$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/437990a1-2118-3c10-876c-e7495090df33.roa File: 437990a1-2118-3c10-876c-e7495090df33.roa (raw, json) Hash identifier: fPOkvlyMY8+r6MTCx/9KqXL9t3wnBVNP9ReM8A7q8tk= Subject key identifier: 47:58:2D:C0:E3:6A:EA:8F:B3:07:42:EE:7C:C0:E4:92:BE:DC:44:43 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3D91C7B1C525EAAC465F40 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/437990a1-2118-3c10-876c-e7495090df33.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.143.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:91:c7:b1:c5:25:ea:ac:46:5f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=5dcb6c5a-44a2-42a2-b9ba-f7df66b4993f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c4:ab:7d:27:e2:2a:58:6c:c8:24:f6:c8:46: e8:0a:51:b8:45:da:3b:cc:ab:b1:10:3c:0e:53:ac: 69:87:c0:9e:5c:44:16:38:40:ae:cc:a8:13:09:be: 15:28:63:eb:84:16:f4:16:3a:99:3f:5e:0f:80:da: f8:7e:11:bf:32:48:7a:f9:de:cb:a8:50:4c:a1:d1: 04:42:5e:cc:a8:da:83:00:28:28:21:00:ec:b4:7e: e1:fa:35:77:1f:04:57:e9:51:45:e4:33:86:76:11: b8:44:1a:ac:82:30:c2:59:76:00:bb:ab:57:7a:cc: a1:0c:e8:fb:c5:73:f7:4e:03:57:e9:9c:99:10:d2: b0:19:f0:32:45:f2:56:96:da:9f:95:c0:4d:1b:6c: 67:1a:6e:b6:06:0a:7c:96:b7:e9:2a:81:ea:1e:fd: a4:36:00:86:59:b9:cd:3d:8d:b2:79:5f:83:f2:0e: ba:a3:d4:37:de:ce:0b:7d:0d:b2:ff:ce:5c:51:24: fd:c5:90:d7:2b:17:e6:80:56:69:76:81:f0:2c:23: 77:2c:84:75:37:b8:05:24:cc:07:85:4e:50:c7:10: f5:03:ae:11:50:9b:5c:2a:2b:47:97:d8:35:c6:57: c8:f0:3b:f3:34:8d:e8:d8:8b:6d:56:64:7c:6c:91: 59:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:58:2D:C0:E3:6A:EA:8F:B3:07:42:EE:7C:C0:E4:92:BE:DC:44:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/437990a1-2118-3c10-876c-e7495090df33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.143.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:9b:a0:02:18:05:16:a6:c1:2d:e3:5b:85:ee:2c:d4:2a:d0: b0:ed:23:23:b0:f6:e6:4c:52:dc:0d:60:c8:ce:23:27:c0:ba: 33:08:c7:79:5a:8e:56:fb:f3:25:cc:8d:c0:b0:25:c3:6d:61: ee:0d:90:91:b4:10:1f:f2:35:44:d4:1d:28:6f:5c:3a:ab:00: dc:06:25:55:1c:dc:06:37:24:db:1a:9c:ca:8c:85:f4:ff:bb: 85:60:e0:d9:b2:60:9d:fe:b0:bd:63:96:ad:96:94:6e:7e:9b: bd:58:87:35:45:86:bc:7f:8f:64:3a:7c:b2:35:9e:2b:3d:a4: 71:06:2c:d4:8a:bc:13:5a:08:af:b2:11:84:cf:98:aa:50:c0: 7d:57:ec:f8:02:ec:6f:6d:24:06:4e:de:b0:2b:d4:0c:53:aa: 24:eb:f2:99:b3:88:5a:f3:60:d8:2c:a6:6d:61:82:bd:52:74: 8a:70:de:3e:74:db:a4:64:98:1d:70:ae:51:fb:eb:f4:6c:fc: b1:4e:b9:5e:63:f3:88:29:80:0e:b0:53:44:44:ce:a0:ab:de: de:0e:45:68:81:9f:e3:08:06:58:b9:26:b7:3a:47:17:42:14: e5:c7:9b:0b:26:ba:0b:e7:76:51:09:98:41:e3:9a:ce:9c:be: 7f:9a:8e:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPZHHscUl6qxGX0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk NWRjYjZjNWEtNDRhMi00MmEyLWI5YmEtZjdkZjY2YjQ5OTNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsSrfSfiKlhsyCT2yEboClG4Rdo7zKuxEDwO U6xph8CeXEQWOECuzKgTCb4VKGPrhBb0FjqZP14PgNr4fhG/Mkh6+d7LqFBModEE Ql7MqNqDACgoIQDstH7h+jV3HwRX6VFF5DOGdhG4RBqsgjDCWXYAu6tXesyhDOj7 xXP3TgNX6ZyZENKwGfAyRfJWltqflcBNG2xnGm62Bgp8lrfpKoHqHv2kNgCGWbnN PY2yeV+D8g66o9Q33s4LfQ2y/85cUST9xZDXKxfmgFZpdoHwLCN3LIR1N7gFJMwH hU5QxxD1A64RUJtcKitHl9g1xlfI8DvzNI3o2IttVmR8bJFZjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEdYLcDjauqPswdC7nzA5JK+3ERDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNDM3OTkwYTEtMjExOC0z YzEwLTg3NmMtZTc0OTUwOTBkZjMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHIo+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGeboAIYBRamwS3jW4XuLNQq0LDtIyOw9uZMUtwNYMjOIyfAujMIx3la jlb78yXMjcCwJcNtYe4NkJG0EB/yNUTUHShvXDqrANwGJVUc3AY3JNsanMqMhfT/ u4Vg4NmyYJ3+sL1jlq2WlG5+m71YhzVFhrx/j2Q6fLI1nis9pHEGLNSKvBNaCK+y EYTPmKpQwH1X7PgC7G9tJAZO3rAr1AxTqiTr8pmziFrzYNgspm1hgr1SdIpw3j50 26RkmB1wrlH76/Rs/LFOuV5j84gpgA6wU0REzqCr3t4ORWiBn+MIBli5Jrc6RxdC FOXHmwsmugvndlEJmEHjms6cvn+ajvQ= -----END CERTIFICATE-----Generated at Sat Oct 3 10:55:02 2026 by rpki-client