$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5febbf69-69b9-3a01-9a9a-209d8b943f0b.roa File: 5febbf69-69b9-3a01-9a9a-209d8b943f0b.roa (raw, json) Hash identifier: fw/LggHk1vR7ywWA2QX0KWJTo7vsVs7Czl9j5189CKs= Subject key identifier: F4:59:2C:5A:02:73:36:5C:D4:33:2A:32:72:A0:51:78:F7:0F:A5:3A Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3D896F47CDE41295F12A80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5febbf69-69b9-3a01-9a9a-209d8b943f0b.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.152.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:89:6f:47:cd:e4:12:95:f1:2a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=7cdce80f-0f14-42b8-8848-f8185751e3c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:bf:05:a6:c7:d2:c4:2a:b5:13:fd:d2:2e:3d: f2:25:65:85:82:3c:28:4a:0a:e2:95:e6:7d:e2:57: 16:a5:f9:17:33:56:1e:cb:46:c4:2f:59:30:e4:64: 23:2d:5a:37:25:79:88:4b:0c:ce:da:2c:e1:e9:47: ca:40:3c:0d:d6:87:d8:47:11:f6:40:e7:81:61:65: ce:9b:00:6d:72:c7:cc:0d:ec:4f:13:33:45:f5:10: c7:8c:b3:5d:2b:91:de:76:4c:14:f7:58:f4:71:89: 1f:ca:bf:54:e8:35:5a:e9:f3:40:e9:86:8a:89:af: b7:6c:0a:df:47:90:14:2e:cd:f6:b6:ce:45:e3:b0: 60:b4:8f:37:5c:37:aa:16:70:65:c2:03:b9:da:56: 2d:6c:45:8d:68:51:51:c9:1f:43:9e:5e:d2:46:5d: c3:42:da:6d:c9:24:fb:af:d2:fe:f8:91:f5:8f:99: bc:cc:75:32:fc:6c:f1:23:03:26:e6:c2:e0:55:14: 7b:5d:1c:e3:42:83:50:f6:97:35:87:b6:6d:c8:75: 00:59:8f:14:ef:03:d9:32:18:5e:2e:00:5c:10:48: 76:88:4a:28:06:22:8f:2d:48:63:1c:6c:8b:24:8e: db:9e:39:fb:6f:2f:9d:80:ef:42:e4:62:78:d3:d2: bd:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:59:2C:5A:02:73:36:5C:D4:33:2A:32:72:A0:51:78:F7:0F:A5:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5febbf69-69b9-3a01-9a9a-209d8b943f0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.152.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:fa:a9:57:ba:2e:f2:ae:0c:9e:e3:a2:2c:10:71:73:10:f3: 95:7a:dc:be:20:5d:19:27:26:bb:43:63:13:da:ed:de:0f:d2: c8:76:6e:88:7a:a2:48:81:9a:2f:5e:c6:23:a2:ef:25:b4:13: 39:d1:b5:77:da:91:67:7d:ff:73:a6:74:83:bd:97:f2:a0:3e: 08:0f:99:56:69:80:ef:99:ab:93:f1:c2:d6:82:17:ff:85:f0: 0c:32:18:e7:82:e9:d1:a5:5a:7c:39:1c:5b:ca:40:7b:d4:ec: f3:89:5f:90:b8:20:63:c5:56:f6:81:77:db:0a:89:49:dd:e3: 13:a4:d3:a3:19:cb:4d:0f:e3:fb:b6:5f:61:ed:5c:64:b8:32: f3:a0:af:87:2c:a1:3a:bf:16:94:fa:02:68:da:7f:bf:1f:47: df:b5:f8:76:0c:d8:45:7e:bd:d4:05:1b:20:fe:f4:47:a2:64: 97:26:56:a0:8e:fb:fd:a0:e2:fd:30:df:91:43:3e:82:cb:e6: 1d:98:6b:5b:d4:dc:16:9c:89:87:7a:d1:69:1a:30:8f:56:07: 81:d9:30:02:92:c6:9a:ec:13:e0:4d:12:17:80:08:f8:7c:f2: 26:fc:69:24:7b:9f:f0:e8:41:e2:2c:51:d7:ee:8b:0a:75:b2: ad:60:2c:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPYlvR83kEpXxKoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk N2NkY2U4MGYtMGYxNC00MmI4LTg4NDgtZjgxODU3NTFlM2MyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2L8FpsfSxCq1E/3SLj3yJWWFgjwoSgrileZ9 4lcWpfkXM1Yey0bEL1kw5GQjLVo3JXmISwzO2izh6UfKQDwN1ofYRxH2QOeBYWXO mwBtcsfMDexPEzNF9RDHjLNdK5HedkwU91j0cYkfyr9U6DVa6fNA6YaKia+3bArf R5AULs32ts5F47BgtI83XDeqFnBlwgO52lYtbEWNaFFRyR9Dnl7SRl3DQtptyST7 r9L++JH1j5m8zHUy/GzxIwMm5sLgVRR7XRzjQoNQ9pc1h7ZtyHUAWY8U7wPZMhhe LgBcEEh2iEooBiKPLUhjHGyLJI7bnjn7by+dgO9C5GJ409K9XwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPRZLFoCczZc1DMqMnKgUXj3D6U6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNWZlYmJmNjktNjliOS0z YTAxLTlhOWEtMjA5ZDhiOTQzZjBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIpgQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADz6qVe6LvKuDJ7joiwQcXMQ85V63L4gXRknJrtDYxPa7d4P0sh2boh6 okiBmi9exiOi7yW0EznRtXfakWd9/3OmdIO9l/KgPggPmVZpgO+Zq5PxwtaCF/+F 8AwyGOeC6dGlWnw5HFvKQHvU7POJX5C4IGPFVvaBd9sKiUnd4xOk06MZy00P4/u2 X2HtXGS4MvOgr4csoTq/FpT6Amjaf78fR9+1+HYM2EV+vdQFGyD+9EeiZJcmVqCO +/2g4v0w35FDPoLL5h2Ya1vU3BaciYd60WkaMI9WB4HZMAKSxprsE+BNEheACPh8 8ib8aSR7n/DoQeIsUdfuiwp1sq1gLG0= -----END CERTIFICATE-----Generated at Mon Sep 28 11:21:38 2026 by rpki-client