$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/38c76d76-452e-3704-ab32-58fef977e5ea.roa File: 38c76d76-452e-3704-ab32-58fef977e5ea.roa (raw, json) Hash identifier: 8PJc25v07zbPyKwP+RdUT1MlGv8o2JphSHBwEO7j+es= Subject key identifier: 60:9E:BD:03:FE:24:F0:5A:60:A7:16:2E:94:80:25:71:E1:02:3B:E6 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DB52552DF7DAF66772100 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/38c76d76-452e-3704-ab32-58fef977e5ea.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.152.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:b5:25:52:df:7d:af:66:77:21:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=d954d8bf-e55c-4bf8-b55f-d59192c86671 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:70:fb:88:98:b1:30:4b:28:4c:eb:d0:df:60: c7:e8:a0:f7:6c:fe:3a:2f:70:ce:8d:60:85:97:75: e7:c3:7f:28:cf:26:5c:da:57:c5:3d:43:4f:ae:58: c7:e9:77:43:ad:1e:e2:2f:1a:02:5b:0a:15:db:fb: d3:76:3f:5e:73:c6:b5:0c:b3:d1:54:f5:79:2a:f4: 06:6d:b8:4e:de:9e:28:d2:5f:9a:a8:10:1f:1e:88: 50:84:bf:04:74:86:23:4b:b1:48:bd:7a:4f:73:74: fe:a3:f0:11:ae:4a:98:56:01:23:95:7f:dd:20:c7: 9a:78:d5:c6:6a:bc:0b:0b:d9:9b:3c:ff:81:d9:28: e9:d8:58:0a:4c:8b:b7:3b:37:f5:82:12:23:93:f8: 6a:0b:dd:d8:b5:a6:db:23:c8:c2:4b:82:2b:fb:83: 9e:75:74:ef:bf:8f:6b:66:ff:9f:5e:bb:dc:0b:ca: 4f:a8:b8:6e:3f:f4:88:b6:6c:15:e6:c7:5e:f5:87: 84:d4:b8:16:4f:98:17:23:02:c9:ac:f6:7c:26:86: ad:db:42:21:ed:06:15:0d:00:f6:bd:bd:42:e2:45: 29:89:e2:3d:c2:0c:24:72:f8:69:14:e6:ec:5e:b3: 59:37:62:4f:74:19:03:4f:68:c6:51:cf:b2:e5:7c: b6:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:9E:BD:03:FE:24:F0:5A:60:A7:16:2E:94:80:25:71:E1:02:3B:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/38c76d76-452e-3704-ab32-58fef977e5ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.152.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:11:fe:54:86:ba:49:b2:1d:23:fa:7e:1d:9b:5d:cf:fd:32: a6:67:b3:fe:ba:2d:86:e3:f1:f3:bc:ad:2b:4b:3f:bf:d8:0d: ed:66:f8:92:a3:58:33:21:38:b5:a8:4b:5b:b5:29:1f:ad:e3: 88:c6:ca:4f:ad:ff:d7:c8:a4:28:0a:5d:68:d5:84:52:1d:c4: e8:42:59:e4:b5:1a:bf:db:f9:17:62:63:5b:d7:cc:92:38:f0: f3:53:2b:df:d7:48:2a:b4:7e:0e:f2:cc:6e:78:fb:72:fa:a0: 9d:09:7a:07:3f:8d:d4:d5:3b:90:37:e3:39:6a:9a:86:94:0e: e6:d8:ab:d3:28:53:c7:31:61:a2:3c:d5:2a:1e:ae:b7:79:49: de:12:14:82:2d:95:6f:93:d5:7f:34:ec:64:9d:d5:3c:0c:4f: 26:fd:2b:8a:33:be:9e:f0:f9:63:06:e7:8b:7c:0f:48:10:9e: cd:9f:66:48:b2:0c:02:15:7f:a8:93:e1:9b:8a:f0:4c:92:96: 68:7f:93:a0:ed:b6:bb:f1:e6:7b:90:47:d7:be:6c:03:2a:e1: 69:42:4f:a3:69:33:d0:c3:68:66:20:48:96:a1:4f:31:58:f9: e3:aa:d9:7c:7c:05:a8:24:62:98:bc:5e:6a:b5:7e:95:c6:31: 86:2b:7b:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPbUlUt99r2Z3IQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk ZDk1NGQ4YmYtZTU1Yy00YmY4LWI1NWYtZDU5MTkyYzg2NjcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXD7iJixMEsoTOvQ32DH6KD3bP46L3DOjWCF l3Xnw38ozyZc2lfFPUNPrljH6XdDrR7iLxoCWwoV2/vTdj9ec8a1DLPRVPV5KvQG bbhO3p4o0l+aqBAfHohQhL8EdIYjS7FIvXpPc3T+o/ARrkqYVgEjlX/dIMeaeNXG arwLC9mbPP+B2Sjp2FgKTIu3Ozf1ghIjk/hqC93YtabbI8jCS4Ir+4OedXTvv49r Zv+fXrvcC8pPqLhuP/SItmwV5sde9YeE1LgWT5gXIwLJrPZ8Joat20Ih7QYVDQD2 vb1C4kUpieI9wgwkcvhpFObsXrNZN2JPdBkDT2jGUc+y5Xy2awIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGCevQP+JPBaYKcWLpSAJXHhAjvmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzhjNzZkNzYtNDUyZS0z NzA0LWFiMzItNThmZWY5NzdlNWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIpggMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI0R/lSGukmyHSP6fh2bXc/9MqZns/66LYbj8fO8rStLP7/YDe1m+JKj WDMhOLWoS1u1KR+t44jGyk+t/9fIpCgKXWjVhFIdxOhCWeS1Gr/b+RdiY1vXzJI4 8PNTK9/XSCq0fg7yzG54+3L6oJ0Jegc/jdTVO5A34zlqmoaUDubYq9MoU8cxYaI8 1Soerrd5Sd4SFIItlW+T1X807GSd1TwMTyb9K4ozvp7w+WMG54t8D0gQns2fZkiy DAIVf6iT4ZuK8EySlmh/k6Dttrvx5nuQR9e+bAMq4WlCT6NpM9DDaGYgSJahTzFY +eOq2Xx8BagkYpi8Xmq1fpXGMYYre34= -----END CERTIFICATE-----Generated at Tue Sep 29 15:59:18 2026 by rpki-client