$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2bd85ba0-5549-3ca6-9681-1c531dcd0b43.roa File: 2bd85ba0-5549-3ca6-9681-1c531dcd0b43.roa (raw, json) Hash identifier: 7dAYBdBbZJ+aqDF33c8znhdBnMDOCJyCQ6IPTGjU1YM= Subject key identifier: 36:29:75:63:8C:59:27:90:7D:2A:C3:4C:B0:3C:F9:44:1D:EB:15:00 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DD20E0FF93AC378698F10 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2bd85ba0-5549-3ca6-9681-1c531dcd0b43.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.123.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:d2:0e:0f:f9:3a:c3:78:69:8f:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=063def83-5f43-4799-8d62-a3cfa39e589c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:c6:2c:a6:4f:f3:00:32:38:da:3a:1e:52:48: 8b:e1:9a:be:fd:e6:14:30:20:67:f4:83:74:8c:7b: c3:cf:91:ef:c4:a5:fb:9e:83:d4:cf:3c:b8:28:cb: 6b:f7:4b:cc:e2:7c:f9:83:9f:cd:df:85:c8:40:db: 09:d2:b9:ea:80:5e:08:da:dc:7c:46:bd:a2:61:ec: b0:39:62:22:5f:84:ca:98:a2:c6:45:34:cb:44:b2: 6e:1e:b5:dd:ca:b4:c4:72:0b:e7:59:8c:9d:70:d4: c5:2b:15:72:1c:3f:56:1b:35:78:a5:a9:00:77:30: 4a:19:2e:6f:15:c6:78:48:68:0f:33:73:02:bf:b1: 65:fc:72:a0:42:13:c6:71:9c:13:a4:c3:e3:2f:88: ad:d7:09:92:93:65:ea:34:61:6f:cd:f2:bc:98:73: a8:b1:a5:db:4c:4e:48:d4:1b:20:63:b7:28:1a:6f: 7c:56:07:bc:4f:94:77:4d:2a:82:1e:ab:20:f5:f0: bd:f0:12:d9:8d:6c:4e:2c:b6:31:15:cc:41:42:c2: 46:ec:d7:32:b1:1f:0b:8c:79:01:0e:82:a5:6d:73: 4a:dd:9e:9a:f7:5a:23:d6:0b:d5:2f:cf:9e:b2:f6: 27:33:44:b1:63:df:20:06:94:e5:67:e1:5d:cf:9d: 4c:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:29:75:63:8C:59:27:90:7D:2A:C3:4C:B0:3C:F9:44:1D:EB:15:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2bd85ba0-5549-3ca6-9681-1c531dcd0b43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.123.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:4b:c2:fb:20:f7:35:3c:d5:6c:dd:57:90:17:9f:b2:3b:e9: 1e:0d:0b:d1:d3:fe:5b:68:b2:eb:46:6d:72:c1:d4:f5:c1:20: 2f:72:e2:d0:13:f2:65:9a:9e:8e:05:9d:03:6c:fe:d1:99:bf: 74:71:d6:82:f7:34:8a:0f:5f:59:1c:0e:dc:3e:76:5f:3a:11: 31:81:df:32:63:99:92:6d:03:f7:67:7b:ac:24:34:e6:41:51: 8b:17:59:d0:95:69:cd:cd:b2:45:5c:d0:26:12:01:19:60:b2: 94:7c:ca:ba:86:9d:d5:72:f2:bf:58:32:0d:68:de:b9:ab:f5: 8b:0f:a5:f1:25:9f:4c:3e:a0:bb:14:ad:71:1e:f3:60:c1:f8: 31:dd:e2:9a:fd:ca:0f:ef:e5:69:8f:6f:6e:52:e9:b9:5e:75: 9a:8a:15:6d:b9:68:b2:a9:6f:16:92:29:ac:dd:96:20:d2:9d: 20:95:2a:13:52:49:aa:26:f7:9f:8b:67:b8:da:f6:1b:f0:c8: 71:b1:8c:a3:b3:f1:76:c9:0c:82:dc:72:17:9d:cf:06:3c:52: 45:13:20:a3:fa:f7:86:5f:35:cc:12:1a:d5:59:8f:6e:01:61: 3a:c3:6c:b1:54:17:29:00:9c:83:3a:b4:08:23:db:2b:6c:30: 35:c4:f3:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPdIOD/k6w3hpjxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk MDYzZGVmODMtNWY0My00Nzk5LThkNjItYTNjZmEzOWU1ODljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMYspk/zADI42joeUkiL4Zq+/eYUMCBn9IN0 jHvDz5HvxKX7noPUzzy4KMtr90vM4nz5g5/N34XIQNsJ0rnqgF4I2tx8Rr2iYeyw OWIiX4TKmKLGRTTLRLJuHrXdyrTEcgvnWYydcNTFKxVyHD9WGzV4pakAdzBKGS5v FcZ4SGgPM3MCv7Fl/HKgQhPGcZwTpMPjL4it1wmSk2XqNGFvzfK8mHOosaXbTE5I 1BsgY7coGm98Vge8T5R3TSqCHqsg9fC98BLZjWxOLLYxFcxBQsJG7NcysR8LjHkB DoKlbXNK3Z6a91oj1gvVL8+esvYnM0SxY98gBpTlZ+Fdz51M5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDYpdWOMWSeQfSrDTLA8+UQd6xUAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMmJkODViYTAtNTU0OS0z Y2E2LTk2ODEtMWM1MzFkY2QwYjQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEInsQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFxLwvsg9zU81WzdV5AXn7I76R4NC9HT/ltosutGbXLB1PXBIC9y4tAT 8mWano4FnQNs/tGZv3Rx1oL3NIoPX1kcDtw+dl86ETGB3zJjmZJtA/dne6wkNOZB UYsXWdCVac3NskVc0CYSARlgspR8yrqGndVy8r9YMg1o3rmr9YsPpfEln0w+oLsU rXEe82DB+DHd4pr9yg/v5WmPb25S6bledZqKFW25aLKpbxaSKazdliDSnSCVKhNS Saom95+LZ7ja9hvwyHGxjKOz8XbJDILcchedzwY8UkUTIKP694ZfNcwSGtVZj24B YTrDbLFUFykAnIM6tAgj2ytsMDXE83U= -----END CERTIFICATE-----Generated at Tue Sep 29 02:47:39 2026 by rpki-client