$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/673f42a9-339e-3cc1-a895-ecad7fe4d245.roa File: 673f42a9-339e-3cc1-a895-ecad7fe4d245.roa (raw, json) Hash identifier: E4XK3Uy+EqppQQgG08pc1IwXNJtkaleRImi4eVrDXM8= Subject key identifier: F0:BD:AA:44:9A:6E:BF:16:99:F0:90:7F:7D:6D:DD:E4:60:F6:A3:88 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DA0B69226C07F891AF580 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/673f42a9-339e-3cc1-a895-ecad7fe4d245.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.93.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:a0:b6:92:26:c0:7f:89:1a:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=6ed4620d-e2c4-4c8c-9b90-c039cc2697d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:dc:04:ac:19:1b:90:1e:77:c8:c8:59:6d:23: a6:d5:7c:a5:e0:22:fe:f5:cf:1a:e1:45:3c:3c:b5: dd:15:87:63:a2:c2:af:af:12:8c:40:e5:34:51:71: 9d:9a:50:6d:c4:51:96:fb:73:6f:2d:9d:ab:a5:40: 8f:fb:ea:d9:00:51:87:86:0e:a8:75:52:d2:f2:e5: d1:b4:c0:ea:27:58:73:30:1e:cd:8d:17:60:15:da: d0:6d:58:58:b7:3e:4f:95:bd:2f:5d:7b:d8:88:23: 6a:c2:90:27:b5:c2:29:f1:e0:fc:d5:45:46:ba:7a: ce:ef:3e:b5:07:b2:1a:6f:73:d7:97:81:6f:bc:2f: c6:7e:83:ae:09:86:d9:11:dd:de:31:fa:09:3e:0a: a4:e4:2a:d7:58:2f:e3:31:44:82:ae:e5:13:e6:c3: a1:69:0c:6d:28:8a:41:4e:0f:9c:a0:db:2d:69:06: 58:78:b3:9d:ca:72:a3:c6:e3:c0:db:3b:1b:92:78: fd:93:1c:78:df:6b:6b:18:46:1b:1c:c7:11:1b:16: 15:2b:c2:a4:12:c4:33:c0:77:27:6a:03:dc:3a:38: 51:34:20:e9:76:8f:5e:80:d9:6e:86:10:4b:f4:0b: 6b:67:33:1c:58:26:7f:2c:f5:84:fe:b2:e0:8a:98: a0:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:BD:AA:44:9A:6E:BF:16:99:F0:90:7F:7D:6D:DD:E4:60:F6:A3:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/673f42a9-339e-3cc1-a895-ecad7fe4d245.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.93.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:15:b3:fe:8e:a8:04:43:68:ad:a5:b9:11:5c:04:de:e6:c5: f2:cb:26:13:27:14:6a:b3:1c:c5:22:6c:c6:7c:de:1f:60:cf: 03:cf:3f:f1:4e:67:eb:f0:07:a8:55:a3:8b:b4:3e:d2:be:59: f8:61:3b:75:78:91:eb:15:50:15:3c:1e:78:48:06:1c:f7:0c: 8a:f2:3c:69:f8:20:c5:db:09:08:55:10:17:55:7f:93:84:93: 43:ca:c1:fd:88:66:e6:f6:fa:85:d8:66:a0:19:ab:42:4b:ed: 69:f7:4e:08:22:13:44:98:e8:2d:26:3e:a5:e6:27:c2:be:3e: d0:63:02:6d:fb:14:d3:fc:9f:ce:c9:e1:91:12:a0:a6:4f:b2: 92:5b:d7:d8:68:fe:fb:6b:fe:57:ef:d2:19:c1:da:cb:89:b7: bd:e3:29:a2:c0:29:6d:e8:ee:bc:33:42:5c:13:4b:01:95:b3: ab:c0:b6:45:57:17:b9:b0:8f:0a:40:e7:20:05:69:ea:3f:48: ec:d3:03:9b:56:b2:50:ca:ba:6e:9e:c2:59:d1:ad:10:3d:bb: 7c:a0:1f:7b:6f:8c:df:d2:12:c9:44:4f:31:f2:9e:b4:99:3c: fb:2f:f6:63:a1:77:77:c2:8c:e2:40:8b:ce:12:a2:b5:42:48: 8c:d5:0b:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPaC2kibAf4ka9YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk NmVkNDYyMGQtZTJjNC00YzhjLTliOTAtYzAzOWNjMjY5N2Q1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9wErBkbkB53yMhZbSOm1Xyl4CL+9c8a4UU8 PLXdFYdjosKvrxKMQOU0UXGdmlBtxFGW+3NvLZ2rpUCP++rZAFGHhg6odVLS8uXR tMDqJ1hzMB7NjRdgFdrQbVhYtz5Plb0vXXvYiCNqwpAntcIp8eD81UVGunrO7z61 B7Iab3PXl4FvvC/GfoOuCYbZEd3eMfoJPgqk5CrXWC/jMUSCruUT5sOhaQxtKIpB Tg+coNstaQZYeLOdynKjxuPA2zsbknj9kxx432trGEYbHMcRGxYVK8KkEsQzwHcn agPcOjhRNCDpdo9egNluhhBL9AtrZzMcWCZ/LPWE/rLgipiggwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPC9qkSabr8WmfCQf31t3eRg9qOIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNjczZjQyYTktMzM5ZS0z Y2MxLWE4OTUtZWNhZDdmZTRkMjQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIl0gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIAVs/6OqARDaK2luRFcBN7mxfLLJhMnFGqzHMUibMZ83h9gzwPPP/FO Z+vwB6hVo4u0PtK+WfhhO3V4kesVUBU8HnhIBhz3DIryPGn4IMXbCQhVEBdVf5OE k0PKwf2IZub2+oXYZqAZq0JL7Wn3TggiE0SY6C0mPqXmJ8K+PtBjAm37FNP8n87J 4ZESoKZPspJb19ho/vtr/lfv0hnB2suJt73jKaLAKW3o7rwzQlwTSwGVs6vAtkVX F7mwjwpA5yAFaeo/SOzTA5tWslDKum6ewlnRrRA9u3ygH3tvjN/SEslETzHynrSZ PPsv9mOhd3fCjOJAi84SorVCSIzVC9M= -----END CERTIFICATE-----Generated at Tue Sep 29 16:37:45 2026 by rpki-client