$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/66cbe500-b941-344f-9e80-0dde25d02810.roa File: 66cbe500-b941-344f-9e80-0dde25d02810.roa (raw, json) Hash identifier: iKIPpSkV9sfPTTUgJyQlmKooM0Wpk+uR9W56EZZo6F4= Subject key identifier: 20:D8:70:A7:2C:9B:52:0E:A1:AB:52:20:D2:2C:DD:B6:78:C3:95:AA Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DCA3DBEF23E1CD9CD5700 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/66cbe500-b941-344f-9e80-0dde25d02810.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.74.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:ca:3d:be:f2:3e:1c:d9:cd:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=51481c48-e76d-4587-a597-e07b7d9f3da3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:0f:21:b1:75:c3:c2:f2:c6:88:66:50:60:17: 17:01:1b:b7:d0:e5:3d:ee:b9:00:f8:97:8b:cc:96: 3e:ac:68:5a:a0:4d:83:6e:91:ef:aa:8c:f7:fa:06: 99:0b:a7:8a:f4:0c:8c:80:ce:cb:e0:f9:9d:b8:50: b4:8b:a3:39:87:c0:2d:08:4c:87:1e:6c:93:99:9f: 61:a6:5d:c7:34:1c:99:47:2a:2a:af:31:8e:15:60: f7:93:04:27:cf:ee:cb:a2:31:81:0c:b9:3b:2f:02: eb:65:ee:f6:3e:0e:b9:99:a6:3d:d4:4b:e0:2b:89: 9d:44:dc:9d:90:99:5c:b2:f4:81:cd:3e:1f:a7:99: 47:5b:b6:98:0b:ce:10:8b:46:24:de:c5:10:90:cd: 17:b9:38:77:3e:bf:4a:ea:09:62:97:68:27:02:38: f2:b1:b4:88:af:1f:0d:05:64:9a:01:79:1f:4b:8e: 95:23:25:e0:81:ee:61:a5:d8:fa:b1:48:19:da:e6: 4d:60:83:88:5e:e8:34:00:29:c8:dd:f9:62:58:69: 4e:e7:98:89:14:ef:3b:b8:b9:94:d5:7f:1d:3e:64: fb:09:1d:62:69:c3:02:f3:f7:bb:1e:50:17:3b:3b: a2:97:00:af:cd:43:f7:95:db:89:6a:3c:88:5d:70: 32:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:D8:70:A7:2C:9B:52:0E:A1:AB:52:20:D2:2C:DD:B6:78:C3:95:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/66cbe500-b941-344f-9e80-0dde25d02810.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.74.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:10:1a:56:c8:d2:2a:73:77:92:34:3e:d1:8e:68:91:01:6d: 77:59:95:94:ab:13:8f:11:30:63:10:ce:d9:06:27:a2:d1:71: 40:57:24:f4:c2:b6:a4:b3:db:cf:c9:b8:16:de:84:f9:46:c5: f7:8f:41:13:aa:84:bb:78:e1:1b:be:da:52:10:41:e2:ac:ae: 95:2e:5c:b8:4d:5b:ac:dd:e9:80:57:38:1d:a7:c8:45:eb:c6: ff:81:ed:89:ed:36:e5:1f:68:24:80:d0:74:0d:4a:35:8a:66: 0f:84:f7:3e:33:18:f8:99:82:ff:f3:b5:78:2b:e7:44:6d:14: 4f:2b:bc:1d:a1:af:d4:a0:41:3e:84:8c:72:2c:ec:77:e9:45: 12:56:9e:ba:de:03:0f:5d:e7:d9:f6:7b:e5:c9:4a:1c:90:98: ad:52:c3:46:03:11:09:9a:16:73:6a:58:ae:46:af:f1:3d:59: 52:ba:a0:42:fe:49:af:80:a7:6a:eb:eb:b3:93:19:97:cb:32: 7e:37:ed:0b:4a:0f:93:6b:44:ea:c8:2a:d7:6d:d2:0d:ec:8a: 16:1f:19:3f:db:85:ef:d1:2c:1e:6e:a1:fb:44:f7:64:02:4b: 3e:36:e2:98:f8:8d:6b:20:0f:25:c1:44:40:82:d8:0c:79:b5: 2f:8e:b7:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPco9vvI+HNnNVwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk NTE0ODFjNDgtZTc2ZC00NTg3LWE1OTctZTA3YjdkOWYzZGEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQ8hsXXDwvLGiGZQYBcXARu30OU97rkA+JeL zJY+rGhaoE2DbpHvqoz3+gaZC6eK9AyMgM7L4PmduFC0i6M5h8AtCEyHHmyTmZ9h pl3HNByZRyoqrzGOFWD3kwQnz+7LojGBDLk7LwLrZe72Pg65maY91EvgK4mdRNyd kJlcsvSBzT4fp5lHW7aYC84Qi0Yk3sUQkM0XuTh3Pr9K6glil2gnAjjysbSIrx8N BWSaAXkfS46VIyXgge5hpdj6sUgZ2uZNYIOIXug0ACnI3fliWGlO55iJFO87uLmU 1X8dPmT7CR1iacMC8/e7HlAXOzuilwCvzUP3lduJajyIXXAylQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCDYcKcsm1IOoatSINIs3bZ4w5WqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNjZjYmU1MDAtYjk0MS0z NDRmLTllODAtMGRkZTI1ZDAyODEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkogMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJQQGlbI0ipzd5I0PtGOaJEBbXdZlZSrE48RMGMQztkGJ6LRcUBXJPTC tqSz28/JuBbehPlGxfePQROqhLt44Ru+2lIQQeKsrpUuXLhNW6zd6YBXOB2nyEXr xv+B7YntNuUfaCSA0HQNSjWKZg+E9z4zGPiZgv/ztXgr50RtFE8rvB2hr9SgQT6E jHIs7HfpRRJWnrreAw9d59n2e+XJShyQmK1Sw0YDEQmaFnNqWK5Gr/E9WVK6oEL+ Sa+Ap2rr67OTGZfLMn437QtKD5NrROrIKtdt0g3sihYfGT/bhe/RLB5uoftE92QC Sz424pj4jWsgDyXBRECC2Ax5tS+Ot54= -----END CERTIFICATE-----Generated at Mon Sep 28 15:14:04 2026 by rpki-client