$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/230f6dbc-1f24-3b50-b93b-bc670d4a5c12.roa File: 230f6dbc-1f24-3b50-b93b-bc670d4a5c12.roa (raw, json) Hash identifier: HGo5bN5+QoqnhjuOFa+yUImPChn6nWO+Ed9bmNvmwxI= Subject key identifier: E2:C1:A3:FE:CB:2B:15:1A:D6:CE:0B:4C:1C:A8:4E:AD:FB:50:76:10 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DA44D75C7B47A5F1B8280 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/230f6dbc-1f24-3b50-b93b-bc670d4a5c12.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.99.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:a4:4d:75:c7:b4:7a:5f:1b:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=2f825f1a-e3c2-4701-92cf-e796d56e141f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:38:29:21:48:61:ee:ee:7d:09:78:e7:02:bf: 37:eb:8f:80:af:03:f3:1e:cb:5d:5a:e7:0f:ca:a1: 10:95:3b:c9:6b:9f:41:a3:93:44:7e:b0:c9:95:86: 09:f6:1e:db:a2:9e:f8:4b:ff:1c:27:40:74:fa:84: f5:80:2a:89:f5:e6:57:04:08:15:3b:ee:18:d7:e5: 5e:3b:9e:ea:e5:f2:4a:e9:22:53:c8:52:17:82:c5: 46:00:b4:27:4b:0a:b2:27:da:ad:82:63:4c:cb:3a: d5:1c:b4:23:89:71:c3:04:5e:77:14:f7:d2:00:1d: 4f:26:3c:ea:c9:3e:bc:2a:21:43:17:70:d5:4d:70: fd:40:3e:94:d9:6a:36:51:7d:cf:22:1c:02:22:86: 52:d8:1e:e6:cd:57:5f:af:56:fd:f3:87:6e:a9:c8: 82:92:fb:1e:d1:34:7e:9c:da:57:88:da:40:d8:45: b5:17:88:0a:70:5b:93:1a:f8:56:1c:66:40:b1:c5: 5c:e0:67:2f:bb:33:eb:b8:f6:dc:e3:2e:d3:e9:0f: 78:25:24:a9:df:3d:68:94:87:c1:af:bc:3c:4d:c1: 61:31:e3:1e:10:1d:8c:2a:49:cf:d1:c2:4d:6e:b3: 54:cd:5c:cf:dd:8b:83:41:45:5e:bc:27:ff:7e:37: fe:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:C1:A3:FE:CB:2B:15:1A:D6:CE:0B:4C:1C:A8:4E:AD:FB:50:76:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/230f6dbc-1f24-3b50-b93b-bc670d4a5c12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.99.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:de:de:5e:42:92:52:70:17:2a:eb:8f:cb:d6:61:ba:3f:c3: c2:43:5f:dc:36:63:58:08:55:6c:fc:1d:52:b7:5d:ff:43:5b: f5:45:fe:23:89:c8:fc:5e:65:8f:87:cb:b4:f4:c7:1a:f5:0c: ab:3c:49:97:8c:c3:0e:27:29:92:2b:89:ae:01:4d:37:8d:1c: f7:22:13:25:f3:ca:7c:2d:41:ef:70:2c:ce:c2:6a:02:c5:d8: 05:13:00:92:1e:3c:f5:d9:26:4e:2b:d4:b0:08:17:97:0c:64: d7:b6:a1:bc:e6:82:f0:4d:81:2b:a0:af:2d:88:92:44:6a:94: 20:01:a8:ae:d5:8a:7e:08:d0:6f:ad:a5:f1:31:c2:fd:f1:de: 36:46:c3:c1:21:4d:2c:3b:dd:71:5e:42:2b:24:00:b9:02:6c: 50:22:3d:b9:5a:8e:43:67:bb:2a:e6:d6:ea:41:ec:85:18:eb: ce:ab:24:26:99:44:c6:7a:d6:e9:d5:c2:3f:09:c1:14:63:1b: b1:ea:07:a6:32:ab:e3:b0:a8:8e:0b:44:25:99:9f:ea:cf:81: 70:0e:dd:1b:de:e7:29:5c:03:e5:8e:1c:e2:0b:3f:2a:a5:db: 7b:5b:d9:52:d5:7d:6b:14:fc:93:62:a0:72:ef:62:75:7d:19: 8a:4b:aa:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPaRNdce0el8bgoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk MmY4MjVmMWEtZTNjMi00NzAxLTkyY2YtZTc5NmQ1NmUxNDFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTgpIUhh7u59CXjnAr8364+ArwPzHstdWucP yqEQlTvJa59Bo5NEfrDJlYYJ9h7bop74S/8cJ0B0+oT1gCqJ9eZXBAgVO+4Y1+Ve O57q5fJK6SJTyFIXgsVGALQnSwqyJ9qtgmNMyzrVHLQjiXHDBF53FPfSAB1PJjzq yT68KiFDF3DVTXD9QD6U2Wo2UX3PIhwCIoZS2B7mzVdfr1b984duqciCkvse0TR+ nNpXiNpA2EW1F4gKcFuTGvhWHGZAscVc4GcvuzPruPbc4y7T6Q94JSSp3z1olIfB r7w8TcFhMeMeEB2MKknP0cJNbrNUzVzP3YuDQUVevCf/fjf+NQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOLBo/7LKxUa1s4LTByoTq37UHYQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjMwZjZkYmMtMWYyNC0z YjUwLWI5M2ItYmM2NzBkNGE1YzEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImNAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC7e3l5CklJwFyrrj8vWYbo/w8JDX9w2Y1gIVWz8HVK3Xf9DW/VF/iOJ yPxeZY+Hy7T0xxr1DKs8SZeMww4nKZIria4BTTeNHPciEyXzynwtQe9wLM7CagLF 2AUTAJIePPXZJk4r1LAIF5cMZNe2obzmgvBNgSugry2IkkRqlCABqK7Vin4I0G+t pfExwv3x3jZGw8EhTSw73XFeQiskALkCbFAiPblajkNnuyrm1upB7IUY686rJCaZ RMZ61unVwj8JwRRjG7HqB6Yyq+OwqI4LRCWZn+rPgXAO3Rve5ylcA+WOHOILPyql 23tb2VLVfWsU/JNioHLvYnV9GYpLqiU= -----END CERTIFICATE-----Generated at Mon Sep 28 21:58:07 2026 by rpki-client