$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4eb6f595-d950-3578-a890-0c70c39de6a3.roa File: 4eb6f595-d950-3578-a890-0c70c39de6a3.roa (raw, json) Hash identifier: YIEQcfC60agAfthhuchPTQKduIhkeF0a7iKzTQBeTLE= Subject key identifier: CF:80:56:EB:21:E6:8B:F0:AD:AC:58:8E:C6:A3:91:B1:B2:05:87:4F Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584EE38C9210F7233F7AD4D33B80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4eb6f595-d950-3578-a890-0c70c39de6a3.roa Signing time: Wed 19 Aug 2026 13:00:11 +0000 ROA not before: Wed 19 Aug 2026 13:00:11 +0000 ROA not after: Tue 17 Nov 2026 14:00:11 +0000 asID: 396982 IP address blocks: 34.144.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e3:8c:92:10:f7:23:3f:7a:d4:d3:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Aug 19 13:00:11 2026 GMT Not After : Nov 17 14:00:11 2026 GMT Subject: CN=4add8c1e-2684-4fac-ae6c-20f93c053454 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:eb:9d:99:94:72:dc:e9:60:d2:92:8d:f3:3c: 37:82:66:d2:87:42:a3:c7:2a:12:85:37:39:32:e6: 4a:f6:64:99:50:3a:2c:9c:02:4c:bd:ef:67:09:c5: c8:24:92:e8:a1:20:9a:6e:ca:00:46:bd:bf:70:c9: 06:19:86:29:30:a8:a0:d9:28:33:48:1f:6c:9d:e0: e8:6b:a7:eb:92:e0:97:6f:00:91:45:39:20:6c:4a: 1f:f6:73:89:70:98:2d:be:ba:b1:4b:08:9b:e8:d1: 20:18:67:52:01:8d:e2:bb:92:16:7f:81:3a:70:78: 1b:08:67:b3:cf:1e:7c:e6:22:be:4e:09:7e:01:7a: c0:21:93:da:95:41:b7:6c:58:30:02:d1:1e:97:fa: 1b:8f:6b:88:34:f3:06:5d:5d:c6:05:9b:b2:7a:44: 47:12:96:5e:24:7a:aa:b6:a5:8a:40:6d:94:75:8a: 18:06:33:c0:2b:66:4e:6b:0e:12:37:8a:ed:45:41: f9:76:77:27:40:2d:61:ea:9f:12:5f:a5:df:de:41: 70:91:dd:47:28:c0:26:de:42:cd:89:83:bc:e3:7e: 96:9e:71:76:03:11:a4:39:33:f8:79:7d:62:02:0c: 54:11:63:89:81:dd:8c:a8:de:02:72:8a:11:59:13: fc:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:80:56:EB:21:E6:8B:F0:AD:AC:58:8E:C6:A3:91:B1:B2:05:87:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4eb6f595-d950-3578-a890-0c70c39de6a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.144.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:e0:65:f3:02:3d:35:6b:ed:59:17:44:8f:47:a0:e6:40:89: 32:0d:1b:fd:80:66:74:43:79:14:b3:27:f9:18:a4:8c:a4:01: 13:1c:86:73:a6:d2:48:a1:72:03:18:e5:35:44:fc:6d:cc:4e: da:b0:d5:43:10:58:56:32:e7:33:de:6c:dd:c4:f9:c8:23:0f: 71:6f:f3:d6:35:b2:db:73:4e:2c:95:22:ee:c0:5c:40:d1:77: 82:30:d9:b1:1f:9d:27:dd:f8:9e:f2:39:7d:82:41:01:ec:e9: 1a:bb:67:b5:ce:05:62:07:73:39:ef:4c:97:a4:74:c2:bd:91: 8f:a3:bf:c3:3f:80:18:c3:d7:e5:58:40:b3:11:87:5d:a0:da: 03:68:51:c0:ef:c1:0d:07:ea:54:09:e2:dd:36:14:52:00:cb: 2f:bb:8f:de:ba:80:04:17:45:53:d7:46:63:68:33:5a:ef:97: 6f:4b:7b:31:55:4a:9c:f7:f2:76:7b:e8:63:31:5c:86:04:11: 55:b8:4f:b3:f3:52:d9:81:98:b1:5e:de:58:57:6c:ed:95:ae: 61:2d:e7:1c:4e:bb:53:63:27:f5:09:87:18:4b:c0:bd:e6:01: 0f:b0:76:3c:89:e4:08:bf:a6:03:4a:7f:7e:c4:68:f4:5d:4b: b5:e6:52:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7jjJIQ9yM/etTTO4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDgxOTEzMDAxMVoXDTI2MTExNzE0MDAxMVowLzEtMCsGA1UEAxMk NGFkZDhjMWUtMjY4NC00ZmFjLWFlNmMtMjBmOTNjMDUzNDU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOudmZRy3Olg0pKN8zw3gmbSh0KjxyoShTc5 MuZK9mSZUDosnAJMve9nCcXIJJLooSCabsoARr2/cMkGGYYpMKig2SgzSB9sneDo a6frkuCXbwCRRTkgbEof9nOJcJgtvrqxSwib6NEgGGdSAY3iu5IWf4E6cHgbCGez zx585iK+Tgl+AXrAIZPalUG3bFgwAtEel/obj2uINPMGXV3GBZuyekRHEpZeJHqq tqWKQG2UdYoYBjPAK2ZOaw4SN4rtRUH5dncnQC1h6p8SX6Xf3kFwkd1HKMAm3kLN iYO8436WnnF2AxGkOTP4eX1iAgxUEWOJgd2MqN4CcooRWRP8cQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM+AVush5ovwraxYjsajkbGyBYdPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNGViNmY1OTUtZDk1MC0z NTc4LWE4OTAtMGM3MGMzOWRlNmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAIpCdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEHgZfMCPTVr7VkXRI9HoOZAiTING/2AZnRDeRSzJ/kYpIykARMchnOm 0kihcgMY5TVE/G3MTtqw1UMQWFYy5zPebN3E+cgjD3Fv89Y1sttzTiyVIu7AXEDR d4Iw2bEfnSfd+J7yOX2CQQHs6Rq7Z7XOBWIHcznvTJekdMK9kY+jv8M/gBjD1+VY QLMRh12g2gNoUcDvwQ0H6lQJ4t02FFIAyy+7j966gAQXRVPXRmNoM1rvl29LezFV Spz38nZ76GMxXIYEEVW4T7PzUtmBmLFe3lhXbO2VrmEt5xxOu1NjJ/UJhxhLwL3m AQ+wdjyJ5Ai/pgNKf37EaPRdS7XmUvU= -----END CERTIFICATE-----Generated at Mon Sep 28 21:51:21 2026 by rpki-client