$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0a3bf4aa-d2d6-3e8d-9a6f-ddc205e5d02c.roa File: 0a3bf4aa-d2d6-3e8d-9a6f-ddc205e5d02c.roa (raw, json) Hash identifier: YH/1zgaXeAnbd8PoK5gJgaxSk6EYJ8+g+j+nJpXT038= Subject key identifier: F4:6D:52:89:EB:DA:C1:2F:E5:BD:E2:66:AA:9E:09:9D:55:B8:AF:DB Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DC4C9D31021AD15F8FA80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0a3bf4aa-d2d6-3e8d-9a6f-ddc205e5d02c.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.138.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:c4:c9:d3:10:21:ad:15:f8:fa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=4fd7a262-9518-4256-8ee6-4f12aaa94763 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:38:a8:89:02:c8:e2:41:67:cb:27:8c:89:7a: de:42:0a:2a:d0:3d:69:7c:6e:53:f1:5f:80:5a:3c: b8:a1:49:4e:3b:a3:25:91:11:20:bf:ff:39:cf:0e: 6d:a2:d9:55:7c:04:86:73:7c:84:55:db:4e:0b:d2: 71:32:f4:7b:b0:f6:34:99:21:89:64:b8:e5:71:0f: 19:be:79:85:b3:45:1b:c3:57:2e:a7:8e:1d:86:cf: 25:22:9a:6f:a2:c0:6d:76:49:e2:a9:b9:fe:ff:8d: 64:54:a0:39:60:4a:24:df:2e:6e:67:5d:2f:a8:cc: 4e:70:e6:2f:da:19:0e:c8:c9:71:bd:22:ed:8a:0a: 82:ea:85:1e:ae:fc:10:70:ed:23:a3:08:46:f9:f8: 28:42:39:d0:7e:0a:c4:ab:ad:91:e4:51:74:d4:f9: d2:c3:ad:d8:e8:ab:ed:8d:3a:38:23:40:6b:52:66: ae:cb:5a:b7:1c:99:92:73:be:fb:2e:98:dc:48:e8: 85:7b:ee:52:35:1e:10:59:2b:c3:4f:2c:2b:3e:ce: dc:cc:84:e7:a8:79:d4:9a:9a:35:22:da:79:77:12: 0d:0b:cb:49:6c:a3:f6:83:db:f2:8f:4e:0c:ed:93: b6:d0:72:6e:87:c8:2d:44:fc:57:60:25:4a:71:63: 66:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:6D:52:89:EB:DA:C1:2F:E5:BD:E2:66:AA:9E:09:9D:55:B8:AF:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0a3bf4aa-d2d6-3e8d-9a6f-ddc205e5d02c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.138.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:fd:69:61:71:5f:5b:d1:7d:a8:9b:d7:f1:ea:10:d0:b2:75: 4e:c8:b6:10:c8:85:d7:89:db:0e:57:41:de:51:1a:40:43:b7: 37:3f:d3:56:ea:05:43:c2:1f:70:6d:96:84:64:07:2b:02:e6: e3:5f:06:2d:a2:41:a4:3a:eb:83:76:c0:95:3d:30:61:af:1c: 28:68:2e:ab:b3:c7:38:53:3b:8b:3a:01:4e:9d:a6:ce:90:36: 8b:b1:01:63:3d:67:b7:7d:2e:51:27:3f:1a:d2:b3:95:de:47: cb:50:61:23:99:74:03:a0:57:44:a7:f8:06:b2:25:f8:f6:a0: 66:d3:c7:80:ea:95:5f:ad:cd:e7:61:0f:94:c7:e7:c4:16:21: f0:4e:f8:53:b3:98:c3:9b:f4:bd:2b:40:95:20:51:08:87:9b: d8:cc:14:a3:d9:45:0b:fe:ba:9a:a8:51:c0:31:ea:47:6b:95: 74:ad:6a:36:4c:e1:15:d7:52:b5:94:2d:5e:27:ca:35:32:fd: 85:c2:d5:9e:ea:ce:98:6e:5a:b2:4a:a3:ac:69:4b:84:7f:9d: 7e:45:13:68:6b:3f:91:f7:72:3b:c0:f2:69:3c:8b:6a:03:ec: 86:99:a4:77:9e:96:d2:e6:08:61:1d:96:a4:bf:3e:22:4b:ad: a7:04:4e:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPcTJ0xAhrRX4+oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk NGZkN2EyNjItOTUxOC00MjU2LThlZTYtNGYxMmFhYTk0NzYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzioiQLI4kFnyyeMiXreQgoq0D1pfG5T8V+A Wjy4oUlOO6MlkREgv/85zw5totlVfASGc3yEVdtOC9JxMvR7sPY0mSGJZLjlcQ8Z vnmFs0Ubw1cup44dhs8lIppvosBtdkniqbn+/41kVKA5YEok3y5uZ10vqMxOcOYv 2hkOyMlxvSLtigqC6oUervwQcO0jowhG+fgoQjnQfgrEq62R5FF01PnSw63Y6Kvt jTo4I0BrUmauy1q3HJmSc777LpjcSOiFe+5SNR4QWSvDTywrPs7czITnqHnUmpo1 Itp5dxINC8tJbKP2g9vyj04M7ZO20HJuh8gtRPxXYCVKcWNmcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPRtUonr2sEv5b3iZqqeCZ1VuK/bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMGEzYmY0YWEtZDJkNi0z ZThkLTlhNmYtZGRjMjA1ZTVkMDJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIorAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADj9aWFxX1vRfaib1/HqENCydU7IthDIhdeJ2w5XQd5RGkBDtzc/01bq BUPCH3BtloRkBysC5uNfBi2iQaQ664N2wJU9MGGvHChoLquzxzhTO4s6AU6dps6Q NouxAWM9Z7d9LlEnPxrSs5XeR8tQYSOZdAOgV0Sn+AayJfj2oGbTx4DqlV+tzedh D5TH58QWIfBO+FOzmMOb9L0rQJUgUQiHm9jMFKPZRQv+upqoUcAx6kdrlXStajZM 4RXXUrWULV4nyjUy/YXC1Z7qzphuWrJKo6xpS4R/nX5FE2hrP5H3cjvA8mk8i2oD 7IaZpHeeltLmCGEdlqS/PiJLracETl8= -----END CERTIFICATE-----Generated at Wed Sep 30 03:41:24 2026 by rpki-client