$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2f89f2fa-1311-3b68-8ad9-3faccdf74dcb.roa File: 2f89f2fa-1311-3b68-8ad9-3faccdf74dcb.roa (raw, json) Hash identifier: y0yuCh9u+OH2HtdAnGC4+iJPHiNEk6BIetxdqqSZbMY= Subject key identifier: D9:F9:C7:5B:A7:63:E8:EC:FA:87:05:15:83:18:0F:BD:31:CA:A0:C6 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3D90A1D9A040F0675141E0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2f89f2fa-1311-3b68-8ad9-3faccdf74dcb.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.72.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:90:a1:d9:a0:40:f0:67:51:41:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=33e742b9-a65e-4334-9626-780c4f848d5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:b0:28:b9:7e:73:b4:91:6d:bf:41:a7:bc:3f: 3d:e7:d6:75:cf:6d:7f:11:54:9f:a9:b4:d2:82:53: 94:b0:13:54:33:5c:26:d9:6a:bc:07:f8:eb:ab:1c: 07:11:77:1d:5a:9d:a2:9d:77:14:50:41:86:a7:ca: 28:02:4e:5a:f4:6f:00:91:be:35:54:4c:14:ac:91: e9:23:af:ee:e4:bc:7e:73:78:a0:2a:2e:6a:5b:36: bc:79:16:ce:58:d7:dc:b4:29:89:66:6a:40:dd:59: ee:98:48:f7:0d:ab:3e:72:d0:df:8f:a1:85:88:25: df:95:c2:ed:05:6d:63:3d:2d:80:8c:4b:55:d0:be: 7e:e9:b8:43:7b:f8:dc:ad:31:c4:6f:a7:ad:8d:8c: ea:4a:18:6a:5e:de:32:94:9c:65:4d:4d:7b:da:99: 6f:1a:57:ca:48:25:5c:ea:9e:30:ad:b9:9e:35:ea: 39:fc:69:37:8c:9d:82:a7:07:d9:0d:9f:a1:64:82: d5:4b:42:67:de:7e:d1:ea:81:93:6e:c1:79:5d:3d: 6f:f6:dd:ce:cf:1a:9b:16:47:4c:89:7e:ad:df:56: a8:ee:c2:84:3e:ac:12:7e:b5:25:20:68:0b:93:38: 0b:1d:d6:67:3c:ad:63:7c:b2:8b:b8:7f:24:80:3f: ed:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:F9:C7:5B:A7:63:E8:EC:FA:87:05:15:83:18:0F:BD:31:CA:A0:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2f89f2fa-1311-3b68-8ad9-3faccdf74dcb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.72.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:b5:db:72:5b:b5:bb:e0:8b:ad:94:13:fb:9f:5d:d7:70:80: 5a:01:4c:04:25:6e:98:30:1c:9e:3a:80:b8:bb:f9:ad:25:79: 2f:d7:d6:c6:e0:00:3f:0e:6d:cc:7e:9c:90:cc:15:1b:7a:8a: 33:62:21:98:95:bc:46:ae:cf:7e:91:7a:7e:06:fc:52:f0:ee: 33:bc:cc:51:fd:4c:6d:5f:04:3e:ed:a1:09:75:1e:4e:d6:70: a4:fb:3b:18:14:fa:e2:25:ce:14:e1:3d:43:f7:2f:7c:9e:5a: 75:c6:2f:65:ff:96:19:d3:a1:1c:f5:d7:c0:af:0a:a1:66:05: 87:37:61:99:7b:99:56:ce:a4:6c:73:d9:de:cb:eb:8e:32:be: b5:88:67:da:cb:a8:0d:ae:dc:49:7e:3e:cf:ce:29:48:c8:e3: fd:52:36:68:f3:f4:fe:b2:fe:ef:31:d0:1d:a6:fb:cf:e3:b0: 89:22:48:7b:3d:ce:53:e5:bd:ca:8a:55:b4:d5:18:81:27:53: 68:33:60:43:7a:80:fc:91:da:ef:6c:69:a1:ca:c8:5e:78:6f: b0:a0:ca:0c:0f:d6:4d:e1:92:4c:6b:8b:3b:0a:b4:79:38:b5: 66:f6:41:3e:bb:6d:c0:19:0a:e2:fc:1e:31:0a:4c:cc:83:5b: 36:47:7a:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPZCh2aBA8GdRQeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk MzNlNzQyYjktYTY1ZS00MzM0LTk2MjYtNzgwYzRmODQ4ZDVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLAouX5ztJFtv0GnvD8959Z1z21/EVSfqbTS glOUsBNUM1wm2Wq8B/jrqxwHEXcdWp2inXcUUEGGp8ooAk5a9G8Akb41VEwUrJHp I6/u5Lx+c3igKi5qWza8eRbOWNfctCmJZmpA3VnumEj3Das+ctDfj6GFiCXflcLt BW1jPS2AjEtV0L5+6bhDe/jcrTHEb6etjYzqShhqXt4ylJxlTU172plvGlfKSCVc 6p4wrbmeNeo5/Gk3jJ2CpwfZDZ+hZILVS0Jn3n7R6oGTbsF5XT1v9t3OzxqbFkdM iX6t31ao7sKEPqwSfrUlIGgLkzgLHdZnPK1jfLKLuH8kgD/tkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNn5x1unY+js+ocFFYMYD70xyqDGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMmY4OWYyZmEtMTMxMS0z YjY4LThhZDktM2ZhY2NkZjc0ZGNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkggMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGG123Jbtbvgi62UE/ufXddwgFoBTAQlbpgwHJ46gLi7+a0leS/X1sbg AD8Obcx+nJDMFRt6ijNiIZiVvEauz36Ren4G/FLw7jO8zFH9TG1fBD7toQl1Hk7W cKT7OxgU+uIlzhThPUP3L3yeWnXGL2X/lhnToRz118CvCqFmBYc3YZl7mVbOpGxz 2d7L644yvrWIZ9rLqA2u3El+Ps/OKUjI4/1SNmjz9P6y/u8x0B2m+8/jsIkiSHs9 zlPlvcqKVbTVGIEnU2gzYEN6gPyR2u9saaHKyF54b7CgygwP1k3hkkxrizsKtHk4 tWb2QT67bcAZCuL8HjEKTMyDWzZHehA= -----END CERTIFICATE-----Generated at Tue Sep 29 15:39:37 2026 by rpki-client