$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5d882b6f-6155-399f-a616-a5e871d1bf1a.roa File: 5d882b6f-6155-399f-a616-a5e871d1bf1a.roa (raw, json) Hash identifier: 55ncyB1+tac/a/DoH9L66fvECCI2SquaDwHovipSfCQ= Subject key identifier: E8:81:3C:94:CC:31:4C:8C:5F:F8:E1:58:A0:80:0D:41:5C:A3:F7:89 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F49851A452A554E2902137200 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5d882b6f-6155-399f-a616-a5e871d1bf1a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396982 IP address blocks: 34.119.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:85:1a:45:2a:55:4e:29:02:13:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=f1308676-4a75-47fc-87e6-52396b754865 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:15:e3:53:bf:9a:1c:66:dd:07:f9:0b:e3:75: 5f:72:96:62:3e:82:6c:e6:b6:a3:7c:bd:a9:f4:ee: 7f:8f:de:67:e6:48:a3:77:f9:44:7c:f4:25:52:77: 28:bf:85:13:12:98:bb:99:fe:6b:98:d7:1e:e9:c4: 99:7c:bd:5a:c3:d0:c1:e7:19:8c:8b:1a:8a:1e:55: de:24:fb:4c:f4:67:bc:a3:d7:65:1f:70:31:d0:c9: b5:f7:1d:d5:f8:f4:c7:2c:99:af:08:1c:bc:bf:c6: 0d:f9:e6:b7:45:c1:98:dc:b3:df:05:5c:66:4d:1e: ad:0f:c6:c4:02:cc:b3:e2:ac:c6:8a:fd:6b:37:ba: e0:24:c9:97:fd:a1:13:97:ee:04:c4:ba:db:95:f1: 0b:9b:6c:96:a5:44:d6:c4:23:1d:33:65:a9:bd:d1: d5:f9:17:b3:66:41:7d:3b:5a:53:52:86:cb:c4:c9: 32:e6:bb:92:a7:95:c0:a6:b4:35:2f:cb:be:cc:4a: c1:27:b7:cd:df:6c:e2:e5:9c:8f:72:5e:36:8b:13: af:8d:b4:be:1f:38:bf:81:f2:d9:76:50:1a:44:71: 5a:fa:87:17:ff:2a:98:be:c0:04:63:bd:5c:1b:31: 35:fb:86:85:14:b0:0b:99:12:50:74:d8:35:ce:d4: a9:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:81:3C:94:CC:31:4C:8C:5F:F8:E1:58:A0:80:0D:41:5C:A3:F7:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5d882b6f-6155-399f-a616-a5e871d1bf1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.119.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:7b:6e:fc:e7:e3:a5:f5:e5:d8:fa:16:e8:68:a4:d0:f3:c1: f8:64:51:87:48:f8:4e:b0:4d:bc:84:43:2b:c2:24:77:13:96: 67:a5:b5:45:b5:84:40:ae:15:16:d2:ad:bf:5c:9c:12:ac:b4: 99:83:3e:d5:01:87:e7:a3:1b:60:5a:97:ec:e7:28:d9:cb:69: d5:1c:30:a4:95:95:58:10:5b:46:1d:3c:89:cd:e5:58:1d:63: 46:ad:f3:45:5f:dd:ae:78:ef:e4:a7:e1:99:cc:2b:77:24:ad: 79:53:9a:dc:3b:47:16:6b:fa:8a:26:90:f4:46:a2:7e:47:3a: 54:c3:51:42:01:ae:6c:3c:3d:f4:91:e3:e7:2f:29:3b:a1:b2: 6e:f5:58:eb:db:be:78:22:b1:d8:03:04:d6:47:12:db:94:1f: 42:8c:e5:d7:1f:19:c5:d0:33:65:46:27:3b:d6:74:bb:ae:81: c2:d7:71:9e:84:0c:e1:b3:51:a3:b8:0b:ee:59:1a:9a:94:ba: f2:04:6d:11:72:f6:a4:29:6f:62:79:1b:97:4e:1c:e7:a9:29: 8f:3d:71:37:02:8b:1d:e7:8a:a4:7f:53:36:2f:07:01:fa:a5: 3a:12:c8:3c:6c:c5:79:a5:9e:cf:8b:7e:c7:7a:46:79:3d:ce: db:22:e4:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhRpFKlVOKQITcgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZjEzMDg2NzYtNGE3NS00N2ZjLTg3ZTYtNTIzOTZiNzU0ODY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRXjU7+aHGbdB/kL43VfcpZiPoJs5rajfL2p 9O5/j95n5kijd/lEfPQlUncov4UTEpi7mf5rmNce6cSZfL1aw9DB5xmMixqKHlXe JPtM9Ge8o9dlH3Ax0Mm19x3V+PTHLJmvCBy8v8YN+ea3RcGY3LPfBVxmTR6tD8bE Asyz4qzGiv1rN7rgJMmX/aETl+4ExLrblfELm2yWpUTWxCMdM2WpvdHV+RezZkF9 O1pTUobLxMky5ruSp5XAprQ1L8u+zErBJ7fN32zi5ZyPcl42ixOvjbS+Hzi/gfLZ dlAaRHFa+ocX/yqYvsAEY71cGzE1+4aFFLALmRJQdNg1ztSp4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOiBPJTMMUyMX/jhWKCADUFco/eJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNWQ4ODJiNmYtNjE1NS0z OTlmLWE2MTYtYTVlODcxZDFiZjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIncQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIR7bvzn46X15dj6FuhopNDzwfhkUYdI+E6wTbyEQyvCJHcTlmeltUW1 hECuFRbSrb9cnBKstJmDPtUBh+ejG2Bal+znKNnLadUcMKSVlVgQW0YdPInN5Vgd Y0at80Vf3a547+Sn4ZnMK3ckrXlTmtw7RxZr+oomkPRGon5HOlTDUUIBrmw8PfSR 4+cvKTuhsm71WOvbvngisdgDBNZHEtuUH0KM5dcfGcXQM2VGJzvWdLuugcLXcZ6E DOGzUaO4C+5ZGpqUuvIEbRFy9qQpb2J5G5dOHOepKY89cTcCix3niqR/UzYvBwH6 pToSyDxsxXmlns+Lfsd6Rnk9ztsi5JY= -----END CERTIFICATE-----Generated at Mon Sep 28 10:31:19 2026 by rpki-client