$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0a43e478-fc5c-39d9-bf23-f58e3c093f82.roa File: 0a43e478-fc5c-39d9-bf23-f58e3c093f82.roa (raw, json) Hash identifier: XdmtDWZa/bIrz/lJZngEt3LEc6hHnlNuORor26z1/9Q= Subject key identifier: 67:8F:D6:01:EB:8B:C1:B2:23:C8:E7:EE:02:62:2D:3D:4C:DA:2C:3B Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DB68F734E17D11F45AB00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0a43e478-fc5c-39d9-bf23-f58e3c093f82.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.21.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:b6:8f:73:4e:17:d1:1f:45:ab:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=7739387d-05ab-4c10-a464-0e9c48dc9c76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:a0:5f:6c:f4:08:be:84:2a:a8:2b:90:b5:82: a1:f0:d2:64:ab:60:11:43:33:ec:28:c2:2a:3b:7b: 84:9f:e1:16:f7:fe:12:61:42:2d:6a:f0:b1:2f:25: 6e:3f:f2:1d:f4:8d:ee:f1:ca:2d:a6:52:1a:db:d4: 86:f6:cc:f5:65:3c:64:7e:fa:94:d2:70:d8:e1:49: d2:34:d4:1a:d1:1c:b4:09:50:4b:85:ac:57:cd:20: 65:6c:f5:b3:7f:54:4a:d1:ff:17:bb:04:06:4a:bb: 54:72:5d:95:a4:2d:b2:97:60:a1:d2:c6:ef:4f:88: eb:5f:af:4f:88:4b:bd:8a:61:ab:da:6d:3b:9e:32: f5:72:83:b1:e8:a3:e4:98:cc:fa:48:45:91:f1:47: 12:b4:29:4d:7c:10:07:65:80:5f:46:cc:42:67:cb: 08:63:d7:96:a1:e3:b3:1c:7d:43:a6:51:48:bd:99: cc:04:4c:31:46:64:09:4b:a1:14:21:f2:ed:e2:7c: 51:c0:d8:65:0b:35:ca:73:d0:fa:b5:c0:33:83:c0: d7:42:82:66:26:48:7f:43:67:ac:f1:ef:a1:92:11: 2e:eb:68:b2:0a:f0:04:83:f6:22:df:e9:4e:75:8f: dc:78:40:35:6e:95:a2:60:55:3d:1d:bc:1d:a4:95: 52:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:8F:D6:01:EB:8B:C1:B2:23:C8:E7:EE:02:62:2D:3D:4C:DA:2C:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0a43e478-fc5c-39d9-bf23-f58e3c093f82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.21.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:df:42:3d:cd:b4:d9:69:8d:2a:f1:02:b1:63:cf:65:31:1d: 37:d0:09:f3:1f:70:4e:1e:44:db:57:c7:5e:7d:f9:8b:7e:41: c8:22:c4:bc:b4:b7:e3:3f:60:c3:2d:4b:6f:bf:18:30:16:09: 9a:5d:97:b3:2f:56:5a:97:59:84:8d:2a:11:97:f3:c2:87:18: 89:bb:53:40:18:08:52:29:bc:02:e4:41:57:7d:aa:27:d3:13: 8a:60:25:1f:41:8c:55:80:82:51:67:4f:ef:78:61:91:11:8a: 9e:a5:80:44:08:e0:7e:9a:11:de:dc:1d:91:d9:95:1d:d1:9d: 3c:77:35:dc:b4:22:fb:54:51:e5:11:4a:40:1a:25:c6:fb:de: 4d:26:86:cd:32:9d:5c:1d:e3:73:09:74:10:69:f5:f9:a1:97: cc:70:11:d0:70:7a:13:d7:3e:72:e5:b7:98:dd:99:7d:a0:4d: 9a:98:03:c3:70:40:df:08:99:21:af:c6:68:4e:ac:0c:e8:8f: cf:64:4d:09:0f:93:1b:de:7a:50:c1:a8:f4:c3:b7:11:37:09: e2:f9:4f:bf:1c:c5:f7:6d:d8:50:d2:7a:f0:2e:fd:f8:6f:87: c1:7a:60:d8:8f:3a:80:d0:61:9f:a7:77:1d:f3:40:c7:96:ad: a3:d9:6c:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPbaPc04X0R9FqwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk NzczOTM4N2QtMDVhYi00YzEwLWE0NjQtMGU5YzQ4ZGM5Yzc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6aBfbPQIvoQqqCuQtYKh8NJkq2ARQzPsKMIq O3uEn+EW9/4SYUItavCxLyVuP/Id9I3u8cotplIa29SG9sz1ZTxkfvqU0nDY4UnS NNQa0Ry0CVBLhaxXzSBlbPWzf1RK0f8XuwQGSrtUcl2VpC2yl2Ch0sbvT4jrX69P iEu9imGr2m07njL1coOx6KPkmMz6SEWR8UcStClNfBAHZYBfRsxCZ8sIY9eWoeOz HH1DplFIvZnMBEwxRmQJS6EUIfLt4nxRwNhlCzXKc9D6tcAzg8DXQoJmJkh/Q2es 8e+hkhEu62iyCvAEg/Yi3+lOdY/ceEA1bpWiYFU9HbwdpJVSmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGeP1gHri8GyI8jn7gJiLT1M2iw7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMGE0M2U0NzgtZmM1Yy0z OWQ5LWJmMjMtZjU4ZTNjMDkzZjgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHIhWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ3fQj3NtNlpjSrxArFjz2UxHTfQCfMfcE4eRNtXx159+Yt+QcgixLy0 t+M/YMMtS2+/GDAWCZpdl7MvVlqXWYSNKhGX88KHGIm7U0AYCFIpvALkQVd9qifT E4pgJR9BjFWAglFnT+94YZERip6lgEQI4H6aEd7cHZHZlR3RnTx3Ndy0IvtUUeUR SkAaJcb73k0mhs0ynVwd43MJdBBp9fmhl8xwEdBwehPXPnLlt5jdmX2gTZqYA8Nw QN8ImSGvxmhOrAzoj89kTQkPkxveelDBqPTDtxE3CeL5T78cxfdt2FDSevAu/fhv h8F6YNiPOoDQYZ+ndx3zQMeWraPZbCU= -----END CERTIFICATE-----Generated at Sun Oct 11 08:41:50 2026 by rpki-client