$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/216dae8a-ecdf-31f4-896a-2a78606e4177.roa File: 216dae8a-ecdf-31f4-896a-2a78606e4177.roa (raw, json) Hash identifier: k0mk4W4fVzDJGpRuLokv/lh59deE8gAV6nDNNAWbJ94= Subject key identifier: 25:EB:86:49:21:66:83:C7:01:27:A5:C4:3F:31:25:62:F5:B5:4A:69 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DC6605F93A27705FC0168 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/216dae8a-ecdf-31f4-896a-2a78606e4177.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.67.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:c6:60:5f:93:a2:77:05:fc:01:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=59c86ee5-85e8-4b60-8213-f2b34a1d30b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:ea:96:26:d7:e5:b3:d3:7f:79:e4:93:01:38: 2c:b6:3a:dc:96:54:07:03:01:bf:ba:80:fd:ca:f1: 9f:d1:8d:ee:93:32:79:cd:87:4d:31:cb:d8:9f:4e: 6c:fd:86:7a:de:f5:18:83:55:93:0e:85:d0:d3:e5: 9f:87:91:24:e0:4d:d2:78:80:46:b6:7b:38:41:54: 74:47:10:f5:a6:b7:19:0d:f3:65:b6:64:87:6a:86: 7a:8c:b7:2f:fb:b1:de:b2:ab:9e:6a:da:3f:32:a6: 70:64:43:2d:75:ce:c9:09:91:aa:6f:c2:78:b3:3d: a1:83:31:75:2b:b8:4f:dc:11:95:f7:9e:a7:14:83: e4:1f:0d:97:87:2e:e9:b5:10:d2:ec:9d:a0:80:58: b7:86:cb:07:c0:7e:e6:07:65:5f:69:86:d3:a3:c9: ba:48:d1:48:29:65:35:f3:52:33:bc:59:bd:1e:68: ac:f0:38:5b:bf:31:d6:9e:02:b4:27:12:e1:9c:bc: 91:65:b5:53:4a:6f:61:6a:f6:b8:fe:4d:73:27:0d: bd:00:43:36:7f:5d:39:5a:77:8c:97:95:f6:60:8c: 82:b9:b2:97:5a:6c:c8:ad:be:15:0b:de:eb:83:b3: 47:83:a5:7d:07:d0:05:00:41:53:8a:27:fd:96:c7: 00:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:EB:86:49:21:66:83:C7:01:27:A5:C4:3F:31:25:62:F5:B5:4A:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/216dae8a-ecdf-31f4-896a-2a78606e4177.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.67.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:98:9b:62:9e:5e:ce:08:d1:bb:e2:63:87:ff:d8:f4:a6:2b: 6b:c8:f6:1c:34:4b:86:51:f3:17:5a:37:b4:6c:59:c9:50:16: 3f:3d:d4:9b:d8:7f:01:6e:3f:2e:34:d2:5b:2d:4e:61:d6:06: bb:7f:3e:bc:ec:53:2c:57:e6:3d:00:34:91:2a:0f:41:10:b9: 33:25:11:7f:df:7d:5b:a4:97:31:2e:61:a1:82:0b:6b:a7:f6: a4:86:7f:9c:ab:7a:3f:53:a4:e3:f4:19:c8:20:9c:22:fa:a7: 9e:e3:10:df:2a:a3:05:14:29:45:4e:63:6e:34:25:21:ed:cc: ca:57:f1:7e:02:8a:c0:cf:d9:bf:00:63:4f:7c:0a:eb:92:8c: af:fd:02:96:48:67:c7:6d:78:fe:e8:83:6e:b1:7a:00:c3:ac: 9b:ba:cb:65:b4:92:b4:c8:76:f3:ab:ac:bc:13:64:fd:36:53: 04:5a:2a:81:89:3e:85:8c:bf:8a:e9:d6:42:1a:9c:58:b1:b2: 6f:53:49:5b:d7:c4:5f:10:85:1e:29:c7:8c:27:36:39:61:11: 54:aa:53:e5:28:ab:52:85:37:72:4a:67:1b:2b:75:85:60:d9: 0f:c8:20:2a:63:8e:d2:d9:17:17:ad:5b:a6:3b:d5:83:ac:00: c8:1d:ce:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPcZgX5OidwX8AWgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk NTljODZlZTUtODVlOC00YjYwLTgyMTMtZjJiMzRhMWQzMGI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhuqWJtfls9N/eeSTATgstjrcllQHAwG/uoD9 yvGf0Y3ukzJ5zYdNMcvYn05s/YZ63vUYg1WTDoXQ0+Wfh5Ek4E3SeIBGtns4QVR0 RxD1prcZDfNltmSHaoZ6jLcv+7Hesqueato/MqZwZEMtdc7JCZGqb8J4sz2hgzF1 K7hP3BGV956nFIPkHw2Xhy7ptRDS7J2ggFi3hssHwH7mB2VfaYbTo8m6SNFIKWU1 81IzvFm9Hmis8DhbvzHWngK0JxLhnLyRZbVTSm9hava4/k1zJw29AEM2f105WneM l5X2YIyCubKXWmzIrb4VC97rg7NHg6V9B9AFAEFTiif9lscAwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCXrhkkhZoPHASelxD8xJWL1tUppMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjE2ZGFlOGEtZWNkZi0z MWY0LTg5NmEtMmE3ODYwNmU0MTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkNwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHqYm2KeXs4I0bviY4f/2PSmK2vI9hw0S4ZR8xdaN7RsWclQFj891JvY fwFuPy400lstTmHWBrt/PrzsUyxX5j0ANJEqD0EQuTMlEX/ffVuklzEuYaGCC2un 9qSGf5yrej9TpOP0GcggnCL6p57jEN8qowUUKUVOY240JSHtzMpX8X4CisDP2b8A Y098CuuSjK/9ApZIZ8dteP7og26xegDDrJu6y2W0krTIdvOrrLwTZP02UwRaKoGJ PoWMv4rp1kIanFixsm9TSVvXxF8QhR4px4wnNjlhEVSqU+Uoq1KFN3JKZxsrdYVg 2Q/IICpjjtLZFxetW6Y71YOsAMgdzrQ= -----END CERTIFICATE-----Generated at Tue Sep 29 11:41:42 2026 by rpki-client