$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/88c2ffcd-49ee-3f6a-93e7-724d5af47a62.roa File: 88c2ffcd-49ee-3f6a-93e7-724d5af47a62.roa (raw, json) Hash identifier: tShD6YMO0IaWMFjt/NNtcyCBokqJMR4AP1BDHJr9loc= Subject key identifier: 43:93:49:33:34:E9:67:EE:93:64:59:83:17:4D:57:94:70:FE:74:A9 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4C3D845D7D638457C917F280 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/88c2ffcd-49ee-3f6a-93e7-724d5af47a62.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 34.70.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:84:5d:7d:63:84:57:c9:17:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=1e8314c0-26a8-47c8-830e-a28744f17a9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:81:f6:03:f2:e3:29:6a:fd:23:04:c4:71:80: a0:31:91:18:79:bf:c2:6b:e7:7a:67:cc:6a:10:cc: bd:ac:7f:5d:dd:73:4a:b5:69:4d:53:7c:a0:7e:5e: 35:1b:51:bc:36:ab:5c:84:ae:2c:92:a1:0b:05:6f: 46:81:8b:2b:31:10:6d:de:69:46:71:0b:c5:61:0b: 6f:4a:86:8d:b6:27:28:7b:5c:6e:68:59:85:64:4b: f2:69:b2:24:d5:ac:99:6e:ca:c1:24:c2:2c:02:43: cd:d0:7b:cc:52:74:fd:22:df:89:6b:32:4d:fe:b1: ae:e5:92:8f:bc:96:db:32:d1:70:84:85:b8:8a:9b: 14:52:37:1d:89:94:93:32:80:47:0a:dd:ac:ef:0d: b4:8a:89:c2:7c:0c:58:47:43:96:3a:8d:42:88:6d: bf:01:54:da:4a:a8:f4:c7:9e:26:29:23:02:d7:a3: 9e:f5:a3:54:8e:98:6e:01:74:da:f2:fd:a1:15:5e: 37:32:60:61:c8:58:f3:8f:fe:86:69:62:4e:2b:5a: 9f:27:b3:99:81:65:60:45:76:d8:7c:21:14:b4:8a: 59:03:88:06:91:ea:8b:00:00:76:57:c0:c0:51:46: d6:14:8b:8a:01:c8:f1:91:61:b1:d3:98:9c:7d:e7: c8:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:93:49:33:34:E9:67:EE:93:64:59:83:17:4D:57:94:70:FE:74:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/88c2ffcd-49ee-3f6a-93e7-724d5af47a62.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.70.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:cf:a4:b0:62:0e:15:5c:42:1c:57:c8:ec:54:cb:54:e0:0a: bd:b4:30:11:e8:5b:a3:49:96:c5:d5:21:93:65:8a:39:35:67: 2d:17:84:41:92:66:62:92:0c:46:43:cc:91:29:b7:2b:25:ff: dd:31:97:98:48:11:4d:49:01:a8:7d:88:20:69:8d:c4:8d:14: 7f:d9:82:b8:59:ea:92:bb:6b:89:79:43:f7:25:30:91:0d:43: 94:f8:95:d2:28:a7:e8:c2:1d:22:de:09:6c:54:f4:55:10:7f: c0:2a:e8:ae:0d:92:38:02:49:b0:73:4f:77:17:02:98:19:a4: 7d:b5:5b:00:51:5d:c8:a3:f4:af:89:f9:47:a5:05:ce:91:e9: 4d:4b:54:ad:80:e4:8e:4c:d4:26:d0:fc:d9:76:d4:c5:3e:48: f3:56:f8:5e:d9:9f:87:f7:9e:ea:e1:9d:d8:19:5b:ef:7c:fe: fa:7f:9c:28:76:8c:0f:10:90:60:07:b6:31:8e:66:69:6c:7a: c1:aa:b8:46:3f:b4:b9:fc:6b:01:ca:ae:b3:33:3c:fa:44:e1: 67:f2:3f:e2:0c:04:75:d1:a7:70:dd:56:05:f3:88:06:4e:e3: a6:95:88:c1:ea:a3:89:3d:54:f6:2f:a4:65:01:aa:17:3d:a2: ef:22:bc:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPYRdfWOEV8kX8oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk MWU4MzE0YzAtMjZhOC00N2M4LTgzMGUtYTI4NzQ0ZjE3YTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4H2A/LjKWr9IwTEcYCgMZEYeb/Ca+d6Z8xq EMy9rH9d3XNKtWlNU3ygfl41G1G8NqtchK4skqELBW9GgYsrMRBt3mlGcQvFYQtv SoaNticoe1xuaFmFZEvyabIk1ayZbsrBJMIsAkPN0HvMUnT9It+JazJN/rGu5ZKP vJbbMtFwhIW4ipsUUjcdiZSTMoBHCt2s7w20ionCfAxYR0OWOo1CiG2/AVTaSqj0 x54mKSMC16Oe9aNUjphuAXTa8v2hFV43MmBhyFjzj/6GaWJOK1qfJ7OZgWVgRXbY fCEUtIpZA4gGkeqLAAB2V8DAUUbWFIuKAcjxkWGx05icfefIgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEOTSTM06Wfuk2RZgxdNV5Rw/nSpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvODhjMmZmY2QtNDllZS0z ZjZhLTkzZTctNzI0ZDVhZjQ3YTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkYwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEDPpLBiDhVcQhxXyOxUy1TgCr20MBHoW6NJlsXVIZNlijk1Zy0XhEGS ZmKSDEZDzJEptysl/90xl5hIEU1JAah9iCBpjcSNFH/ZgrhZ6pK7a4l5Q/clMJEN Q5T4ldIop+jCHSLeCWxU9FUQf8Aq6K4NkjgCSbBzT3cXApgZpH21WwBRXcij9K+J +UelBc6R6U1LVK2A5I5M1CbQ/Nl21MU+SPNW+F7Zn4f3nurhndgZW+98/vp/nCh2 jA8QkGAHtjGOZmlsesGquEY/tLn8awHKrrMzPPpE4WfyP+IMBHXRp3DdVgXziAZO 46aViMHqo4k9VPYvpGUBqhc9ou8ivAY= -----END CERTIFICATE-----Generated at Mon Sep 28 18:10:42 2026 by rpki-client