$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5d5d3b9e-a0ca-3023-8922-7fef182a5e9a.roa File: 5d5d3b9e-a0ca-3023-8922-7fef182a5e9a.roa (raw, json) Hash identifier: 6Pf9sNQWt71aq8MtJrsa4rEERwpn9xOMFM+/qAu10+U= Subject key identifier: 06:C1:5D:4E:A9:7A:03:52:86:F1:A6:A9:E8:10:0F:E0:67:9D:FD:E7 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DA2928C25A9955A870E40 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5d5d3b9e-a0ca-3023-8922-7fef182a5e9a.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.78.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:a2:92:8c:25:a9:95:5a:87:0e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=2e0baf08-eac7-4a2b-a261-ea8787c874fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:b1:eb:b5:47:e1:bf:c1:b4:03:f1:08:49:3f: 4e:e1:0c:29:7d:33:32:8e:27:d6:93:c3:e7:a7:77: 2f:88:7b:55:a0:7d:31:1b:39:d9:db:44:32:8a:4b: df:2c:2e:13:fa:55:dc:dc:74:57:b8:77:19:94:73: ed:01:d0:b2:be:45:48:94:2d:e5:c7:fa:62:a2:ea: d5:ce:f5:34:53:00:28:60:d5:61:1f:83:88:a4:4f: 53:1b:a2:64:16:b1:95:44:a6:a7:f8:da:77:e0:8d: cf:5f:6a:b5:65:99:a6:ba:28:36:08:2e:f6:d3:da: e4:74:d0:86:86:db:b8:5c:d0:29:29:97:3a:31:a8: bd:d0:c3:43:b4:80:e8:18:49:b8:18:66:bc:42:f1: 4c:61:fd:b7:c9:9b:be:04:9b:6d:21:1c:97:51:09: 07:35:1d:f2:a6:c0:29:7b:a8:6a:89:8e:d1:02:21: 99:44:8b:8f:0e:be:c8:fe:f5:38:65:8f:aa:bf:c8: b6:73:1e:79:1c:24:fa:2b:39:c7:53:70:8e:de:bc: 62:17:59:d8:87:11:1d:89:f0:bc:2b:24:ab:be:29: 73:8e:74:6a:b6:f1:bb:72:f7:1a:c3:68:85:3e:ff: 2e:de:d2:80:a6:0f:ad:15:fe:d9:4b:b4:07:bd:4b: 3d:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:C1:5D:4E:A9:7A:03:52:86:F1:A6:A9:E8:10:0F:E0:67:9D:FD:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5d5d3b9e-a0ca-3023-8922-7fef182a5e9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.78.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:20:ee:ff:4f:33:e8:38:2d:92:7d:77:2e:c4:01:2c:70:66: ee:cc:11:8f:a1:40:d6:69:19:5b:35:5b:20:2d:5d:04:df:ea: 9d:3a:2f:10:c1:f5:94:b0:c5:67:e2:4d:11:0b:60:81:43:24: 7a:b0:cd:76:03:91:e7:19:fb:b4:98:e5:a3:1d:c1:a1:ab:ae: 8e:c6:b1:9d:7d:05:8a:3f:67:ad:1c:8d:d1:cb:c3:ed:2f:c1: 25:87:f2:35:a7:46:42:f6:61:23:5e:2a:69:8a:bc:13:ba:d1: 3a:f3:4d:98:8e:9c:a9:4f:e6:4b:e9:c3:bf:9f:a8:1a:cb:cb: e3:fa:ed:f7:2d:1d:55:d3:7f:5d:3e:bd:df:1d:39:8d:c1:26: 2b:57:c9:b0:11:c9:27:75:17:16:25:36:38:4f:0c:f2:31:21: ea:2e:12:8b:48:cf:d4:d3:af:d2:74:e5:14:8c:c2:62:06:e6: d3:98:3b:53:5f:31:de:43:5c:ea:58:20:bc:23:41:ae:af:ba: b4:df:3c:31:99:13:fd:9a:f1:af:e6:90:a2:4d:8e:81:09:26: 0c:e4:2a:7c:fd:ae:ef:03:b1:7b:42:6f:c5:1f:96:cf:b8:b0: a8:72:e2:48:25:e9:89:8b:8f:4a:be:43:89:78:2b:62:ce:8d: fb:4c:8f:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPaKSjCWplVqHDkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk MmUwYmFmMDgtZWFjNy00YTJiLWEyNjEtZWE4Nzg3Yzg3NGZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrHrtUfhv8G0A/EIST9O4QwpfTMyjifWk8Pn p3cviHtVoH0xGznZ20QyikvfLC4T+lXc3HRXuHcZlHPtAdCyvkVIlC3lx/piourV zvU0UwAoYNVhH4OIpE9TG6JkFrGVRKan+Np34I3PX2q1ZZmmuig2CC7209rkdNCG htu4XNApKZc6Mai90MNDtIDoGEm4GGa8QvFMYf23yZu+BJttIRyXUQkHNR3ypsAp e6hqiY7RAiGZRIuPDr7I/vU4ZY+qv8i2cx55HCT6KznHU3CO3rxiF1nYhxEdifC8 KySrvilzjnRqtvG7cvcaw2iFPv8u3tKApg+tFf7ZS7QHvUs9owIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAbBXU6pegNShvGmqegQD+Bnnf3nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNWQ1ZDNiOWUtYTBjYS0z MDIzLTg5MjItN2ZlZjE4MmE1ZTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIk5QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADAg7v9PM+g4LZJ9dy7EASxwZu7MEY+hQNZpGVs1WyAtXQTf6p06LxDB 9ZSwxWfiTRELYIFDJHqwzXYDkecZ+7SY5aMdwaGrro7GsZ19BYo/Z60cjdHLw+0v wSWH8jWnRkL2YSNeKmmKvBO60TrzTZiOnKlP5kvpw7+fqBrLy+P67fctHVXTf10+ vd8dOY3BJitXybARySd1FxYlNjhPDPIxIeouEotIz9TTr9J05RSMwmIG5tOYO1Nf Md5DXOpYILwjQa6vurTfPDGZE/2a8a/mkKJNjoEJJgzkKnz9ru8DsXtCb8Ufls+4 sKhy4kgl6YmLj0q+Q4l4K2LOjftMj70= -----END CERTIFICATE-----Generated at Mon Sep 28 08:33:51 2026 by rpki-client