$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4ae4aad7-d386-3522-8e8d-d6ab5ffbf629.roa File: 4ae4aad7-d386-3522-8e8d-d6ab5ffbf629.roa (raw, json) Hash identifier: SXCNbnWRg//v+oYWUmay4pVYTlSMEPURS5ICm9k5d2M= Subject key identifier: EE:82:3F:A7:94:37:D3:AF:37:29:C1:9D:A3:77:E4:4B:27:8C:C4:23 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F2527A9184C48FB54DC3EC900 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4ae4aad7-d386-3522-8e8d-d6ab5ffbf629.roa Signing time: Sat 12 Sep 2026 01:00:12 +0000 ROA not before: Sat 12 Sep 2026 01:00:12 +0000 ROA not after: Fri 11 Dec 2026 02:00:12 +0000 asID: 396982 IP address blocks: 34.128.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:25:27:a9:18:4c:48:fb:54:dc:3e:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 12 01:00:12 2026 GMT Not After : Dec 11 02:00:12 2026 GMT Subject: CN=f61e057a-72c2-4a46-b311-0f5602ff8f04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:91:f4:8b:42:b4:2a:35:1d:bc:1a:00:e8:23: cd:5c:b9:22:63:ee:ed:82:fd:b4:c0:00:4b:5a:39: da:9f:f5:61:56:1c:46:4e:9a:e3:14:c5:be:3c:d2: f0:b6:f0:7c:b8:86:d5:09:30:e6:6e:63:3e:61:6a: 2d:ef:fd:37:4f:03:56:b7:88:fd:e6:58:70:fc:1d: 38:00:d8:e1:91:89:43:b7:b3:d0:84:03:85:dd:37: 37:d6:49:e1:6a:0b:44:25:84:2c:64:bd:14:cb:7e: 28:2b:d1:ed:80:ce:fd:d4:cd:cf:f7:3f:5a:00:43: a7:98:18:24:e7:89:9e:02:23:a1:49:f3:52:f2:ae: c7:8e:49:37:e8:98:a7:ad:2e:02:52:d7:ae:2a:94: e9:9a:ea:e5:1d:50:10:02:50:24:74:0d:39:ec:4d: 2f:92:f9:38:ad:cd:fa:97:5f:6f:1c:85:24:8e:09: 69:78:d5:dc:0a:65:9e:fc:01:28:45:f9:08:b9:72: ab:22:3e:79:02:96:36:de:c0:9f:0b:48:d5:1f:5b: be:7e:85:61:5d:90:7c:b9:86:e4:b7:66:24:35:94: 50:1f:45:96:c6:d5:33:6f:96:da:14:99:3a:0d:6a: f2:4f:9e:04:93:80:1e:54:92:66:0a:a4:c8:d8:74: 22:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:82:3F:A7:94:37:D3:AF:37:29:C1:9D:A3:77:E4:4B:27:8C:C4:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4ae4aad7-d386-3522-8e8d-d6ab5ffbf629.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.128.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:15:7c:d7:4b:ab:c6:e9:da:89:f3:6f:0b:25:42:1f:cf:f0: 8b:d7:3f:eb:90:52:8a:84:da:f5:d2:b6:ed:da:0b:11:3b:91: 2b:4a:d9:f7:3b:83:c4:e0:73:0e:13:e2:af:85:b7:6d:af:92: 51:23:b1:d4:8c:7f:8a:93:7b:23:40:67:d6:3b:20:c7:0a:ab: b8:9d:57:66:aa:c7:4f:32:3e:64:c4:13:32:f5:74:9c:f3:2f: d2:ea:98:aa:d4:55:aa:61:8c:6f:b9:b5:ea:dd:26:56:34:bf: 53:50:f6:5e:ed:6b:16:a0:35:42:19:cc:40:c7:65:97:c2:84: ed:b4:28:53:b7:d7:2a:44:59:5e:80:62:1f:05:8e:da:5c:4d: 8b:74:03:64:37:de:43:28:80:0b:1a:1a:7d:29:ef:d3:bc:31: bc:dd:a4:9e:72:47:8f:eb:d7:43:04:a6:ef:6e:bd:d1:a7:56: c9:29:55:43:35:31:2f:80:58:5a:85:f0:e1:b6:c4:a5:58:c9: e3:9a:59:b4:7a:79:25:46:3e:43:50:8b:a2:bc:7d:28:f4:bf: 77:83:7e:57:e5:f6:d1:b1:21:d6:d3:2e:dd:9f:ee:74:87:67: 99:c5:33:9d:6f:94:4c:0e:a1:8a:50:cb:46:96:b0:f8:ac:90: be:73:3f:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8lJ6kYTEj7VNw+yQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkxMjAxMDAxMloXDTI2MTIxMTAyMDAxMlowLzEtMCsGA1UEAxMk ZjYxZTA1N2EtNzJjMi00YTQ2LWIzMTEtMGY1NjAyZmY4ZjA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZH0i0K0KjUdvBoA6CPNXLkiY+7tgv20wABL Wjnan/VhVhxGTprjFMW+PNLwtvB8uIbVCTDmbmM+YWot7/03TwNWt4j95lhw/B04 ANjhkYlDt7PQhAOF3Tc31knhagtEJYQsZL0Uy34oK9HtgM791M3P9z9aAEOnmBgk 54meAiOhSfNS8q7Hjkk36JinrS4CUteuKpTpmurlHVAQAlAkdA057E0vkvk4rc36 l19vHIUkjglpeNXcCmWe/AEoRfkIuXKrIj55ApY23sCfC0jVH1u+foVhXZB8uYbk t2YkNZRQH0WWxtUzb5baFJk6DWryT54Ek4AeVJJmCqTI2HQirwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO6CP6eUN9OvNynBnaN35EsnjMQjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNGFlNGFhZDctZDM4Ni0z NTIyLThlOGQtZDZhYjVmZmJmNjI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoDQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJYVfNdLq8bp2onzbwslQh/P8IvXP+uQUoqE2vXStu3aCxE7kStK2fc7 g8Tgcw4T4q+Ft22vklEjsdSMf4qTeyNAZ9Y7IMcKq7idV2aqx08yPmTEEzL1dJzz L9LqmKrUVaphjG+5terdJlY0v1NQ9l7taxagNUIZzEDHZZfChO20KFO31ypEWV6A Yh8FjtpcTYt0A2Q33kMogAsaGn0p79O8MbzdpJ5yR4/r10MEpu9uvdGnVskpVUM1 MS+AWFqF8OG2xKVYyeOaWbR6eSVGPkNQi6K8fSj0v3eDflfl9tGxIdbTLt2f7nSH Z5nFM51vlEwOoYpQy0aWsPiskL5zPyo= -----END CERTIFICATE-----Generated at Wed Sep 30 07:07:46 2026 by rpki-client