$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dd36f711-b158-3c0c-8041-fda6e06f3b03.roa File: dd36f711-b158-3c0c-8041-fda6e06f3b03.roa (raw, json) Hash identifier: Nc6Bp5rLPtop6sS/b5B3BNuCtPaOT6YIeb57Ls2bWQU= Subject key identifier: E4:B8:0D:2F:BE:99:FC:1C:B2:99:8F:42:C2:33:70:BC:FE:8F:60:A9 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4974A1F5D8DD2463F8E536C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dd36f711-b158-3c0c-8041-fda6e06f3b03.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396982 IP address blocks: 34.2.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:a1:f5:d8:dd:24:63:f8:e5:36:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=9b296793-3ed4-4910-b0a9-838cfa441b4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:45:d5:9b:d3:8a:2d:38:d9:93:e6:c6:a3:e5: 09:eb:0f:01:ba:8e:20:e2:38:0c:cf:b3:19:b8:8f: e1:4e:64:e4:a8:49:9c:d8:bb:b4:3e:8f:16:9b:4f: 9b:68:45:92:b4:ad:68:23:03:2e:6c:c6:3d:87:e6: 23:05:13:b6:4e:85:8f:cf:da:54:65:9e:4a:7f:5b: dc:e5:a0:21:25:8c:ee:77:62:60:9e:42:6d:96:fc: ad:3e:73:69:55:e9:12:4a:b1:b9:81:b9:1c:d4:5d: 34:1d:65:c1:12:29:47:7f:80:aa:e5:af:0b:c2:eb: b9:fe:cb:09:20:fe:ea:8b:3d:0e:02:c4:6f:30:a0: 20:be:08:96:ff:ef:cc:ff:12:2a:bb:53:37:69:65: be:16:41:35:8b:18:c3:61:ff:8c:c0:3f:92:68:22: 56:bd:60:6c:9f:1d:cd:47:ec:7f:ff:37:76:bf:93: 6d:c3:ab:1c:28:87:66:d9:a8:7c:7a:0f:0a:62:c2: 8d:15:d1:1f:7e:9a:4f:bb:27:09:7a:11:3b:9a:a6: 6f:56:5a:35:83:b3:e2:30:77:8f:65:cd:3e:c5:b6: df:43:e7:b5:02:54:a4:51:36:6c:15:c0:e6:92:a2: c3:24:c8:b1:ea:51:0c:1a:3d:92:38:1f:18:70:ba: 7c:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:B8:0D:2F:BE:99:FC:1C:B2:99:8F:42:C2:33:70:BC:FE:8F:60:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dd36f711-b158-3c0c-8041-fda6e06f3b03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.2.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:31:3a:f7:6b:1b:56:4c:c0:53:b9:a9:a9:30:8b:bf:9c:a6: 0a:1e:69:a2:d1:ef:10:fa:0e:1d:c3:9f:bf:1a:6b:d2:5e:87: f2:24:42:0e:65:15:45:c1:ca:5b:d7:a7:e2:e7:5d:c9:41:19: 7d:a5:6f:27:0d:03:1c:cc:88:90:94:4a:31:c2:c0:45:ec:f3: 0d:31:5e:a7:34:97:78:02:b1:ab:9a:cc:c9:1e:71:de:40:ed: fd:04:4a:24:99:62:4f:e2:02:99:43:59:9b:25:c8:07:41:53: 2a:ba:85:83:27:b8:17:be:82:f1:06:5e:01:de:4f:df:10:34: 8b:17:61:60:a4:b4:2d:84:f6:ae:61:56:9c:35:39:c6:fb:0d: 80:7f:97:b1:0d:2f:73:ff:1d:22:f1:09:c5:99:9b:40:69:ed: bd:c4:2c:fa:0e:e4:90:b7:e0:e9:e7:4c:4e:fd:e4:36:04:09: 65:41:f5:2d:5c:79:47:3e:d7:13:e2:1e:df:d2:b1:76:c6:44: 85:ea:08:1f:b8:25:73:16:cc:84:ac:cd:27:75:18:6c:49:d1: 3c:d4:cd:95:48:1b:0a:ec:75:05:05:da:23:81:bc:10:23:44: 35:3e:b3:0a:f0:d8:f2:06:c2:66:82:4a:dd:8a:6d:06:a9:f3: f2:02:b2:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdKH12N0kY/jlNsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OWIyOTY3OTMtM2VkNC00OTEwLWIwYTktODM4Y2ZhNDQxYjRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEXVm9OKLTjZk+bGo+UJ6w8Buo4g4jgMz7MZ uI/hTmTkqEmc2Lu0Po8Wm0+baEWStK1oIwMubMY9h+YjBRO2ToWPz9pUZZ5Kf1vc 5aAhJYzud2JgnkJtlvytPnNpVekSSrG5gbkc1F00HWXBEilHf4Cq5a8Lwuu5/ssJ IP7qiz0OAsRvMKAgvgiW/+/M/xIqu1M3aWW+FkE1ixjDYf+MwD+SaCJWvWBsnx3N R+x//zd2v5Ntw6scKIdm2ah8eg8KYsKNFdEffppPuycJehE7mqZvVlo1g7PiMHeP Zc0+xbbfQ+e1AlSkUTZsFcDmkqLDJMix6lEMGj2SOB8YcLp8xwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOS4DS++mfwcspmPQsIzcLz+j2CpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZGQzNmY3MTEtYjE1OC0z YzBjLTgwNDEtZmRhNmUwNmYzYjAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAIgJwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAExOvdrG1ZMwFO5qakwi7+cpgoeaaLR7xD6Dh3Dn78aa9Jeh/IkQg5l FUXBylvXp+LnXclBGX2lbycNAxzMiJCUSjHCwEXs8w0xXqc0l3gCsauazMkecd5A 7f0ESiSZYk/iAplDWZslyAdBUyq6hYMnuBe+gvEGXgHeT98QNIsXYWCktC2E9q5h Vpw1Ocb7DYB/l7ENL3P/HSLxCcWZm0Bp7b3ELPoO5JC34OnnTE795DYECWVB9S1c eUc+1xPiHt/SsXbGRIXqCB+4JXMWzISszSd1GGxJ0TzUzZVIGwrsdQUF2iOBvBAj RDU+swrw2PIGwmaCSt2KbQap8/ICstA= -----END CERTIFICATE-----Generated at Sun Oct 11 18:07:47 2026 by rpki-client