$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5553cad3-0049-323d-a58c-b4e78f17efa7.roa File: 5553cad3-0049-323d-a58c-b4e78f17efa7.roa (raw, json) Hash identifier: dLMJNLHPfVdwTjriZsPKDuVI+vNNafU5M/opL5krKl4= Subject key identifier: 3A:DB:79:43:F2:3E:75:D2:D6:E8:9A:68:67:86:89:19:29:9F:9C:2A Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F498532A76E42340FECA62210 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5553cad3-0049-323d-a58c-b4e78f17efa7.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396982 IP address blocks: 34.118.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:85:32:a7:6e:42:34:0f:ec:a6:22:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=f4185f57-e980-458e-a4a3-f60c6457b309 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:fc:5f:8d:32:68:c1:19:7f:c7:ee:c1:cd:2a: 7c:4e:68:75:cd:37:4e:52:7a:4b:0f:ef:45:60:0e: fa:09:b2:9c:be:a2:bc:f6:28:2a:a0:c6:c5:d6:41: 17:69:aa:5b:5f:24:08:7a:48:63:dc:c7:80:a4:68: 88:a5:5c:b9:2c:a4:0f:d5:ad:25:ae:7d:2b:89:7f: 0f:b9:d6:05:6f:00:ed:76:33:1f:6f:c1:35:5b:f0: fd:cb:3a:ca:4a:08:ef:2c:1f:9a:51:9a:bc:cf:28: 56:ba:68:43:0c:c5:78:d2:81:1b:30:e4:0d:55:17: fd:75:3e:fb:12:79:62:61:ff:94:72:8a:a0:43:eb: 57:76:cc:d6:de:8a:84:f9:52:6e:ec:e7:82:d6:4c: 6c:6e:e0:62:c6:0f:a5:14:65:55:15:c3:f4:32:06: e5:85:0e:1a:ec:37:87:bc:cf:a4:81:6e:45:52:20: 1c:39:45:a6:29:c3:94:bb:43:94:10:85:e5:05:e3: 3e:c9:24:48:a3:25:a0:bd:1e:8c:32:d9:9c:9b:f2: e0:09:ff:4f:d0:ff:50:45:59:d6:ce:59:4f:e1:96: e7:94:c7:56:6d:29:dc:51:12:f5:07:a5:2a:fb:46: 73:ef:c8:d0:fd:2a:b5:20:63:00:b5:ab:b5:59:13: 2e:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:DB:79:43:F2:3E:75:D2:D6:E8:9A:68:67:86:89:19:29:9F:9C:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5553cad3-0049-323d-a58c-b4e78f17efa7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.118.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:5f:85:b2:36:1f:b3:e8:e9:31:a7:82:51:56:45:00:7d:19: 77:8f:e0:20:e7:60:49:05:24:0c:74:99:70:1a:68:11:88:d3: 45:28:32:17:96:11:c5:76:64:a4:0f:a6:e7:11:a4:8c:f5:7c: 15:14:dd:be:67:50:d4:9e:ab:6b:66:80:e7:75:30:7e:18:37: a1:b3:9d:7a:05:b2:8c:3a:f1:b6:93:e7:e9:75:6d:22:69:1c: 9b:4e:9d:05:ae:e0:98:4a:73:e6:73:fb:8d:bc:33:76:a3:f0: 21:fa:5c:a6:44:72:52:e0:0c:1f:83:4b:5e:f4:81:91:df:74: 3e:04:bb:b6:75:83:25:28:e5:6c:27:af:8e:30:7e:50:ea:c0: e0:7c:71:f8:0b:5a:69:1e:c6:a6:53:e9:5f:4f:54:3d:e5:f5: ca:50:e9:ef:73:1f:8e:c2:18:75:51:bb:5e:f0:41:4a:22:d5: 92:c8:ea:39:aa:44:f9:60:26:9d:4d:35:09:b8:47:ec:8b:08: c8:95:64:bb:56:32:f3:18:ea:72:3f:cf:2d:8d:89:87:7c:04: 23:95:92:2e:4b:4c:18:84:c8:ef:f6:32:cf:72:c4:6d:01:9f: ca:21:d2:96:87:cb:cf:55:a0:74:0f:0f:b5:02:5c:95:30:fd: ca:3f:a7:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhTKnbkI0D+ymIhAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZjQxODVmNTctZTk4MC00NThlLWE0YTMtZjYwYzY0NTdiMzA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPxfjTJowRl/x+7BzSp8Tmh1zTdOUnpLD+9F YA76CbKcvqK89igqoMbF1kEXaapbXyQIekhj3MeApGiIpVy5LKQP1a0lrn0riX8P udYFbwDtdjMfb8E1W/D9yzrKSgjvLB+aUZq8zyhWumhDDMV40oEbMOQNVRf9dT77 EnliYf+UcoqgQ+tXdszW3oqE+VJu7OeC1kxsbuBixg+lFGVVFcP0MgblhQ4a7DeH vM+kgW5FUiAcOUWmKcOUu0OUEIXlBeM+ySRIoyWgvR6MMtmcm/LgCf9P0P9QRVnW zllP4ZbnlMdWbSncURL1B6Uq+0Zz78jQ/Sq1IGMAtau1WRMuFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDrbeUPyPnXS1uiaaGeGiRkpn5wqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNTU1M2NhZDMtMDA0OS0z MjNkLWE1OGMtYjRlNzhmMTdlZmE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGInaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFNfhbI2H7Po6TGnglFWRQB9GXeP4CDnYEkFJAx0mXAaaBGI00UoMheW EcV2ZKQPpucRpIz1fBUU3b5nUNSeq2tmgOd1MH4YN6GznXoFsow68baT5+l1bSJp HJtOnQWu4JhKc+Zz+428M3aj8CH6XKZEclLgDB+DS170gZHfdD4Eu7Z1gyUo5Wwn r44wflDqwOB8cfgLWmkexqZT6V9PVD3l9cpQ6e9zH47CGHVRu17wQUoi1ZLI6jmq RPlgJp1NNQm4R+yLCMiVZLtWMvMY6nI/zy2NiYd8BCOVki5LTBiEyO/2Ms9yxG0B n8oh0paHy89VoHQPD7UCXJUw/co/pxQ= -----END CERTIFICATE-----Generated at Mon Sep 28 14:33:15 2026 by rpki-client