$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/585aab71-22e8-39eb-861f-fec76f1605ea.roa File: 585aab71-22e8-39eb-861f-fec76f1605ea.roa (raw, json) Hash identifier: 30VOZkonNaEPuXCZvzFmMneeqsLKJ72nhGiRbWcr8Fg= Subject key identifier: AD:5A:AA:F2:85:1A:16:A6:93:A8:7F:5B:AB:E9:28:EA:D6:BE:48:24 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DB83DDDC27C45BB2B9AC0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/585aab71-22e8-39eb-861f-fec76f1605ea.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.133.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:b8:3d:dd:c2:7c:45:bb:2b:9a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=667cb650-a3c7-4ab5-9644-dc96b4349e2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:c0:b8:6a:82:26:11:6d:e0:33:f3:14:da:31: f7:c0:82:bd:c9:46:c2:ba:e5:4a:0f:da:66:be:54: 9d:96:ee:b2:c2:2c:13:ad:79:82:14:60:c5:ef:d5: 63:9c:86:58:62:f1:ef:8b:c3:10:3d:aa:ed:00:ff: f7:84:cf:9a:02:c8:af:2f:85:4b:92:73:57:04:f5: 43:e3:27:e1:f8:88:c9:43:2d:f6:bb:33:fc:01:12: 51:f8:77:9d:1e:c7:ba:92:0d:80:54:9b:a7:c9:01: 57:e8:b5:6b:02:34:4b:96:55:5b:13:a8:19:ef:77: 8a:3b:4a:1b:cc:36:6e:d8:e4:2e:ba:76:f0:93:c9: 3c:87:c1:91:39:5d:e4:94:51:dc:64:da:61:2f:36: c5:ec:b6:e0:44:0b:f1:37:b8:0a:ab:5e:f2:8b:32: ee:d1:6e:27:44:a7:31:25:d7:57:75:c8:d1:bc:a5: 4f:f9:37:78:cb:4d:4a:f7:72:c5:b5:58:78:8b:df: 12:23:3e:7f:9c:18:ae:ec:a4:e3:4e:17:2f:98:6c: f1:96:0f:4a:c5:7d:22:ec:4a:a7:28:82:4c:d8:77: ac:f8:8a:ba:36:c4:d4:24:5c:a0:4d:d1:55:bd:b9: a2:ff:24:40:0a:0f:37:ab:92:3d:1e:37:9f:15:8d: 12:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:5A:AA:F2:85:1A:16:A6:93:A8:7F:5B:AB:E9:28:EA:D6:BE:48:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/585aab71-22e8-39eb-861f-fec76f1605ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.133.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:8b:39:2c:10:ca:f0:b7:68:b8:78:87:5b:39:b5:02:41:5b: 99:58:6f:9a:ec:9c:9b:c9:be:89:ca:2c:fe:bc:4b:33:e8:db: 2a:29:36:58:2f:78:54:1e:ea:d2:7f:6d:41:1f:d6:f7:eb:2a: f1:e4:ca:00:f6:26:ab:2a:9b:a9:c9:57:c2:49:b3:c9:91:0c: 84:82:8a:65:72:bd:b3:0f:d0:eb:72:ae:ea:3c:58:af:5b:be: 2b:55:63:87:6d:73:b7:69:e8:c6:df:b3:96:4b:05:98:7d:e1: 47:2a:87:88:62:0d:ce:d1:cf:18:c2:b2:78:6d:a7:e0:9a:80: 88:72:73:93:0e:33:fd:e7:0d:36:9a:43:dc:cc:e2:7a:8d:1a: e4:e5:b6:d9:e6:a9:78:5b:c8:3a:81:8f:a8:12:cc:2e:b8:ca: 6e:38:60:ec:74:d2:3e:e1:6b:cf:24:33:8c:a4:25:df:85:b0: 7b:5b:31:e4:83:9e:a7:d3:22:af:59:91:94:b3:6c:15:a0:d2: f6:9a:6f:65:b1:ad:63:15:a8:42:93:3a:cb:3b:24:87:4a:c8: b6:4d:c4:cc:00:cb:0d:16:ec:87:fe:81:24:91:67:a4:3b:3e: 69:81:46:f3:ca:23:f2:c7:15:24:93:7b:cd:0a:65:57:31:e9: d7:b1:bf:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPbg93cJ8RbsrmsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk NjY3Y2I2NTAtYTNjNy00YWI1LTk2NDQtZGM5NmI0MzQ5ZTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMC4aoImEW3gM/MU2jH3wIK9yUbCuuVKD9pm vlSdlu6ywiwTrXmCFGDF79VjnIZYYvHvi8MQPartAP/3hM+aAsivL4VLknNXBPVD 4yfh+IjJQy32uzP8ARJR+HedHse6kg2AVJunyQFX6LVrAjRLllVbE6gZ73eKO0ob zDZu2OQuunbwk8k8h8GROV3klFHcZNphLzbF7LbgRAvxN7gKq17yizLu0W4nRKcx JddXdcjRvKVP+Td4y01K93LFtVh4i98SIz5/nBiu7KTjThcvmGzxlg9KxX0i7Eqn KIJM2Hes+Iq6NsTUJFygTdFVvbmi/yRACg83q5I9HjefFY0SgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK1aqvKFGhamk6h/W6vpKOrWvkgkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNTg1YWFiNzEtMjJlOC0z OWViLTg2MWYtZmVjNzZmMTYwNWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoUgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKKLOSwQyvC3aLh4h1s5tQJBW5lYb5rsnJvJvonKLP68SzPo2yopNlgv eFQe6tJ/bUEf1vfrKvHkygD2Jqsqm6nJV8JJs8mRDISCimVyvbMP0Otyruo8WK9b vitVY4dtc7dp6Mbfs5ZLBZh94Ucqh4hiDc7RzxjCsnhtp+CagIhyc5MOM/3nDTaa Q9zM4nqNGuTlttnmqXhbyDqBj6gSzC64ym44YOx00j7ha88kM4ykJd+FsHtbMeSD nqfTIq9ZkZSzbBWg0vaab2WxrWMVqEKTOss7JIdKyLZNxMwAyw0W7If+gSSRZ6Q7 PmmBRvPKI/LHFSSTe80KZVcx6dexv8U= -----END CERTIFICATE-----Generated at Mon Sep 28 22:19:14 2026 by rpki-client