$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cb5f15be-f74c-3135-a1dc-92995c6a4713.roa File: cb5f15be-f74c-3135-a1dc-92995c6a4713.roa (raw, json) Hash identifier: Ch1JZDYSF/Gi7FIofAw+E5rn6oNXgxxmokHJkZvOumU= Subject key identifier: B2:EA:B9:04:3E:6A:DF:5C:E5:1A:4E:64:91:78:70:73:B5:0E:2E:2D Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F497498AA8FDFF67261C78880 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cb5f15be-f74c-3135-a1dc-92995c6a4713.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396982 IP address blocks: 34.1.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:98:aa:8f:df:f6:72:61:c7:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=473ec256-787e-45aa-8fa8-583da9f024c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:03:bf:c4:b4:0e:68:c9:c5:81:f3:bc:ce:06: 6f:73:91:1f:31:f2:78:5a:37:8a:20:5d:cf:ce:dc: 4d:ce:ed:09:5b:43:cd:69:12:f0:43:f8:5c:3b:a2: c1:4a:5f:77:3b:5f:74:bc:8b:bc:60:f4:8b:54:bc: eb:cd:0a:b0:74:78:6e:1a:16:76:7d:bd:a6:f3:52: 23:7e:55:47:7f:4e:c1:a0:ea:cf:f7:bc:b4:bd:3d: 41:5c:d8:4f:be:06:9a:dd:b6:8d:0c:65:03:6d:e2: bb:54:73:10:42:f9:a1:31:ac:ab:34:e2:03:72:0d: d0:2b:52:8a:11:88:9c:34:99:66:26:20:94:0d:63: 5c:e4:ad:f8:7e:53:43:10:83:91:c4:c0:84:c1:ba: 60:26:a0:3e:79:c3:ef:8c:5f:e7:c8:68:33:44:3d: 8f:16:24:91:e4:7b:47:70:3a:3b:29:3a:49:36:1f: f0:15:a8:bd:07:bf:8a:16:ad:5c:af:48:26:2b:7b: dc:77:fd:ef:17:b8:38:0d:b5:98:26:95:23:79:5a: 9e:ce:58:3d:57:51:19:82:8a:30:eb:4f:83:da:0e: ff:af:84:67:4d:4b:cb:d2:fb:ca:4f:78:15:c5:f9: ce:0f:5d:f0:ff:37:97:82:b1:de:2b:47:02:98:5d: 1b:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:EA:B9:04:3E:6A:DF:5C:E5:1A:4E:64:91:78:70:73:B5:0E:2E:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cb5f15be-f74c-3135-a1dc-92995c6a4713.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.1.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:de:dd:9b:79:5f:ef:1c:74:94:46:91:c3:55:85:48:47:4f: 85:dd:71:36:0f:09:e7:cd:47:84:95:6d:91:55:21:6f:fe:0b: 73:17:c0:24:05:a4:54:28:84:ac:3f:c8:14:c3:6c:bd:ac:3a: 66:49:9e:18:2c:b2:44:47:f8:27:a7:ad:f9:0e:70:6e:b0:7a: 36:fa:eb:1d:47:c7:d1:ac:be:9e:80:05:19:f8:29:e6:06:86: 86:3f:e9:81:c8:3f:70:47:81:a6:ba:77:a5:95:c2:c5:e3:48: 9a:82:13:29:d2:98:a1:3a:cc:c8:af:cf:0c:67:fc:9b:2a:89: bb:73:d1:c9:91:92:79:72:00:5e:4a:41:6d:66:5e:52:a8:8c: d4:4d:7f:5c:00:c0:cf:a5:65:38:f5:0e:34:bd:1c:bb:f5:36: 82:f3:ff:7d:9e:dc:f9:9c:cd:67:d4:8d:e9:2b:32:c2:0c:cb: d4:e5:46:5f:3e:84:d9:5a:24:ce:17:c5:55:d5:96:27:c1:9b: e7:dd:6c:64:66:67:71:89:30:3c:1f:07:94:75:23:e2:fb:35: b2:09:7f:7f:c2:0a:6e:4a:f2:e4:14:be:83:c6:0d:8b:0e:89: 50:5d:0a:f4:2c:66:ed:8c:df:f2:59:ff:dd:52:d3:3c:c0:4a: c3:23:82:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdJiqj9/2cmHHiIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NDczZWMyNTYtNzg3ZS00NWFhLThmYTgtNTgzZGE5ZjAyNGM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAO/xLQOaMnFgfO8zgZvc5EfMfJ4WjeKIF3P ztxNzu0JW0PNaRLwQ/hcO6LBSl93O190vIu8YPSLVLzrzQqwdHhuGhZ2fb2m81Ij flVHf07BoOrP97y0vT1BXNhPvgaa3baNDGUDbeK7VHMQQvmhMayrNOIDcg3QK1KK EYicNJlmJiCUDWNc5K34flNDEIORxMCEwbpgJqA+ecPvjF/nyGgzRD2PFiSR5HtH cDo7KTpJNh/wFai9B7+KFq1cr0gmK3vcd/3vF7g4DbWYJpUjeVqezlg9V1EZgoow 60+D2g7/r4RnTUvL0vvKT3gVxfnOD13w/zeXgrHeK0cCmF0bhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLLquQQ+at9c5RpOZJF4cHO1Di4tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvY2I1ZjE1YmUtZjc0Yy0z MTM1LWExZGMtOTI5OTVjNmE0NzEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIgEwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABHe3Zt5X+8cdJRGkcNVhUhHT4XdcTYPCefNR4SVbZFVIW/+C3MXwCQF pFQohKw/yBTDbL2sOmZJnhgsskRH+CenrfkOcG6wejb66x1Hx9Gsvp6ABRn4KeYG hoY/6YHIP3BHgaa6d6WVwsXjSJqCEynSmKE6zMivzwxn/Jsqibtz0cmRknlyAF5K QW1mXlKojNRNf1wAwM+lZTj1DjS9HLv1NoLz/32e3PmczWfUjekrMsIMy9TlRl8+ hNlaJM4XxVXVlifBm+fdbGRmZ3GJMDwfB5R1I+L7NbIJf3/CCm5K8uQUvoPGDYsO iVBdCvQsZu2M3/JZ/91S0zzASsMjgpA= -----END CERTIFICATE-----Generated at Mon Sep 28 10:43:58 2026 by rpki-client