$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/67e45b69-61ef-3ff0-89e4-8d2796fe6e56.roa File: 67e45b69-61ef-3ff0-89e4-8d2796fe6e56.roa (raw, json) Hash identifier: ayv/Aiv1roqaMDOBj1yBYIdU3o33wGvMpm5EU6nnwNM= Subject key identifier: 8F:6F:E8:4C:6E:23:88:A5:2B:D5:41:43:69:3C:59:F1:F1:9D:58:B2 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F497CE06333141FC11CA94F00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/67e45b69-61ef-3ff0-89e4-8d2796fe6e56.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396982 IP address blocks: 34.108.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7c:e0:63:33:14:1f:c1:1c:a9:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=eb93b7b8-4437-4f32-9a9f-0882a70bae8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b3:02:45:8f:1e:2b:3b:39:51:fb:38:88:0d: 33:b6:3a:3c:e1:10:ec:ca:55:d4:09:d1:e1:3f:85: 29:b2:1e:36:6d:05:ee:00:15:05:db:e8:40:e5:04: 6d:b4:7f:ee:c6:12:aa:77:26:4b:e7:23:4c:b7:d3: f0:29:1f:e9:c6:41:31:35:b1:28:95:cc:38:1a:2a: 10:b0:7b:f3:6d:0c:62:f1:a0:24:04:18:b8:b4:99: e0:01:84:1d:b3:25:b5:e4:c2:21:1a:cc:3d:af:6c: 75:67:5f:bb:1b:31:2c:36:54:fa:a3:c8:b1:c6:a1: be:b3:e2:26:5a:c0:b3:02:cb:42:67:58:02:eb:06: a1:9b:e1:cf:32:ab:02:3d:d0:b6:1d:d5:cf:c1:27: 9d:db:59:c0:e9:93:05:bd:7c:71:76:a0:dd:6f:27: c3:cc:61:73:9e:05:e4:dc:36:c2:ac:46:2b:51:02: 26:bf:8d:82:57:d5:57:ed:55:9c:dd:16:4c:11:3e: d0:f0:36:b8:6f:b4:45:b9:55:65:94:61:12:71:d7: 7a:38:bf:96:85:69:a2:61:0b:64:68:b7:52:ad:62: 26:f1:a8:9e:00:c4:56:10:ad:d4:23:59:63:d4:63: 70:35:7f:ab:4f:27:9d:20:eb:05:eb:80:e5:aa:5f: e3:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:6F:E8:4C:6E:23:88:A5:2B:D5:41:43:69:3C:59:F1:F1:9D:58:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/67e45b69-61ef-3ff0-89e4-8d2796fe6e56.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.108.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:a2:49:7e:23:5c:ca:fe:eb:cc:cb:cf:8c:1f:45:58:e8:c7: 4d:8f:70:64:c5:82:76:87:43:8d:92:71:cb:03:51:6f:31:2b: ef:72:97:7a:a3:a0:14:ce:91:5b:26:c8:6f:57:17:6a:5f:5f: 5f:28:71:ac:fc:bf:68:19:62:af:ab:c4:92:63:bf:77:0e:7b: 0a:57:c3:7d:c5:82:25:58:e4:ea:0e:b8:42:0b:cb:63:73:67: 8d:65:64:c9:ed:71:e0:87:e2:30:ef:da:5f:9f:f4:4c:a4:3f: 67:57:83:ff:a2:e4:b4:33:10:47:30:98:50:50:d3:96:7d:d6: 8c:d1:cd:82:bd:95:63:2b:58:71:40:44:c9:69:79:a6:55:58: 0f:37:86:ab:9f:7c:94:48:fe:39:5d:08:7f:57:c3:53:9f:a0: dc:f7:c8:2d:0f:40:2b:2c:ff:2c:39:83:47:5c:8c:b2:08:e1: 77:42:1e:70:6e:87:97:1c:aa:85:c1:41:6d:e3:2a:4b:6e:2e: 4f:33:ba:02:aa:2e:67:b8:4b:8f:33:59:c5:99:eb:92:00:d0: 4b:2e:e6:1a:71:04:e3:60:98:5f:ae:f8:a5:b7:17:fb:dd:a7: 82:31:2b:0f:1a:26:4a:19:f0:10:a6:99:80:95:93:a5:54:83: ef:d7:d7:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfOBjMxQfwRypTwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZWI5M2I3YjgtNDQzNy00ZjMyLTlhOWYtMDg4MmE3MGJhZThlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubMCRY8eKzs5Ufs4iA0ztjo84RDsylXUCdHh P4Upsh42bQXuABUF2+hA5QRttH/uxhKqdyZL5yNMt9PwKR/pxkExNbEolcw4GioQ sHvzbQxi8aAkBBi4tJngAYQdsyW15MIhGsw9r2x1Z1+7GzEsNlT6o8ixxqG+s+Im WsCzAstCZ1gC6wahm+HPMqsCPdC2HdXPwSed21nA6ZMFvXxxdqDdbyfDzGFzngXk 3DbCrEYrUQImv42CV9VX7VWc3RZMET7Q8Da4b7RFuVVllGEScdd6OL+WhWmiYQtk aLdSrWIm8aieAMRWEK3UI1lj1GNwNX+rTyedIOsF64Dlql/j8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI9v6ExuI4ilK9VBQ2k8WfHxnViyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNjdlNDViNjktNjFlZi0z ZmYwLTg5ZTQtOGQyNzk2ZmU2ZTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImzQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACuiSX4jXMr+68zLz4wfRVjox02PcGTFgnaHQ42SccsDUW8xK+9yl3qj oBTOkVsmyG9XF2pfX18ocaz8v2gZYq+rxJJjv3cOewpXw33FgiVY5OoOuEILy2Nz Z41lZMntceCH4jDv2l+f9EykP2dXg/+i5LQzEEcwmFBQ05Z91ozRzYK9lWMrWHFA RMlpeaZVWA83hquffJRI/jldCH9Xw1OfoNz3yC0PQCss/yw5g0dcjLII4XdCHnBu h5ccqoXBQW3jKktuLk8zugKqLme4S48zWcWZ65IA0Esu5hpxBONgmF+u+KW3F/vd p4IxKw8aJkoZ8BCmmYCVk6VUg+/X19c= -----END CERTIFICATE-----Generated at Mon Sep 28 12:49:17 2026 by rpki-client