$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2b87b3fc-a358-332f-898e-e06e6bc984fa.roa File: 2b87b3fc-a358-332f-898e-e06e6bc984fa.roa (raw, json) Hash identifier: 8IH+niY6I3WHNGE5ar5NNc71UoyLEXev4coXbdfrE44= Subject key identifier: F7:EE:5B:F7:2A:B8:AA:97:C3:EE:D5:AC:17:25:00:72:5F:D0:91:1D Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DCEE549795F5C4310F880 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2b87b3fc-a358-332f-898e-e06e6bc984fa.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.89.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:ce:e5:49:79:5f:5c:43:10:f8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=f4952f97-59ed-4eb1-8659-0af0aa6d2c14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:2c:ab:17:fe:32:26:8c:3d:5c:df:41:5e:c0: e2:8e:a9:2e:eb:2e:6a:e8:fa:99:82:aa:7e:c5:24: c9:de:c5:d6:88:0b:6c:ed:68:7f:74:8f:ce:02:79: d2:60:ee:a5:83:75:89:01:1d:b4:63:2b:f2:a5:98: 69:17:7d:eb:3a:90:b8:63:fb:8e:01:fb:cb:00:7e: 9c:93:c9:89:ad:f4:d7:c3:4f:4d:83:d0:a0:90:da: e1:b7:28:6c:a4:08:14:ae:49:87:e2:74:b4:60:e7: bb:a8:54:42:28:8f:e6:d6:af:da:2b:16:00:d0:56: cc:a1:7f:4f:84:45:95:bb:cd:24:88:89:27:dc:7e: 4b:8e:fe:5d:e4:28:52:03:e6:f5:bf:8c:7e:72:4d: ce:b2:6e:37:d9:af:66:b8:30:67:d9:ab:10:f4:dc: f2:9f:21:ea:4d:7c:fc:0a:5d:24:94:75:dc:81:ab: 2f:34:f4:d5:d2:1c:64:05:55:21:a8:4d:06:74:ad: 6b:cf:f0:de:6a:44:b2:e9:c9:e8:88:9c:0e:5c:d7: 58:d0:fa:9c:eb:bf:02:ea:86:ff:61:3b:73:b2:ba: 0e:d5:d0:0f:5c:40:6e:03:46:ae:af:ba:c4:40:5c: c6:21:b1:c1:42:ee:9b:59:82:d2:dc:b0:f6:ad:da: a1:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:EE:5B:F7:2A:B8:AA:97:C3:EE:D5:AC:17:25:00:72:5F:D0:91:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2b87b3fc-a358-332f-898e-e06e6bc984fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.89.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:8c:94:15:23:70:6d:00:a6:7d:58:af:b8:7d:e2:c6:90:93: d2:67:55:3e:4c:65:86:af:b8:a2:3c:9c:66:bf:5e:75:4a:c3: af:63:34:f4:cb:04:ec:91:89:63:64:5e:81:c0:10:33:85:8f: d8:01:3c:86:c6:2c:81:95:41:59:a3:7b:d6:2b:a6:c6:c2:8b: a2:29:03:96:bd:14:27:ef:1e:e2:96:be:67:7e:65:f5:0e:96: 26:73:57:d0:22:06:4d:2b:69:eb:53:17:f7:80:20:f3:8e:1e: 09:cf:3b:44:b4:8a:ce:73:20:1e:86:c5:63:25:f6:45:d4:f2: 57:10:61:c2:b7:6c:b2:02:7c:1d:c0:23:65:63:74:5c:5f:39: 7e:67:d0:de:db:91:92:dc:b9:dc:ee:09:14:4c:65:e2:44:54: bf:52:ff:da:57:b9:d8:c3:f4:65:d5:79:ad:32:78:92:63:d0: 45:5b:76:bc:71:87:0a:f7:ab:28:67:f0:d1:0d:01:39:a0:8f: 02:28:93:4d:c4:d1:97:38:b2:56:7d:cf:ec:04:e1:66:fb:66: dc:32:91:66:08:7c:1d:dd:fa:e5:13:12:99:55:1a:79:d6:07: 53:d9:8c:30:c3:33:c2:cc:6c:b1:02:d5:9b:e0:e1:2e:a9:2d: 77:e6:9e:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPc7lSXlfXEMQ+IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk ZjQ5NTJmOTctNTllZC00ZWIxLTg2NTktMGFmMGFhNmQyYzE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCyrF/4yJow9XN9BXsDijqku6y5q6PqZgqp+ xSTJ3sXWiAts7Wh/dI/OAnnSYO6lg3WJAR20YyvypZhpF33rOpC4Y/uOAfvLAH6c k8mJrfTXw09Ng9CgkNrhtyhspAgUrkmH4nS0YOe7qFRCKI/m1q/aKxYA0FbMoX9P hEWVu80kiIkn3H5Ljv5d5ChSA+b1v4x+ck3Osm432a9muDBn2asQ9NzynyHqTXz8 Cl0klHXcgasvNPTV0hxkBVUhqE0GdK1rz/DeakSy6cnoiJwOXNdY0Pqc678C6ob/ YTtzsroO1dAPXEBuA0aur7rEQFzGIbHBQu6bWYLS3LD2rdqhVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPfuW/cquKqXw+7VrBclAHJf0JEdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMmI4N2IzZmMtYTM1OC0z MzJmLTg5OGUtZTA2ZTZiYzk4NGZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlkgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADKMlBUjcG0Apn1Yr7h94saQk9JnVT5MZYavuKI8nGa/XnVKw69jNPTL BOyRiWNkXoHAEDOFj9gBPIbGLIGVQVmje9YrpsbCi6IpA5a9FCfvHuKWvmd+ZfUO liZzV9AiBk0raetTF/eAIPOOHgnPO0S0is5zIB6GxWMl9kXU8lcQYcK3bLICfB3A I2VjdFxfOX5n0N7bkZLcudzuCRRMZeJEVL9S/9pXudjD9GXVea0yeJJj0EVbdrxx hwr3qyhn8NENATmgjwIok03E0Zc4slZ9z+wE4Wb7ZtwykWYIfB3d+uUTEplVGnnW B1PZjDDDM8LMbLEC1Zvg4S6pLXfmni8= -----END CERTIFICATE-----Generated at Tue Sep 29 04:10:05 2026 by rpki-client