$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0b8b396d-c0db-3985-9449-b8ee26936b3d.roa File: 0b8b396d-c0db-3985-9449-b8ee26936b3d.roa (raw, json) Hash identifier: ocCWuzBkW0tkSzFKOZmQD9oTIH7pguyRgBmaaFeNWzQ= Subject key identifier: 72:7D:99:5B:EE:3A:5F:2F:CD:22:79:C9:B7:EA:34:DA:A6:89:F8:4A Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DBC6D0CE0A2C42AC5C720 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0b8b396d-c0db-3985-9449-b8ee26936b3d.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.138.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:bc:6d:0c:e0:a2:c4:2a:c5:c7:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=f1d2953a-615f-4f66-bb76-6de34835db15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:03:1f:f9:87:30:43:02:06:bd:35:25:74:76: e7:e5:02:4c:56:06:76:7c:78:11:01:bd:42:43:a4: 15:5d:61:79:b9:a9:af:b9:6f:96:96:19:51:a3:5e: 4b:7a:ea:03:4b:8e:e7:d7:89:5f:f7:28:ad:af:e2: 4f:07:8e:1c:0d:2d:0f:27:2e:07:01:0d:58:a3:4e: 6e:80:64:31:ff:73:e7:a2:0e:dd:f0:53:8c:72:82: 7e:73:14:52:db:57:4f:40:3b:2d:bc:90:dd:a3:8c: 07:97:ac:ad:82:6a:63:d0:d4:95:5c:f9:e3:bb:78: 2a:d6:7b:47:6b:ca:87:9f:a4:49:7f:ac:47:aa:33: cf:95:86:40:a3:46:be:c8:bc:10:06:b9:63:f3:f0: 17:6a:3c:0f:ff:0a:26:98:c5:ff:a4:7f:64:fd:bb: 64:32:c4:76:49:01:90:b2:a7:44:57:fa:80:f4:65: aa:46:0e:fa:3f:a5:b2:1d:bb:c4:67:07:35:a7:91: 90:cc:78:f9:c2:4a:37:3e:9e:26:92:81:a9:4f:34: e6:ae:d8:57:5d:c0:9a:51:a9:fa:ab:a8:c2:16:d8: 8c:b6:cc:38:71:d4:6a:d4:03:c9:5e:41:b3:16:bd: 90:20:59:37:12:d3:46:43:97:ae:aa:2b:6f:c4:6d: ee:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:7D:99:5B:EE:3A:5F:2F:CD:22:79:C9:B7:EA:34:DA:A6:89:F8:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0b8b396d-c0db-3985-9449-b8ee26936b3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.138.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:e4:df:27:82:f6:de:bb:4a:e7:a6:8f:9d:98:db:ee:02:74: 26:61:74:76:85:dc:e3:69:c6:c0:7e:43:58:c5:a3:53:c5:fc: eb:dc:30:fc:c9:e8:50:53:79:93:21:26:78:89:45:5e:5d:2a: b7:d2:b4:11:ef:7d:2f:69:d9:66:bc:b5:0b:81:f6:93:60:d4: 49:b1:5a:f4:ad:ee:10:ae:0e:5b:92:51:bc:21:d8:f6:2b:40: f3:24:5e:cb:b6:e6:b3:3a:1c:33:be:b7:96:5c:2a:38:28:20: b2:09:39:56:a8:9e:72:92:53:ee:74:63:67:8e:75:1c:db:a4: d9:dd:57:aa:a2:fe:11:f4:43:05:7c:6f:3d:51:64:ea:1b:80: 76:10:78:15:32:55:ae:8b:62:fa:ea:62:a8:c5:9d:8a:e9:2d: 67:47:9d:a0:0e:4e:35:95:68:b5:50:df:2d:04:81:5c:60:0c: 65:9a:b5:9f:72:c0:90:a3:a4:2d:a1:ec:99:b6:e7:7f:58:2b: 27:97:c0:15:b7:ed:a5:ce:b3:77:d1:c3:f7:73:5a:be:de:38: 77:3e:6a:58:e8:4d:fe:63:41:82:a4:50:7e:ed:c1:cc:ef:7b: c6:7a:e2:aa:8b:70:b8:a0:d9:0d:37:bb:fe:8b:3b:4a:7d:57: d7:71:b1:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPbxtDOCixCrFxyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk ZjFkMjk1M2EtNjE1Zi00ZjY2LWJiNzYtNmRlMzQ4MzVkYjE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwMf+YcwQwIGvTUldHbn5QJMVgZ2fHgRAb1C Q6QVXWF5uamvuW+WlhlRo15LeuoDS47n14lf9yitr+JPB44cDS0PJy4HAQ1Yo05u gGQx/3Pnog7d8FOMcoJ+cxRS21dPQDstvJDdo4wHl6ytgmpj0NSVXPnju3gq1ntH a8qHn6RJf6xHqjPPlYZAo0a+yLwQBrlj8/AXajwP/wommMX/pH9k/btkMsR2SQGQ sqdEV/qA9GWqRg76P6WyHbvEZwc1p5GQzHj5wko3Pp4mkoGpTzTmrthXXcCaUan6 q6jCFtiMtsw4cdRq1APJXkGzFr2QIFk3EtNGQ5euqitvxG3uZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHJ9mVvuOl8vzSJ5ybfqNNqmifhKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMGI4YjM5NmQtYzBkYi0z OTg1LTk0NDktYjhlZTI2OTM2YjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIorQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEvk3yeC9t67Suemj52Y2+4CdCZhdHaF3ONpxsB+Q1jFo1PF/OvcMPzJ 6FBTeZMhJniJRV5dKrfStBHvfS9p2Wa8tQuB9pNg1EmxWvSt7hCuDluSUbwh2PYr QPMkXsu25rM6HDO+t5ZcKjgoILIJOVaonnKSU+50Y2eOdRzbpNndV6qi/hH0QwV8 bz1RZOobgHYQeBUyVa6LYvrqYqjFnYrpLWdHnaAOTjWVaLVQ3y0EgVxgDGWatZ9y wJCjpC2h7Jm2539YKyeXwBW37aXOs3fRw/dzWr7eOHc+aljoTf5jQYKkUH7twczv e8Z64qqLcLig2Q03u/6LO0p9V9dxseo= -----END CERTIFICATE-----Generated at Mon Sep 28 16:10:23 2026 by rpki-client