$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1029ae9f-8d03-3bc5-9462-35d623df40dc.roa File: 1029ae9f-8d03-3bc5-9462-35d623df40dc.roa (raw, json) Hash identifier: q8OBLoJHf8WjiYR2cZFGqH5vHfDwYiobUkkQUntg6uo= Subject key identifier: 70:27:BF:58:26:EF:97:0F:51:DE:F6:74:AF:04:C0:20:11:AE:94:C7 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3D848ED0CFF0BF97989440 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1029ae9f-8d03-3bc5-9462-35d623df40dc.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.133.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:84:8e:d0:cf:f0:bf:97:98:94:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=c12c0393-3d3c-4175-ab8a-97bb46fb9564 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:40:ed:cd:b4:f2:98:db:1b:e1:1b:17:3b:a5: e5:b6:74:e7:22:2f:84:63:9b:9e:e5:e2:20:00:da: d6:c4:cd:f5:4b:ba:91:73:4d:fc:1d:57:e4:45:8a: f9:65:d6:02:a3:e7:38:be:77:7c:80:17:e0:de:9e: 04:d7:d4:75:b4:60:c1:4d:14:da:b4:a6:2e:bb:0c: c5:53:54:e2:ac:93:d6:e6:47:70:3f:01:96:1c:4c: 42:b8:d8:48:e9:5f:13:15:06:5b:aa:01:cd:10:86: 12:a9:35:7e:ff:74:a2:f6:4c:7b:dd:fd:f2:79:e7: 48:92:93:e4:4f:af:7e:a0:c4:c4:7b:d1:ad:08:01: 4a:07:74:82:bd:78:25:62:64:2a:3a:b3:4d:59:84: 91:5c:b7:3c:2b:52:3c:8a:91:ab:de:41:50:7c:13: 41:60:eb:b5:74:88:98:5b:b3:44:05:49:0b:f8:29: a9:9e:51:f8:6e:dc:d7:d9:3e:1f:26:54:d4:43:b4: a4:63:3c:7b:00:d3:0b:2f:8a:0e:4a:c6:7e:c6:5e: 7f:13:85:25:01:2b:2a:52:03:5d:e9:7b:a6:8a:c4: 3a:76:8d:62:d6:93:ba:29:14:3b:ef:23:1a:dd:f7: fd:da:5d:fd:e9:4c:76:87:40:e4:dc:ea:99:62:69: 90:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:27:BF:58:26:EF:97:0F:51:DE:F6:74:AF:04:C0:20:11:AE:94:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1029ae9f-8d03-3bc5-9462-35d623df40dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.133.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:f9:a8:4d:c6:dc:ea:fb:34:3b:1a:70:5f:4d:bd:70:89:06: a9:b8:0e:35:f6:70:76:53:d7:5a:3b:6d:83:df:a8:64:f5:8d: f2:c2:b2:f5:a8:39:81:36:ae:03:42:40:c2:05:43:f6:c5:7e: 47:56:03:02:7b:3c:32:0a:0b:4d:c0:a2:d7:ee:7c:13:93:f0: cd:01:49:fd:82:b1:2e:5d:96:1c:11:2e:63:f4:52:16:38:8e: 57:67:ba:28:34:3e:4e:ef:e6:f4:43:51:9a:0f:0a:85:12:f0: 97:7f:12:5c:78:49:f1:fb:88:e4:2f:b9:ad:29:7a:fc:1d:80: 56:bc:4d:88:17:70:39:2f:9b:18:1b:1c:51:d5:f1:75:ef:b3: 36:b9:de:82:09:a0:ff:01:58:25:dc:f5:16:ef:08:92:96:5f: a4:38:a8:1b:bb:98:18:46:f9:4f:7c:fd:91:71:f0:f7:f6:63: 23:a0:a1:c9:46:b7:a1:dc:b1:ad:5f:2f:1e:60:9c:ea:34:f1: e4:65:ad:81:60:c2:3b:ec:b3:32:94:e6:4c:cf:60:4c:c1:54: 92:e7:6b:1d:23:c6:d4:c1:01:a8:59:ec:b5:94:14:f4:a7:b2: 76:26:43:84:f9:c0:02:d7:9b:2e:02:d4:35:06:7b:f7:c5:da: f7:57:0d:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPYSO0M/wv5eYlEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk YzEyYzAzOTMtM2QzYy00MTc1LWFiOGEtOTdiYjQ2ZmI5NTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEDtzbTymNsb4RsXO6XltnTnIi+EY5ue5eIg ANrWxM31S7qRc038HVfkRYr5ZdYCo+c4vnd8gBfg3p4E19R1tGDBTRTatKYuuwzF U1TirJPW5kdwPwGWHExCuNhI6V8TFQZbqgHNEIYSqTV+/3Si9kx73f3yeedIkpPk T69+oMTEe9GtCAFKB3SCvXglYmQqOrNNWYSRXLc8K1I8ipGr3kFQfBNBYOu1dIiY W7NEBUkL+CmpnlH4btzX2T4fJlTUQ7SkYzx7ANMLL4oOSsZ+xl5/E4UlASsqUgNd 6XumisQ6do1i1pO6KRQ77yMa3ff92l396Ux2h0Dk3OqZYmmQswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHAnv1gm75cPUd72dK8EwCARrpTHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMTAyOWFlOWYtOGQwMy0z YmM1LTk0NjItMzVkNjIzZGY0MGRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoUAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKb5qE3G3Or7NDsacF9NvXCJBqm4DjX2cHZT11o7bYPfqGT1jfLCsvWo OYE2rgNCQMIFQ/bFfkdWAwJ7PDIKC03AotfufBOT8M0BSf2CsS5dlhwRLmP0UhY4 jldnuig0Pk7v5vRDUZoPCoUS8Jd/Elx4SfH7iOQvua0pevwdgFa8TYgXcDkvmxgb HFHV8XXvsza53oIJoP8BWCXc9RbvCJKWX6Q4qBu7mBhG+U98/ZFx8Pf2YyOgoclG t6Hcsa1fLx5gnOo08eRlrYFgwjvsszKU5kzPYEzBVJLnax0jxtTBAahZ7LWUFPSn snYmQ4T5wALXmy4C1DUGe/fF2vdXDWM= -----END CERTIFICATE-----Generated at Mon Sep 28 21:37:33 2026 by rpki-client