$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/28bb0dfd-1f10-3790-ac42-b1671918f1a2.roa File: 28bb0dfd-1f10-3790-ac42-b1671918f1a2.roa (raw, json) Hash identifier: PR3wCUjLOPwmsC8uv9u1mbFkLe9xTOw+M1KVFFI/Ifo= Subject key identifier: 4A:83:2B:39:86:AE:A3:C0:2B:1D:56:9D:EA:EC:67:97:75:98:12:5A Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3D823C24C3BA8A4A524200 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/28bb0dfd-1f10-3790-ac42-b1671918f1a2.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.146.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:82:3c:24:c3:ba:8a:4a:52:42:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=dbd13d5b-af9c-4018-a639-f2bc91ecc85a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:3a:61:93:a6:b7:ff:86:d2:39:9d:4d:be:ca: 8d:d5:40:81:1a:14:0e:ba:13:87:bc:0c:81:57:34: 17:6e:1b:84:48:89:f2:56:5d:88:4e:c8:a0:a7:ba: 4f:2d:b4:0c:3a:0a:54:58:12:d1:70:f0:16:dd:c4: b2:4a:56:e0:b5:64:fc:81:56:c4:cc:28:4e:cd:b4: c8:b3:6e:27:54:4c:9d:74:b7:a2:d7:f2:f3:60:50: de:21:f2:9e:6a:b5:22:94:24:04:b5:b9:40:30:68: db:7a:91:38:15:60:77:99:63:4a:03:71:8d:a9:c8: 3d:32:e9:5a:b5:c7:c0:10:ea:46:de:75:0d:64:4d: 59:e7:75:41:9b:8a:39:fb:b4:02:e0:45:79:09:cf: 9c:9b:76:7b:35:75:dd:e3:ec:d7:cc:4e:8a:e8:cd: 69:12:c1:66:b9:53:1d:c9:a2:a5:5e:39:01:c1:7f: 24:da:e4:ac:cf:e0:9c:4e:c0:74:9f:9c:41:ce:4f: 4e:f3:a7:89:2b:d0:20:ff:52:26:33:0c:17:9d:79: 0f:bd:05:28:b5:39:1b:dd:75:a9:d2:64:f8:16:c2: f7:b3:63:f4:9a:1e:1a:23:f5:86:9d:18:1d:bd:3e: dd:db:fd:78:74:b8:dd:77:a3:02:2e:fc:96:95:15: 16:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:83:2B:39:86:AE:A3:C0:2B:1D:56:9D:EA:EC:67:97:75:98:12:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/28bb0dfd-1f10-3790-ac42-b1671918f1a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.146.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:ed:62:09:09:72:0a:fa:7b:91:ee:32:50:4a:34:fe:ba:92: 36:67:1a:8d:9e:70:db:06:9b:c6:f9:9f:78:b4:e8:4e:84:98: 39:62:e3:51:73:d4:77:e0:f3:a2:57:fa:b6:48:72:0e:df:32: e8:96:92:c8:76:40:57:0b:e5:e8:ed:89:1b:11:49:63:18:d0: 60:5c:56:2f:55:f4:b7:f3:4d:e2:98:fd:2a:ac:05:48:e4:44: 16:4c:a5:8d:d8:dc:48:2e:48:72:7b:56:4c:ea:04:3a:92:75: 44:a4:b7:0c:9e:15:fe:10:00:83:73:e1:b2:64:7f:26:8e:91: ad:45:1d:35:60:8e:31:ea:47:a3:d7:24:d3:8b:5b:15:93:d0: d9:0b:3d:16:c5:89:3f:30:ae:a1:2b:4d:86:ec:7f:bc:dd:79: 86:f5:f8:06:55:c9:5e:02:5f:de:3f:05:dc:40:24:52:8b:4e: 0d:15:42:99:c2:c2:04:7d:61:08:cd:41:d9:aa:5a:53:b2:4f: 0e:f6:51:74:46:07:a8:e7:6b:58:c9:b8:2c:d1:5d:68:4a:b2: 33:3c:6f:21:16:12:f3:19:99:d7:c5:b6:40:6c:52:ae:8f:c0: 51:ea:26:a0:e2:35:25:bf:b0:2d:8f:bc:b4:2f:cb:60:05:0f: b9:68:68:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPYI8JMO6ikpSQgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk ZGJkMTNkNWItYWY5Yy00MDE4LWE2MzktZjJiYzkxZWNjODVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDphk6a3/4bSOZ1NvsqN1UCBGhQOuhOHvAyB VzQXbhuESInyVl2ITsigp7pPLbQMOgpUWBLRcPAW3cSySlbgtWT8gVbEzChOzbTI s24nVEyddLei1/LzYFDeIfKearUilCQEtblAMGjbepE4FWB3mWNKA3GNqcg9Mula tcfAEOpG3nUNZE1Z53VBm4o5+7QC4EV5Cc+cm3Z7NXXd4+zXzE6K6M1pEsFmuVMd yaKlXjkBwX8k2uSsz+CcTsB0n5xBzk9O86eJK9Ag/1ImMwwXnXkPvQUotTkb3XWp 0mT4FsL3s2P0mh4aI/WGnRgdvT7d2/14dLjdd6MCLvyWlRUWtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEqDKzmGrqPAKx1WnersZ5d1mBJaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjhiYjBkZmQtMWYxMC0z NzkwLWFjNDItYjE2NzE5MThmMWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIpIAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADHtYgkJcgr6e5HuMlBKNP66kjZnGo2ecNsGm8b5n3i06E6EmDli41Fz 1Hfg86JX+rZIcg7fMuiWksh2QFcL5ejtiRsRSWMY0GBcVi9V9LfzTeKY/SqsBUjk RBZMpY3Y3EguSHJ7VkzqBDqSdUSktwyeFf4QAINz4bJkfyaOka1FHTVgjjHqR6PX JNOLWxWT0NkLPRbFiT8wrqErTYbsf7zdeYb1+AZVyV4CX94/BdxAJFKLTg0VQpnC wgR9YQjNQdmqWlOyTw72UXRGB6jna1jJuCzRXWhKsjM8byEWEvMZmdfFtkBsUq6P wFHqJqDiNSW/sC2PvLQvy2AFD7loaB0= -----END CERTIFICATE-----Generated at Thu Oct 1 08:50:08 2026 by rpki-client