$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cf2f814e-7c70-3768-893e-c14eb5d06059.roa File: cf2f814e-7c70-3768-893e-c14eb5d06059.roa (raw, json) Hash identifier: t/JjZQYfev4XcyxJ+yBuA2C6cIIi5AhwhbNSDwDg9Ag= Subject key identifier: FF:E5:E8:3A:E0:6F:FF:0C:68:D7:B6:29:F8:DC:EF:FF:D2:F2:E0:C7 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F49743D12826DC2665A3CCC90 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cf2f814e-7c70-3768-893e-c14eb5d06059.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 34.2.116.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:3d:12:82:6d:c2:66:5a:3c:cc:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=9058003b-fa6f-49ae-b068-58a0da715f2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:cd:f6:04:3d:55:90:91:ee:b3:19:85:a3:00: 41:fd:53:ef:8e:1e:b9:0b:9c:39:d1:bc:2c:f7:4b: a8:4a:75:c1:bb:13:36:78:3c:82:12:c1:94:db:fb: 6c:c0:e1:61:fc:92:ae:40:8f:dc:a7:ae:73:6c:33: b1:3a:50:cc:c0:41:e8:cb:45:8b:b5:32:2e:f9:54: f0:e8:b2:c1:df:5d:0e:a5:09:00:f1:f2:9f:fe:53: a6:5f:13:14:3b:c2:30:37:05:09:80:25:4e:11:3b: 58:63:46:ab:9f:df:5d:87:a1:e2:9c:30:1b:bf:9f: ec:6e:bb:47:69:f9:1f:49:6d:a3:f2:fd:59:99:09: b3:1b:48:0d:07:1e:ce:0b:e0:5a:85:a9:5b:d0:94: bd:09:de:29:42:0d:b4:94:ca:73:25:44:a4:c6:30: 6d:78:58:d2:0d:9f:49:98:b3:34:14:8a:98:06:13: 73:e2:0e:02:04:d5:2b:e4:18:34:d4:2e:9a:b4:9a: d0:67:51:75:56:7a:7d:a2:5a:2b:af:e3:17:30:27: 74:95:3d:99:ff:38:9c:4d:37:4f:29:a4:47:26:25: 46:93:70:f1:77:e9:bc:fa:af:42:d7:69:53:29:fe: 28:1c:fd:ce:77:af:9a:c5:42:e7:89:d2:cc:7a:e1: 27:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:E5:E8:3A:E0:6F:FF:0C:68:D7:B6:29:F8:DC:EF:FF:D2:F2:E0:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cf2f814e-7c70-3768-893e-c14eb5d06059.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.2.116.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:de:52:49:69:15:df:f9:39:25:1f:c9:ac:3d:5d:b6:52:a1: 84:a9:4f:06:86:14:93:07:81:ee:fd:36:6d:a5:4c:42:b5:f0: f9:81:d0:18:77:96:9c:b1:a8:2f:43:2c:ca:ad:a9:cd:e9:e3: f7:c4:ee:40:c1:0a:43:c8:db:d5:ac:dd:ec:cc:62:b6:bf:21: 52:70:93:72:60:39:ce:f2:4a:77:8f:2e:9a:1f:7b:21:a2:10: 5a:92:47:29:2a:f0:88:65:3c:7a:7b:36:f0:95:20:94:7d:bd: 52:9d:b1:d2:6b:fa:c8:93:ef:5a:53:8d:86:94:9e:4f:ba:6a: e7:0e:c3:ae:0c:b5:09:21:8a:b6:80:ae:3a:5b:7e:6f:ca:f3: ae:c9:32:4c:1b:11:3a:a0:59:42:6d:a6:9f:91:e6:79:23:64: 0d:51:e1:76:d2:0a:49:68:b6:06:51:2d:62:2d:dc:6f:b4:3e: 76:39:f4:0d:36:17:40:bf:15:02:ae:f6:a2:ef:51:f8:e9:21: 01:e5:bc:14:75:17:66:97:bb:b9:49:15:a3:2e:5e:00:1b:c5: 82:60:19:30:53:86:47:e3:9d:a3:d2:a4:7a:42:57:0c:f2:bf: ff:3a:41:9d:e4:80:d2:81:72:8b:0a:47:44:22:67:e7:7c:24: a0:92:20:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdD0Sgm3CZlo8zJAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OTA1ODAwM2ItZmE2Zi00OWFlLWIwNjgtNThhMGRhNzE1ZjJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvc32BD1VkJHusxmFowBB/VPvjh65C5w50bws 90uoSnXBuxM2eDyCEsGU2/tswOFh/JKuQI/cp65zbDOxOlDMwEHoy0WLtTIu+VTw 6LLB310OpQkA8fKf/lOmXxMUO8IwNwUJgCVOETtYY0arn99dh6HinDAbv5/sbrtH afkfSW2j8v1ZmQmzG0gNBx7OC+Bahalb0JS9Cd4pQg20lMpzJUSkxjBteFjSDZ9J mLM0FIqYBhNz4g4CBNUr5Bg01C6atJrQZ1F1Vnp9olorr+MXMCd0lT2Z/zicTTdP KaRHJiVGk3Dxd+m8+q9C12lTKf4oHP3Od6+axULnidLMeuEnFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP/l6Drgb/8MaNe2Kfjc7//S8uDHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvY2YyZjgxNGUtN2M3MC0z NzY4LTg5M2UtYzE0ZWI1ZDA2MDU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBIgJ0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGneUklpFd/5OSUfyaw9XbZSoYSpTwaGFJMHge79Nm2lTEK18PmB0Bh3 lpyxqC9DLMqtqc3p4/fE7kDBCkPI29Ws3ezMYra/IVJwk3JgOc7ySnePLpofeyGi EFqSRykq8IhlPHp7NvCVIJR9vVKdsdJr+siT71pTjYaUnk+6aucOw64MtQkhiraA rjpbfm/K867JMkwbETqgWUJtpp+R5nkjZA1R4XbSCklotgZRLWIt3G+0PnY59A02 F0C/FQKu9qLvUfjpIQHlvBR1F2aXu7lJFaMuXgAbxYJgGTBThkfjnaPSpHpCVwzy v/86QZ3kgNKBcosKR0QiZ+d8JKCSIMg= -----END CERTIFICATE-----Generated at Mon Oct 12 22:08:09 2026 by rpki-client