$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5bea2241-4f04-34c8-bd8b-5a8e4355a61c.roa File: 5bea2241-4f04-34c8-bd8b-5a8e4355a61c.roa (raw, json) Hash identifier: 5gUoSgM+RLQNBc/prUuGvl2KxZpdxeftYJe3akvHeC8= Subject key identifier: 11:52:79:53:BC:5C:4C:D6:12:A9:FB:90:BD:23:07:7C:7F:88:9F:13 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F093CFA92DC3B76FFBCA9D240 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5bea2241-4f04-34c8-bd8b-5a8e4355a61c.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 19527 IP address blocks: 34.1.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3c:fa:92:dc:3b:76:ff:bc:a9:d2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=d2a284c8-2b4c-432e-a2d1-d5ca4af897a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e3:ff:9a:58:3c:f6:7a:ad:41:a8:9d:b1:10: 02:02:9d:03:8a:6f:19:81:d4:1b:cc:9c:35:ca:9e: 73:bb:f0:e7:f5:82:99:4a:69:97:fa:f0:d6:5f:66: 75:bc:53:d1:65:b9:6d:84:84:45:b1:83:ab:b9:77: b1:69:30:3a:07:cf:a3:b0:c9:0e:5f:00:cd:35:f6: af:ef:3b:66:9b:a2:5d:4c:1f:17:8b:ab:31:a6:40: 2a:8d:ef:70:0f:92:58:51:29:52:08:8b:45:5a:13: 2c:ac:52:bd:a1:64:7d:07:0f:ed:13:64:34:87:76: 70:2a:a9:8b:96:01:a7:9e:e1:63:62:36:2a:fa:f1: ce:fd:c1:b0:58:5e:13:00:11:3e:e6:5a:c1:c8:b2: 76:3e:0c:38:ce:18:de:18:28:7e:22:44:cc:0c:e8: e0:74:e5:cc:ba:de:42:ea:a7:89:a8:44:29:09:fe: ac:73:18:22:23:2d:2e:e2:1b:7a:e5:de:0d:0e:5b: 7f:ab:fc:2d:78:87:4c:ed:88:82:9f:28:b2:fc:39: 8b:cb:0d:18:ef:52:ee:65:f7:2d:32:6e:9a:a1:43: 6c:aa:ed:41:9b:15:ab:b9:c4:60:bc:da:40:74:17: 2c:7d:a8:29:29:39:c2:5a:8e:ed:5c:e8:d3:dd:8a: e7:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:52:79:53:BC:5C:4C:D6:12:A9:FB:90:BD:23:07:7C:7F:88:9F:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5bea2241-4f04-34c8-bd8b-5a8e4355a61c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.1.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:11:1c:46:c8:fb:00:01:b8:56:52:4b:91:c1:22:e6:c2:8c: 0e:49:cc:de:0a:7e:34:62:80:1e:b2:93:c6:f8:78:ce:b1:7e: 15:4f:8a:44:00:11:69:92:c5:1c:bb:52:95:63:0d:d2:da:f6: bf:12:27:99:04:e8:cc:fd:f2:39:85:39:28:43:f2:2e:29:7d: 01:0d:8b:70:f1:9e:87:22:a2:b4:a2:36:0c:a6:1b:c9:df:8d: e5:fc:b4:0d:1d:68:07:f6:4d:5a:d5:81:b8:2c:6e:f7:3d:e4: 04:ea:c8:0c:15:9c:b1:b8:57:02:51:b7:8b:3b:78:5e:bb:c5: 8b:58:26:31:f8:f0:7f:b5:2f:85:05:76:3c:ae:a7:b4:b9:21: cb:26:87:35:5f:ab:8e:0d:ef:67:b6:36:86:03:61:a6:d8:85: 46:f3:f8:44:98:10:ee:79:1d:8c:2f:91:86:5b:b9:e9:23:1e: 7a:c4:54:a8:a2:ba:00:6c:42:37:6a:d1:ca:6c:40:12:4f:63: 1f:84:64:4e:fb:8c:f8:67:c6:af:ee:3e:4f:fd:d1:e7:f8:c4: f9:d4:1c:94:ad:76:7b:ba:09:c3:58:22:9b:79:ca:22:ba:ec: 2b:c9:01:aa:37:00:29:a4:38:de:90:b6:5d:fd:7d:e9:e3:a7: 4d:c7:ec:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8JPPqS3Dt2/7yp0kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk ZDJhMjg0YzgtMmI0Yy00MzJlLWEyZDEtZDVjYTRhZjg5N2EwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+P/mlg89nqtQaidsRACAp0Dim8ZgdQbzJw1 yp5zu/Dn9YKZSmmX+vDWX2Z1vFPRZblthIRFsYOruXexaTA6B8+jsMkOXwDNNfav 7ztmm6JdTB8Xi6sxpkAqje9wD5JYUSlSCItFWhMsrFK9oWR9Bw/tE2Q0h3ZwKqmL lgGnnuFjYjYq+vHO/cGwWF4TABE+5lrByLJ2Pgw4zhjeGCh+IkTMDOjgdOXMut5C 6qeJqEQpCf6scxgiIy0u4ht65d4NDlt/q/wteIdM7YiCnyiy/DmLyw0Y71LuZfct Mm6aoUNsqu1BmxWrucRgvNpAdBcsfagpKTnCWo7tXOjT3YrnLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBFSeVO8XEzWEqn7kL0jB3x/iJ8TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNWJlYTIyNDEtNGYwNC0z NGM4LWJkOGItNWE4ZTQzNTVhNjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIgHQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHkRHEbI+wABuFZSS5HBIubCjA5JzN4KfjRigB6yk8b4eM6xfhVPikQA EWmSxRy7UpVjDdLa9r8SJ5kE6Mz98jmFOShD8i4pfQENi3DxnociorSiNgymG8nf jeX8tA0daAf2TVrVgbgsbvc95ATqyAwVnLG4VwJRt4s7eF67xYtYJjH48H+1L4UF djyup7S5IcsmhzVfq44N72e2NoYDYabYhUbz+ESYEO55HYwvkYZbuekjHnrEVKii ugBsQjdq0cpsQBJPYx+EZE77jPhnxq/uPk/90ef4xPnUHJStdnu6CcNYIpt5yiK6 7CvJAao3ACmkON6Qtl39fenjp03H7CQ= -----END CERTIFICATE-----Generated at Mon Sep 28 16:26:49 2026 by rpki-client