$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d4565fa0-1813-3f2e-a602-97bfbcd91ee6.roa File: d4565fa0-1813-3f2e-a602-97bfbcd91ee6.roa (raw, json) Hash identifier: jCbp4R8gPhWZw/0TRwawFuXXKp2IoqvfRrMH1+1y0uw= Subject key identifier: 94:AE:C6:CE:0F:03:B7:06:26:8A:BB:05:E1:18:0B:80:B5:50:CE:F3 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F497D0E0E20555A388E13EF80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d4565fa0-1813-3f2e-a602-97bfbcd91ee6.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 34.0.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7d:0e:0e:20:55:5a:38:8e:13:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=8d5b282e-dc1c-472a-9c58-5f30ebdf51c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:6b:d7:aa:09:46:77:c0:16:a2:4f:8d:dd:58: ea:52:58:59:e7:34:f3:ce:17:79:9d:a2:52:86:af: 48:5b:1f:97:d3:39:89:73:99:6d:81:64:5b:36:9a: 72:54:8c:4b:f6:79:71:12:f3:88:62:9c:ff:e1:ae: f2:6f:6c:d6:1e:95:a7:16:be:2e:16:34:98:be:63: 21:6f:78:3a:84:5c:4b:d2:c0:20:62:c5:27:2a:3d: c9:42:c7:d0:5a:bb:eb:98:dc:42:ca:7f:76:f0:4d: 23:45:d4:0c:fa:61:36:56:bd:c3:a0:1d:db:43:c1: 62:35:77:90:bd:b2:55:9c:6e:87:58:ad:d1:21:5f: eb:9b:b4:37:71:af:62:1c:9d:0d:56:00:fc:ef:46: 88:4a:e8:64:14:72:bf:cb:58:5a:78:7e:76:d4:49: e1:4b:b8:b7:ee:e6:f1:8d:25:e5:58:8c:40:7b:09: af:4f:59:82:0f:1c:3e:69:ad:1a:68:04:13:a2:6e: fa:e8:28:ee:1b:d8:c5:f6:bf:20:01:2c:da:24:71: 84:63:65:0d:a6:62:a7:09:54:58:23:d5:31:cf:aa: 21:af:6d:dc:59:32:94:21:05:ff:c2:c1:45:3a:fe: 83:39:2e:22:06:c1:26:c1:0d:04:55:79:b6:f1:72: ff:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:AE:C6:CE:0F:03:B7:06:26:8A:BB:05:E1:18:0B:80:B5:50:CE:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d4565fa0-1813-3f2e-a602-97bfbcd91ee6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.0.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:46:33:61:b6:ad:31:c8:24:21:9c:4d:7f:ac:bb:f6:70:78: 0a:ff:70:da:73:80:c0:13:7b:4b:51:06:f3:47:0d:f5:bb:be: db:7e:2c:e0:55:f6:9d:0a:17:7b:5e:ab:22:fb:16:fa:5b:87: 10:8a:b2:85:09:1e:eb:f4:e1:83:71:e4:c5:3c:21:f7:fd:e1: e2:89:0f:12:78:e3:be:0f:d0:cc:f0:5a:f9:a4:f7:a9:fc:78: f0:11:60:80:d3:95:f5:2c:99:e6:50:34:9c:65:b0:94:72:28: 03:d7:1d:ad:e0:2c:94:b2:38:c7:1c:e3:d4:e9:49:e5:3c:03: e4:b2:38:e9:46:cb:42:07:14:9a:08:32:3a:5f:22:1b:82:62: 1f:cd:8e:59:da:1d:d2:37:06:bc:b2:b9:d5:d6:e1:a2:71:f7: 43:6c:50:d8:ae:57:f1:46:03:36:59:c7:cc:78:2f:83:0c:50: e6:e4:50:17:17:b2:3e:59:9b:d8:88:cb:b7:6d:0b:eb:5b:2a: 9e:5c:45:24:75:2a:a6:36:ae:95:78:3f:29:01:9d:f4:b4:ac: b7:2f:b3:06:29:1b:43:6d:a9:01:6c:ca:69:db:06:d0:0f:23: 06:0f:10:19:ac:7b:ed:a5:20:04:77:45:72:ec:7b:07:5f:ca: 64:4b:de:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfQ4OIFVaOI4T74AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OGQ1YjI4MmUtZGMxYy00NzJhLTljNTgtNWYzMGViZGY1MWM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0GvXqglGd8AWok+N3VjqUlhZ5zTzzhd5naJS hq9IWx+X0zmJc5ltgWRbNppyVIxL9nlxEvOIYpz/4a7yb2zWHpWnFr4uFjSYvmMh b3g6hFxL0sAgYsUnKj3JQsfQWrvrmNxCyn928E0jRdQM+mE2Vr3DoB3bQ8FiNXeQ vbJVnG6HWK3RIV/rm7Q3ca9iHJ0NVgD870aISuhkFHK/y1haeH521EnhS7i37ubx jSXlWIxAewmvT1mCDxw+aa0aaAQTom766CjuG9jF9r8gASzaJHGEY2UNpmKnCVRY I9Uxz6ohr23cWTKUIQX/wsFFOv6DOS4iBsEmwQ0EVXm28XL/0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJSuxs4PA7cGJoq7BeEYC4C1UM7zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDQ1NjVmYTAtMTgxMy0z ZjJlLWE2MDItOTdiZmJjZDkxZWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAIgDpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEJGM2G2rTHIJCGcTX+su/ZweAr/cNpzgMATe0tRBvNHDfW7vtt+LOBV 9p0KF3teqyL7FvpbhxCKsoUJHuv04YNx5MU8Iff94eKJDxJ4474P0MzwWvmk96n8 ePARYIDTlfUsmeZQNJxlsJRyKAPXHa3gLJSyOMcc49TpSeU8A+SyOOlGy0IHFJoI MjpfIhuCYh/NjlnaHdI3BryyudXW4aJx90NsUNiuV/FGAzZZx8x4L4MMUObkUBcX sj5Zm9iIy7dtC+tbKp5cRSR1KqY2rpV4PykBnfS0rLcvswYpG0NtqQFsymnbBtAP IwYPEBmse+2lIAR3RXLsewdfymRL3lA= -----END CERTIFICATE-----Generated at Sun Sep 27 08:50:44 2026 by rpki-client