$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/15ad3a17-d256-33f5-86df-f5449a5011c9.roa File: 15ad3a17-d256-33f5-86df-f5449a5011c9.roa (raw, json) Hash identifier: zpgTq2covXHanYKD7F/k+t37IBV5+COiJYjZ/mEbyVs= Subject key identifier: 4C:66:53:0E:78:09:35:CB:70:05:35:0C:69:F3:EF:73:ED:22:E0:B4 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DC37337821DA3B9C8F880 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/15ad3a17-d256-33f5-86df-f5449a5011c9.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.139.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:c3:73:37:82:1d:a3:b9:c8:f8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=336d4dc2-e0a3-4685-9177-858c9cadf12b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e4:84:10:75:3b:a2:53:0b:66:7b:3a:e1:c5: 6b:2e:00:d5:98:6b:f2:60:06:a9:1b:ef:6d:7d:d4: 3f:fd:cc:b6:f7:1a:8b:bc:e4:7f:c4:4d:ad:e1:81: 7b:67:c4:4b:50:d4:e9:bf:df:bc:37:70:77:0d:b8: 1d:1b:37:ca:46:ea:13:8f:2c:5d:8b:f8:d8:00:f5: 49:ac:6c:61:1b:90:dd:4b:5b:b7:f7:80:35:05:b1: b0:3c:18:f8:d6:4e:30:e5:08:e2:67:c3:e7:eb:df: 17:9b:60:8c:4d:57:0d:56:9a:6b:3f:c8:75:a1:cf: 5d:f2:86:5f:b8:6d:b6:d7:2c:a8:c7:c6:eb:6c:c7: 6a:d5:6c:7b:39:eb:f0:85:3d:45:92:f4:bb:2e:0a: 18:97:a2:49:60:5d:19:15:8a:4d:3a:ac:57:12:66: f6:2d:7d:97:58:29:3c:b8:2f:ce:4f:48:27:9a:18: de:b6:2a:71:4b:d5:e4:0f:f7:51:fd:3c:af:fe:4b: a9:db:11:db:eb:3f:ea:a2:a3:6f:d5:78:cc:0c:13: 8f:f6:3e:05:1a:be:2b:9d:85:0d:7a:99:5d:2b:a0: fe:7e:a6:51:57:b2:e5:f4:5c:59:78:22:15:22:eb: c3:49:e0:91:4e:83:bd:f7:96:bd:b0:13:25:53:cc: 9d:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:66:53:0E:78:09:35:CB:70:05:35:0C:69:F3:EF:73:ED:22:E0:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/15ad3a17-d256-33f5-86df-f5449a5011c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.139.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:ee:0d:4e:c7:c9:46:ce:96:86:e1:33:2f:b5:cd:63:11:6d: 93:d7:d8:2d:47:3d:48:13:15:5c:47:95:bc:fe:9a:ba:0b:69: 0a:e8:86:4e:ad:8c:aa:d8:a2:36:dd:68:b4:f0:d8:29:cf:be: a1:04:01:52:de:ca:10:3c:c2:62:23:bb:2d:2c:f3:d1:50:75: 4c:d9:4c:fb:ec:9e:e1:03:7b:7a:f4:13:1c:11:7a:15:51:b9: a1:0f:9a:f0:70:35:5d:b0:07:42:69:33:0d:9c:06:56:24:46: c2:cc:c3:cf:be:d8:fe:a6:01:a1:27:59:f5:e1:8a:08:6a:1a: e2:4e:f7:21:0f:e3:32:2b:3e:b3:54:2d:af:89:97:1e:bf:55: fb:aa:ca:0e:e3:83:cb:3c:b3:a9:23:62:0b:ad:5f:ec:03:94: 07:52:ec:c6:97:af:e9:50:32:d6:14:b0:2e:cb:14:64:ee:bf: b9:74:5a:4e:5a:6e:fd:83:a7:bc:7f:06:63:9d:b7:5f:85:e2: 5d:04:e3:b4:d1:b8:f7:36:f1:8c:81:0e:ce:fb:24:96:cb:b0: be:04:9c:37:17:f9:50:94:bc:42:0e:57:22:03:f7:7e:cd:a0: 98:eb:e9:30:5b:21:0b:ff:44:d1:49:df:ba:da:44:93:36:f4: 1a:ec:7a:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPcNzN4Ido7nI+IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk MzM2ZDRkYzItZTBhMy00Njg1LTkxNzctODU4YzljYWRmMTJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluSEEHU7olMLZns64cVrLgDVmGvyYAapG+9t fdQ//cy29xqLvOR/xE2t4YF7Z8RLUNTpv9+8N3B3DbgdGzfKRuoTjyxdi/jYAPVJ rGxhG5DdS1u394A1BbGwPBj41k4w5QjiZ8Pn698Xm2CMTVcNVpprP8h1oc9d8oZf uG221yyox8brbMdq1Wx7OevwhT1FkvS7LgoYl6JJYF0ZFYpNOqxXEmb2LX2XWCk8 uC/OT0gnmhjetipxS9XkD/dR/Tyv/kup2xHb6z/qoqNv1XjMDBOP9j4FGr4rnYUN epldK6D+fqZRV7Ll9FxZeCIVIuvDSeCRToO995a9sBMlU8ydtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFExmUw54CTXLcAU1DGnz73PtIuC0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMTVhZDNhMTctZDI1Ni0z M2Y1LTg2ZGYtZjU0NDlhNTAxMWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIovQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC/uDU7HyUbOlobhMy+1zWMRbZPX2C1HPUgTFVxHlbz+mroLaQrohk6t jKrYojbdaLTw2CnPvqEEAVLeyhA8wmIjuy0s89FQdUzZTPvsnuEDe3r0ExwRehVR uaEPmvBwNV2wB0JpMw2cBlYkRsLMw8++2P6mAaEnWfXhighqGuJO9yEP4zIrPrNU La+Jlx6/Vfuqyg7jg8s8s6kjYgutX+wDlAdS7MaXr+lQMtYUsC7LFGTuv7l0Wk5a bv2Dp7x/BmOdt1+F4l0E47TRuPc28YyBDs77JJbLsL4EnDcX+VCUvEIOVyID937N oJjr6TBbIQv/RNFJ37raRJM29Brseso= -----END CERTIFICATE-----Generated at Sat Oct 10 14:16:46 2026 by rpki-client