$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e1ffdf4f-9ab8-352e-b310-2dc21d0bd374.roa File: e1ffdf4f-9ab8-352e-b310-2dc21d0bd374.roa (raw, json) Hash identifier: GC3bMnJYD/NCUEA6T2ZpPAGA10+X/JEmc2ULH2GUgeE= Subject key identifier: 4B:92:48:03:16:D6:C9:DC:9C:DA:AC:60:24:3D:F5:56:B7:5E:AC:6B Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F498972CE3A3A92EAA0338440 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e1ffdf4f-9ab8-352e-b310-2dc21d0bd374.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 11344 IP address blocks: 34.153.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:89:72:ce:3a:3a:92:ea:a0:33:84:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=f2c5c2e9-7def-4d43-84d9-d852740a568a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:50:29:8a:b8:b2:2e:f0:69:1d:74:31:a1:ca: 41:93:78:f2:48:61:e6:4c:23:cd:44:fd:c3:64:19: 59:70:15:41:07:7f:d5:23:83:68:cc:1d:8b:c8:81: f3:33:e7:8d:02:db:11:35:6a:6e:5d:71:e3:ea:fc: e1:c6:2b:1b:99:61:0b:4f:e9:4c:34:d0:f1:8f:f1: 46:bc:08:fd:16:f2:49:01:56:98:f4:84:14:d6:33: 8c:a9:ce:6f:2a:e9:cd:1e:ce:6f:60:23:0c:1d:c8: c7:76:93:f3:cf:b1:80:e7:1a:19:0a:3f:e0:90:ad: b4:13:27:5b:f9:eb:f0:ca:40:40:7f:a7:02:a0:9c: 53:21:04:e8:e4:02:b7:73:b2:ca:9c:38:c9:58:ce: ab:53:4f:2b:e5:a5:d8:79:52:35:09:25:9c:44:4b: e2:26:91:6b:70:8e:3a:e9:42:c9:7e:39:6a:20:d8: 61:ed:24:c5:1c:2e:8a:5a:de:19:cc:1d:5f:1c:81: 24:42:ae:64:14:57:82:4f:81:a3:e2:5c:68:79:18: fd:58:8f:0f:56:bd:87:38:5e:15:b3:4f:9f:be:0c: 2d:f3:78:3d:c6:3b:78:46:28:bc:d0:13:60:69:01: ff:87:02:b8:ac:ac:9b:ed:3c:73:7c:70:23:d3:f2: 84:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:92:48:03:16:D6:C9:DC:9C:DA:AC:60:24:3D:F5:56:B7:5E:AC:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e1ffdf4f-9ab8-352e-b310-2dc21d0bd374.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.153.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:99:cb:fc:90:fc:0e:df:08:14:8d:0a:91:32:5f:2e:84:73: df:4c:a9:c0:66:f6:ef:65:06:a3:a6:65:56:37:62:3f:ae:97: b2:b5:39:43:4c:ac:d2:b4:bc:ad:55:6f:67:8b:67:a7:a8:99: a3:34:3c:a8:d9:70:d1:91:a5:9b:c3:b9:0a:7f:66:26:39:44: 31:fe:59:ee:2e:45:69:9c:de:9a:7d:83:52:de:f3:b7:13:e9: 6c:ff:98:34:07:1e:db:da:7b:ab:eb:28:61:8f:01:ee:45:86: 23:63:fd:cf:be:e5:37:ed:02:01:4d:b2:d8:cd:64:0f:87:48: 92:34:1a:a7:2e:3e:8c:aa:82:e9:1b:e4:1b:be:a1:ef:c0:ec: ec:62:be:96:d7:3e:e6:79:0f:00:99:7c:0c:d4:f0:7e:ea:c9: 8e:6a:d9:0e:0e:fe:f4:ba:b2:20:01:c7:4a:ec:c4:9a:a4:5e: 4f:7c:64:15:c2:1e:ed:09:8f:ba:16:50:9a:5b:6d:e5:68:f1: 79:d2:96:f6:bf:12:df:4e:1e:78:23:de:5f:34:41:43:bd:12: 6a:06:54:75:31:7a:60:df:f1:4c:f7:73:87:31:af:bf:5a:12: 6d:e1:b1:61:0a:20:df:7b:4f:3e:23:8f:9f:d2:75:e9:2f:26: c2:d7:de:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiXLOOjqS6qAzhEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZjJjNWMyZTktN2RlZi00ZDQzLTg0ZDktZDg1Mjc0MGE1NjhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVApiriyLvBpHXQxocpBk3jySGHmTCPNRP3D ZBlZcBVBB3/VI4NozB2LyIHzM+eNAtsRNWpuXXHj6vzhxisbmWELT+lMNNDxj/FG vAj9FvJJAVaY9IQU1jOMqc5vKunNHs5vYCMMHcjHdpPzz7GA5xoZCj/gkK20Eydb +evwykBAf6cCoJxTIQTo5AK3c7LKnDjJWM6rU08r5aXYeVI1CSWcREviJpFrcI46 6ULJfjlqINhh7STFHC6KWt4ZzB1fHIEkQq5kFFeCT4Gj4lxoeRj9WI8PVr2HOF4V s0+fvgwt83g9xjt4Rii80BNgaQH/hwK4rKyb7TxzfHAj0/KEDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEuSSAMW1sncnNqsYCQ99Va3XqxrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZTFmZmRmNGYtOWFiOC0z NTJlLWIzMTAtMmRjMjFkMGJkMzc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCIpkEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGWZy/yQ/A7fCBSNCpEyXy6Ec99MqcBm9u9lBqOmZVY3Yj+ul7K1OUNM rNK0vK1Vb2eLZ6eomaM0PKjZcNGRpZvDuQp/ZiY5RDH+We4uRWmc3pp9g1Le87cT 6Wz/mDQHHtvae6vrKGGPAe5FhiNj/c++5TftAgFNstjNZA+HSJI0GqcuPoyqgukb 5Bu+oe/A7OxivpbXPuZ5DwCZfAzU8H7qyY5q2Q4O/vS6siABx0rsxJqkXk98ZBXC Hu0Jj7oWUJpbbeVo8XnSlva/Et9OHngj3l80QUO9EmoGVHUxemDf8Uz3c4cxr79a Em3hsWEKIN97Tz4jj5/SdekvJsLX3jA= -----END CERTIFICATE-----Generated at Fri Sep 25 22:57:05 2026 by rpki-client