$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/28e7bf2b-9e3a-3ca4-a29a-170f68d5ca24.roa File: 28e7bf2b-9e3a-3ca4-a29a-170f68d5ca24.roa (raw, json) Hash identifier: AVsFufgFB70hlUJxQ6PoOYh9ktFwiyBHgmqEDCT+8OA= Subject key identifier: A4:72:E5:6D:1D:34:D6:9B:E0:55:CB:9C:4A:CE:E0:3F:BF:17:07:46 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4972C2B2D66DB83851ED1B00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/28e7bf2b-9e3a-3ca4-a29a-170f68d5ca24.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 43515 IP address blocks: 34.190.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:c2:b2:d6:6d:b8:38:51:ed:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=457c3304-8a0b-4445-bfc2-bb789c605d1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:af:4c:40:cc:d2:ab:27:0b:da:ab:f2:66:10: cb:cf:7d:4c:d5:31:46:25:1e:1d:bb:ae:35:0e:77: d5:b6:a1:77:68:67:07:3f:7c:1b:90:6f:7b:f5:a0: 5c:e2:d8:0e:13:8d:b7:30:f5:c5:a8:7c:1d:44:83: 28:7d:2a:2b:73:bb:78:86:a1:bd:4b:23:10:67:af: d5:72:72:2a:ab:0e:a1:8a:b7:72:77:44:4e:e3:ab: 6a:5a:13:f1:6c:11:9e:0c:75:4b:e3:06:6f:f2:f7: ca:15:53:7c:4a:ef:f1:79:d5:fb:4e:c9:45:e0:3e: aa:67:aa:5f:1c:36:95:4d:bf:11:ba:d5:d0:3a:41: ec:ec:be:c4:ed:79:80:50:fb:e4:f6:4a:13:a3:03: 50:6a:2b:82:c9:78:3b:36:d4:85:68:6f:77:70:6b: 71:9a:f1:5e:a8:55:5c:be:b4:a8:cb:e6:5d:1d:63: ac:d1:84:a1:af:18:07:59:da:28:3e:9b:25:21:03: 5f:e1:d4:2f:ec:89:c7:36:1c:bb:81:86:f3:3e:22: 97:8d:3d:b1:27:4d:1d:d0:b1:34:f2:2b:65:25:f4: 73:56:c6:59:3a:f1:df:ba:11:7c:5f:b5:6b:8b:72: 2d:eb:1b:36:48:72:fc:f0:6c:37:cf:74:ed:34:7b: f2:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:72:E5:6D:1D:34:D6:9B:E0:55:CB:9C:4A:CE:E0:3F:BF:17:07:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/28e7bf2b-9e3a-3ca4-a29a-170f68d5ca24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.190.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:6a:03:40:f1:80:8e:df:91:d2:ba:d3:17:e0:1d:51:0b:24: fd:6b:e9:57:17:6d:cc:75:cf:9e:3a:53:d9:95:28:66:ab:e2: 59:35:8e:57:2c:2a:f2:53:cd:d3:a7:25:b8:bb:91:f3:63:7e: 65:67:16:aa:9a:46:0e:57:a9:37:e4:7d:1f:95:60:39:83:7a: 49:9b:57:bd:ef:f4:9f:6f:92:69:e5:28:5b:64:dc:e7:6e:13: 13:c3:a8:3b:17:bb:fc:f2:2c:f1:f5:13:2b:18:56:d2:a6:65: eb:a1:c7:24:47:cb:54:54:ad:7c:41:4e:79:1b:e7:c6:69:9b: 9b:25:2e:f9:a5:e8:34:4c:fc:31:94:fc:0e:4c:6b:5b:ba:fe: 26:d5:5c:94:68:45:78:f4:89:e1:a8:1f:b3:f5:bd:86:6b:37: dd:d6:26:5e:62:14:72:0c:a7:d2:b8:b9:01:1b:a8:7c:c8:59: 37:1e:47:22:f4:8f:0e:06:87:35:29:0a:88:d1:63:21:62:c5: 59:20:22:64:06:fb:9c:29:19:98:a4:fb:ae:de:19:cb:8e:36: 0b:80:60:da:d7:a5:21:7b:e5:90:b8:69:27:bc:42:f7:63:08: 52:58:ac:a8:1a:d6:09:25:79:72:aa:cd:97:ab:f8:8f:4c:42: be:7a:5e:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JcsKy1m24OFHtGwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NDU3YzMzMDQtOGEwYi00NDQ1LWJmYzItYmI3ODljNjA1ZDFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm69MQMzSqycL2qvyZhDLz31M1TFGJR4du641 DnfVtqF3aGcHP3wbkG979aBc4tgOE423MPXFqHwdRIMofSorc7t4hqG9SyMQZ6/V cnIqqw6hirdyd0RO46tqWhPxbBGeDHVL4wZv8vfKFVN8Su/xedX7TslF4D6qZ6pf HDaVTb8RutXQOkHs7L7E7XmAUPvk9koTowNQaiuCyXg7NtSFaG93cGtxmvFeqFVc vrSoy+ZdHWOs0YShrxgHWdooPpslIQNf4dQv7InHNhy7gYbzPiKXjT2xJ00d0LE0 8itlJfRzVsZZOvHfuhF8X7Vri3It6xs2SHL88Gw3z3TtNHvy2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKRy5W0dNNab4FXLnErO4D+/FwdGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjhlN2JmMmItOWUzYS0z Y2E0LWEyOWEtMTcwZjY4ZDVjYTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDIr4YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAElqA0DxgI7fkdK60xfgHVELJP1r6VcXbcx1z546U9mVKGar4lk1jlcs KvJTzdOnJbi7kfNjfmVnFqqaRg5XqTfkfR+VYDmDekmbV73v9J9vkmnlKFtk3Odu ExPDqDsXu/zyLPH1EysYVtKmZeuhxyRHy1RUrXxBTnkb58Zpm5slLvml6DRM/DGU /A5Ma1u6/ibVXJRoRXj0ieGoH7P1vYZrN93WJl5iFHIMp9K4uQEbqHzIWTceRyL0 jw4GhzUpCojRYyFixVkgImQG+5wpGZik+67eGcuONguAYNrXpSF75ZC4aSe8Qvdj CFJYrKga1gkleXKqzZer+I9MQr56XjY= -----END CERTIFICATE-----Generated at Sat Sep 26 15:03:24 2026 by rpki-client