$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2d5111b7-a002-3ec9-b5e4-b94fb01f2408.roa File: 2d5111b7-a002-3ec9-b5e4-b94fb01f2408.roa (raw, json) Hash identifier: aF3fcKrknARjqwc5ylvhcFSi4nxwMsu3YY97X2yoQ3U= Subject key identifier: 0E:DF:5E:E8:C8:E7:5F:E8:A0:82:C9:95:A2:A3:36:C0:BD:F4:FE:C0 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DAC8BDAE2A61A34D9C700 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2d5111b7-a002-3ec9-b5e4-b94fb01f2408.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.94.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:ac:8b:da:e2:a6:1a:34:d9:c7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=e74078bb-8725-4a68-8a89-41d3c69a6438 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:e4:26:79:8a:58:a8:0e:67:6c:d0:ae:9a:1e: 46:71:ac:c5:1e:a0:e0:df:42:e8:ad:b4:f5:19:71: a4:b1:6c:d8:28:ef:fc:5b:d7:a1:55:b6:12:ff:0c: 62:c5:6a:e3:a8:87:e4:cd:3c:a7:9e:81:52:89:91: b5:20:07:12:b2:65:60:b9:83:4e:10:47:e5:37:64: d1:82:17:e0:4d:4c:a4:18:34:72:fd:1d:02:87:0f: 4c:32:e9:6a:b4:fc:f0:b3:44:5c:a5:32:29:47:25: 51:ff:ab:18:73:48:95:57:46:87:a9:0f:cf:dc:be: 32:ea:4d:dc:41:9f:d7:51:6a:84:d9:b0:74:5d:93: db:e2:a8:54:fa:7f:22:23:87:90:f9:20:a5:89:c3: 09:e2:b6:74:02:62:54:be:83:e0:bd:9f:49:f5:c9: b7:c4:b9:c7:da:87:50:4d:2b:a4:4c:0c:fd:46:24: 3a:7f:8e:e7:d8:1f:6d:33:80:dd:dc:1c:79:17:c6: 0d:1e:58:6e:69:c9:4d:6a:c1:f5:01:10:72:a2:ce: a9:24:d5:b2:00:8b:c8:bc:e8:29:5d:73:49:0a:c3: 64:46:fc:a6:a7:e4:53:59:83:a5:b6:d8:b2:4a:7a: f8:a6:2a:3a:e4:5b:47:dd:62:4d:07:2c:cd:31:02: 8e:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:DF:5E:E8:C8:E7:5F:E8:A0:82:C9:95:A2:A3:36:C0:BD:F4:FE:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2d5111b7-a002-3ec9-b5e4-b94fb01f2408.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.94.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:e7:37:85:0d:9e:78:13:98:2e:c4:73:ab:e1:a6:9d:34:0f: 8e:cd:2e:4d:29:c3:fc:e6:2c:0f:30:cf:47:8e:c7:10:01:42: 19:3c:1e:39:57:54:d1:23:d9:f7:61:d3:91:91:38:1f:98:8a: 06:05:e2:8e:89:0c:e9:69:e4:4a:c6:67:be:ae:e1:2e:25:fa: a7:e0:18:8c:0a:a4:8b:40:ef:c2:bf:25:d9:60:b3:40:77:03: 14:60:49:69:b8:2d:5b:44:c5:90:6a:c2:93:2c:a9:93:eb:c1: eb:cc:8d:df:46:92:f3:ef:20:dc:ac:0e:f4:96:74:64:61:ad: fe:97:18:e8:61:21:8c:49:5b:cf:94:06:74:96:f6:97:5a:5b: 1f:1e:55:ea:72:e6:98:db:ec:97:20:1a:24:4c:7b:1b:99:dc: 75:b9:8b:09:51:34:70:38:fc:81:55:a4:13:e5:43:66:21:76: 29:8d:3d:8c:1a:5e:a4:61:7c:ff:ef:ad:36:9b:e5:5c:c7:9e: 35:9d:fc:30:dd:46:ff:81:33:85:76:1c:49:7f:ad:55:45:af: 96:c0:21:31:13:bb:1b:28:0c:85:08:dd:62:eb:48:a8:70:67: 3c:7c:46:c0:36:a3:33:16:27:5b:c0:8e:27:c5:4a:6f:46:30: 96:2f:d1:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPayL2uKmGjTZxwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk ZTc0MDc4YmItODcyNS00YTY4LThhODktNDFkM2M2OWE2NDM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOQmeYpYqA5nbNCumh5GcazFHqDg30LorbT1 GXGksWzYKO/8W9ehVbYS/wxixWrjqIfkzTynnoFSiZG1IAcSsmVguYNOEEflN2TR ghfgTUykGDRy/R0Chw9MMulqtPzws0RcpTIpRyVR/6sYc0iVV0aHqQ/P3L4y6k3c QZ/XUWqE2bB0XZPb4qhU+n8iI4eQ+SClicMJ4rZ0AmJUvoPgvZ9J9cm3xLnH2odQ TSukTAz9RiQ6f47n2B9tM4Dd3Bx5F8YNHlhuaclNasH1ARByos6pJNWyAIvIvOgp XXNJCsNkRvymp+RTWYOlttiySnr4pio65FtH3WJNByzNMQKOlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA7fXujI51/ooILJlaKjNsC99P7AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMmQ1MTExYjctYTAwMi0z ZWM5LWI1ZTQtYjk0ZmIwMWYyNDA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIl6wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKjnN4UNnngTmC7Ec6vhpp00D47NLk0pw/zmLA8wz0eOxxABQhk8HjlX VNEj2fdh05GROB+YigYF4o6JDOlp5ErGZ76u4S4l+qfgGIwKpItA78K/Jdlgs0B3 AxRgSWm4LVtExZBqwpMsqZPrwevMjd9GkvPvINysDvSWdGRhrf6XGOhhIYxJW8+U BnSW9pdaWx8eVepy5pjb7JcgGiRMexuZ3HW5iwlRNHA4/IFVpBPlQ2YhdimNPYwa XqRhfP/vrTab5VzHnjWd/DDdRv+BM4V2HEl/rVVFr5bAITETuxsoDIUI3WLrSKhw Zzx8RsA2ozMWJ1vAjifFSm9GMJYv0UU= -----END CERTIFICATE-----Generated at Mon Sep 28 11:17:37 2026 by rpki-client