$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2ab519a8-30a7-3662-b133-9a4028e98d2d.roa File: 2ab519a8-30a7-3662-b133-9a4028e98d2d.roa (raw, json) Hash identifier: e7iyxwJKvzREa/P8YZ3Tq/uuSATEY3RR6CejNxdvTI8= Subject key identifier: 2C:DD:95:C1:05:68:60:8D:F9:73:E7:9C:AE:4E:E2:D0:CC:25:E9:11 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3D89916A529877DB39A0C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2ab519a8-30a7-3662-b133-9a4028e98d2d.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.99.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:89:91:6a:52:98:77:db:39:a0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=1a20a9f6-b8a8-4fbc-87f2-615ff2ec11f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:9a:a8:2a:45:9a:ce:31:05:91:f2:fa:34:8a: 9f:63:73:df:3a:30:93:8c:44:67:de:bf:4b:43:df: 8d:e4:eb:ea:32:aa:71:84:e1:cd:c1:33:9c:64:59: 3f:bf:2a:44:1b:87:ef:45:85:5e:a9:0d:0b:17:2c: 99:5b:1c:7d:65:62:97:76:92:6f:e7:61:60:51:72: 17:9e:6b:51:f9:8b:d3:02:cc:e8:1b:44:49:14:82: f9:f6:f5:06:58:45:7f:60:e3:d4:5f:4e:8e:3b:92: 2c:d5:eb:8e:13:0c:34:b8:d7:d6:39:9e:a8:09:56: f0:b1:b9:34:e9:c6:57:e6:38:a6:df:de:9d:3a:12: bd:85:e6:0a:f1:f3:2d:60:16:aa:c4:5e:e2:55:4d: d5:9c:58:bc:8a:88:be:f6:fe:16:89:a3:17:60:c9: 54:39:41:29:c5:0e:02:99:b7:27:b5:b4:ef:4b:4e: 37:33:47:5c:03:fc:66:b0:58:1a:68:c3:85:28:2b: ad:93:01:53:e6:5b:ab:e8:da:83:c4:6c:03:37:36: 57:b3:20:5b:ee:24:bf:aa:a2:c5:e8:66:ed:69:0f: c7:1e:7e:6a:e5:2f:4a:cd:56:8d:f3:16:6d:3d:b5: a9:fc:c5:7a:9e:da:18:30:8a:3d:2a:7a:6e:27:31: d4:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:DD:95:C1:05:68:60:8D:F9:73:E7:9C:AE:4E:E2:D0:CC:25:E9:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2ab519a8-30a7-3662-b133-9a4028e98d2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.99.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:16:8d:d0:69:68:52:25:c7:e0:94:cf:8c:80:a4:c9:af:00: 3b:78:31:0a:5d:d1:22:72:cf:ad:55:44:20:e9:1e:83:c3:63: f5:f2:62:b1:68:c4:c9:ed:20:64:d9:1d:d8:cc:e0:e5:31:d2: 25:eb:da:29:54:ee:eb:d6:0f:d2:7c:d2:3c:2f:ed:94:9e:93: 40:d4:50:19:8a:d5:a8:89:52:47:e7:6f:6c:99:c8:5b:60:b9: ca:ad:61:d9:aa:97:64:a8:b2:0f:a5:9c:7b:f8:2e:d8:be:79: 80:ff:fb:ce:1b:83:cc:f2:32:5e:d8:e7:a1:3f:b1:0d:9d:d2: 32:4b:61:83:40:57:54:71:9c:43:4c:e7:ad:df:24:87:fc:5e: e6:7f:72:c9:a1:61:9a:72:6c:b1:37:1e:9f:1d:f9:18:91:01: 09:25:bc:7d:1d:a2:0e:5f:4d:97:a4:7e:b7:81:b4:fd:5c:72: d0:72:82:48:24:ca:16:87:01:df:b7:45:ba:23:df:d4:4c:37: dd:21:f8:6a:f9:0d:3f:ed:26:2d:0a:17:7a:af:bb:6e:27:4f: 5b:11:4d:da:f4:ae:89:76:00:93:dc:20:49:0e:25:df:5f:e9: 8a:38:50:7c:16:fb:78:06:c9:19:ac:56:47:b1:90:ec:ab:87: a6:eb:8a:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPYmRalKYd9s5oMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk MWEyMGE5ZjYtYjhhOC00ZmJjLTg3ZjItNjE1ZmYyZWMxMWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5qoKkWazjEFkfL6NIqfY3PfOjCTjERn3r9L Q9+N5OvqMqpxhOHNwTOcZFk/vypEG4fvRYVeqQ0LFyyZWxx9ZWKXdpJv52FgUXIX nmtR+YvTAszoG0RJFIL59vUGWEV/YOPUX06OO5Is1euOEww0uNfWOZ6oCVbwsbk0 6cZX5jim396dOhK9heYK8fMtYBaqxF7iVU3VnFi8ioi+9v4WiaMXYMlUOUEpxQ4C mbcntbTvS043M0dcA/xmsFgaaMOFKCutkwFT5lur6NqDxGwDNzZXsyBb7iS/qqLF 6GbtaQ/HHn5q5S9KzVaN8xZtPbWp/MV6ntoYMIo9KnpuJzHUHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCzdlcEFaGCN+XPnnK5O4tDMJekRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMmFiNTE5YTgtMzBhNy0z NjYyLWIxMzMtOWE0MDI4ZTk4ZDJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImMgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF8WjdBpaFIlx+CUz4yApMmvADt4MQpd0SJyz61VRCDpHoPDY/XyYrFo xMntIGTZHdjM4OUx0iXr2ilU7uvWD9J80jwv7ZSek0DUUBmK1aiJUkfnb2yZyFtg ucqtYdmql2Sosg+lnHv4Lti+eYD/+84bg8zyMl7Y56E/sQ2d0jJLYYNAV1RxnENM 563fJIf8XuZ/csmhYZpybLE3Hp8d+RiRAQklvH0dog5fTZekfreBtP1cctBygkgk yhaHAd+3Rboj39RMN90h+Gr5DT/tJi0KF3qvu24nT1sRTdr0rol2AJPcIEkOJd9f 6Yo4UHwW+3gGyRmsVkexkOyrh6bris8= -----END CERTIFICATE-----Generated at Sat Oct 3 11:44:07 2026 by rpki-client