJhLWE5MjktMjVkZDVjZDAwNzBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAIgDgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFQAM+jlcy4QfLrEHtN1fkGsp6CTNAk7AFm7bPUueuwlm/n8tVZiDrcU j+ZDOu/bT3vmHX2DCynoEU1/F1LorFO01yrpB6REAJWxIMrWvM7pXaApP2MpJQjk wl35dzNVfoMPrzsbcjrFGD42RjnkSjYjQnnmbruRDyeFqBrWiOBhV7roN2n+6VZ3 BQjr36HNoDRsO2QSFNbW1OoDHO3KLGOJq2zal45WTA7a2qyblIXgcmre0KxFvLHa ZLphllDG7CMySpbNsmeEVzJskhw4hyVRFskGis+4xMwmp0UAbHFzPonYvjZnxZqO uGCO7rlkxaiPDA8zQKF0nfCcjC9QTRc= -----END CERTIFICATE-----Generated at Sun Sep 27 01:13:26 2026 by rpki-client