$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/66a25f6c-f81c-36a0-b6a1-667a358896b2.roa File: 66a25f6c-f81c-36a0-b6a1-667a358896b2.roa (raw, json) Hash identifier: Qqkni/2LJo28kJuxE/Z0x41z3oOSq02HhZYsT5fFRWQ= Subject key identifier: 86:43:01:1F:19:C7:BC:AF:1E:90:E4:99:BB:FD:56:22:59:9D:11:20 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DD700F4D3467E0C9072D0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/66a25f6c-f81c-36a0-b6a1-667a358896b2.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.147.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:d7:00:f4:d3:46:7e:0c:90:72:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=e18a17ed-fa38-4c5c-b217-46c3d8ef204a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:13:a3:17:0e:96:37:13:33:7b:aa:a2:96:4a: 60:4d:ae:7a:8a:3f:75:09:3b:b3:cb:bc:7b:9a:60: b2:23:81:f4:4f:f8:d8:1b:90:8f:5d:d7:fe:ba:32: c6:f8:2d:3d:15:96:89:32:26:50:05:06:cf:ef:20: f1:ef:7d:51:2f:c0:11:90:c7:97:7c:3c:12:d0:96: b3:ae:8b:06:83:93:df:14:96:0f:19:db:87:ed:f4: a6:02:56:47:03:5a:32:9c:7c:13:3d:65:bb:89:5e: 0c:e2:95:ec:ec:b1:e1:eb:7f:fd:fe:fa:af:b7:08: 25:10:80:9e:8f:68:89:81:55:0a:7b:38:7d:68:82: 83:85:8b:8c:7e:90:48:94:40:4d:ce:87:1e:e3:33: cb:cd:37:76:1e:6a:c6:04:9e:60:1a:f9:f1:fa:16: 00:15:51:61:87:a5:a8:fe:cb:d5:3b:55:c7:21:83: bd:04:8b:0a:b1:96:04:26:19:92:58:a3:41:2d:72: c4:57:9d:9a:b4:15:3c:22:3d:7b:57:3c:55:08:2e: 7d:81:a9:1f:2a:af:a2:47:7f:b7:fa:da:d6:30:19: d1:51:53:ab:79:4b:15:fb:55:d2:ff:6b:3e:4a:29: b6:36:ad:f4:83:92:d8:b6:a2:a0:44:16:a0:b8:17: 93:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:43:01:1F:19:C7:BC:AF:1E:90:E4:99:BB:FD:56:22:59:9D:11:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/66a25f6c-f81c-36a0-b6a1-667a358896b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.147.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:f2:95:73:48:ac:65:4a:39:ca:5d:b6:28:86:3d:bb:c8:e0: d0:56:53:b4:af:8c:16:9b:cd:9a:15:7a:5e:54:1e:07:7a:b4: b8:eb:f9:36:c7:01:49:93:bf:63:77:fd:9b:87:6c:af:93:b0: fb:ad:79:83:97:e7:c2:4c:24:f6:8c:8d:ca:cb:6f:3b:dd:83: e3:3b:df:bb:3f:37:67:72:f3:f6:95:f2:a9:2a:e5:d5:fa:a6: a6:c2:02:ba:6d:a5:e2:15:a6:d6:98:3d:bc:a9:a4:ef:8d:5b: bd:6a:de:34:02:d9:b4:8a:0c:bb:73:54:2a:a0:42:7c:de:9b: a8:2f:ee:e5:c9:1b:ba:1d:33:c6:79:a2:e5:a3:75:49:f1:da: 26:3f:c3:18:b5:81:b8:a4:8e:79:b2:bc:72:67:30:da:1f:0b: 0e:3a:b1:da:a9:fd:4d:c5:51:ce:a6:49:0b:b8:81:78:50:e6: ab:f0:a1:3b:93:da:4e:2f:05:27:99:54:83:2c:03:53:8e:6e: 42:56:1c:17:69:e9:ab:15:b4:84:94:a0:0b:fe:7b:d3:cb:f5: ba:45:e2:5b:da:fe:40:5d:7d:5f:c2:42:76:5c:fe:43:67:cd: 54:75:7d:b2:a9:be:b7:5d:3f:46:e7:3d:ef:b1:dd:dc:bd:e7: c4:d5:d4:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPdcA9NNGfgyQctAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk ZTE4YTE3ZWQtZmEzOC00YzVjLWIyMTctNDZjM2Q4ZWYyMDRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBOjFw6WNxMze6qilkpgTa56ij91CTuzy7x7 mmCyI4H0T/jYG5CPXdf+ujLG+C09FZaJMiZQBQbP7yDx731RL8ARkMeXfDwS0Jaz rosGg5PfFJYPGduH7fSmAlZHA1oynHwTPWW7iV4M4pXs7LHh63/9/vqvtwglEICe j2iJgVUKezh9aIKDhYuMfpBIlEBNzoce4zPLzTd2HmrGBJ5gGvnx+hYAFVFhh6Wo /svVO1XHIYO9BIsKsZYEJhmSWKNBLXLEV52atBU8Ij17VzxVCC59gakfKq+iR3+3 +trWMBnRUVOreUsV+1XS/2s+Sim2Nq30g5LYtqKgRBaguBeTLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIZDAR8Zx7yvHpDkmbv9ViJZnREgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNjZhMjVmNmMtZjgxYy0z NmEwLWI2YTEtNjY3YTM1ODg5NmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIpNgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABXylXNIrGVKOcpdtiiGPbvI4NBWU7SvjBabzZoVel5UHgd6tLjr+TbH AUmTv2N3/ZuHbK+TsPuteYOX58JMJPaMjcrLbzvdg+M737s/N2dy8/aV8qkq5dX6 pqbCArptpeIVptaYPbyppO+NW71q3jQC2bSKDLtzVCqgQnzem6gv7uXJG7odM8Z5 ouWjdUnx2iY/wxi1gbikjnmyvHJnMNofCw46sdqp/U3FUc6mSQu4gXhQ5qvwoTuT 2k4vBSeZVIMsA1OObkJWHBdp6asVtISUoAv+e9PL9bpF4lva/kBdfV/CQnZc/kNn zVR1fbKpvrddP0bnPe+x3dy958TV1Mw= -----END CERTIFICATE-----Generated at Mon Sep 28 10:38:25 2026 by rpki-client