$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d7d82387-6d1f-31ce-92c6-5da60bcb6c73.roa File: d7d82387-6d1f-31ce-92c6-5da60bcb6c73.roa (raw, json) Hash identifier: 7psstUdy+bColfeNwBV4g/vf+jOa3qINb3xbN+BAW9s= Subject key identifier: D7:64:A5:CA:D8:6B:ED:71:A6:BD:F7:AA:87:EF:C1:70:58:A9:25:CB Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584EE2274D7A2B6D569C78FB4A00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d7d82387-6d1f-31ce-92c6-5da60bcb6c73.roa Signing time: Wed 19 Aug 2026 01:00:12 +0000 ROA not before: Wed 19 Aug 2026 01:00:12 +0000 ROA not after: Tue 17 Nov 2026 02:00:12 +0000 asID: 15169 IP address blocks: 34.4.96.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e2:27:4d:7a:2b:6d:56:9c:78:fb:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Aug 19 01:00:12 2026 GMT Not After : Nov 17 02:00:12 2026 GMT Subject: CN=01f499b6-1001-4b2d-ac52-0761d5969fbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:2b:fc:fa:c4:82:29:d9:d9:c0:ba:d3:3e:e5: 06:aa:28:ac:88:55:32:e8:9a:bb:fe:9f:81:3d:d5: 7a:f9:f1:81:65:c9:bf:2d:34:fd:ad:35:7b:9f:96: 53:00:9a:57:2a:f0:2b:e6:d7:57:f2:f1:8e:98:bc: 3a:29:da:f7:f4:45:17:58:c5:32:ac:fe:3a:08:7b: c9:ac:91:49:83:ff:ed:4f:0d:1a:d2:44:90:cb:5c: 1f:ac:3d:a4:32:7f:71:73:06:48:44:a3:a5:0c:03: 5f:ff:13:37:b6:f6:36:52:6d:d2:94:13:25:6e:08: b0:e5:f8:03:a8:71:bf:f0:6f:26:29:9e:f4:12:b4: 3d:4a:bd:98:0d:d4:cf:09:da:6b:8f:0f:5c:59:9c: 1e:76:f5:85:fc:49:51:ab:0e:7e:bc:89:ed:08:6b: 02:67:df:f1:33:b2:64:56:c7:48:5e:e3:c8:c1:d2: fa:94:a2:e2:24:76:85:bb:1a:b3:1e:25:6a:51:72: 01:68:2d:6a:46:75:2a:39:f7:9f:56:9d:65:29:05: a0:84:54:64:b3:07:e9:44:7a:8c:c2:23:25:3e:ac: e4:c5:69:cc:16:1e:a9:aa:90:a8:e3:8d:56:91:97: e0:1f:ae:6f:58:68:75:d9:67:9e:39:22:b7:f4:20: c5:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:64:A5:CA:D8:6B:ED:71:A6:BD:F7:AA:87:EF:C1:70:58:A9:25:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d7d82387-6d1f-31ce-92c6-5da60bcb6c73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.4.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:dc:d4:0b:cf:99:82:f8:55:82:ac:75:90:7c:9e:8f:d6:74: 98:76:12:ff:ee:15:4e:87:f7:1e:af:57:42:b8:80:db:50:82: 83:a2:97:e4:a1:27:d6:a3:d5:d1:f9:95:ec:ac:29:c1:4b:09: 17:42:51:8f:b1:be:2f:cc:60:15:f2:2a:92:aa:40:06:23:c2: 9f:69:16:b1:f9:b2:ba:41:8a:9b:d4:64:64:4f:cd:5c:c5:74: da:a2:88:b4:99:a2:d5:19:91:2b:d9:c4:b3:a7:df:c1:4c:30: 29:e0:48:ae:ce:7d:69:32:a7:63:18:a1:62:2c:67:70:25:76: 0b:07:08:d7:8b:a3:68:45:8b:fd:26:5b:4f:ba:bb:20:26:9b: ba:00:92:97:fb:b9:db:58:01:40:fe:f4:2b:59:30:7e:d1:bd: 44:17:12:a0:36:4d:9a:52:1a:fa:51:0f:43:04:39:58:45:2a: 8e:35:e8:e7:82:f4:76:21:47:33:22:b6:33:7c:a9:00:26:d7: d4:c6:6e:0f:47:68:a3:9d:3c:b8:3f:b0:85:28:26:89:4d:c9: 3b:c0:5a:0d:16:b9:61:3c:26:fe:8c:af:15:8b:58:f1:2b:e2: 88:5c:80:24:40:ed:97:6c:e9:cb:e0:3f:f6:cd:02:8e:74:0a: 02:cd:c9:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7iJ016K21WnHj7SgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDgxOTAxMDAxMloXDTI2MTExNzAyMDAxMlowLzEtMCsGA1UEAxMk MDFmNDk5YjYtMTAwMS00YjJkLWFjNTItMDc2MWQ1OTY5ZmJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiv8+sSCKdnZwLrTPuUGqiisiFUy6Jq7/p+B PdV6+fGBZcm/LTT9rTV7n5ZTAJpXKvAr5tdX8vGOmLw6Kdr39EUXWMUyrP46CHvJ rJFJg//tTw0a0kSQy1wfrD2kMn9xcwZIRKOlDANf/xM3tvY2Um3SlBMlbgiw5fgD qHG/8G8mKZ70ErQ9Sr2YDdTPCdprjw9cWZwedvWF/ElRqw5+vIntCGsCZ9/xM7Jk VsdIXuPIwdL6lKLiJHaFuxqzHiVqUXIBaC1qRnUqOfefVp1lKQWghFRkswfpRHqM wiMlPqzkxWnMFh6pqpCo441WkZfgH65vWGh12WeeOSK39CDFMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNdkpcrYa+1xpr33qofvwXBYqSXLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDdkODIzODctNmQxZi0z MWNlLTkyYzYtNWRhNjBiY2I2YzczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCIgRgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADHc1AvPmYL4VYKsdZB8no/WdJh2Ev/uFU6H9x6vV0K4gNtQgoOil+Sh J9aj1dH5leysKcFLCRdCUY+xvi/MYBXyKpKqQAYjwp9pFrH5srpBipvUZGRPzVzF dNqiiLSZotUZkSvZxLOn38FMMCngSK7OfWkyp2MYoWIsZ3AldgsHCNeLo2hFi/0m W0+6uyAmm7oAkpf7udtYAUD+9CtZMH7RvUQXEqA2TZpSGvpRD0MEOVhFKo416OeC 9HYhRzMitjN8qQAm19TGbg9HaKOdPLg/sIUoJolNyTvAWg0WuWE8Jv6MrxWLWPEr 4ohcgCRA7Zds6cvgP/bNAo50CgLNySU= -----END CERTIFICATE-----Generated at Sun Sep 27 01:17:01 2026 by rpki-client