$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7eec4813-4c67-3e4a-875a-cd0dfc0e0b34.roa File: 7eec4813-4c67-3e4a-875a-cd0dfc0e0b34.roa (raw, json) Hash identifier: e44cMu4/pHlrNX6DWSfkwHMn+krbmqLpfzYVj0m98VY= Subject key identifier: A3:96:E1:04:D3:39:AB:90:D2:0E:8B:92:85:6A:68:8D:2A:5D:A5:4F Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3DC8DC4DAE586F88431580 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7eec4813-4c67-3e4a-875a-cd0dfc0e0b34.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.129.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:c8:dc:4d:ae:58:6f:88:43:15:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=925d705d-5098-47ac-a3f0-1a26d93d491a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:8a:c7:61:69:7c:c5:cb:84:19:89:8e:ef:ce: ac:a2:eb:ec:e1:af:46:74:6f:26:42:e7:50:b3:64: 05:57:4f:a8:0c:38:9d:08:ee:40:58:e5:2a:ed:8c: a6:81:04:55:1b:36:39:8f:06:7e:a3:e9:e1:55:1f: a3:cb:37:27:ed:2a:fb:81:97:be:5b:0d:f9:db:8b: d1:b4:56:34:be:b9:a7:ac:49:ad:ae:37:55:c3:cf: ce:95:fd:0f:67:96:9d:38:0c:ef:dc:84:d7:82:89: 05:7b:02:51:b2:7e:b1:cd:b6:42:66:98:48:40:d8: bb:d0:1b:3d:07:05:72:d1:1f:5c:5a:da:d9:bf:33: 8f:eb:d5:d3:08:48:6e:78:2c:69:e0:58:42:39:d3: df:e2:41:57:55:7f:ac:ce:44:5d:05:2e:a7:6e:ef: e6:f2:8c:ec:7d:16:51:ef:2e:73:43:77:ca:3a:b0: 51:a8:10:24:a2:d7:83:38:e1:bf:89:ee:7c:0f:0e: 10:fd:a3:13:77:f8:2c:d0:a1:84:4b:e1:8e:d5:c4: 6b:3f:ae:e4:86:5f:3f:e3:b1:c9:10:24:ba:9a:d3: 52:1d:53:c0:7d:7d:f6:81:6e:9b:1c:28:50:c1:be: 1e:83:81:13:d6:a4:85:1e:44:5c:11:4e:d4:3b:6b: 56:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:96:E1:04:D3:39:AB:90:D2:0E:8B:92:85:6A:68:8D:2A:5D:A5:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7eec4813-4c67-3e4a-875a-cd0dfc0e0b34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.129.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:e3:44:37:a3:5c:6c:d5:62:7a:6b:72:05:bb:ed:b7:d6:c4: f1:26:3a:65:4c:7b:f6:8c:60:50:2e:5f:78:3c:a4:b5:64:53: 14:26:61:0e:03:0e:89:78:50:03:42:6d:14:5f:01:cc:1f:43: 27:05:95:50:3c:7c:ca:f5:62:0d:e6:4e:79:85:b6:b9:9b:13: aa:7d:cb:bf:4b:da:17:4d:fb:02:1c:08:dc:25:ed:75:26:70: bf:82:1e:a0:53:3f:29:46:5d:cf:b2:b4:d8:92:9a:31:e9:de: 19:37:50:59:9f:c6:44:c4:bf:cc:d1:71:6a:ab:a0:bd:20:4a: 88:fa:71:cb:37:01:b8:71:99:11:57:b3:bc:15:59:da:ef:dd: ef:a6:72:99:31:4d:fd:b8:4d:64:fb:86:7e:29:ee:08:99:30: aa:63:6f:c1:e9:89:08:c2:d3:65:87:77:06:5f:1a:ff:e4:b5: e9:ab:66:1f:2c:b6:b8:96:a8:7a:81:9e:8f:b0:50:f7:01:93: 00:55:96:18:f4:5f:f7:ef:67:d7:c4:8c:c8:39:4e:f1:d6:ae: 40:78:7d:9c:c6:8d:77:33:1e:9a:2c:53:3c:1f:75:c1:37:ca: 34:c8:5a:0e:4e:fa:2a:9e:a3:f1:b3:26:e7:6b:f5:77:e3:42: 33:42:b2:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPcjcTa5Yb4hDFYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk OTI1ZDcwNWQtNTA5OC00N2FjLWEzZjAtMWEyNmQ5M2Q0OTFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYrHYWl8xcuEGYmO786souvs4a9GdG8mQudQ s2QFV0+oDDidCO5AWOUq7YymgQRVGzY5jwZ+o+nhVR+jyzcn7Sr7gZe+Ww3524vR tFY0vrmnrEmtrjdVw8/Olf0PZ5adOAzv3ITXgokFewJRsn6xzbZCZphIQNi70Bs9 BwVy0R9cWtrZvzOP69XTCEhueCxp4FhCOdPf4kFXVX+szkRdBS6nbu/m8ozsfRZR 7y5zQ3fKOrBRqBAkoteDOOG/ie58Dw4Q/aMTd/gs0KGES+GO1cRrP67khl8/47HJ ECS6mtNSHVPAfX32gW6bHChQwb4eg4ET1qSFHkRcEU7UO2tW0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKOW4QTTOauQ0g6LkoVqaI0qXaVPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvN2VlYzQ4MTMtNGM2Ny0z ZTRhLTg3NWEtY2QwZGZjMGUwYjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoFgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAETjRDejXGzVYnprcgW77bfWxPEmOmVMe/aMYFAuX3g8pLVkUxQmYQ4D Dol4UANCbRRfAcwfQycFlVA8fMr1Yg3mTnmFtrmbE6p9y79L2hdN+wIcCNwl7XUm cL+CHqBTPylGXc+ytNiSmjHp3hk3UFmfxkTEv8zRcWqroL0gSoj6ccs3AbhxmRFX s7wVWdrv3e+mcpkxTf24TWT7hn4p7giZMKpjb8HpiQjC02WHdwZfGv/ktemrZh8s triWqHqBno+wUPcBkwBVlhj0X/fvZ9fEjMg5TvHWrkB4fZzGjXczHposUzwfdcE3 yjTIWg5O+iqeo/GzJudr9XfjQjNCsuA= -----END CERTIFICATE-----Generated at Tue Sep 29 11:03:48 2026 by rpki-client