$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aab57b78-f652-39c1-b67f-3e54c23a4a54.roa File: aab57b78-f652-39c1-b67f-3e54c23a4a54.roa (raw, json) Hash identifier: VIUZOiWfoLegw/mVSvNVX7N+V3zHHxMz5JLK0UyW1uw= Subject key identifier: 9E:49:A0:81:59:49:DC:4A:14:4B:2E:E2:9B:04:70:FB:29:8C:6B:7D Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4987F4701BC378DDC0661E80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aab57b78-f652-39c1-b67f-3e54c23a4a54.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 19527 IP address blocks: 34.4.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:f4:70:1b:c3:78:dd:c0:66:1e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=b75dff2f-b670-4741-9755-6a7e9a1f4ec0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:15:f5:70:47:c1:ed:0d:a9:a7:90:a7:00:3e: a6:18:c0:24:af:5c:da:f2:66:29:cc:be:d3:6c:30: 9f:20:40:a4:63:36:71:68:a7:b6:e1:f7:e9:9e:6b: 2c:e7:a1:d3:23:1f:67:bb:28:17:78:c5:c7:b9:cb: 6b:c0:e9:2c:76:8f:f4:75:02:1b:9c:61:40:4a:87: f6:f3:a1:42:14:41:d4:53:f6:5d:68:34:37:03:0d: cc:ac:7a:d6:0a:5f:ae:ba:5f:71:d5:eb:78:45:80: d7:0b:17:b1:85:c6:9d:f4:c0:85:22:22:42:f0:bb: 55:ee:7a:a1:28:b4:97:09:86:66:38:e4:61:29:8f: d1:33:ad:5f:3e:36:94:c8:3d:3f:70:de:d9:43:28: 5b:29:b4:7b:ef:70:12:94:de:3b:0f:28:30:73:72: 77:c5:46:e7:1a:83:7f:e2:0a:d2:51:35:ef:a3:a8: d8:29:a7:67:21:e0:86:ab:e9:28:d7:f9:24:c2:d5: 83:51:71:80:f0:e9:c4:ff:3c:12:39:82:4b:08:00: 01:12:9c:17:c7:0d:21:57:2d:88:0b:ff:f8:f3:fd: cf:31:de:29:d5:8e:82:16:5e:c2:fc:0d:59:cc:0f: 5d:3f:ba:c3:c0:0a:3d:02:c7:39:22:93:b9:18:94: e7:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:49:A0:81:59:49:DC:4A:14:4B:2E:E2:9B:04:70:FB:29:8C:6B:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aab57b78-f652-39c1-b67f-3e54c23a4a54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.4.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:d0:d3:48:0e:76:84:68:7b:6a:07:44:a1:88:b0:7f:27:6e: 61:5f:35:ab:4d:91:f5:58:d5:23:7f:40:cc:f9:b1:85:7d:11: 43:97:d2:7b:42:e5:39:90:d0:8f:fa:66:f9:3a:d3:2f:2a:86: 50:36:eb:78:8e:9c:b6:54:8c:ff:01:b2:58:6b:92:df:08:fd: e7:36:b4:3e:d4:2d:13:c3:24:2b:28:e7:0a:3a:92:9b:76:3b: ce:8b:3a:58:b6:c8:4a:00:67:bd:c7:db:35:b7:ef:17:a9:f2: a9:a2:1b:40:af:26:21:13:8f:ec:e0:6a:4c:33:a3:23:7a:e6: 7f:77:d5:ea:6d:87:b5:30:77:da:05:71:6f:ed:89:9c:4e:85: 46:c8:a1:38:c1:07:c0:e5:5c:27:3b:72:bc:68:5b:2f:d3:5d: 83:5a:d6:94:7b:1f:05:3f:c5:f5:fc:c4:ff:92:e7:a7:4d:49: 6f:00:c1:d3:5d:41:7b:b4:8e:91:26:0b:e3:10:85:76:9f:ec: 09:28:fd:85:7e:68:bf:5c:95:2f:1f:40:b4:53:25:a9:a1:51: 1c:6f:9c:d0:37:4e:67:2d:48:77:52:5f:ea:f6:e7:4d:03:4e: 36:31:31:54:31:15:05:55:c4:b0:b7:20:40:95:4c:c3:bb:05: bc:71:cf:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jh/RwG8N43cBmHoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Yjc1ZGZmMmYtYjY3MC00NzQxLTk3NTUtNmE3ZTlhMWY0ZWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRX1cEfB7Q2pp5CnAD6mGMAkr1za8mYpzL7T bDCfIECkYzZxaKe24ffpnmss56HTIx9nuygXeMXHuctrwOksdo/0dQIbnGFASof2 86FCFEHUU/ZdaDQ3Aw3MrHrWCl+uul9x1et4RYDXCxexhcad9MCFIiJC8LtV7nqh KLSXCYZmOORhKY/RM61fPjaUyD0/cN7ZQyhbKbR773ASlN47Dygwc3J3xUbnGoN/ 4grSUTXvo6jYKadnIeCGq+ko1/kkwtWDUXGA8OnE/zwSOYJLCAABEpwXxw0hVy2I C//48/3PMd4p1Y6CFl7C/A1ZzA9dP7rDwAo9Asc5IpO5GJTnOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ5JoIFZSdxKFEsu4psEcPspjGt9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYWFiNTdiNzgtZjY1Mi0z OWMxLWI2N2YtM2U1NGMyM2E0YTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIgQwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGjQ00gOdoRoe2oHRKGIsH8nbmFfNatNkfVY1SN/QMz5sYV9EUOX0ntC 5TmQ0I/6Zvk60y8qhlA263iOnLZUjP8Bslhrkt8I/ec2tD7ULRPDJCso5wo6kpt2 O86LOli2yEoAZ73H2zW37xep8qmiG0CvJiETj+zgakwzoyN65n931epth7Uwd9oF cW/tiZxOhUbIoTjBB8DlXCc7crxoWy/TXYNa1pR7HwU/xfX8xP+S56dNSW8AwdNd QXu0jpEmC+MQhXaf7Ako/YV+aL9clS8fQLRTJamhURxvnNA3TmctSHdSX+r2500D TjYxMVQxFQVVxLC3IECVTMO7Bbxxz/E= -----END CERTIFICATE-----Generated at Sun Oct 11 09:53:37 2026 by rpki-client